21:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/4109t72175nm8.js","/_next/static/chunks/04k_7k5p4krw4.js","/_next/static/chunks/30r--1re9i9ly.js"],"SampleDetailWrapper"] 46:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js"],"IconMark"] 20:T42b,{"@context":"https://schema.org","@type":"TechArticle","headline":"Suspicious Sample dc82eb9f001d… — Score 35/100 — Hybrid Analysis","description":"Suspicious verdict for sample dc82eb9f001d…. Threat score 35/100. 0/27 AV engines flagged this file. 3 malicious and 13 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/dc82eb9f001d7eb75b0a9a895c0e73a2f4718420d281ae6bb614e4607463cbfd","keywords":["Suspicious","malware analysis","sandbox report","threat intelligence","dc82eb9f001d7eb75b0a9a895c0e73a2f4718420d281ae6bb614e4607463cbfd"],"about":{"@type":"SoftwareApplication","name":"KitelGame_Setup.exe","applicationCategory":["compressed","7zip"],"identifier":"dc82eb9f001d7eb75b0a9a895c0e73a2f4718420d281ae6bb614e4607463cbfd","additionalType":"Suspicious sample"},"threatScore":35,"antivirusDetections":{"malicious":0,"total":27},"behavioralIndicators":{"malicious":3,"suspicious":13},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}22:T2b46,Found reference to API (Indicator: "AdjustTokenPrivileges"; Source: "sample.bin"), Found reference to API (Indicator: "MulDiv"; Source: "sample.bin"), Found reference to API (Indicator: "DeleteFileW"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileAttributesW"; Source: "sample.bin"), Found reference to API (Indicator: "SetForegroundWindow"; Source: "sample.bin"), Found reference to API (Indicator: "SeShutdownPrivilege"; Source: "sample.bin"), Found reference to API (Indicator: "GetExitCodeProcess"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "IsWindowEnabled"; Source: "sample.bin"), Found reference to API (Indicator: "CreateDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "SHGetPathFromIDListW"; Source: "sample.bin"), Found reference to API (Indicator: "CreateWindowExW"; Source: "sample.bin"), Found reference to API (Indicator: "DefWindowProcW"; Source: "sample.bin"), Found reference to API (Indicator: "RegDeleteKeyW"; Source: "sample.bin"), Found reference to API (Indicator: "GlobalFree"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileSize"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileVersionInfoSizeW"; Source: "sample.bin"), Found reference to API (Indicator: "SystemParametersInfoW"; Source: "sample.bin"), Found reference to API (Indicator: "CreateThread"; Source: "sample.bin"), Found reference to API (Indicator: "ShellExecuteExW"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleHandleA"; Source: "sample.bin"), Found reference to API (Indicator: "RegQueryValueExW"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleHandleW"; Source: "sample.bin"), Found reference to API (Indicator: "RegSetValueExW"; Source: "sample.bin"), Found reference to API (Indicator: "SetFileAttributesW"; Source: "sample.bin"), Found reference to API (Indicator: "RegOpenKeyExW"; Source: "sample.bin"), Found reference to API (Indicator: "lstrcatW"; Source: "sample.bin"), Found reference to API (Indicator: "CharNextW"; Source: "sample.bin"), Found reference to API (Indicator: "SHGetFolderPathW"; Source: "sample.bin"), Found reference to API (Indicator: "CharNextA"; Source: "sample.bin"), Found reference to API (Indicator: "SetWindowPos"; Source: "sample.bin"), Found reference to API (Indicator: "RegDeleteKeyExW"; Source: "sample.bin"), Found reference to API (Indicator: "ShowWindow"; Source: "sample.bin"), Found reference to API (Indicator: "SetClipboardData"; Source: "sample.bin"), Found reference to API (Indicator: "DispatchMessageW"; Source: "sample.bin"), Found reference to API (Indicator: "VerQueryValueW"; Source: "sample.bin"), Found reference to API (Indicator: "DeleteObject"; Source: "sample.bin"), Found reference to API (Indicator: "RegEnumValueW"; Source: "sample.bin"), Found reference to API (Indicator: "IsWindowVisible"; Source: "sample.bin"), Found reference to API (Indicator: "LookupPrivilegeValueW"; Source: "sample.bin"), Found reference to API (Indicator: "FindFirstFileW"; Source: "sample.bin"), Found reference to API (Indicator: "GetProcAddress"; Source: "sample.bin"), Found reference to API (Indicator: "CreateFileW"; Source: "sample.bin"), Found reference to API (Indicator: "wsprintfA"; Source: "sample.bin"), Found reference to API (Indicator: "GlobalAlloc"; Source: "sample.bin"), Found reference to API (Indicator: "SetFileTime"; Source: "sample.bin"), Found reference to API (Indicator: "wsprintfW"; Source: "sample.bin"), Found reference to API (Indicator: "GetTempPathW"; Source: "sample.bin"), Found reference to API (Indicator: "EnableMenuItem"; Source: "sample.bin"), Found reference to API (Indicator: "RegCloseKey"; Source: "sample.bin"), Found reference to API (Indicator: "CompareFileTime"; Source: "sample.bin"), Found reference to API (Indicator: "RemoveDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "WideCharToMultiByte"; Source: "sample.bin"), Found reference to API (Indicator: "LoadCursorW"; Source: "sample.bin"), Found reference to API (Indicator: "GlobalLock"; Source: "sample.bin"), Found reference to API (Indicator: "FindClose"; Source: "sample.bin"), Found reference to API (Indicator: "SetDefaultDllDirectories"; Source: "sample.bin"), Found reference to API (Indicator: "CloseClipboard"; Source: "sample.bin"), Found reference to API (Indicator: "IsWindow"; Source: "sample.bin"), Found reference to API (Indicator: "RegisterClassW"; Source: "sample.bin"), Found reference to API (Indicator: "SetCurrentDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "GetTickCount"; Source: "sample.bin"), Found reference to API (Indicator: "GetDC"; Source: "sample.bin"), Found reference to API (Indicator: "AppendMenuW"; Source: "sample.bin"), Found reference to API (Indicator: "lstrlenA"; Source: "sample.bin"), Found reference to API (Indicator: "lstrlenW"; Source: "sample.bin"), Found reference to API (Indicator: "SHFileOperationW"; Source: "sample.bin"), Found reference to API (Indicator: "SetFilePointer"; Source: "sample.bin"), Found reference to API (Indicator: "CoTaskMemFree"; Source: "sample.bin"), Found reference to API (Indicator: "GetDiskFreeSpaceExW"; Source: "sample.bin"), Found reference to API (Indicator: "GetShortPathNameW"; Source: "sample.bin"), Found reference to API (Indicator: "GetSysColor"; Source: "sample.bin"), Found reference to API (Indicator: "GetPrivateProfileStringW"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemMenu"; Source: "sample.bin"), Found reference to API (Indicator: "DestroyWindow"; Source: "sample.bin"), Found reference to API (Indicator: "SelectObject"; Source: "sample.bin"), Found reference to API (Indicator: "InvalidateRect"; Source: "sample.bin"), Found reference to API (Indicator: "SHBrowseForFolderW"; Source: "sample.bin"), Found reference to API (Indicator: "lstrcmpW"; Source: "sample.bin"), Found reference to API (Indicator: "ExitProcess"; Source: "sample.bin"), Found reference to API (Indicator: "OleInitialize"; Source: "sample.bin"), Found reference to API (Indicator: "WritePrivateProfileStringW"; Source: "sample.bin"), Found reference to API (Indicator: "LoadImageW"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleFileNameW"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentProcess"; Source: "sample.bin"), Found reference to API (Indicator: "GetClientRect"; Source: "sample.bin"), Found reference to API (Indicator: "SetEnvironmentVariableW"; Source: "sample.bin"), Found reference to API (Indicator: "LoadLibraryExW"; Source: "sample.bin"), Found reference to API (Indicator: "CopyFileW"; Source: "sample.bin"), Found reference to API (Indicator: "PostQuitMessage"; Source: "sample.bin"), Found reference to API (Indicator: "BeginPaint"; Source: "sample.bin"), Found reference to API (Indicator: "GetWindowRect"; Source: "sample.bin"), Found reference to API (Indicator: "RegDeleteValueW"; Source: "sample.bin"), Found reference to API (Indicator: "CharPrevW"; Source: "sample.bin"), Found reference to API (Indicator: "SetCursor"; Source: "sample.bin"), Found reference to API (Indicator: "lstrcmpiA"; Source: "sample.bin"), Found reference to API (Indicator: "lstrcmpiW"; Source: "sample.bin"), Found reference to API (Indicator: "FillRect"; Source: "sample.bin"), Found reference to API (Indicator: "GetDeviceCaps"; Source: "sample.bin"), Found reference to API (Indicator: "GetFullPathNameW"; Source: "sample.bin"), Found reference to API (Indicator: "ReleaseDC"; Source: "sample.bin"), Found reference to API (Indicator: "GetUserDefaultUILanguage"; Source: "sample.bin"), Found reference to API (Indicator: "lstrcpynW"; Source: "sample.bin"), Found reference to API (Indicator: "CoCreateInstance"; Source: "sample.bin"), Found reference to API (Indicator: "ExpandEnvironmentStringsW"; Source: "sample.bin"), Found reference to API (Indicator: "SetWindowTextW"; Source: "sample.bin"), Found reference to API (Indicator: "OleUninitialize"; Source: "sample.bin"), Found reference to API (Indicator: "EnableWindow"; Source: "sample.bin"), Found reference to API (Indicator: "EmptyClipboard"; Source: "sample.bin"), Found reference to API (Indicator: "PeekMessageW"; Source: "sample.bin"), Found reference to API (Indicator: "SetErrorMode"; Source: "sample.bin"), Found reference to API (Indicator: "SHGetFileInfoW"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileVersionInfoW"; Source: "sample.bin"), Found reference to API (Indicator: "GlobalUnlock"; Source: "sample.bin"), Found reference to API (Indicator: "SearchPathW"; Source: "sample.bin"), Found reference to API (Indicator: "GetCommandLineW"; Source: "sample.bin"), Found reference to API (Indicator: "MoveFileExW"; Source: "sample.bin"), Found reference to API (Indicator: "WriteFile"; Source: "sample.bin"), Found reference to API (Indicator: "CreateProcessW"; Source: "sample.bin"), Found reference to API (Indicator: "Sleep"; Source: "sample.bin"), Found reference to API (Indicator: "SHGetSpecialFolderLocation"; Source: "sample.bin"), Found reference to API (Indicator: "RegCreateKeyExW"; Source: "sample.bin"), Found reference to API (Indicator: "SetTimer"; Source: "sample.bin"), Found reference to API (Indicator: "FreeLibrary"; Source: "sample.bin"), Found reference to API (Indicator: "TrackPopupMenu"; Source: "sample.bin"), Found reference to API (Indicator: "ReadFile"; Source: "sample.bin"), Found reference to API (Indicator: "FindNextFileW"; Source: "sample.bin"), Found reference to API (Indicator: "OpenProcessToken"; Source: "sample.bin"), Found reference to API (Indicator: "ExitWindowsEx"; Source: "sample.bin"), Found reference to API (Indicator: "lstrcpyA"; Source: "sample.bin"), Found reference to API (Indicator: "RegEnumKeyW"; Source: "sample.bin"), Found reference to API (Indicator: "MoveFileW"; Source: "sample.bin"), Found reference to API (Indicator: "GetVersion"; Source: "sample.bin"), Found reference to API (Indicator: "SetFileSecurityW"; Source: "sample.bin"), Found reference to API (Indicator: "ScreenToClient"; Source: "sample.bin"), Found reference to API (Indicator: "GetLastError"; Source: "sample.bin"), Found reference to API (Indicator: "CreateFontIndirectW"; Source: "sample.bin"), Found reference to API (Indicator: "MultiByteToWideChar"; Source: "sample.bin"), Found reference to API (Indicator: "GetDiskFreeSpaceW"; Source: "sample.bin"), Found reference to API (Indicator: "GetWindowsDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "CreatePopupMenu"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemMetrics"; Source: "sample.bin"), Found reference to API (Indicator: "GetTempFileNameW"; Source: "sample.bin"), Found reference to API (Indicator: "WaitForSingleObject"; Source: "sample.bin"), Found reference to API (Indicator: "OpenClipboard"; Source: "sample.bin"), Found reference to API (Indicator: "CloseHandle"; Source: "sample.bin")23:T622,"KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKCU\WOW6432NODE\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\PROGID") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\PROGID") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKCU\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLASSES\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKCU\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\PROGID") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLASSES\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\PROGID") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKCU\WOW6432NODE\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\TREATAS") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\TREATAS") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKCU\WOW6432NODE\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\INPROCSERVER32") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\INPROCSERVER32") "KitelGame_Setup.exe" (Access type: "QUERY"; Path: "HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\INPROCSERVER32") "KitelGame_Setup.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\INPROCSERVER32")24:T4f6,"KitelGame_Setup.exe" queried SystemProcessInformation at 00000000-00005428-00000C15-2378005573 [PID: 5428] "KitelGame_Setup.exe" queried SystemProcessInformation at 00000000-00005428-00000C15-2378012463 [PID: 5428] "KitelGame_Setup.exe" queried SystemProcessInformation at 00000000-00005428-00000C15-2378257645 [PID: 5428] "KitelGame_Setup.exe" queried SystemProcessInformation at 00000000-00005428-00000C15-2378264367 [PID: 5428] "KitelGame_Setup.exe" queried SystemProcessInformation at 00000000-00005428-00000C15-2378545688 [PID: 5428] "KitelGame_Setup.exe" queried SystemProcessInformation at 00000000-00005428-00000C15-2378552255 [PID: 5428] "KitelGame.exe" queried SystemProcessInformation at 00000000-00003572-00000C15-2424515299 [PID: 3572] "KitelGame.exe" queried SystemProcessInformation at 00000000-00003572-00000C15-2424523406 [PID: 3572] "KitelGame.exe" queried SystemProcessInformation at 00000000-00003572-00000C15-2424768334 [PID: 3572] "KitelGame.exe" queried SystemProcessInformation at 00000000-00003572-00000C15-2424775606 [PID: 3572] "KitelGame.exe" queried SystemProcessInformation at 00000000-00003572-00000C15-2425037200 [PID: 3572] "KitelGame.exe" queried SystemProcessInformation at 00000000-00003572-00000C15-2425043801 [PID: 3572]25:T9a04,Found XOR loop in file "vk_swiftshader.dll" at offset 208556; code bytes = 30d0 Found XOR loop in file "vk_swiftshader.dll" at offset 1239340; code bytes = 30d0 Found XOR loop in file "vk_swiftshader.dll" at offset 1303964; code bytes = 30d0 Found XOR loop in file "vk_swiftshader.dll" at offset 2016028; code bytes = 30d0 Found XOR loop in file "vk_swiftshader.dll" at offset 2155966; code bytes = 30d0 Found XOR loop in file "vk_swiftshader.dll" at offset 2156819; code bytes = 30d0 Found XOR loop in file "vk_swiftshader.dll" at offset 2156972; code bytes = 30d0 Found XOR loop in file "vk_swiftshader.dll" at offset 2274855; code bytes = 30d0 Found XOR loop in file "vk_swiftshader.dll" at offset 4305936; code bytes = 30d0 Found XOR loop in file "vk_swiftshader.dll" at offset 4366728; code bytes = 30d0 Found XOR loop in file "vk_swiftshader.dll" at offset 4538729; code bytes = 30d0 Found XOR loop in file "vk_swiftshader.dll" at offset 4538769; code bytes = 30d0 Found XOR loop in file "vk_swiftshader.dll" at offset 4994927; code bytes = 30d0 Found XOR loop in file "vk_swiftshader.dll" at offset 4995911; code bytes = 30d0 Found XOR loop in file "vk_swiftshader.dll" at offset 5021927; code bytes = 30d0 Found XOR loop in file "vk_swiftshader.dll" at offset 5183956; code bytes = 30d0 Found XOR loop in file "vk_swiftshader.dll" at offset 5209540; code bytes = 30d0 Found XOR loop in file "vk_swiftshader.dll" at offset 5217284; code bytes = 30d0 Found XOR loop in file "vk_swiftshader.dll" at offset 5217292; code bytes = 30d0 Found XOR loop in file "vk_swiftshader.dll" at offset 3854912; code bytes = 33c1 Found XOR loop in file "vk_swiftshader.dll" at offset 3916936; code bytes = 33c1 Found XOR loop in file "vk_swiftshader.dll" at offset 4486249; code bytes = 33c1 Found XOR loop in file "vk_swiftshader.dll" at offset 4486257; code bytes = 33c1 Found XOR loop in file "vk_swiftshader.dll" at offset 4486277; code bytes = 33c1 Found XOR loop in file "vk_swiftshader.dll" at offset 4486285; code bytes = 33c1 Found XOR loop in file "vk_swiftshader.dll" at offset 4486305; code bytes = 33c1 Found XOR loop in file "vk_swiftshader.dll" at offset 4486313; code bytes = 33c1 Found XOR loop in file "vk_swiftshader.dll" at offset 4486361; code bytes = 33c1 Found XOR loop in file "vk_swiftshader.dll" at offset 4486369; code bytes = 33c1 Found XOR loop in file "vk_swiftshader.dll" at offset 4486425; code bytes = 33c1 Found XOR loop in file "vk_swiftshader.dll" at offset 4486705; code bytes = 33c1 Found XOR loop in file "vk_swiftshader.dll" at offset 4486713; code bytes = 33c1 Found XOR loop in file "vk_swiftshader.dll" at offset 4486761; code bytes = 33c1 Found XOR loop in file "vk_swiftshader.dll" at offset 4486769; code bytes = 33c1 Found XOR loop in file "vk_swiftshader.dll" at offset 671225; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 671304; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 713493; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 713546; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 871372; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 1603660; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 1734245; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 1735736; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 1758055; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 1760842; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 1791302; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 2234295; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 2425456; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 2425643; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 2425982; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 2426155; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 2710747; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 2865649; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 2918757; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 2921979; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 2923306; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 3817884; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 4266419; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 4362824; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 4362888; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 4992843; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 5055048; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 5198596; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 5219836; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 5235705; code bytes = 8030 Found XOR loop in file "vk_swiftshader.dll" at offset 5235713; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 862675; code bytes = 30d0 Found XOR loop in file "libGLESv2.dll" at offset 877500; code bytes = 30d0 Found XOR loop in file "libGLESv2.dll" at offset 877614; code bytes = 30d0 Found XOR loop in file "libGLESv2.dll" at offset 877957; code bytes = 30d0 Found XOR loop in file "libGLESv2.dll" at offset 957332; code bytes = 30d0 Found XOR loop in file "libGLESv2.dll" at offset 1875932; code bytes = 30d0 Found XOR loop in file "libGLESv2.dll" at offset 4114211; code bytes = 30d0 Found XOR loop in file "libGLESv2.dll" at offset 1244889; code bytes = 33c1 Found XOR loop in file "libGLESv2.dll" at offset 2142713; code bytes = 33c1 Found XOR loop in file "libGLESv2.dll" at offset 2460031; code bytes = 33c1 Found XOR loop in file "libGLESv2.dll" at offset 2461795; code bytes = 33c1 Found XOR loop in file "libGLESv2.dll" at offset 2503223; code bytes = 33c1 Found XOR loop in file "libGLESv2.dll" at offset 2503687; code bytes = 33c1 Found XOR loop in file "libGLESv2.dll" at offset 2561227; code bytes = 33c1 Found XOR loop in file "libGLESv2.dll" at offset 3235768; code bytes = 33c1 Found XOR loop in file "libGLESv2.dll" at offset 3257110; code bytes = 33c1 Found XOR loop in file "libGLESv2.dll" at offset 3268385; code bytes = 33c1 Found XOR loop in file "libGLESv2.dll" at offset 3783113; code bytes = 33c1 Found XOR loop in file "libGLESv2.dll" at offset 3965369; code bytes = 33c1 Found XOR loop in file "libGLESv2.dll" at offset 4518277; code bytes = 33c1 Found XOR loop in file "libGLESv2.dll" at offset 4902188; code bytes = 33c1 Found XOR loop in file "libGLESv2.dll" at offset 4963484; code bytes = 33c1 Found XOR loop in file "libGLESv2.dll" at offset 5089295; code bytes = 33c1 Found XOR loop in file "libGLESv2.dll" at offset 189392; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 391897; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 402695; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 540261; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 540310; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 603575; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 609689; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 622691; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 773123; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 789902; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 841077; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 846760; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 853447; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 853607; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 853767; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 868341; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 868495; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 950071; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 950723; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 1113932; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 1294076; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 1488772; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 1594197; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 1612293; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 1662240; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 1695678; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 1739022; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 1999931; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 1999961; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 2007657; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 2076504; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 2076525; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 2459475; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 2460719; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 2461012; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 2461266; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 2461586; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 2527927; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 2598183; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 2773722; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 2843773; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 2858338; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 2858676; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3127657; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3216938; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3217066; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3217494; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3218140; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3218338; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3218941; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3219123; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3219392; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3219849; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3219877; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3220222; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3221038; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3221137; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3221266; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3221373; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3221472; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3221591; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3221938; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3222277; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3222731; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3222800; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3222896; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3223325; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3223395; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3224120; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3226147; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3226249; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3226344; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3226918; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3227002; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3227141; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3227983; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3228350; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3228430; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3228931; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3229551; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3229908; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3230312; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3230812; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3230922; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3231188; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3231327; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3231858; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3232304; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3232425; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3232674; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3234538; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3234698; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3234794; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3235440; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3235532; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3235620; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3238820; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3238932; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3239035; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3239576; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3240217; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3240907; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3241282; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3241735; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3242302; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3242412; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3242684; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3242823; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3243368; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3243842; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3243963; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3244212; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3246315; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3246448; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3246657; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3246910; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3249530; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3249633; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3249752; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3250224; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3250313; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3250472; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3251295; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3252244; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3252842; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3252955; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3253225; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3253387; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3253960; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3254429; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3254539; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3254797; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3255785; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3255969; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3256069; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3256670; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3256758; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3256851; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3257949; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3259063; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3259165; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3259278; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3260697; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3261158; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3261409; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3261878; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3262530; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3263281; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3263654; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3263760; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3263975; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3264564; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3265227; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3265332; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3265548; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3266580; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3266666; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3266765; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3267488; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3267574; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3267966; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3268054; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3268149; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3340469; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3341321; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3341348; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3341378; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3341408; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3341438; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3341468; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3341498; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3341528; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3341558; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3341588; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3341618; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3341648; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3341678; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3341708; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3341738; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3341768; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3367863; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3368773; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3376319; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3376704; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3376771; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3376812; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3387155; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3387162; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3396237; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3396268; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3396302; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3396336; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3396370; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3396404; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3396438; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3396472; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3396506; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3396540; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3396574; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3396608; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3396642; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3396676; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3396710; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3396744; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3397762; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3397793; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3397827; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3397861; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3397895; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3397929; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3397963; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3397997; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3398031; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3398065; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3398099; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3398133; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3398167; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3398201; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3398235; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3398269; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3403085; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3410106; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3410113; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3423915; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3423942; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3423972; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3424002; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3424032; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3424062; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3424092; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3424122; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3424152; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3424182; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3424212; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3424242; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3424272; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3424302; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3424332; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3424362; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3434881; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3435162; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3435189; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3435219; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3435249; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3435279; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3435309; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3435339; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3435369; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3435399; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3435429; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3435459; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3435489; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3435519; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3435549; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3435579; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3435609; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3477437; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3477763; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3572280; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3841497; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3844075; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3897395; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3897802; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3897990; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3899369; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3905083; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3905391; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 3915716; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 4171635; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 4589283; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 4589370; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 4668976; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 5110964; code bytes = 8030 Found XOR loop in file "libGLESv2.dll" at offset 5203696; code bytes = 8030 Found XOR loop in file "elevate.exe" at offset 1224068; code bytes = 30d0 Found XOR loop in file "elevate.exe" at offset 1401356; code bytes = 30d0 Found XOR loop in file "elevate.exe" at offset 2269429; code bytes = 30d0 Found XOR loop in file "elevate.exe" at offset 4870241; code bytes = 30d0 Found XOR loop in file "elevate.exe" at offset 3255633; code bytes = 33c1 Found XOR loop in file "elevate.exe" at offset 3307728; code bytes = 33c1 Found XOR loop in file "elevate.exe" at offset 3307745; code bytes = 33c1 Found XOR loop in file "elevate.exe" at offset 3981417; code bytes = 33c1 Found XOR loop in file "elevate.exe" at offset 4466441; code bytes = 33c1 Found XOR loop in file "elevate.exe" at offset 5152097; code bytes = 33c1 Found XOR loop in file "elevate.exe" at offset 5226728; code bytes = 33c1 Found XOR loop in file "elevate.exe" at offset 5226903; code bytes = 33c1 Found XOR loop in file "elevate.exe" at offset 5227009; code bytes = 33c1 Found XOR loop in file "elevate.exe" at offset 107449; code bytes = 8030 Found XOR loop in file "elevate.exe" at offset 345660; code bytes = 8030 Found XOR loop in file "elevate.exe" at offset 366989; code bytes = 8030 Found XOR loop in file "elevate.exe" at offset 855461; code bytes = 8030 Found XOR loop in file "elevate.exe" at offset 1152412; code bytes = 8030 Found XOR loop in file "elevate.exe" at offset 1230030; code bytes = 8030 Found XOR loop in file "elevate.exe" at offset 1233356; code bytes = 8030 Found XOR loop in file "elevate.exe" at offset 1411825; code bytes = 8030 Found XOR loop in file "elevate.exe" at offset 1412027; code bytes = 8030 Found XOR loop in file "elevate.exe" at offset 1412195; code bytes = 8030 Found XOR loop in file "elevate.exe" at offset 1675307; code bytes = 8030 Found XOR loop in file "elevate.exe" at offset 4772803; code bytes = 8030 Found XOR loop in file "elevate.exe" at offset 4787583; code bytes = 8030 Found XOR loop in file "elevate.exe" at offset 4810946; code bytes = 8030 Found XOR loop in file "elevate.exe" at offset 5112585; code bytes = 8030 Found XOR loop in file "elevate.exe" at offset 5184280; code bytes = 8030 Found XOR loop in file "elevate.exe" at offset 5224667; code bytes = 8030 Found XOR loop in file "ffmpeg.dll" at offset 48620; code bytes = 30d0 Found XOR loop in file "ffmpeg.dll" at offset 1302674; code bytes = 30d0 Found XOR loop in file "ffmpeg.dll" at offset 1700691; code bytes = 30d0 Found XOR loop in file "ffmpeg.dll" at offset 2536672; code bytes = 30d0 Found XOR loop in file "ffmpeg.dll" at offset 2733115; code bytes = 30d0 Found XOR loop in file "ffmpeg.dll" at offset 2767020; code bytes = 30d0 Found XOR loop in file "ffmpeg.dll" at offset 2797816; code bytes = 30d0 Found XOR loop in file "ffmpeg.dll" at offset 2816020; code bytes = 30d0 Found XOR loop in file "ffmpeg.dll" at offset 307630; code bytes = 33c1 Found XOR loop in file "ffmpeg.dll" at offset 307708; code bytes = 33c1 Found XOR loop in file "ffmpeg.dll" at offset 605697; code bytes = 33c1 Found XOR loop in file "ffmpeg.dll" at offset 725472; code bytes = 33c1 Found XOR loop in file "ffmpeg.dll" at offset 789681; code bytes = 33c1 Found XOR loop in file "ffmpeg.dll" at offset 883780; code bytes = 33c1 Found XOR loop in file "ffmpeg.dll" at offset 913887; code bytes = 33c1 Found XOR loop in file "ffmpeg.dll" at offset 1211089; code bytes = 33c1 Found XOR loop in file "ffmpeg.dll" at offset 1211158; code bytes = 33c1 Found XOR loop in file "ffmpeg.dll" at offset 1211560; code bytes = 33c1 Found XOR loop in file "ffmpeg.dll" at offset 1211638; code bytes = 33c1 Found XOR loop in file "ffmpeg.dll" at offset 1985860; code bytes = 33c1 Found XOR loop in file "ffmpeg.dll" at offset 1999508; code bytes = 33c1 Found XOR loop in file "ffmpeg.dll" at offset 2003204; code bytes = 33c1 Found XOR loop in file "ffmpeg.dll" at offset 2006900; code bytes = 33c1 Found XOR loop in file "ffmpeg.dll" at offset 2025150; code bytes = 33c1 Found XOR loop in file "ffmpeg.dll" at offset 24371; code bytes = 8030 Found XOR loop in file "ffmpeg.dll" at offset 24634; code bytes = 8030 Found XOR loop in file "ffmpeg.dll" at offset 45043; code bytes = 8030 Found XOR loop in file "ffmpeg.dll" at offset 45306; code bytes = 8030 Found XOR loop in file "ffmpeg.dll" at offset 65735; code bytes = 8030 Found XOR loop in file "ffmpeg.dll" at offset 65968; code bytes = 8030 Found XOR loop in file "ffmpeg.dll" at offset 84871; code bytes = 8030 Found XOR loop in file "ffmpeg.dll" at offset 85104; code bytes = 8030 Found XOR loop in file "ffmpeg.dll" at offset 104295; code bytes = 8030 Found XOR loop in file "ffmpeg.dll" at offset 104528; code bytes = 8030 Found XOR loop in file "ffmpeg.dll" at offset 123431; code bytes = 8030 Found XOR loop in file "ffmpeg.dll" at offset 123664; code bytes = 8030 Found XOR loop in file "ffmpeg.dll" at offset 677729; code bytes = 8030 Found XOR loop in file "ffmpeg.dll" at offset 1066259; code bytes = 8030 Found XOR loop in file "ffmpeg.dll" at offset 2325283; code bytes = 8030 Found XOR loop in file "ffmpeg.dll" at offset 2666013; code bytes = 8030 Found XOR loop in file "ffmpeg.dll" at offset 2827684; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 387440; code bytes = 33c1 Found XOR loop in file "vulkan-1.dll" at offset 11969; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 78914; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 81986; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 85586; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 89186; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 92610; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 96690; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 100290; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 103618; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 107042; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 110114; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 113362; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 116434; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 212002; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 215074; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 218050; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 222610; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 224838; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 228789; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 230325; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 231861; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 233397; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 234933; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 236469; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 238005; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 239541; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 265093; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 266117; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 267141; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 268165; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 269189; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 270213; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 271237; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 276222; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 276578; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 661608; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 841443; code bytes = 8030 Found XOR loop in file "vulkan-1.dll" at offset 851853; code bytes = 8030 Found XOR loop in file "libEGL.dll" at offset 108336; code bytes = 33c1 Found XOR loop in file "libEGL.dll" at offset 262663; code bytes = 33c1 Found XOR loop in file "KitelGame.exe" at offset 170044; code bytes = 33c1 Found XOR loop in file "KitelGame.exe" at offset 103722; code bytes = 8030 Found XOR loop in file "KitelGame.exe" at offset 221814; code bytes = 8030 Found XOR loop in file "KitelGame.exe" at offset 223848; code bytes = 8030 Found XOR loop in file "Uninstall.exe" at offset 169116; code bytes = 33c1 Found XOR loop in file "Uninstall.exe" at offset 102794; code bytes = 8030 Found XOR loop in file "nsDialogs.dll" at offset 2992; code bytes = 8030 Found XOR loop in file "node_sqlite3.node" at offset 1283276; code bytes = 30d0 Found XOR loop in file "node_sqlite3.node" at offset 1754204; code bytes = 30d0 Found XOR loop in file "node_sqlite3.node" at offset 1754256; code bytes = 30d0 Found XOR loop in file "node_sqlite3.node" at offset 1826280; code bytes = 30d0 Found XOR loop in file "node_sqlite3.node" at offset 1851704; code bytes = 30d0 Found XOR loop in file "node_sqlite3.node" at offset 192487; code bytes = 33c1 Found XOR loop in file "node_sqlite3.node" at offset 192573; code bytes = 33c1 Found XOR loop in file "node_sqlite3.node" at offset 192653; code bytes = 33c1 Found XOR loop in file "node_sqlite3.node" at offset 192739; code bytes = 33c1 Found XOR loop in file "node_sqlite3.node" at offset 192776; code bytes = 33c1 Found XOR loop in file "node_sqlite3.node" at offset 192817; code bytes = 33c1 Found XOR loop in file "node_sqlite3.node" at offset 192847; code bytes = 33c1 Found XOR loop in file "node_sqlite3.node" at offset 192938; code bytes = 33c1 Found XOR loop in file "node_sqlite3.node" at offset 193055; code bytes = 33c1 Found XOR loop in file "node_sqlite3.node" at offset 492713; code bytes = 33c1 Found XOR loop in file "node_sqlite3.node" at offset 599325; code bytes = 33c1 Found XOR loop in file "node_sqlite3.node" at offset 1085565; code bytes = 33c1 Found XOR loop in file "node_sqlite3.node" at offset 1085668; code bytes = 33c1 Found XOR loop in file "node_sqlite3.node" at offset 1301756; code bytes = 33c1 Found XOR loop in file "node_sqlite3.node" at offset 1437968; code bytes = 33c1 Found XOR loop in file "node_sqlite3.node" at offset 1506752; code bytes = 33c1 Found XOR loop in file "node_sqlite3.node" at offset 878137; code bytes = 8030 Found XOR loop in file "node_sqlite3.node" at offset 878427; code bytes = 8030 Found XOR loop in file "node_sqlite3.node" at offset 1447852; code bytes = 8030 Found XOR loop in file "node_sqlite3.node" at offset 1528716; code bytes = 8030 Found XOR loop in file "node_sqlite3.node" at offset 1586227; code bytes = 8030 Found XOR loop in file "node_sqlite3.node" at offset 1707756; code bytes = 8030 Found XOR loop in file "node_sqlite3.node" at offset 1711122; code bytes = 8030 Found XOR loop in file "node_sqlite3.node" at offset 1711129; code bytes = 8030 Found XOR loop in file "node_sqlite3.node" at offset 1717440; code bytes = 803026:T701,"KitelGame_Setup.exe" called "GetWindowTextW" with parameter "%LOCALAPPDATA%\KitelGame" - (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetWindowTextW" with parameter "&Install" - (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetWindowTextW" with parameter "Cancel" - (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetWindowTextW" with parameter "Nullsoft Install System v3.04" - (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetWindowTextW" with parameter "Choose Install Location" - (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetWindowTextW" with parameter "Choose the folder in which to install KitelGame." - (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetWindowTextW" with parameter "B&rowse..." - (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetWindowTextW" with parameter "Space available: 44.0 GB" - (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetWindowTextW" with parameter "Space required: 191.9 MB" - (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetWindowTextW" with parameter "Setup will install KitelGame in the following folder. To install in a different folder, click Browse and select another folder. Cl" - (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetWindowTextW" with parameter "Destination Folder" - (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetWindowTextW" with parameter "&Next >" - (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetWindowTextW" with parameter "Installing" - (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetWindowTextW" with parameter "Please wait while KitelGame is being installed." - (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetWindowTextW" with parameter "< &Back" - (UID: 00000000-00005428)27:T22f0,"KitelGame_Setup.exe" called "RtlGetVersion" with parameter 140100000a000000000000005d5800000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00005428) "KitelGame_Setup.exe" called "RtlGetVersion" with parameter 1c0100000a000000000000005d5800000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00005428) "KitelGame_Setup.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00005428) "KitelGame_Setup.exe" called "RtlGetVersion" with parameter 000000000a000000000000005d5800000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00005428) "KitelGame_Setup.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00005428) "KitelGame_Setup.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00005428) "KitelGame_Setup.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00005428) "KitelGame_Setup.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00005428) "KitelGame_Setup.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00005428) "KitelGame_Setup.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00005428) "KitelGame_Setup.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00005428) "KitelGame_Setup.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00005428) "KitelGame_Setup.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00005428) "KitelGame_Setup.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00005428)28:T10f3,"KitelGame_Setup.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\UXTHEME.dll (UID: 00000000-00005428) "KitelGame_Setup.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\USERENV.dll (UID: 00000000-00005428) "KitelGame_Setup.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\SETUPAPI.dll (UID: 00000000-00005428) "KitelGame_Setup.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\APPHELP.dll (UID: 00000000-00005428) "KitelGame_Setup.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\PROPSYS.dll (UID: 00000000-00005428) "KitelGame_Setup.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\DWMAPI.dll (UID: 00000000-00005428) "KitelGame_Setup.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\CRYPTBASE.dll (UID: 00000000-00005428) "KitelGame_Setup.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\OLEACC.dll (UID: 00000000-00005428) "KitelGame_Setup.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\CLBCATQ.dll (UID: 00000000-00005428) "KitelGame_Setup.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\NTMARTA.dll (UID: 00000000-00005428) "KitelGame_Setup.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\VERSION.dll (UID: 00000000-00005428) "KitelGame_Setup.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\SHFOLDER.dll (UID: 00000000-00005428) "KitelGame_Setup.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\RichEd20.dll (UID: 00000000-00005428) "KitelGame_Setup.exe" called "LoadLibrary" with a parameter %TEMP%\nst9CF5.tmp\nsExec.dll (UID: 00000000-00005428) "KitelGame_Setup.exe" called "LoadLibrary" with a parameter %TEMP%\nst9CF5.tmp\nsDialogs.dll (UID: 00000000-00005428) "KitelGame_Setup.exe" called "LoadLibrary" with a parameter %TEMP%\nst9CF5.tmp\System.dll (UID: 00000000-00005428) "KitelGame.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\UXTHEME.dll (UID: 00000000-00003572) "KitelGame.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\USERENV.dll (UID: 00000000-00003572) "KitelGame.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\SETUPAPI.dll (UID: 00000000-00003572) "KitelGame.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\APPHELP.dll (UID: 00000000-00003572) "KitelGame.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\PROPSYS.dll (UID: 00000000-00003572) "KitelGame.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\DWMAPI.dll (UID: 00000000-00003572) "KitelGame.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\CRYPTBASE.dll (UID: 00000000-00003572) "KitelGame.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\OLEACC.dll (UID: 00000000-00003572) "KitelGame.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\CLBCATQ.dll (UID: 00000000-00003572) "KitelGame.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\NTMARTA.dll (UID: 00000000-00003572) "KitelGame.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\VERSION.dll (UID: 00000000-00003572) "KitelGame.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\SHFOLDER.dll (UID: 00000000-00003572) "elevate.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00008844) "elevate.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00008844) "elevate.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-2 (UID: 00000000-00008844) "elevate.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00008844) "elevate.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00008844) "elevate.exe" called "LoadLibrary" with a parameter api-ms-win-core-string-l1-1-0 (UID: 00000000-00008844) "elevate.exe" called "LoadLibrary" with a parameter api-ms-win-core-datetime-l1-1-1 (UID: 00000000-00008844) "elevate.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-obsolete-l1-2-0 (UID: 00000000-00008844) "elevate.exe" called "LoadLibrary" with a parameter powrprof.dll (UID: 00000000-00008844) "elevate.exe" called "LoadLibrary" with a parameter api-ms-win-appmodel-runtime-l1-1-2 (UID: 00000000-00008844) "elevate.exe" called "LoadLibrary" with a parameter ntdll.dll (UID: 00000000-00008844)29:T2556,"KitelGame_Setup.exe" called "GetProcAddress" with a parameter SleepConditionVariableCS (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter WakeAllConditionVariable (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter RtlGetVersion (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter CoCreateInstance (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter CoCreateInstanceEx (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter CoGetClassObject (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter CoGetInstanceFromFile (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter CoGetInstanceFromIStorage (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter SetDefaultDllDirectories (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter GetFileVersionInfoW (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter SHGetFolderPathW (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter FlsGetValue (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter GetUserDefaultUILanguage (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter GetDiskFreeSpaceExW (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter SHAutoComplete (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter Exec (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter IsWow64Process (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter Create (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter SetRTL (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter CreateControl (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter Call (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter GetClientRect (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter LoadImage (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter LoadImageW (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter SetFocus (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter SystemParametersInfo (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter SystemParametersInfoW (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter Free (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter Show (UID: 00000000-00005428) "KitelGame_Setup.exe" called "GetProcAddress" with a parameter DeleteObject (UID: 00000000-00005428) "KitelGame.exe" called "GetProcAddress" with a parameter SleepConditionVariableCS (UID: 00000000-00003572) "KitelGame.exe" called "GetProcAddress" with a parameter WakeAllConditionVariable (UID: 00000000-00003572) "KitelGame.exe" called "GetProcAddress" with a parameter RtlGetVersion (UID: 00000000-00003572) "KitelGame.exe" called "GetProcAddress" with a parameter CoCreateInstance (UID: 00000000-00003572) "KitelGame.exe" called "GetProcAddress" with a parameter CoCreateInstanceEx (UID: 00000000-00003572) "KitelGame.exe" called "GetProcAddress" with a parameter CoGetClassObject (UID: 00000000-00003572) "KitelGame.exe" called "GetProcAddress" with a parameter CoGetInstanceFromFile (UID: 00000000-00003572) "KitelGame.exe" called "GetProcAddress" with a parameter CoGetInstanceFromIStorage (UID: 00000000-00003572) "KitelGame.exe" called "GetProcAddress" with a parameter SetDefaultDllDirectories (UID: 00000000-00003572) "KitelGame.exe" called "GetProcAddress" with a parameter GetFileVersionInfoW (UID: 00000000-00003572) "KitelGame.exe" called "GetProcAddress" with a parameter SHGetFolderPathW (UID: 00000000-00003572) "KitelGame.exe" called "GetProcAddress" with a parameter FlsGetValue (UID: 00000000-00003572) "KitelGame.exe" called "GetProcAddress" with a parameter GetUserDefaultUILanguage (UID: 00000000-00003572) "KitelGame.exe" called "GetProcAddress" with a parameter DecodePointer (UID: 00000000-00003572) "KitelGame.exe" called "GetProcAddress" with a parameter EncodePointer (UID: 00000000-00003572) "elevate.exe" called "GetProcAddress" with a parameter SleepConditionVariableCS (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter WakeAllConditionVariable (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter RtlGetVersion (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter CoCreateInstance (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter CoCreateInstanceEx (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter CoGetClassObject (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter CoGetInstanceFromFile (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter CoGetInstanceFromIStorage (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter InitializeCriticalSectionEx (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter FlsAlloc (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter FlsSetValue (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter FlsGetValue2 (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter LCMapStringEx (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter GetSystemTimePreciseAsFileTime (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter GetTempPath2W (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter AreFileApisANSI (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter CompareStringEx (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter EnumSystemLocalesEx (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter GetDateFormatEx (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter GetLocaleInfoEx (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter GetTimeFormatEx (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter GetUserDefaultLocaleName (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter IsValidLocaleName (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter LCIDToLocaleName (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter LocaleNameToLCID (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter RtlNtStatusToDosError (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter NtDeviceIoControlFile (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter NtQueryInformationFile (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter NtSetInformationFile (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter NtQueryVolumeInformationFile (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter NtQueryDirectoryFile (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter NtQuerySystemInformation (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter NtQueryInformationProcess (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter PowerRegisterSuspendResumeNotification (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter SetWinEventHook (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter GetHostNameW (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter GetFileInformationByName (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter FlsGetValue (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter RtlCaptureStackBackTrace (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter GetThreadDescription (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter SetThreadDescription (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter AppPolicyGetThreadInitializationType (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter VirtualAlloc2 (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter MapViewOfFile3 (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter UnmapViewOfFile2 (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter RtlAddGrowableFunctionTable (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter RtlDeleteGrowableFunctionTable (UID: 00000000-00008844) "elevate.exe" called "GetProcAddress" with a parameter AppPolicyGetProcessTerminationMethod (UID: 00000000-00008844)2a:T9b3,Process KitelGame_Setup.exe created mutex with name "\Sessions\1\BaseNamedObjects\SM0:5428:168:WilStaging_02" Process KitelGame_Setup.exe created mutex with name "\Sessions\1\BaseNamedObjects\Local\SM0:5428:168:WilStaging_02" Process KitelGame_Setup.exe created mutex with name "\Sessions\1\BaseNamedObjects\SM0:5428:64:WilError_03" Process KitelGame_Setup.exe created mutex with name "\Sessions\1\BaseNamedObjects\Local\SM0:5428:64:WilError_03" Process KitelGame_Setup.exe created mutex with name "Local\SM0:5428:168:WilStaging_02" Process KitelGame_Setup.exe created mutex with name "Local\SM0:5428:64:WilError_03" Process KitelGame_Setup.exe created mutex with name "SM0:5428:64:WilError_03" Process KitelGame_Setup.exe created mutex with name "SM0:5428:168:WilStaging_02" Process certutil.exe created mutex with name "\Sessions\1\BaseNamedObjects\SM0:1828:168:WilStaging_02" Process certutil.exe created mutex with name "SM0:1828:168:WilStaging_02" Process certutil.exe created mutex with name "\Sessions\1\BaseNamedObjects\SM0:3244:168:WilStaging_02" Process certutil.exe created mutex with name "SM0:3244:168:WilStaging_02" Process KitelGame.exe created mutex with name "\Sessions\1\BaseNamedObjects\SM0:3572:168:WilStaging_02" Process KitelGame.exe created mutex with name "\Sessions\1\BaseNamedObjects\Local\SM0:3572:168:WilStaging_02" Process KitelGame.exe created mutex with name "\Sessions\1\BaseNamedObjects\SM0:3572:64:WilError_03" Process KitelGame.exe created mutex with name "\Sessions\1\BaseNamedObjects\Local\SM0:3572:64:WilError_03" Process KitelGame.exe created mutex with name "\Sessions\1\BaseNamedObjects\Local\ZonesCacheCounterMutex" Process KitelGame.exe created mutex with name "\Sessions\1\BaseNamedObjects\Local\ZonesLockedCacheCounterMutex" Process KitelGame.exe created mutex with name "\Sessions\1\BaseNamedObjects\Microsoft.Windows.Health.TestInProduction.RegistryStore.AggregateResults" Process KitelGame.exe created mutex with name "Local\SM0:3572:168:WilStaging_02" Process KitelGame.exe created mutex with name "Microsoft.Windows.Health.TestInProduction.RegistryStore.AggregateResults" Process KitelGame.exe created mutex with name "SM0:3572:168:WilStaging_02" Process KitelGame.exe created mutex with name "Local\SM0:3572:64:WilError_03" Process KitelGame.exe created mutex with name "Local\ZonesLockedCacheCounterMutex" Process KitelGame.exe created mutex with name "Local\ZonesCacheCounterMutex"2b:Tdf8,Antivirus vendors marked dropped file "vk_swiftshader.dll" as clean (type is "PE32+ executable for MS Windows 5.02 (DLL) x86-64 10 sections"), Antivirus vendors marked dropped file "libGLESv2.dll" as clean (type is "PE32+ executable for MS Windows 5.02 (DLL) x86-64 10 sections"), Antivirus vendors marked dropped file "ffmpeg.dll" as clean (type is "PE32+ executable for MS Windows 5.02 (DLL) x86-64 9 sections"), Antivirus vendors marked dropped file "vulkan-1.dll" as clean (type is "PE32+ executable for MS Windows 5.02 (DLL) x86-64 10 sections"), Antivirus vendors marked dropped file "v8_context_snapshot.bin" as clean (type is "data"), Antivirus vendors marked dropped file "libEGL.dll" as clean (type is "PE32+ executable for MS Windows 5.02 (DLL) x86-64 10 sections"), Antivirus vendors marked dropped file "KitelGame.exe" as clean (type is "PE32 executable for MS Windows 4.00 (GUI) Intel i386 Nullsoft Installer self-extracting archive 5 sections"), Antivirus vendors marked dropped file "Uninstall.exe" as clean (type is "PE32 executable for MS Windows 4.00 (GUI) Intel i386 Nullsoft Installer self-extracting archive 5 sections"), Antivirus vendors marked dropped file "System.dll" as clean (type is "PE32 executable for MS Windows 4.00 (DLL) Intel i386 4 sections"), Antivirus vendors marked dropped file "nsDialogs.dll" as clean (type is "PE32 executable for MS Windows 4.00 (DLL) Intel i386 5 sections"), Antivirus vendors marked dropped file "nsExec.dll" as clean (type is "PE32 executable for MS Windows 4.00 (DLL) Intel i386 4 sections"), Antivirus vendors marked dropped file "KitelGame.lnk" as clean (type is "MS Windows shortcut Item id list present Points to a file or directory Has Relative path Has Working directory Icon number=0 Unicoded HasExpIcon "%USERPROFILE%\AppData\Local\KitelGame\KitelGame.exe" MachineID desktop-8ld9t6n KnownFolderID F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F Archive ctime=Tue Sep 15 19:58:30 2026 atime=Mon Sep 21 20:28:36 2026 mtime=Tue Sep 15 19:58:30 2026 length=228736 window=normal IDListSize 0x01d2 Root folder "59031A47-3F72-44A7-89C5-5595FE6B30EE" LocalBasePath "C:\Users\HAPUBWS\AppData\Local\KitelGame\KitelGame.exe""), Antivirus vendors marked dropped file "KitelGame.lnk" as clean (type is "MS Windows shortcut Item id list present Points to a file or directory Has Relative path Has Working directory Icon number=0 Unicoded HasExpIcon "%USERPROFILE%\AppData\Local\KitelGame\KitelGame.exe" MachineID desktop-8ld9t6n KnownFolderID F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F Archive ctime=Tue Sep 15 19:58:30 2026 atime=Mon Sep 21 20:29:09 2026 mtime=Tue Sep 15 19:58:30 2026 length=228736 window=normal IDListSize 0x01d2 Root folder "59031A47-3F72-44A7-89C5-5595FE6B30EE" LocalBasePath "C:\Users\HAPUBWS\AppData\Local\KitelGame\KitelGame.exe""), Antivirus vendors marked dropped file "Uninstall.lnk" as clean (type is "MS Windows shortcut Item id list present Points to a file or directory Has Relative path Has Working directory Unicoded MachineID desktop-8ld9t6n KnownFolderID F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F Archive ctime=Mon Sep 21 20:29:08 2026 atime=Mon Sep 21 20:29:08 2026 mtime=Mon Sep 21 20:29:08 2026 length=222481 window=normal IDListSize 0x01d2 Root folder "59031A47-3F72-44A7-89C5-5595FE6B30EE" LocalBasePath "C:\Users\HAPUBWS\AppData\Local\KitelGame\Uninstall.exe""), Antivirus vendors marked dropped file "RootCA.cer" as clean (type is "Certificate Version=3"), Antivirus vendors marked dropped file "node_sqlite3.node" as clean (type is "PE32+ executable for MS Windows 6.00 (DLL) x86-64 7 sections")2c:T720,"KitelGame_Setup.exe" has flags like IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE "ffmpeg.dll" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF "vulkan-1.dll" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF "libEGL.dll" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF "KitelGame.exe" has flags like IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE "Uninstall.exe" has flags like IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE "System.dll" has flags like IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE "nsDialogs.dll" has flags like IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE "nsExec.dll" has flags like IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE "node_sqlite3.node" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT2d:Tb78,"Software\Microsoft\Windows\CurrentVersion" in Source: 00000000-00003572.00000000.219632.00408000.00000002.mdmp "Registry\Machine\SOFTWARE\Policies\Microsoft\Windows\Appx" in Source: 00000000-00003572.00000000.219632.007D0000.00000004.mdmp "Software\Policies\Microsoft\Internet Explorer\Main" in Source: 00000000-00003572.00000000.219632.007D0000.00000004.mdmp "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\" in Source: 00000000-00003572.00000000.219632.007D0000.00000004.mdmp "Registry\Machine\SOFTWARE\Policies\Microsoft\Windows\Appx" in Source: 00000000-00003572.00000001.219686.007D0000.00000004.mdmp "REGISTRY\USER\S-1-5-21-1271187874-1938232448-3812392235-1001\Software\Microsoft\Windows NT\CurrentVersion" in Source: 00000000-00003572.00000001.219686.007D0000.00000004.mdmp "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\" in Source: 00000000-00003572.00000001.219686.007D0000.00000004.mdmp "istry\Machine\Software\Classes\Applications\%1.exe" in Source: 00000000-00003572.00000001.219686.007D0000.00000004.mdmp "Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs" in Source: 00000000-00003572.00000001.219686.007D0000.00000004.mdmp "Registry\Machine\Software\Classes\Applications\elevate.exe" in Source: 00000000-00003572.00000001.219686.007D0000.00000004.mdmp "Software\Microsoft\Windows\CurrentVersion" in Source: 00000000-00005428.00000000.216661.00408000.00000002.mdmp "Software\Microsoft\Input" in Source: 00000000-00005428.00000001.218583.72AA1000.00000020.mdmp "SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE" in Source: 00000000-00005428.00000001.218583.72AA1000.00000020.mdmp "SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\CFL\ExperienceManagerData" in Source: 00000000-00005428.00000001.218583.72AA1000.00000020.mdmp "SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CaretTracking" in Source: 00000000-00005428.00000001.218583.72AA1000.00000020.mdmp "Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdatesd" in Source: 00000000-00005428.00000002.219334.00860000.00000004.mdmp "Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates8" in Source: 00000000-00005428.00000002.219334.00860000.00000004.mdmp "Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates" in Source: 00000000-00005428.00000002.219334.00860000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00005428.00000002.219334.00882000.00000004.mdmp "Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs" in Source: 00000000-00005428.00000002.219334.00882000.00000004.mdmp "istry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00005428.00000002.219334.03800000.00000004.mdmp2e:T1abe,"KitelGame_Setup.exe" loaded module "%WINDIR%\TEMP\VXOLE32.DLL" at base 735d0000 "KitelGame_Setup.exe" loaded module "%WINDIR%\SYSTEM32\UXTHEME.DLL" at base 74450000 "KitelGame_Setup.exe" loaded module "%WINDIR%\SYSTEM32\USERENV.DLL" at base 744d0000 "KitelGame_Setup.exe" loaded module "%WINDIR%\SYSTEM32\SETUPAPI.DLL" at base 75f90000 "KitelGame_Setup.exe" loaded module "NTDLL.DLL" at base 76f50000 "KitelGame_Setup.exe" loaded module "%WINDIR%\SYSTEM32\APPHELP.DLL" at base 74380000 "KitelGame_Setup.exe" loaded module "%WINDIR%\SYSTEM32\PROPSYS.DLL" at base 73aa0000 "KitelGame_Setup.exe" loaded module "%WINDIR%\SYSTEM32\DWMAPI.DLL" at base 735a0000 "KitelGame_Setup.exe" loaded module "%WINDIR%\SYSTEM32\CRYPTBASE.DLL" at base 73590000 "KitelGame_Setup.exe" loaded module "%WINDIR%\SYSTEM32\OLEACC.DLL" at base 73530000 "KitelGame_Setup.exe" loaded module "%WINDIR%\SYSTEM32\CLBCATQ.DLL" at base 74f90000 "KitelGame_Setup.exe" loaded module "%WINDIR%\SYSTEM32\NTMARTA.DLL" at base 74350000 "KitelGame_Setup.exe" loaded module "%WINDIR%\SYSTEM32\VERSION.DLL" at base 74c40000 "KitelGame_Setup.exe" loaded module "%WINDIR%\SYSTEM32\SHFOLDER.DLL" at base 73520000 "KitelGame_Setup.exe" loaded module "KERNEL32.DLL" at base 75130000 "KitelGame_Setup.exe" loaded module "%WINDIR%\SYSTEM32\RICHED20.DLL" at base 72d00000 "KitelGame_Setup.exe" loaded module "COMCTL32.DLL" at base 749d0000 "KitelGame_Setup.exe" loaded module "RPCRT4.DLL" at base 74c60000 "KitelGame_Setup.exe" loaded module "%WINDIR%\SYSTEM32\SHELL32.DLL" at base 763d0000 "KitelGame_Setup.exe" loaded module "%PROGRAMFILES%\(X86)\COMMON FILES\MICROSOFT SHARED\INK\TIPTSF.DLL" at base 72aa0000 "KitelGame_Setup.exe" loaded module "%WINDIR%\SYSTEM32\MSCTF.DLL" at base 755a0000 "KitelGame_Setup.exe" loaded module "%TEMP%\NST9CF5.TMP\NSEXEC.DLL" at base 72a90000 "KitelGame_Setup.exe" loaded module "KERNELBASE" at base 752c0000 "KitelGame_Setup.exe" loaded module "%WINDIR%\SYSWOW64\WINDOWS.STORAGE.DLL" at base 72e50000 "KitelGame_Setup.exe" loaded module "%WINDIR%\SYSTEM32\WINDOWS.STORAGE.DLL" at base 72e50000 "KitelGame_Setup.exe" loaded module "CSCAPI.DLL" at base 73930000 "KitelGame_Setup.exe" loaded module "%TEMP%\NST9CF5.TMP\NSDIALOGS.DLL" at base 729e0000 "KitelGame_Setup.exe" loaded module "%TEMP%\NST9CF5.TMP\SYSTEM.DLL" at base 729d0000 "KitelGame_Setup.exe" loaded module "API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL" at base 75b40000 "KitelGame_Setup.exe" loaded module "EXT-MS-WIN-RTCORE-NTUSER-WINDOW-EXT-L1-1-0.DLL" at base 75de0000 "KitelGame_Setup.exe" loaded module "EXT-MS-WIN-RTCORE-NTUSER-INTEGRATION-L1-1-0.DLL" at base 75de0000 "KitelGame_Setup.exe" loaded module "API-MS-WIN-SECURITY-SYSTEMFUNCTIONS-L1-1-0" at base 75d60000 "KitelGame_Setup.exe" loaded module "%WINDIR%\SYSTEM32\OLE32.DLL" at base 75680000 "KitelGame.exe" loaded module "%WINDIR%\TEMP\VXOLE32.DLL" at base 73530000 "KitelGame.exe" loaded module "%WINDIR%\SYSTEM32\UXTHEME.DLL" at base 74450000 "KitelGame.exe" loaded module "%WINDIR%\SYSTEM32\USERENV.DLL" at base 744d0000 "KitelGame.exe" loaded module "%WINDIR%\SYSTEM32\SETUPAPI.DLL" at base 75f90000 "KitelGame.exe" loaded module "NTDLL.DLL" at base 76f50000 "KitelGame.exe" loaded module "%WINDIR%\SYSTEM32\APPHELP.DLL" at base 74380000 "KitelGame.exe" loaded module "%WINDIR%\SYSTEM32\PROPSYS.DLL" at base 73aa0000 "KitelGame.exe" loaded module "%WINDIR%\SYSTEM32\DWMAPI.DLL" at base 73500000 "KitelGame.exe" loaded module "%WINDIR%\SYSTEM32\CRYPTBASE.DLL" at base 734f0000 "KitelGame.exe" loaded module "%WINDIR%\SYSTEM32\OLEACC.DLL" at base 73490000 "KitelGame.exe" loaded module "%WINDIR%\SYSTEM32\CLBCATQ.DLL" at base 74f90000 "KitelGame.exe" loaded module "%WINDIR%\SYSTEM32\NTMARTA.DLL" at base 74350000 "KitelGame.exe" loaded module "%WINDIR%\SYSTEM32\VERSION.DLL" at base 74c40000 "KitelGame.exe" loaded module "%WINDIR%\SYSTEM32\SHFOLDER.DLL" at base 73480000 "KitelGame.exe" loaded module "KERNEL32.DLL" at base 75130000 "KitelGame.exe" loaded module "%WINDIR%\SYSTEM32\WINDOWS.STORAGE.DLL" at base 72db0000 "KitelGame.exe" loaded module "USER32.DLL" at base 75de0000 "KitelGame.exe" loaded module "RPCRT4.DLL" at base 74c60000 "KitelGame.exe" loaded module "%WINDIR%\SYSWOW64\\WINDOWS.STATEREPOSITORYPS.DLL" at base 72c40000 "KitelGame.exe" loaded module "%WINDIR%\SYSWOW64\URLMON.DLL" at base 73dd0000 "KitelGame.exe" loaded module "SSPICLI.DLL" at base 739e0000 "KitelGame.exe" loaded module "API-MS-WIN-CORE-URL-L1-1-0.DLL" at base 752c0000 "KitelGame.exe" loaded module "VIRTDISK.DLL" at base 74030000 "KitelGame.exe" loaded module "%WINDIR%\SYSWOW64\WINTYPES.DLL" at base 72ce0000 "KitelGame.exe" loaded module "%WINDIR%\SYSTEM32\WINTYPES.DLL" at base 72ce0000 "KitelGame.exe" loaded module "SHELL32.DLL" at base 763d0000 "KitelGame.exe" loaded module "%WINDIR%\SYSWOW64\APPRESOLVER.DLL" at base 72b70000 "KitelGame.exe" loaded module "%WINDIR%\SYSWOW64\ONECOREUAPCOMMONPROXYSTUB.DLL" at base 728a0000 "KitelGame.exe" loaded module "KERNELBASE" at base 752c0000 "elevate.exe" loaded module "%WINDIR%\TEMP\VXOLE64.DLL" at base 7ffe1ecd0000 "elevate.exe" loaded module "API-MS-WIN-CORE-SYNCH-L1-2-0" at base 7ffe43060000 "elevate.exe" loaded module "API-MS-WIN-CORE-FIBERS-L1-1-1" at base 7ffe43060000 "elevate.exe" loaded module "API-MS-WIN-CORE-FIBERS-L1-1-2" at base 7ffe43060000 "elevate.exe" loaded module "API-MS-WIN-CORE-LOCALIZATION-L1-2-1" at base 7ffe43060000 "elevate.exe" loaded module "KERNEL32" at base 7ffe44200000 "elevate.exe" loaded module "API-MS-WIN-CORE-STRING-L1-1-0" at base 7ffe43060000 "elevate.exe" loaded module "API-MS-WIN-CORE-DATETIME-L1-1-1" at base 7ffe43060000 "elevate.exe" loaded module "API-MS-WIN-CORE-LOCALIZATION-OBSOLETE-L1-2-0" at base 7ffe43060000 "elevate.exe" loaded module "POWRPROF.DLL" at base 7ffe42a30000 "elevate.exe" loaded module "%WINDIR%\SYSTEM32\UXTHEME.DLL" at base 7ffe40180000 "elevate.exe" loaded module "%WINDIR%\SYSTEM32\MSWSOCK.DLL" at base 7ffe42010000 "elevate.exe" loaded module "%WINDIR%\SYSTEM32\RSAENH.DLL" at base 7ffe41b10000 "elevate.exe" loaded module "KERNEL32.DLL" at base 7ffe44200000 "elevate.exe" loaded module "API-MS-WIN-APPMODEL-RUNTIME-L1-1-2" at base 7ffe41ba0000 "elevate.exe" loaded module "NTDLL.DLL" at base 7ffe45730000 "elevate.exe" loaded module "%WINDIR%\SYSTEM32\NAPINSP.DLL" at base 7ffe2e1b0000 "elevate.exe" loaded module "RPCRT4.DLL" at base 7ffe44300000 "elevate.exe" loaded module "%WINDIR%\SYSTEM32\PNRPNSP.DLL" at base 7ffe2dc40000 "elevate.exe" loaded module "%WINDIR%\SYSTEM32\WINRNR.DLL" at base 7ffe2dc20000 "elevate.exe" loaded module "%WINDIR%\SYSTEM32\WSHBTH.DLL" at base 7ffe29e20000 "elevate.exe" loaded module "%WINDIR%\SYSTEM32\NLANSP_C.DLL" at base 7ffe27da0000 "elevate.exe" loaded module "SSPICLI.DLL" at base 7ffe41df00002f:T66a,"KitelGame_Setup.exe" was detected as "Nullsoft Scriptable Install System" and name: "Installer" "KitelGame_Setup.exe" was detected as "Microsoft Linker" and name: "Linker" "ffmpeg.dll" was detected as "Nullsoft Scriptable Install System" and name: "Installer" "ffmpeg.dll" was detected as "Microsoft Linker" and name: "Linker" "vulkan-1.dll" was detected as "Nullsoft Scriptable Install System" and name: "Installer" "vulkan-1.dll" was detected as "Microsoft Linker" and name: "Linker" "libEGL.dll" was detected as "Nullsoft Scriptable Install System" and name: "Installer" "libEGL.dll" was detected as "Microsoft Linker" and name: "Linker" "KitelGame.exe" was detected as "Nullsoft Scriptable Install System" and name: "Installer" "KitelGame.exe" was detected as "Microsoft Linker" and name: "Linker" "Uninstall.exe" was detected as "Nullsoft Scriptable Install System" and name: "Installer" "Uninstall.exe" was detected as "Microsoft Linker" and name: "Linker" "System.dll" was detected as "Nullsoft Scriptable Install System" and name: "Installer" "System.dll" was detected as "Microsoft Linker" and name: "Linker" "nsDialogs.dll" was detected as "Nullsoft Scriptable Install System" and name: "Installer" "nsDialogs.dll" was detected as "Microsoft Linker" and name: "Linker" "nsExec.dll" was detected as "Nullsoft Scriptable Install System" and name: "Installer" "nsExec.dll" was detected as "Microsoft Linker" and name: "Linker" "node_sqlite3.node" was detected as "Nullsoft Scriptable Install System" and name: "Installer" "node_sqlite3.node" was detected as "Microsoft Linker" and name: "Linker"30:T94b,"KitelGame_Setup.exe" touched "Shortcut" (Path: "HKCU\WOW6432NODE\CLSID\{00021401-0000-0000-C000-000000000046}") "KitelGame_Setup.exe" touched "Memory Mapped Cache Mgr" (Path: "HKCU\WOW6432NODE\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\TREATAS") "KitelGame_Setup.exe" touched "UsersFiles" (Path: "HKCU\WOW6432NODE\CLSID\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\SHELLFOLDER") "KitelGame_Setup.exe" touched "delegate folder that appears in Users Files Folder" (Path: "HKCU\WOW6432NODE\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\INSTANCE") "KitelGame_Setup.exe" touched "Shell File System Folder" (Path: "HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{0E5AAE11-A475-4C5B-AB00-C66DE400274E}\INPROCSERVER32") "KitelGame_Setup.exe" touched "Known Folder Manager" (Path: "HKCU\WOW6432NODE\CLSID\{4DF0C730-DF9D-4AE3-9153-AA6B82E9795A}\TREATAS") "KitelGame_Setup.exe" touched "Computer" (Path: "HKCU\WOW6432NODE\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\SHELLFOLDER") "KitelGame_Setup.exe" touched "Microsoft Multiple AutoComplete List Container" (Path: "HKCU\WOW6432NODE\CLSID\{00BB2765-6A77-11D0-A535-00C04FD7D062}\TREATAS") "KitelGame_Setup.exe" touched "Microsoft Shell Folder AutoComplete List" (Path: "HKCU\WOW6432NODE\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\TREATAS") "KitelGame_Setup.exe" touched "Microsoft AutoComplete" (Path: "HKCU\WOW6432NODE\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\TREATAS") "KitelGame_Setup.exe" touched "Microsoft TipAutoCompleteClient Control" (Path: "HKCU\WOW6432NODE\CLSID\{807C1E6C-1D00-453F-B920-B61BB7CDD997}\TREATAS") "KitelGame.exe" touched "Property System Both Class Factory" (Path: "HKCU\WOW6432NODE\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}\TREATAS") "KitelGame.exe" touched "Security Manager" (Path: "HKCU\WOW6432NODE\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\TREATAS") "KitelGame.exe" touched "ShellItemArray Shell Namespace helper" (Path: "HKCU\WOW6432NODE\CLSID\{CDC82860-468D-4D4E-B7E7-C298FF23AB2C}\TREATAS") "KitelGame.exe" touched "Start Menu Cache" (Path: "HKCU\WOW6432NODE\CLSID\{660B90C8-73A9-4B58-8CAE-355B7F55341B}\TREATAS") "KitelGame.exe" touched "ShellItem Shell Namespace helper" (Path: "HKCU\WOW6432NODE\CLSID\{9AC9FBE1-E0A2-4AD6-B4EE-E212013EA917}\TREATAS") "KitelGame.exe" touched "Activation Layout Preferences" (Path: "HKCU\WOW6432NODE\CLSID\{0DC1AB8B-A52D-4BA8-BD76-E2819386FB2F}\TREATAS")31:T5d8,Observed system executable string:"%WINDIR%\system32\UXTHEME.dll" [Source: 00000000-00005428-00000C2B-2378413706] Observed system executable string:"%WINDIR%\system32\USERENV.dll" [Source: 00000000-00005428-00000C2B-2378454318] Observed system executable string:"%WINDIR%\system32\SETUPAPI.dll" [Source: 00000000-00005428-00000C2B-2378507323] Observed system executable string:"%WINDIR%\system32\APPHELP.dll" [Source: 00000000-00005428-00000C2B-2378706998] Observed system executable string:"%WINDIR%\system32\PROPSYS.dll" [Source: 00000000-00005428-00000C2B-2378760880] Observed system executable string:"%WINDIR%\system32\DWMAPI.dll" [Source: 00000000-00005428-00000C2B-2378801961] Observed system executable string:"%WINDIR%\system32\CRYPTBASE.dll" [Source: 00000000-00005428-00000C2B-2378841564] Observed system executable string:"%WINDIR%\system32\OLEACC.dll" [Source: 00000000-00005428-00000C2B-2378884275] Observed system executable string:"%WINDIR%\system32\CLBCATQ.dll" [Source: 00000000-00005428-00000C2B-2378928910] Observed system executable string:"%WINDIR%\system32\NTMARTA.dll" [Source: 00000000-00005428-00000C2B-2378976642] Observed system executable string:"%WINDIR%\system32\VERSION.dll" [Source: 00000000-00005428-00000C2B-2379018638] Observed system executable string:"%WINDIR%\system32\SHFOLDER.dll" [Source: 00000000-00005428-00000C2B-2379064488] Observed system executable string:"%WINDIR%\system32\RichEd20.dll" [Source: 00000000-00005428-00000C2B-2379694966]32:T183b,"vk_swiftshader.dll" has type "PE32+ executable for MS Windows 5.02 (DLL) x86-64 10 sections"- Location: [%LOCALAPPDATA%\KitelGame\vk_swiftshader.dll]- [targetUID: 00000000-00005428] "libGLESv2.dll" has type "PE32+ executable for MS Windows 5.02 (DLL) x86-64 10 sections"- Location: [%LOCALAPPDATA%\KitelGame\libGLESv2.dll]- [targetUID: 00000000-00005428] "elevate.exe" has type "PE32+ executable for MS Windows 6.00 (console) x86-64 10 sections"- Location: [%LOCALAPPDATA%\KitelGame\resources\elevate.exe]- [targetUID: 00000000-00005428] "ffmpeg.dll" has type "PE32+ executable for MS Windows 5.02 (DLL) x86-64 9 sections"- Location: [%LOCALAPPDATA%\KitelGame\ffmpeg.dll]- [targetUID: 00000000-00005428] "vulkan-1.dll" has type "PE32+ executable for MS Windows 5.02 (DLL) x86-64 10 sections"- Location: [%LOCALAPPDATA%\KitelGame\vulkan-1.dll]- [targetUID: 00000000-00005428] "v8_context_snapshot.bin" has type "data"- Location: [%LOCALAPPDATA%\KitelGame\v8_context_snapshot.bin]- [targetUID: 00000000-00005428] "libEGL.dll" has type "PE32+ executable for MS Windows 5.02 (DLL) x86-64 10 sections"- Location: [%LOCALAPPDATA%\KitelGame\libEGL.dll]- [targetUID: 00000000-00005428] "KitelGame.exe" has type "PE32 executable for MS Windows 4.00 (GUI) Intel i386 Nullsoft Installer self-extracting archive 5 sections"- Location: [%LOCALAPPDATA%\KitelGame\KitelGame.exe]- [targetUID: 00000000-00005428] "Uninstall.exe" has type "PE32 executable for MS Windows 4.00 (GUI) Intel i386 Nullsoft Installer self-extracting archive 5 sections"- Location: [%LOCALAPPDATA%\KitelGame\Uninstall.exe]- [targetUID: 00000000-00005428] "System.dll" has type "PE32 executable for MS Windows 4.00 (DLL) Intel i386 4 sections"- Location: [%TEMP%\nst9CF5.tmp\System.dll]- [targetUID: 00000000-00005428] "nsDialogs.dll" has type "PE32 executable for MS Windows 4.00 (DLL) Intel i386 5 sections"- Location: [%TEMP%\nst9CF5.tmp\nsDialogs.dll]- [targetUID: 00000000-00005428] "nsExec.dll" has type "PE32 executable for MS Windows 4.00 (DLL) Intel i386 4 sections"- Location: [%TEMP%\nst9CF5.tmp\nsExec.dll]- [targetUID: 00000000-00005428] "KitelGame.lnk" has type "MS Windows shortcut Item id list present Points to a file or directory Has Relative path Has Working directory Icon number=0 Unicoded HasExpIcon "%USERPROFILE%\AppData\Local\KitelGame\KitelGame.exe" MachineID desktop-8ld9t6n KnownFolderID F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F Archive ctime=Tue Sep 15 19:58:30 2026 atime=Mon Sep 21 20:28:36 2026 mtime=Tue Sep 15 19:58:30 2026 length=228736 window=normal IDListSize 0x01d2 Root folder "59031A47-3F72-44A7-89C5-5595FE6B30EE" LocalBasePath "C:\Users\HAPUBWS\AppData\Local\KitelGame\KitelGame.exe""- Location: [%APPDATA%\Microsoft\Windows\Start Menu\Programs\KitelGame\KitelGame.lnk]- [targetUID: 00000000-00005428] "KitelGame.lnk" has type "MS Windows shortcut Item id list present Points to a file or directory Has Relative path Has Working directory Icon number=0 Unicoded HasExpIcon "%USERPROFILE%\AppData\Local\KitelGame\KitelGame.exe" MachineID desktop-8ld9t6n KnownFolderID F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F Archive ctime=Tue Sep 15 19:58:30 2026 atime=Mon Sep 21 20:29:09 2026 mtime=Tue Sep 15 19:58:30 2026 length=228736 window=normal IDListSize 0x01d2 Root folder "59031A47-3F72-44A7-89C5-5595FE6B30EE" LocalBasePath "C:\Users\HAPUBWS\AppData\Local\KitelGame\KitelGame.exe""- Location: [%USERPROFILE%\Desktop\KitelGame.lnk]- [targetUID: 00000000-00005428] "Uninstall.lnk" has type "MS Windows shortcut Item id list present Points to a file or directory Has Relative path Has Working directory Unicoded MachineID desktop-8ld9t6n KnownFolderID F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F Archive ctime=Mon Sep 21 20:29:08 2026 atime=Mon Sep 21 20:29:08 2026 mtime=Mon Sep 21 20:29:08 2026 length=222481 window=normal IDListSize 0x01d2 Root folder "59031A47-3F72-44A7-89C5-5595FE6B30EE" LocalBasePath "C:\Users\HAPUBWS\AppData\Local\KitelGame\Uninstall.exe""- Location: [%APPDATA%\Microsoft\Windows\Start Menu\Programs\KitelGame\Uninstall.lnk]- [targetUID: 00000000-00005428] "RootCA.cer" has type "Certificate Version=3"- Location: [%LOCALAPPDATA%\KitelGame\resources\RootCA.cer]- [targetUID: 00000000-00005428] "resources.pak" has type "data"- Location: [%LOCALAPPDATA%\KitelGame\resources.pak]- [targetUID: 00000000-00005428] "icudtl.dat" has type "data"- Location: [%LOCALAPPDATA%\KitelGame\icudtl.dat]- [targetUID: 00000000-00005428] "LICENSES.chromium.html" has type "HTML document text HTML document ASCII text"- Location: [%LOCALAPPDATA%\KitelGame\LICENSES.chromium.html]- [targetUID: 00000000-00005428] "app.asar" has type "Electron ASAR archive header length: 1003786 bytes"- Location: [%LOCALAPPDATA%\KitelGame\resources\app.asar]- [targetUID: 00000000-00005428] "node_sqlite3.node" has type "PE32+ executable for MS Windows 6.00 (DLL) x86-64 7 sections"- Location: [%LOCALAPPDATA%\KitelGame\resources\app.asar.unpacked\node_modules\sqlite3\build\Release\node_sqlite3.node]- [targetUID: 00000000-00005428] "nsy9C77.tmp" has type "data"- Location: [%TEMP%\nsy9C77.tmp]- [targetUID: 00000000-00005428] "tr.pak" has type "data"- Location: [%LOCALAPPDATA%\KitelGame\locales\tr.pak]- [targetUID: 00000000-00005428] "en-US.pak" has type "data"- Location: [%LOCALAPPDATA%\KitelGame\locales\en-US.pak]- [targetUID: 00000000-00005428] "chrome_200_percent.pak" has type "data"- Location: [%LOCALAPPDATA%\KitelGame\chrome_200_percent.pak]- [targetUID: 00000000-00005428] "chrome_100_percent.pak" has type "data"- Location: [%LOCALAPPDATA%\KitelGame\chrome_100_percent.pak]- [targetUID: 00000000-00005428] "@primno_dpapi.node" has type "Unknown"- [targetUID: N/A] "engine.dat" has type "JavaScript source Unicode text UTF-8 text with very long lines (30320)"- Location: [%LOCALAPPDATA%\KitelGame\resources\engine.dat]- [targetUID: 00000000-00005428] "modern-wizard.bmp" has type "PC bitmap Windows 3.x format 164 x 314 x 4 image size 26376 resolution 2834 x 2834 px/m cbSize 26494 bits offset 118"- Location: [%TEMP%\nst9CF5.tmp\modern-wizard.bmp]- [targetUID: 00000000-00005428] "LICENSE" has type "ASCII text"- Location: [%LOCALAPPDATA%\KitelGame\LICENSE]- [targetUID: 00000000-00005428]33:T7d2,"KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\CERTUTIL.EXE"; Key: ""; Value: "") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\MICROSOFT\WOW64\X86\XTAJIT"; Key: ""; Value: "") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\SERVICES\BAM\STATE\USERSETTINGS\S-1-5-21-1271187874-1938232448-3812392235-1001"; Key: ""; Value: "") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SESSION MANAGER\BAM"; Key: ""; Value: "") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SESSION MANAGER\APPCERTDLLS"; Key: ""; Value: "") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SAFEBOOT\OPTION"; Key: ""; Value: "") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\SAFER\CODEIDENTIFIERS"; Key: ""; Value: "") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\SAFER\CODEIDENTIFIERS"; Key: ""; Value: "") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\SHELL FOLDERS"; Key: ""; Value: "") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION"; Key: ""; Value: "") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\LAYERS"; Key: ""; Value: "") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\SDBUPDATES"; Key: ""; Value: "") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\SDBUPDATES\MANIFESTEDMERGESTUBSDBS"; Key: ""; Value: "") "KitelGame_Setup.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SIDEBYSIDE"; Key: ""; Value: "")34:T551,"vk_swiftshader.dll" has type "PE32+ executable for MS Windows 5.02 (DLL) x86-64 10 sections"- Location: [%LOCALAPPDATA%\KitelGame\vk_swiftshader.dll]- [targetUID: 00000000-00005428] "libGLESv2.dll" has type "PE32+ executable for MS Windows 5.02 (DLL) x86-64 10 sections"- Location: [%LOCALAPPDATA%\KitelGame\libGLESv2.dll]- [targetUID: 00000000-00005428] "ffmpeg.dll" has type "PE32+ executable for MS Windows 5.02 (DLL) x86-64 9 sections"- Location: [%LOCALAPPDATA%\KitelGame\ffmpeg.dll]- [targetUID: 00000000-00005428] "vulkan-1.dll" has type "PE32+ executable for MS Windows 5.02 (DLL) x86-64 10 sections"- Location: [%LOCALAPPDATA%\KitelGame\vulkan-1.dll]- [targetUID: 00000000-00005428] "libEGL.dll" has type "PE32+ executable for MS Windows 5.02 (DLL) x86-64 10 sections"- Location: [%LOCALAPPDATA%\KitelGame\libEGL.dll]- [targetUID: 00000000-00005428] "System.dll" has type "PE32 executable for MS Windows 4.00 (DLL) Intel i386 4 sections"- Location: [%TEMP%\nst9CF5.tmp\System.dll]- [targetUID: 00000000-00005428] "nsDialogs.dll" has type "PE32 executable for MS Windows 4.00 (DLL) Intel i386 5 sections"- Location: [%TEMP%\nst9CF5.tmp\nsDialogs.dll]- [targetUID: 00000000-00005428] "nsExec.dll" has type "PE32 executable for MS Windows 4.00 (DLL) Intel i386 4 sections"- Location: [%TEMP%\nst9CF5.tmp\nsExec.dll]- [targetUID: 00000000-00005428]35:Tdb7,"KitelGame_Setup.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\SERVICES\BAM\STATE\USERSETTINGS\S-1-5-21-1271187874-1938232448-3812392235-1001"; Key: "\DEVICE\HARDDISKVOLUME3\WINDOWS\SYSWOW64\CERTUTIL.EXE"; Value: "") "KitelGame_Setup.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\SAFER\CODEIDENTIFIERS"; Key: "TRANSPARENTENABLED"; Value: "") "KitelGame_Setup.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\SAFER\CODEIDENTIFIERS"; Key: "AUTHENTICODEENABLED"; Value: "") "KitelGame_Setup.exe" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\SHELL FOLDERS"; Key: "CACHE"; Value: "") "KitelGame_Setup.exe" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\LAYERS"; Key: "C:\WINDOWS\SYSTEM32\CERTUTIL.EXE"; Value: "") "KitelGame_Setup.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\SDBUPDATES"; Key: "DISABLEDOUBLEQUERYSDBS"; Value: "") "KitelGame_Setup.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\SDBUPDATES"; Key: "SYSMERGE.SDB"; Value: "") "KitelGame_Setup.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\SDBUPDATES"; Key: "SYSMAIN.SDB"; Value: "") "KitelGame_Setup.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SIDEBYSIDE"; Key: "PREFEREXTERNALMANIFEST"; Value: "") "KitelGame_Setup.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\FOLDERDESCRIPTIONS\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}"; Key: "CATEGORY"; Value: "") "KitelGame_Setup.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\FOLDERDESCRIPTIONS\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}"; Key: "NAME"; Value: "") "KitelGame_Setup.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\FOLDERDESCRIPTIONS\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}"; Key: "PARENTFOLDER"; Value: "") "KitelGame_Setup.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\FOLDERDESCRIPTIONS\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}"; Key: "DEFERPRECREATEANDREDIRECT"; Value: "") "KitelGame_Setup.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\FOLDERDESCRIPTIONS\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}"; Key: "DESCRIPTION"; Value: "") "KitelGame_Setup.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\FOLDERDESCRIPTIONS\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}"; Key: "RELATIVEPATH"; Value: "") "KitelGame_Setup.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\FOLDERDESCRIPTIONS\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}"; Key: "PARSINGNAME_36354489"; Value: "") "KitelGame_Setup.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\FOLDERDESCRIPTIONS\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}"; Key: "PARSINGNAME"; Value: "") "KitelGame_Setup.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\FOLDERDESCRIPTIONS\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}"; Key: "INFOTIP"; Value: "")36:T4da,"KitelGame_Setup.exe" trying to touch file "C:\WINDOWS\system32\wow64log.dll" "KitelGame_Setup.exe" trying to touch file "C:\KitelGame_Setup.exe.Local\" "KitelGame_Setup.exe" trying to touch file "C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22621.1635_none_6ebca75c88023f94\COMCTL32.dll" "KitelGame_Setup.exe" trying to touch file "C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22621.1635_none_6ebca75c88023f94\comctl32.dll" "KitelGame_Setup.exe" trying to touch file "C:\WINDOWS\SysWOW64\IMM32.DLL" "KitelGame_Setup.exe" trying to touch file "C:\Windows\SysWOW64\imm32.dll" "KitelGame_Setup.exe" trying to touch file "C:\Windows\WindowsShell.Manifest" "KitelGame_Setup.exe" trying to touch file "C:\WINDOWS\SysWOW64\oleaut32.dll" "KitelGame_Setup.exe" trying to touch file "C:\Windows\SysWOW64\oleaut32.dll" "KitelGame_Setup.exe" trying to touch file "C:\windows\temp\VxSSL32.dll" "KitelGame_Setup.exe" trying to touch file "C:\Windows\Temp\VxSSL32.dll" "KitelGame_Setup.exe" trying to touch file "C:\FLTLIB.DLL" "KitelGame_Setup.exe" trying to touch file "C:\WINDOWS\SysWOW64\FLTLIB.DLL" "KitelGame_Setup.exe" trying to touch file "C:\Windows\SysWOW64\fltLib.dll"37:T4aa,"KitelGame_Setup.exe" touched file "C:\Users\%OSUSER%\AppData\Roaming\Microsoft\Windows\Start Menu" "KitelGame_Setup.exe" touched file "C:\Users\%OSUSER%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs" "KitelGame_Setup.exe" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Caches" "KitelGame_Setup.exe" touched file "C:\Users\%OSUSER%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KitelGame\KitelGame.lnk" "KitelGame_Setup.exe" touched file "C:\Users\%OSUSER%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KitelGame\Uninstall.lnk" "KitelGame_Setup.exe" touched file "%APPDATA%\Microsoft\Windows\Start Menu" "KitelGame_Setup.exe" touched file "%APPDATA%\Microsoft\Windows\Start Menu\Programs" "KitelGame_Setup.exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches" "KitelGame_Setup.exe" touched file "%APPDATA%\Microsoft\Windows\Start Menu\Programs\KitelGame\KitelGame.lnk" "KitelGame_Setup.exe" touched file "%APPDATA%\Microsoft\Windows\Start Menu\Programs\KitelGame\Uninstall.lnk" "KitelGame.exe" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Caches" "KitelGame.exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches"38:T63b,"KitelGame_Setup.exe" trying to access non-existent file "C:\WINDOWS\system32\wow64log.dll" "KitelGame_Setup.exe" trying to access non-existent file "C:\FLTLIB.DLL" "KitelGame_Setup.exe" trying to access non-existent file "C:\VCRUNTIME140.dll" "KitelGame_Setup.exe" trying to access non-existent file "C:\WINDOWS\SysWOW64\rpcss.dll" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\KitelGame\KitelGame.exe" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\KitelGame\d3dcompiler_47.dll" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\KitelGame\ffmpeg.dll" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\KitelGame\libEGL.dll" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\KitelGame\libGLESv2.dll" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\KitelGame\vk_swiftshader.dll" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\KitelGame\vulkan-1.dll" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\KitelGame\resources\elevate.exe" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\Temp\nst9CF5.tmp\nsExec.dll" "KitelGame_Setup.exe" trying to access non-existent file "C:\certutil.exe" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\KitelGame\resources\certutil.exe"39:T569,"KitelGame_Setup.exe" trying to access non-existent file "C:\KitelGame_Setup.exe.Local\" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\Temp\nst9CF5.tmp\modern-wizard.bmp" "KitelGame_Setup.exe" trying to access non-existent file "C:\Windows\SystemResources\USER32.dll.mun" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\KitelGame" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\KitelGame\icudtl.dat" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\KitelGame\chrome_100_percent.pak" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\KitelGame\chrome_200_percent.pak" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\KitelGame\resources.pak" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\KitelGame\v8_context_snapshot.bin" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\KitelGame\vk_swiftshader_icd.json" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\KitelGame\LICENSE" "KitelGame_Setup.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\KitelGame\LICENSES.chromium.html"3a:T13d6,Found URL "http://www.microsoft.com/pkiops/crl/microsoft%20public%20rsa%20timestamping%20ca%202020.crl0ym0k0i]http://www.microsoft.com/pkiops/certs/microsoft%20public%20rsa%20timestamping%20ca%202020.crt0_0]0q0a0?3http://www.microsoft.com/pkiops/docs/repository.htm0(!impe<_(lc+nvu[+:h" - Source: "00000000-00005428.00000001.218583.0041E000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/microsoft%20id%20verified%20cs%20aoc%20ca%2001.crl0xhttp://www.microsoft.com/pkiops/certs/microsoft%20id%20verified%20cs%20aoc%20ca%2001.crt0-!http://oneocsp.microsoft.com/ocsp0f_0]0q0a0?3http://www.microsoft.com/pkiops/docs/repository.htm0u36f\3/$" - Source: "00000000-00005428.00000001.218583.0041E000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/docs/repository.htm0i0g0e_http://www.microsoft.com/pkiops/crl/microsoft%20id%20verified%20code%20signing%20pca%202021.crl0ahttp://www.microsoft.com/pkiops/certs/microsoft%20id%20verified%20code%20signing%20pca%202021.crt0-!http://oneocsp.microsoft.com/ocsp00-:x5[+s1pexqd8ij5" - Source: "00000000-00005428.00000001.218583.0041E000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/docs/repository.htm0" - Source: "00000000-00005428.00000001.218583.0041E000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/microsoft%20identity%20verification%20root%20certificate%20authority%202020.crl0uhttp://www.microsoft.com/pkiops/certs/microsoft%20identity%20verification%20root%20certificate%20authority%202020.crt0-!http://oneocsp.microsoft.com/ocsp0lt)l4o,mdo.40+e'uusr8y;th-y:" - Source: "00000000-00005428.00000001.218583.0041E000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/microsoft%20identity%20verification%20root%20certificate%20authority%202020.crl0uhttp://www.microsoft.com/pkiops/certs/microsoft%20identity%20verification%20root%20certificate%20authority%202020.crt0(t$ph" - Source: "00000000-00005428.00000001.218583.0041E000.00000004.mdmp") Found URL "https://json-schema.org/draft/2020-12/schemaadditionalpropertiespropertiesnamespacepropertiesrefreshoptionsnode_tls_reject_unauthorizedgetallowunauthorizedtypedarrayprototypegetsymboltostringtagistypedarrayiscryptokeyiskeyobjectisuint8arrayisuint8clampedarrayisuint16arrayisuint32arrayisint8arrayisint16arrayisint32arrayisfloat16arraynj]" - Source: "00000000-00008844.00000000.219994.22A00000.00000004.mdmp") Found URL "https://nodejs.org/api/permissions.html" - Source: "00000000-00008844.00000000.219994.22A00000.00000004.mdmp") Found URL "https://github.com/nodejs/node/issues!c