Malware Analysis Report

2024-09-23 17:18

Sample ID 240502-jn9fzaeg49
Target 0dec9b0485007f34490b029822a1022b_JaffaCakes118
SHA256 e37bd3d6e631895d68a60dd3e7ce8305609edd617e0b6082fae05c8deb89f1c2
Tags
qr link discovery evasion upx spyware stealer
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral22

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral29

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral32

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral5

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral8

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral27

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral12

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral23

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral18

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral28

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral16

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral10

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral14

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral21

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral25

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral9

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral13

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral20

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral31

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral11

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral26

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral30

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral19

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral15

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral17

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral24

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral6

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral7

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

e37bd3d6e631895d68a60dd3e7ce8305609edd617e0b6082fae05c8deb89f1c2

Threat Level: Likely malicious

The file 0dec9b0485007f34490b029822a1022b_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

qr link discovery evasion upx spyware stealer

Modifies Windows Firewall

Blocklisted process makes network request

Reads user/profile data of web browsers

UPX packed file

Modifies Windows Firewall

Downloads MZ/PE file

Checks installed software on the system

Checks installed software on the system

Loads dropped DLL

Executes dropped EXE

Unsigned PE

Program crash

Enumerates physical storage devices

One or more HTTP URLs in qr code identified

NSIS installer

Runs .reg file with regedit

Modifies Internet Explorer settings

Runs net.exe

Download via BitsAdmin

Suspicious use of WriteProcessMemory

Suspicious use of AdjustPrivilegeToken

Script User-Agent

MITRE ATT&CK Matrix V13

Analysis: static1

Detonation Overview

Reported

2024-05-02 07:50

Signatures

One or more HTTP URLs in qr code identified

qr link

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

NSIS installer

installer
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Analysis: behavioral22

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win10v2004-20240419-en

Max time kernel

139s

Max time network

124s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\bg.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\bg.js

Network

Country Destination Domain Proto
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 77.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 71.159.190.20.in-addr.arpa udp
NL 23.62.61.97:443 www.bing.com tcp
US 8.8.8.8:53 55.36.223.20.in-addr.arpa udp
US 8.8.8.8:53 97.61.62.23.in-addr.arpa udp
US 20.231.121.79:80 tcp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 18.31.95.13.in-addr.arpa udp
US 8.8.8.8:53 164.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 34.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 14.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp

Files

N/A

Analysis: behavioral29

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win7-20231129-en

Max time kernel

121s

Max time network

122s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\de.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\de.js

Network

N/A

Files

N/A

Analysis: behavioral32

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win10v2004-20240419-en

Max time kernel

139s

Max time network

149s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\el.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\el.js

Network

Country Destination Domain Proto
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
US 8.8.8.8:53 183.142.211.20.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 4.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 157.123.68.40.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 164.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 8.8.8.8:53 48.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp

Files

N/A

Analysis: behavioral5

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win7-20240221-en

Max time kernel

118s

Max time network

119s

Command Line

C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\Tools\modules\bugreport.hta"

Signatures

Enumerates physical storage devices

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SysWOW64\mshta.exe N/A

Processes

C:\Windows\SysWOW64\mshta.exe

C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\Tools\modules\bugreport.hta"

Network

N/A

Files

N/A

Analysis: behavioral8

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win10v2004-20240419-en

Max time kernel

139s

Max time network

123s

Command Line

C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\Tools\run.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}

Signatures

N/A

Processes

C:\Windows\SysWOW64\mshta.exe

C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\Tools\run.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}

Network

Country Destination Domain Proto
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 77.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 69.31.126.40.in-addr.arpa udp
NL 23.62.61.75:443 www.bing.com tcp
US 8.8.8.8:53 75.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 183.142.211.20.in-addr.arpa udp
US 8.8.8.8:53 50.23.12.20.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 8.8.8.8:53 139.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 34.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 11.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 205.47.74.20.in-addr.arpa udp
US 8.8.8.8:53 200.197.79.204.in-addr.arpa udp

Files

N/A

Analysis: behavioral27

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win7-20240221-en

Max time kernel

121s

Max time network

123s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\cs.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\cs.js

Network

N/A

Files

N/A

Analysis: behavioral4

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win10v2004-20240419-en

Max time kernel

139s

Max time network

123s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

Signatures

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\rundll32.exe

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2976 wrote to memory of 3512 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2976 wrote to memory of 3512 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2976 wrote to memory of 3512 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3512 -ip 3512

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3512 -s 612

Network

Country Destination Domain Proto
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
US 8.8.8.8:53 183.142.211.20.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 71.159.190.20.in-addr.arpa udp
NL 23.62.61.75:443 www.bing.com tcp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 8.8.8.8:53 75.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 50.23.12.20.in-addr.arpa udp
US 8.8.8.8:53 56.126.166.20.in-addr.arpa udp
US 8.8.8.8:53 164.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 77.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 34.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 21.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 200.197.79.204.in-addr.arpa udp

Files

N/A

Analysis: behavioral12

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win10v2004-20240226-en

Max time kernel

139s

Max time network

158s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\drp.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\drp.js

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2368 --field-trial-handle=2692,i,8678872182442199182,12502579059484928042,262144 --variations-seed-version /prefetch:8

Network

Country Destination Domain Proto
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 79.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 183.142.211.20.in-addr.arpa udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 104.219.191.52.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 8.8.8.8:53 chromewebstore.googleapis.com udp
US 8.8.8.8:53 chromewebstore.googleapis.com udp
GB 172.217.169.74:443 chromewebstore.googleapis.com tcp
US 8.8.8.8:53 74.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 11.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 77.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 89.16.208.104.in-addr.arpa udp

Files

N/A

Analysis: behavioral23

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win7-20240221-en

Max time kernel

122s

Max time network

123s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\bn.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\bn.js

Network

N/A

Files

N/A

Analysis: behavioral18

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win10v2004-20240419-en

Max time kernel

137s

Max time network

123s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\az.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\az.js

Network

Country Destination Domain Proto
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 183.142.211.20.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 77.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 69.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
NL 23.62.61.160:443 www.bing.com tcp
US 8.8.8.8:53 160.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 86.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 18.31.95.13.in-addr.arpa udp
US 8.8.8.8:53 164.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 48.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 14.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp

Files

N/A

Analysis: behavioral28

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win10v2004-20240419-en

Max time kernel

139s

Max time network

123s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\cs.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\cs.js

Network

Country Destination Domain Proto
US 8.8.8.8:53 183.142.211.20.in-addr.arpa udp
US 8.8.8.8:53 73.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
NL 23.62.61.121:443 www.bing.com tcp
US 8.8.8.8:53 121.61.62.23.in-addr.arpa udp
US 20.231.121.79:80 tcp
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 8.8.8.8:53 139.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 77.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 34.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 21.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp

Files

N/A

Analysis: behavioral16

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win10v2004-20240419-en

Max time kernel

139s

Max time network

107s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\ar.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\ar.js

Network

Country Destination Domain Proto
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 77.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
US 8.8.8.8:53 4.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 183.142.211.20.in-addr.arpa udp
US 8.8.8.8:53 50.23.12.20.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 139.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 34.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 21.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 200.197.79.204.in-addr.arpa udp

Files

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win10v2004-20240419-en

Max time kernel

142s

Max time network

106s

Command Line

"C:\Users\Admin\AppData\Local\Temp\0dec9b0485007f34490b029822a1022b_JaffaCakes118.exe"

Signatures

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\0dec9b0485007f34490b029822a1022b_JaffaCakes118.exe N/A

Enumerates physical storage devices

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3726321484-1950364574-433157660-1000\Software\Microsoft\Internet Explorer\Styles C:\Windows\SysWOW64\reg.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3726321484-1950364574-433157660-1000\SOFTWARE\Microsoft\Internet Explorer\Styles\MaxScriptStatements = "4294967295" C:\Windows\SysWOW64\reg.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\Styles C:\Windows\SysWOW64\reg.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Styles\MaxScriptStatements = "4294967295" C:\Windows\SysWOW64\reg.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\0dec9b0485007f34490b029822a1022b_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\0dec9b0485007f34490b029822a1022b_JaffaCakes118.exe"

C:\Windows\SysWOW64\reg.exe

C:\Windows\system32\reg.exe import "C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275014\Tools\patch.reg"

C:\Windows\SysWOW64\mshta.exe

C:\Windows\system32\mshta.exe "C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275014\run.hta" --sfx "0dec9b0485007f34490b029822a1022b_JaffaCakes118.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 74.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 8.8.8.8:53 133.211.185.52.in-addr.arpa udp
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 56.126.166.20.in-addr.arpa udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 164.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 77.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 34.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 13.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp

Files

C:\Users\Admin\AppData\Local\Temp\nsw3D88.tmp\System.dll

MD5 fbe295e5a1acfbd0a6271898f885fe6a
SHA1 d6d205922e61635472efb13c2bb92c9ac6cb96da
SHA256 a1390a78533c47e55cc364e97af431117126d04a7faed49390210ea3e89dd0e1
SHA512 2cb596971e504eaf1ce8e3f09719ebfb3f6234cea5ca7b0d33ec7500832ff4b97ec2bbe15a1fbf7e6a5b02c59db824092b9562cd8991f4d027feab6fd3177b06

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275014\img\installation\drivers\Notebook.png

MD5 e9c35a488b41ffa9645c0592b13c8c15
SHA1 f54aefb44fe34cceae28a808c270fe8f670b922f
SHA256 025e7e8699fd9c246452c6634d4935149baa6a6acadb91b0f9adf52d11a094f9
SHA512 33ab1cace6ff121a34d262855219cfaf22c4e3b94eeacabfd3ee290784c261885a270aec9354d639ccd9bbcba3eeb658554ae440373c43cc8cc35313f7867485

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275014\Tools\patch.reg

MD5 d49db2ec30494b46d332d516cead4969
SHA1 3d9ce116afe59760c9a1c149ddec92a2f92a0028
SHA256 c86ef9ed6e111d166818e8e0adb3cf5e2a3a5dfc6edc932abc298141ed6f2208
SHA512 1314c6bc4095e445c930c0a0a94a83ff39670081ed916337eed2f74e3453702ae0e0187c0e6c933d52868d80c36e9acbe558faf86f10146d0a825b97c3bc261d

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275014\run.hta

MD5 d20765817cdb05d0805f682ef9193386
SHA1 5dcee6bf0aeb0e5ffc9500a5d0bfe93ed1302cdc
SHA256 6d61529ce3e58354a6476c51aaff4b28e4ddda2433108376ee5f736e78ee1a04
SHA512 46a030efe7f87f625bd93f7f6487766b78565f9b1b7004d3afec5072969e5f7d93a46f3b446ffbaf0b3cc1a9d837eba17c3d83b07e40281082a1152a8c08a258

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275014\DriverPackSolution.html

MD5 ef5e55c1187442b6278452429b93ef85
SHA1 012bc5f42a31ccb817e12457c50d8ff51450e33b
SHA256 ba9168498ea0e20f95d9c1c67cfb9e4f79e0775db8aac50d2983494316e38281
SHA512 d8e20e220d156793d2c2da462c36cb9708396c2db08faa876aca7fef63bdcd6b7d31a6fc7d78659f682ba30cf73ab7b565a1f9226e434deaa8f86f7f9341c3b8

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275014\css\normalize.min.css

MD5 e8908cf9cb9504b285327d240187f53b
SHA1 20eadf1695eb38bcd92d1706de5335db61b96502
SHA256 86235e2c477078adfe1188d07ca1e5d8198443aaf2436de1785a169f3e1d5463
SHA512 9c828e8942d40da89f33d1db459a7fc12621660331bef307df8649e89758e76b044bf97a2cd36d656915e19a8b04f571cdb61d7cb6f926a3ba151ee67bbcdc4b

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275014\css\proximanova.css

MD5 cf0c65f6d17307ccd7914e984ac86a6f
SHA1 4fcef85545731123eb5e3e1886817f8014f22e21
SHA256 58a658fd04bb4aa2ff90ff7125ca6e1775b1a9d053e2cfa44b8697990f9f134e
SHA512 0f171b8839385cd192d10c5c06e1b2284e6f2d7d74b9a9d7559252d1b63b8f94c670aa5225e80a5dce9056e92e0fd1506754c6f94b74703a02b7c4687d4976ae

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275014\css\roboto.css

MD5 f5f5b5e4955262430e7b496247425d2d
SHA1 d4bea186a0d525ce3060e8dd7901311ae4a0735a
SHA256 2537efe2fb974f58cddbc99abfcd7aed6e9df81992eed3e528b5f1748167b8fa
SHA512 16a7ec3d95ed773a0a1ce2c2dc4430677106f0d1042e34cb39ed48f4a495f637ec3eefad05a4ebbddbea71a67e933fa0b56e6beef69700c6e3ac9cda9c17e7ca

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275014\css\open-sans.css

MD5 9ed298542b45ef98492e159f68e89f48
SHA1 c4521d9a5dff8a71804c40a909378e8eb5bd66c2
SHA256 b9bd51ae6ccc7df20417e0ef341295b86bf8f74f6e235ee99ddefd675806f47f
SHA512 1c7d5b378d6c627fbbef864035b157c3e7647b699a50d64f6ebf22faac38bf774e0c025bc8dd4ecc9bde7b377b729bc89bf6fbac4d2409240e2d03753cfe680e

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275014\css\icons-checkbox.css

MD5 3be98220035017d9b818f3cc94f87587
SHA1 bc07f11d0a59f942ac942dba02214a7041ad6e3a
SHA256 cb134dcb95a407795c671a512c389894d3525fba3f6a2168fc5b9b7e875e78dc
SHA512 d2e7d57cb7b7e771c82c75a04fbfb86ebecbb409ecf2c5666aeaa99695474a7985e3367f6a5b3d4ac59f775f60fb084efa9bdda99ce3c077df2690a5f0a6b1d1

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275014\drp.js

MD5 b7674027589c6a154ab53fde901a6092
SHA1 43e7f020a9ff7723b3aa49e95d8865d9f8e20e76
SHA256 d6e4d36dd48968e7fc1e83ce57b4411dfdaf6c6c359e682bffb027432e199d32
SHA512 f6156c1b973e6d0849f7ae894bc346839c315d258f5818dfed886e2e52cf5612b1d55e2f7178aba71d0bb81b26b6fb5689e8aa9d1d043f9b72ce44895c445ab9

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275014\config.js

MD5 e6f4bc31e1a7820cbe3412c418a2c7d5
SHA1 5d257254c6cd68c466ee352f372eabb62fd3180f
SHA256 7eef38152220cabab121f551d92fe40b850c41065653b9d43c021de73bf6c6d2
SHA512 e16a2aa03615ebfcafa3f88ce79dd2d52e6ab1379ac62a0fa72b8ffa948851dd07b561ff3c10d411d692ff19290ec829faac9e91e261135e8c79d8b10f73d982

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275014\drp.css

MD5 776944f023f16e729ab02d8a7d24b877
SHA1 80d8dd12b9d4242d55c0a9a0b15cb6e63e1178d7
SHA256 578dfaecd5cd9d6a072c383b784840fcc789a687e0c2013b04e23a135458a05a
SHA512 2a4f62ff19148881aae0228e0ce224aa5c43f61d273548010b81a2f9a0f91ca06f95eb525b45b9f5c490ed789bed123cfba7451c7942f92f78a1e7729ce7ae2d

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275014\css\custom-control.css

MD5 f7f8703ada2176dc144343a2c2acb1cd
SHA1 091334a48056a8baafff0cd672232de1c1f6c838
SHA256 7d7853e95258a7a3f8eaf41795f7124e7d2dacdeb5f1efe212b3ff7ed0da9e50
SHA512 27d46472c06103e0bdd9d40149804c16f469305752c3a6d8473c2f2ab22b2c8fa5d65d61dda7c617a3f12d8526b56a10320b8683f31d210ac2185fd0daed8e97

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275014\css\style.css

MD5 56f7f26870409fd4928952ca73d66007
SHA1 10383d748386deadaae752edcf0b7a39e9609d48
SHA256 3d09c0356af5403e0c5e0450fd1581b9e01cadce216c2d37450ff84350b004d0
SHA512 da83aecf7025ab1798648c932c59b00b8238bf3c2ec476078b761ef38f4c8db8a353cf696b7352ced931ef1f66ec48de69ff380f5a2c86546df926887e9091cc

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275014\css\icons.css

MD5 ebae852f3327fdaf3e2fc2bf1cdecb8f
SHA1 f9753fe176069974fc9bce49eae877745282e183
SHA256 b5f111103f7f090c246a223b1ff497b94c4dd3ac64bf5b3fb2d91555fcfd6f2c
SHA512 bf8e7c5db7a1eacd4344d5facfee1cd66e883389b53bc28e4e387cdb67ea40ee26266ba4282e50eb50a7bc3c810d9fdbb50792a46135761b2e8ce52ddc9e394a

Analysis: behavioral10

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win10v2004-20240419-en

Max time kernel

140s

Max time network

105s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\config.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\config.js

Network

Country Destination Domain Proto
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 69.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
NL 23.62.61.97:443 www.bing.com tcp
US 8.8.8.8:53 55.36.223.20.in-addr.arpa udp
US 8.8.8.8:53 97.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 183.142.211.20.in-addr.arpa udp
US 8.8.8.8:53 157.123.68.40.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 8.8.8.8:53 164.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 77.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 34.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 21.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 8.8.8.8:53 43.58.199.20.in-addr.arpa udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 200.197.79.204.in-addr.arpa udp

Files

N/A

Analysis: behavioral14

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win10v2004-20240419-en

Max time kernel

139s

Max time network

123s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\js\soft.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\js\soft.js

Network

Country Destination Domain Proto
US 8.8.8.8:53 183.142.211.20.in-addr.arpa udp
US 8.8.8.8:53 4.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 8.8.8.8:53 77.190.18.2.in-addr.arpa udp
NL 23.62.61.75:443 www.bing.com tcp
US 8.8.8.8:53 75.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 56.126.166.20.in-addr.arpa udp
US 8.8.8.8:53 164.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 48.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 200.197.79.204.in-addr.arpa udp

Files

N/A

Analysis: behavioral21

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win7-20240215-en

Max time kernel

119s

Max time network

120s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\bg.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\bg.js

Network

N/A

Files

N/A

Analysis: behavioral25

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win7-20240221-en

Max time kernel

120s

Max time network

125s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\ca.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\ca.js

Network

N/A

Files

N/A

Analysis: behavioral9

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win7-20240419-en

Max time kernel

118s

Max time network

119s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\config.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\config.js

Network

N/A

Files

N/A

Analysis: behavioral13

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win7-20240220-en

Max time kernel

120s

Max time network

121s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\js\soft.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\js\soft.js

Network

N/A

Files

N/A

Analysis: behavioral20

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win10v2004-20240419-en

Max time kernel

139s

Max time network

152s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\be.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\be.js

Network

Country Destination Domain Proto
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
US 8.8.8.8:53 4.159.190.20.in-addr.arpa udp
NL 23.62.61.75:443 www.bing.com tcp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 55.36.223.20.in-addr.arpa udp
US 8.8.8.8:53 75.61.62.23.in-addr.arpa udp
US 20.231.121.79:80 tcp
US 8.8.8.8:53 183.142.211.20.in-addr.arpa udp
US 8.8.8.8:53 56.126.166.20.in-addr.arpa udp
US 8.8.8.8:53 157.123.68.40.in-addr.arpa udp
US 8.8.8.8:53 139.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 77.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 34.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 48.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 200.197.79.204.in-addr.arpa udp

Files

N/A

Analysis: behavioral31

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win7-20240220-en

Max time kernel

120s

Max time network

122s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\el.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\el.js

Network

N/A

Files

N/A

Analysis: behavioral11

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win7-20240215-en

Max time kernel

121s

Max time network

122s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\drp.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\drp.js

Network

N/A

Files

N/A

Analysis: behavioral26

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win10v2004-20240419-en

Max time kernel

149s

Max time network

151s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\ca.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\ca.js

Network

Country Destination Domain Proto
US 8.8.8.8:53 104.219.191.52.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
US 8.8.8.8:53 73.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
NL 23.62.61.121:443 www.bing.com tcp
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 55.36.223.20.in-addr.arpa udp
US 8.8.8.8:53 121.61.62.23.in-addr.arpa udp
US 138.91.171.81:80 tcp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 139.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 48.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 0.205.248.87.in-addr.arpa udp
US 8.8.8.8:53 14.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 91.16.208.104.in-addr.arpa udp

Files

N/A

Analysis: behavioral30

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win10v2004-20240419-en

Max time kernel

135s

Max time network

99s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\de.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\de.js

Network

Country Destination Domain Proto
US 8.8.8.8:53 183.142.211.20.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 71.159.190.20.in-addr.arpa udp
US 20.231.121.79:80 tcp
NL 23.62.61.160:443 www.bing.com tcp
US 8.8.8.8:53 160.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 104.219.191.52.in-addr.arpa udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 48.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 79.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 14.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 43.58.199.20.in-addr.arpa udp
US 8.8.8.8:53 200.197.79.204.in-addr.arpa udp

Files

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win7-20240221-en

Max time kernel

14s

Max time network

151s

Command Line

"C:\Users\Admin\AppData\Local\Temp\0dec9b0485007f34490b029822a1022b_JaffaCakes118.exe"

Signatures

Blocklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Downloads MZ/PE file

Modifies Windows Firewall

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A

Checks installed software on the system

discovery

Enumerates physical storage devices

Download via BitsAdmin

dropper
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\bitsadmin.exe N/A
N/A N/A C:\Windows\SysWOW64\bitsadmin.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SysWOW64\mshta.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Styles C:\Windows\SysWOW64\reg.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Styles\MaxScriptStatements = "4294967295" C:\Windows\SysWOW64\reg.exe N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Styles C:\Windows\SysWOW64\reg.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Styles\MaxScriptStatements = "4294967295" C:\Windows\SysWOW64\reg.exe N/A

Runs .reg file with regedit

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\regedit.exe N/A
N/A N/A C:\Windows\regedit.exe N/A

Runs net.exe

Script User-Agent

Description Indicator Process Target
HTTP User-Agent header Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) N/A N/A
HTTP User-Agent header Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) N/A N/A
HTTP User-Agent header Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) N/A N/A
HTTP User-Agent header Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) N/A N/A
HTTP User-Agent header Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) N/A N/A
HTTP User-Agent header Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) N/A N/A
HTTP User-Agent header Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) N/A N/A
HTTP User-Agent header Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) N/A N/A
HTTP User-Agent header Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) N/A N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: 33 N/A C:\Windows\SysWOW64\mshta.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\SysWOW64\mshta.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2172 wrote to memory of 2528 N/A C:\Users\Admin\AppData\Local\Temp\0dec9b0485007f34490b029822a1022b_JaffaCakes118.exe C:\Windows\SysWOW64\reg.exe
PID 2172 wrote to memory of 2528 N/A C:\Users\Admin\AppData\Local\Temp\0dec9b0485007f34490b029822a1022b_JaffaCakes118.exe C:\Windows\SysWOW64\reg.exe
PID 2172 wrote to memory of 2528 N/A C:\Users\Admin\AppData\Local\Temp\0dec9b0485007f34490b029822a1022b_JaffaCakes118.exe C:\Windows\SysWOW64\reg.exe
PID 2172 wrote to memory of 2528 N/A C:\Users\Admin\AppData\Local\Temp\0dec9b0485007f34490b029822a1022b_JaffaCakes118.exe C:\Windows\SysWOW64\reg.exe
PID 2172 wrote to memory of 2504 N/A C:\Users\Admin\AppData\Local\Temp\0dec9b0485007f34490b029822a1022b_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 2172 wrote to memory of 2504 N/A C:\Users\Admin\AppData\Local\Temp\0dec9b0485007f34490b029822a1022b_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 2172 wrote to memory of 2504 N/A C:\Users\Admin\AppData\Local\Temp\0dec9b0485007f34490b029822a1022b_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 2172 wrote to memory of 2504 N/A C:\Users\Admin\AppData\Local\Temp\0dec9b0485007f34490b029822a1022b_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 2504 wrote to memory of 628 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2504 wrote to memory of 628 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2504 wrote to memory of 628 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2504 wrote to memory of 628 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 628 wrote to memory of 1708 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 628 wrote to memory of 1708 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 628 wrote to memory of 1708 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 628 wrote to memory of 1708 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 2504 wrote to memory of 1412 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2504 wrote to memory of 1412 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2504 wrote to memory of 1412 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2504 wrote to memory of 1412 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 1412 wrote to memory of 2248 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 1412 wrote to memory of 2248 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 1412 wrote to memory of 2248 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 1412 wrote to memory of 2248 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 2504 wrote to memory of 588 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\net.exe
PID 2504 wrote to memory of 588 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\net.exe
PID 2504 wrote to memory of 588 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\net.exe
PID 2504 wrote to memory of 588 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\net.exe
PID 588 wrote to memory of 2088 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 588 wrote to memory of 2088 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 588 wrote to memory of 2088 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 588 wrote to memory of 2088 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2504 wrote to memory of 3028 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\compact.exe
PID 2504 wrote to memory of 3028 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\compact.exe
PID 2504 wrote to memory of 3028 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\compact.exe
PID 2504 wrote to memory of 3028 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\compact.exe
PID 2504 wrote to memory of 3016 N/A C:\Windows\SysWOW64\mshta.exe C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe
PID 2504 wrote to memory of 3016 N/A C:\Windows\SysWOW64\mshta.exe C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe
PID 2504 wrote to memory of 3016 N/A C:\Windows\SysWOW64\mshta.exe C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe
PID 2504 wrote to memory of 3016 N/A C:\Windows\SysWOW64\mshta.exe C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe
PID 2504 wrote to memory of 2176 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2504 wrote to memory of 2176 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2504 wrote to memory of 2176 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2504 wrote to memory of 2176 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2504 wrote to memory of 3008 N/A C:\Windows\SysWOW64\mshta.exe C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe
PID 2504 wrote to memory of 3008 N/A C:\Windows\SysWOW64\mshta.exe C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe
PID 2504 wrote to memory of 3008 N/A C:\Windows\SysWOW64\mshta.exe C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe
PID 2504 wrote to memory of 3008 N/A C:\Windows\SysWOW64\mshta.exe C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe
PID 2504 wrote to memory of 2196 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\compact.exe
PID 2504 wrote to memory of 2196 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\compact.exe
PID 2504 wrote to memory of 2196 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\compact.exe
PID 2504 wrote to memory of 2196 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\compact.exe
PID 2504 wrote to memory of 1700 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2504 wrote to memory of 1700 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2504 wrote to memory of 1700 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2504 wrote to memory of 1700 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 3028 wrote to memory of 1944 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\aria2c.exe
PID 3028 wrote to memory of 1944 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\aria2c.exe
PID 3028 wrote to memory of 1944 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\aria2c.exe
PID 3028 wrote to memory of 1944 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\aria2c.exe
PID 3016 wrote to memory of 1508 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe
PID 3016 wrote to memory of 1508 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe
PID 3016 wrote to memory of 1508 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe
PID 3016 wrote to memory of 1508 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

Processes

C:\Users\Admin\AppData\Local\Temp\0dec9b0485007f34490b029822a1022b_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\0dec9b0485007f34490b029822a1022b_JaffaCakes118.exe"

C:\Windows\SysWOW64\reg.exe

C:\Windows\system32\reg.exe import "C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\Tools\patch.reg"

C:\Windows\SysWOW64\mshta.exe

C:\Windows\system32\mshta.exe "C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\run.hta" --sfx "0dec9b0485007f34490b029822a1022b_JaffaCakes118.exe"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c "netsh advfirewall firewall delete rule name="DriverPack aria2c.exe" || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_45717.txt""

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall delete rule name="DriverPack aria2c.exe"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c "netsh advfirewall firewall add rule name="DriverPack aria2c.exe" dir=in action=allow program="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\aria2c.exe" || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_48355.txt""

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="DriverPack aria2c.exe" dir=in action=allow program="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\aria2c.exe"

C:\Windows\SysWOW64\net.exe

"C:\Windows\System32\net.exe" start wscsvc

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 start wscsvc

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DRIVERS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_420.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_420.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DRIVERS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_99961.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_99961.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DRIVERS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_1490.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_1490.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/intro.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_48356.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_48356.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/START-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_67197.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_67197.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/START-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_83403.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_83403.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DRIVERS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_420.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DRIVERS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_99961.log"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/START-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_34592.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_34592.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/DRP_TEAM-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_25659.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_25659.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DRIVERS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_1490.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/intro.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_48356.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/START-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_83403.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/START-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_67197.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/START-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_34592.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/DRP_TEAM-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_25659.log"

C:\Windows\SysWOW64\rundll32.exe

rundll32 kernel32,Sleep

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/DRP_TEAM-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_26624.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_26624.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/START-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_77815.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_77815.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/DRP_TEAM-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_26624.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/START-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_77815.log"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DRIVERS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_6384.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_6384.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DRIVERS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_92184.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_92184.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DRIVERS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_1970.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_1970.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DRIVERS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_6384.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DRIVERS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_92184.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DRIVERS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_1970.log"

C:\Windows\SysWOW64\rundll32.exe

rundll32 kernel32,Sleep

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\aria2c.exe" "http://dl.driverpack.io/tools/DriverPack-Alice.exe.torrent" --dir="C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS" --quiet --continue --min-split-size=1M --follow-torrent=true --check-integrity --seed-time=0 --bt-stop-timeout=120 || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_60245.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\aria2c.exe" "http://dl.driverpack.io/soft/DirectX.exe.torrent" --dir="C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS" --quiet --continue --min-split-size=1M --follow-torrent=true --check-integrity --seed-time=0 --bt-stop-timeout=120 || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_34762.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\aria2c.exe" "http://dl.driverpack.io/soft/RuntimePack.exe.torrent" --dir="C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS" --quiet --continue --min-split-size=1M --follow-torrent=true --check-integrity --seed-time=0 --bt-stop-timeout=120 || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_27563.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\aria2c.exe" "http://dl.driverpack.io/soft/DotNetXP.exe.torrent" --dir="C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS" --quiet --continue --min-split-size=1M --follow-torrent=true --check-integrity --seed-time=0 --bt-stop-timeout=120 || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_61744.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\aria2c.exe" "http://dl.driverpack.io/soft/ab/4/Internet-Start.exe.torrent" --dir="C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS" --quiet --continue --min-split-size=1M --follow-torrent=true --check-integrity --seed-time=0 --bt-stop-timeout=120 || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_96759.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-PROGRAMS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_90464.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_90464.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-PROGRAMS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_50404.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_50404.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-PROGRAMS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_50404.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-PROGRAMS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_90464.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\aria2c.exe

"tools\aria2c.exe" "http://dl.driverpack.io/soft/ab/4/Internet-Start.exe.torrent" --dir="C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS" --quiet --continue --min-split-size=1M --follow-torrent=true --check-integrity --seed-time=0 --bt-stop-timeout=120

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\aria2c.exe

"tools\aria2c.exe" "http://dl.driverpack.io/soft/DotNetXP.exe.torrent" --dir="C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS" --quiet --continue --min-split-size=1M --follow-torrent=true --check-integrity --seed-time=0 --bt-stop-timeout=120

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\aria2c.exe

"tools\aria2c.exe" "http://dl.driverpack.io/tools/DriverPack-Alice.exe.torrent" --dir="C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS" --quiet --continue --min-split-size=1M --follow-torrent=true --check-integrity --seed-time=0 --bt-stop-timeout=120

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\aria2c.exe

"tools\aria2c.exe" "http://dl.driverpack.io/soft/DirectX.exe.torrent" --dir="C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS" --quiet --continue --min-split-size=1M --follow-torrent=true --check-integrity --seed-time=0 --bt-stop-timeout=120

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\aria2c.exe

"tools\aria2c.exe" "http://dl.driverpack.io/soft/RuntimePack.exe.torrent" --dir="C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS" --quiet --continue --min-split-size=1M --follow-torrent=true --check-integrity --seed-time=0 --bt-stop-timeout=120

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-PROGRAMS_CHECKBOX_USED-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_3187.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_3187.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-PROGRAMS_CHECKBOX_USED-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_74917.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_74917.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-PROGRAMS_CHECKBOX_USED-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_3187.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-PROGRAMS_CHECKBOX_USED-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_74917.log"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-PROTECT-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_42967.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_42967.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-PROTECT-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_39246.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_39246.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-PROTECT-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_2885.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_2885.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-PROTECT-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_2885.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-PROTECT-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_42967.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-PROTECT-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_39246.log"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_73565.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_73565.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_48521.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_48521.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_33007.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_33007.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-4.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_3096.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_3096.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-5.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_46984.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_46984.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_73565.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_48521.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-4.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_3096.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_33007.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-5.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_46984.log"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-6.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_83488.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_83488.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-6.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_83488.log"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-CONFIGURATOR-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_26447.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_26447.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-CONFIGURATOR-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_98208.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_98208.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-CONFIGURATOR-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_62588.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_62588.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-CONFIGURATOR-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_26447.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-CONFIGURATOR-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_98208.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-CONFIGURATOR-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_62588.log"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-SETTINGS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_55532.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_55532.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/EXPERT-SETTINGS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_55532.log"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/intro.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_305.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_305.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/START-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_14341.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_14341.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/START-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_81363.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_81363.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/START-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_8244.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_8244.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/intro.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_305.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/START-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_14341.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/START-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_81363.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/START-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_8244.log"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\aria2c.exe" "http://dl.driverpack.io/soft/Chrone.exe.torrent" --dir="C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS" --quiet --continue --min-split-size=1M --follow-torrent=true --check-integrity --seed-time=0 --bt-stop-timeout=120 || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_15590.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS\RuntimePack.exe" -s || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\installing_52517.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\aria2c.exe

"tools\aria2c.exe" "http://dl.driverpack.io/soft/Chrone.exe.torrent" --dir="C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS" --quiet --continue --min-split-size=1M --follow-torrent=true --check-integrity --seed-time=0 --bt-stop-timeout=120

C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS\RuntimePack.exe

"C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS\RuntimePack.exe" -s

C:\Windows\SysWOW64\cmd.exe

cmd /c ""C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\install.cmd" -s "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ver

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/DRP_TEAM-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_20862.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_20862.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/DRP_TEAM-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_20862.log"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\comct232.ocx"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\comct332.ocx"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\comctl32.ocx"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\comdlg32.ocx"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\dblist32.ocx"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\mci32.ocx"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\mscomct2.ocx"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\mscomctl.ocx"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\mscomm32.ocx"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\msdatgrd.ocx"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\msdatlst.ocx"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\msflxgrd.ocx"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\mshflxgd.ocx"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\msinet.ocx"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\msmask32.ocx"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\msstdfmt.dll"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\msstkprp.dll"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\mswinsck.ocx"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\picclp32.ocx"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\richtx32.ocx"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\aria2c.exe" "http://dl.driverpack.io/soft/OperaBlink64_win7.exe.torrent" --dir="C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS" --quiet --continue --min-split-size=1M --follow-torrent=true --check-integrity --seed-time=0 --bt-stop-timeout=120 || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_69046.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS\DirectX.exe" || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\installing_57379.txt""

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\sysinfo.ocx"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\aria2c.exe

"tools\aria2c.exe" "http://dl.driverpack.io/soft/OperaBlink64_win7.exe.torrent" --dir="C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS" --quiet --continue --min-split-size=1M --follow-torrent=true --check-integrity --seed-time=0 --bt-stop-timeout=120

C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS\DirectX.exe

"C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS\DirectX.exe"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\tabctl32.ocx"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32.exe /S "C:\Windows\System32\msvbvm50.dll"

C:\Windows\SysWOW64\regedit.exe

regedit.exe /s VBA60_OCX_License.reg

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\Sysnative\libcrypto-1_1-x64.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\Sysnative\libssl-1_1-x64.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\Sysnative\OpenAL32.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\Sysnative\wrap_oal.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\atl70.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\atl71.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\comct232.ocx"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\comct332.ocx"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\comctl32.ocx"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\comdlg32.ocx"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\dblist32.ocx"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\libcrypto-1_1.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\libeay32.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\libssl-1_1.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\mci32.ocx"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\mfc70.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\mfc70chs.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\mfc70cht.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\mfc70deu.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\mfc70enu.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\mfc70esp.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\mfc70fra.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\mfc70ita.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\mfc70jpn.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\mfc70kor.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\mfc70u.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\MFC71.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\MFC71CHS.DLL"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\MFC71CHT.DLL"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\MFC71DEU.DLL"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\MFC71ENU.DLL"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/START-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_339.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_339.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/DRP_TEAM-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_95452.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_95452.txt""

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-1286926630-2052544252371020962-1425363162501662088-18153850566496866441146335057"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\MFC71ESP.DLL"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/START-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_339.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/DRP_TEAM-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_95452.log"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\MFC71FRA.DLL"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\MFC71ITA.DLL"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\MFC71JPN.DLL"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\MFC71KOR.DLL"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\MFC71u.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\mscomct2.ocx"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\mscomctl.ocx"

C:\Windows\system32\cmd.exe

cmd /c ""C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\set_x64.cmd" "

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-973624595-1368131658246707557652725582-1148828836-15395318201681773023-1370627356"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\mscomm32.ocx"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\msdatgrd.ocx"

C:\Windows\system32\xcopy.exe

xcopy x64\GAC C:\Windows\assembly\GAC /s /e /i /y

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\msdatlst.ocx"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\msflxgrd.ocx"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\MShflxgd.ocx"

C:\Windows\system32\xcopy.exe

xcopy x64\Microsoft.NET C:\Windows\Microsoft.NET /s /e /i /y

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\msinet.ocx"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\msmask32.ocx"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\msstdfmt.dll"

C:\Windows\system32\xcopy.exe

xcopy x64\System32 C:\Windows\System32 /s /e /i /y

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\MSSTKPRP.DLL"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\msvbvm50.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\msvci70.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\MSVCP70.DLL"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\msvcp71.dll"

C:\Windows\system32\xcopy.exe

xcopy x64\SysWow64 C:\Windows\SysWow64 /s /e /i /y

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\msvcr70.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\msvcr71.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\msvcrt10.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\mswinsck.ocx"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\OpenAL32.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\picclp32.ocx"

C:\Windows\regedit.exe

regedit /s x64\64bit.reg

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\richtx32.ocx"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\ssleay32.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\sysinfo.ocx"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\tabctl32.ocx"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\Vb40032.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\wrap_oal.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\Vb40016.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\vbrun100.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\vbrun200.dll"

C:\Windows\SysWOW64\compact.exe

compact.exe /i /c /a /f "C:\Windows\System32\Vbrun300.dll"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/P3-OPERA-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_88574.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_88574.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/P3-OPERA-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_49208.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_49208.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/P3-OPERA-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_49208.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/P3-OPERA-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_88574.log"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/OPERA_UPDATE-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_25897.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_25897.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/OPERA_UPDATE-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_73260.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_73260.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/OPERA_UPDATE-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_25897.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/OPERA_UPDATE-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_73260.log"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/CONTINUOUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_87296.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_87296.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/CONTINUOUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_87296.log"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/ANTIVIRUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_42526.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_42526.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/ANTIVIRUS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_59385.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_59385.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/ANTIVIRUS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_59385.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/ANTIVIRUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_42526.log"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/SERVICE_MODE-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_17871.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_17871.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/SERVICE_MODE-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_90576.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_90576.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/SERVICE_MODE-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_17871.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/SERVICE_MODE-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_90576.log"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\aria2c.exe" "http://dl.driverpack.io/soft/OperaXP.exe.torrent" --dir="C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS" --quiet --continue --min-split-size=1M --follow-torrent=true --check-integrity --seed-time=0 --bt-stop-timeout=120 || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_96498.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS\DriverPack-Alice.exe" || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\installing_84833.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\aria2c.exe

"tools\aria2c.exe" "http://dl.driverpack.io/soft/OperaXP.exe.torrent" --dir="C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS" --quiet --continue --min-split-size=1M --follow-torrent=true --check-integrity --seed-time=0 --bt-stop-timeout=120

C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS\DriverPack-Alice.exe

"C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS\DriverPack-Alice.exe"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/STORIES-vpn-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_56986.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_56986.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/STORIES-vpn-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_30113.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_30113.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/STORIES-vpn-6.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_28177.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_28177.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/STORIES-vpn-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_56986.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/STORIES-vpn-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_30113.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/STORIES-vpn-6.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_28177.log"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\aria2c.exe" "http://dl.driverpack.io/soft/SearcherBar.exe.torrent" --dir="C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS" --quiet --continue --min-split-size=1M --follow-torrent=true --check-integrity --seed-time=0 --bt-stop-timeout=120 || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_63393.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS\DotNetXP.exe" || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\installing_19175.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\aria2c.exe

"tools\aria2c.exe" "http://dl.driverpack.io/soft/SearcherBar.exe.torrent" --dir="C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS" --quiet --continue --min-split-size=1M --follow-torrent=true --check-integrity --seed-time=0 --bt-stop-timeout=120

C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS\DotNetXP.exe

"C:\Users\Admin\AppData\Roaming\DRPSu\PROGRAMS\DotNetXP.exe"

C:\Windows\SysWOW64\bitsadmin.exe

"C:\Windows\System32\bitsadmin.exe" /transfer yandex_games-icon /download /priority foreground "https://sdi-tool.org/yandex_games.ico" "C:\Users\Public\Downloads\yandex_games.ico"

C:\Windows\SysWOW64\bitsadmin.exe

"C:\Windows\System32\bitsadmin.exe" /transfer yandex_pogoda-icon /download /priority foreground "https://sdi-tool.org/yandex_pogoda.ico" "C:\Users\Public\Downloads\yandex_pogoda.ico"

C:\Windows\SysWOW64\netsh.exe

"C:\Windows\System32\netsh.exe" advfirewall firewall add rule name="DriverPack-Alice" dir=in action=allow program="C:\Users\Admin\AppData\Roaming\DRPSu\Alice\cloud.exe"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/WAITING-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_83227.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_83227.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/WAITING-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_52624.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_52624.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/WAITING-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_52624.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/WAITING-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_83227.log"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/DRIVERS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_3780.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_3780.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/DRIVERS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_50408.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_50408.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/DRIVERS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_50408.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/DRIVERS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_3780.log"

C:\Windows\TEMP\NET\WinPKG.exe

C:\Windows\TEMP\NET\WinPKG.exe

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/UTILS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_25774.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_25774.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/UTILS-4.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_77397.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_77397.txt""

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/UTILS-5.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_75471.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_75471.txt""

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/UTILS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_25774.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/UTILS-4.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_77397.log"

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

"tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en" "http://download.drp.su/assistant/beetle/audio/en/UTILS-5.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_75471.log"

Network

Country Destination Domain Proto
US 8.8.8.8:53 allfont.ru udp
US 172.67.209.192:80 allfont.ru tcp
US 172.67.209.192:443 allfont.ru tcp
US 8.8.8.8:53 auth.drp.su udp
GB 87.117.235.115:80 auth.drp.su tcp
US 8.8.8.8:53 mc.yandex.ru udp
US 8.8.8.8:53 update.drp.su udp
RU 87.250.251.119:443 mc.yandex.ru tcp
RU 37.9.8.75:80 update.drp.su tcp
RU 37.9.8.75:80 update.drp.su tcp
US 8.8.8.8:53 dl.drp.su udp
GB 87.117.231.157:80 dl.drp.su tcp
US 8.8.8.8:53 dl.driverpack.io udp
GB 87.117.239.151:80 dl.driverpack.io tcp
RU 37.9.8.75:80 update.drp.su tcp
US 8.8.8.8:53 crl.microsoft.com udp
US 2.18.190.71:80 crl.microsoft.com tcp
US 8.8.8.8:53 mc.yandex.com udp
US 8.8.8.8:53 download.drp.su udp
RU 87.250.251.119:443 mc.yandex.com tcp
RU 37.9.8.75:80 update.drp.su tcp
RU 37.9.8.75:80 update.drp.su tcp
GB 87.117.231.157:80 download.drp.su tcp
GB 87.117.231.157:80 download.drp.su tcp
US 216.239.36.178:80 www.google-analytics.com tcp
US 216.239.36.178:80 www.google-analytics.com tcp
GB 87.117.231.157:80 download.drp.su tcp
GB 87.117.231.157:80 download.drp.su tcp
GB 87.117.239.151:80 download.drp.su tcp
GB 87.117.239.151:80 download.drp.su tcp
RU 87.250.251.119:443 mc.yandex.com tcp
GB 87.117.231.157:80 download.drp.su tcp
GB 87.117.231.157:80 download.drp.su tcp
GB 87.117.231.157:80 download.drp.su tcp
US 8.8.8.8:53 download.drp.su udp
GB 87.117.231.157:80 download.drp.su tcp
US 8.8.8.8:53 download.drp.su udp
US 8.8.8.8:53 download.drp.su udp
US 8.8.8.8:53 download.drp.su udp
US 8.8.8.8:53 download.drp.su udp
US 8.8.8.8:53 download.drp.su udp
US 8.8.8.8:53 download.drp.su udp
US 8.8.8.8:53 download.drp.su udp
GB 87.117.239.151:80 download.drp.su tcp
GB 87.117.239.151:80 download.drp.su tcp
GB 87.117.231.157:80 download.drp.su tcp
GB 87.117.231.157:80 download.drp.su tcp
GB 87.117.231.157:80 download.drp.su tcp
GB 87.117.231.157:80 download.drp.su tcp
GB 87.117.231.157:80 download.drp.su tcp
GB 87.117.231.157:80 download.drp.su tcp
GB 87.117.231.157:80 download.drp.su tcp
GB 87.117.231.157:80 download.drp.su tcp
GB 87.117.239.151:80 download.drp.su tcp
GB 87.117.239.151:80 download.drp.su tcp
GB 87.117.239.151:80 download.drp.su tcp
GB 87.117.239.151:80 download.drp.su tcp
US 8.8.8.8:53 dl.driverpack.io udp
US 8.8.8.8:53 dl.driverpack.io udp
US 8.8.8.8:53 dl.driverpack.io udp
US 8.8.8.8:53 dl.driverpack.io udp
US 8.8.8.8:53 dl.driverpack.io udp
GB 87.117.239.150:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.150:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
US 8.8.8.8:53 dl.driverpack.io udp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
US 8.8.8.8:53 dl.driverpack.io udp
US 8.8.8.8:53 dl.driverpack.io udp
US 8.8.8.8:53 dl.driverpack.io udp
GB 87.117.239.150:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
US 8.8.8.8:53 dl.driverpack.io udp
US 8.8.8.8:53 dl.driverpack.io udp
US 8.8.8.8:53 dl.driverpack.io udp
US 8.8.8.8:53 dl.driverpack.io udp
US 8.8.8.8:53 dl.driverpack.io udp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.150:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.150:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
US 8.8.8.8:53 dl.drp.su udp
GB 81.94.192.167:80 dl.drp.su tcp
GB 87.117.239.150:80 dl.drp.su tcp
US 8.8.8.8:53 download.driverpacks.net udp
US 8.8.8.8:53 dl.drp.su udp
US 8.8.8.8:53 bt2.driverpacks.net udp
GB 87.117.231.157:80 dl.drp.su tcp
DE 178.162.204.29:8080 bt2.driverpacks.net tcp
US 8.8.8.8:53 download-storage.driverpack.io udp
DE 5.9.136.186:80 download.driverpacks.net tcp
GB 95.154.194.108:80 download-storage.driverpack.io tcp
US 8.8.8.8:53 dl.drp.su udp
GB 87.117.231.157:80 dl.drp.su tcp
US 8.8.8.8:53 download.driverpacks.net udp
US 8.8.8.8:53 bt2.driverpacks.net udp
DE 5.9.136.186:80 download.driverpacks.net tcp
DE 178.162.204.29:8080 bt2.driverpacks.net tcp
GB 81.94.192.167:80 dl.drp.su tcp
US 8.8.8.8:53 download.driverpacks.net udp
DE 5.9.136.186:80 download.driverpacks.net tcp
US 8.8.8.8:53 bt2.driverpacks.net udp
DE 178.162.204.29:8080 bt2.driverpacks.net tcp
US 8.8.8.8:53 download.driverpacks.net udp
US 8.8.8.8:53 dl.drp.su udp
US 8.8.8.8:53 bt2.driverpacks.net udp
DE 5.9.136.186:80 download.driverpacks.net tcp
GB 87.117.231.157:80 dl.drp.su tcp
DE 178.162.204.29:8080 bt2.driverpacks.net tcp
US 8.8.8.8:53 dl.drp.su udp
US 8.8.8.8:53 download.driverpacks.net udp
US 8.8.8.8:53 bt2.driverpacks.net udp
GB 81.94.192.167:80 dl.drp.su tcp
GB 81.94.192.167:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.239.150:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
DE 178.162.204.29:8080 bt2.driverpacks.net tcp
GB 87.117.239.150:80 dl.drp.su tcp
DE 5.9.136.186:80 download.driverpacks.net tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
DE 178.162.204.29:8080 bt2.driverpacks.net tcp
DE 178.162.204.29:8080 bt2.driverpacks.net tcp
DE 178.162.204.29:8080 bt2.driverpacks.net tcp
DE 178.162.204.29:8080 bt2.driverpacks.net tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
DE 178.162.204.29:8080 bt2.driverpacks.net tcp
US 8.8.8.8:53 dl.driverpack.io udp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
US 8.8.8.8:53 dl.driverpack.io udp
GB 87.117.239.150:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
US 8.8.8.8:53 download.drp.su udp
GB 87.117.239.151:80 download.drp.su tcp
GB 87.117.239.151:80 download.drp.su tcp
US 8.8.8.8:53 download.drp.su udp
US 8.8.8.8:53 download.drp.su udp
US 8.8.8.8:53 download.drp.su udp
GB 87.117.231.157:80 download.drp.su tcp
GB 87.117.231.157:80 download.drp.su tcp
GB 87.117.239.151:80 download.drp.su tcp
GB 87.117.239.151:80 download.drp.su tcp
GB 87.117.239.151:80 download.drp.su tcp
US 8.8.8.8:53 dl.driverpack.io udp
GB 87.117.239.151:80 dl.driverpack.io tcp
US 8.8.8.8:53 dl.drp.su udp
US 8.8.8.8:53 download.driverpacks.net udp
US 8.8.8.8:53 bt2.driverpacks.net udp
GB 81.94.192.167:80 dl.drp.su tcp
DE 5.9.136.186:80 download.driverpacks.net tcp
DE 178.162.204.29:8080 bt2.driverpacks.net tcp
GB 87.117.239.151:80 dl.drp.su tcp
US 8.8.8.8:53 dl.driverpack.io udp
US 8.8.8.8:53 dl.driverpack.io udp
US 8.8.8.8:53 dl.driverpack.io udp
US 8.8.8.8:53 dl.driverpack.io udp
GB 87.117.239.150:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.150:80 dl.driverpack.io tcp
GB 81.94.192.167:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
US 8.8.8.8:53 dl.driverpack.io udp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
US 8.8.8.8:53 download.driverpacks.net udp
US 8.8.8.8:53 bt2.driverpacks.net udp
DE 5.9.136.186:80 download.driverpacks.net tcp
DE 178.162.204.29:8080 bt2.driverpacks.net tcp
GB 81.94.192.167:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 81.94.192.167:80 dl.driverpack.io tcp
GB 81.94.192.167:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
DE 178.162.204.29:8080 bt2.driverpacks.net tcp
GB 81.94.192.167:80 dl.driverpack.io tcp
GB 81.94.192.167:80 dl.driverpack.io tcp
RU 37.9.8.75:80 update.drp.su tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
DE 178.162.204.29:8080 bt2.driverpacks.net tcp
GB 81.94.192.167:80 dl.driverpack.io tcp
GB 81.94.192.167:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 81.94.192.167:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 81.94.192.167:80 dl.driverpack.io tcp
GB 81.94.192.167:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
RU 37.9.8.75:80 update.drp.su tcp
US 8.8.8.8:53 dl.driverpack.io udp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
US 8.8.8.8:53 download.driverpacks.net udp
US 8.8.8.8:53 bt2.driverpacks.net udp
DE 5.9.136.186:80 download.driverpacks.net tcp
DE 178.162.204.29:8080 bt2.driverpacks.net tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 81.94.192.167:80 dl.driverpack.io tcp
GB 81.94.192.167:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
US 8.8.8.8:53 dl.driverpack.io udp
GB 81.94.192.167:80 dl.driverpack.io tcp
US 8.8.8.8:53 download.driverpacks.net udp
DE 5.9.136.186:80 download.driverpacks.net tcp
US 8.8.8.8:53 dl.drp.su udp
GB 87.117.239.151:80 dl.drp.su tcp
GB 81.94.192.167:80 dl.drp.su tcp
US 8.8.8.8:53 bt2.driverpacks.net udp
DE 178.162.204.29:8080 bt2.driverpacks.net tcp
US 8.8.8.8:53 sdi-tool.org udp
GB 87.117.235.122:443 sdi-tool.org tcp
GB 81.94.192.167:80 dl.drp.su tcp
GB 81.94.192.167:80 dl.drp.su tcp
GB 81.94.192.167:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 87.117.239.151:80 dl.drp.su tcp
GB 81.94.192.167:80 dl.drp.su tcp
GB 81.94.192.167:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
GB 87.117.231.157:80 dl.drp.su tcp
US 8.8.8.8:53 download.drp.su udp
US 8.8.8.8:53 download.drp.su udp
GB 87.117.239.150:80 download.drp.su tcp
GB 87.117.239.150:80 download.drp.su tcp
GB 87.117.239.151:80 download.drp.su tcp
GB 87.117.239.151:80 download.drp.su tcp
DE 178.162.204.29:8080 bt2.driverpacks.net tcp
US 8.8.8.8:53 dl.driverpack.io udp
US 8.8.8.8:53 dl.driverpack.io udp
GB 81.94.192.167:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.231.157:80 dl.driverpack.io tcp
GB 87.117.239.150:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp
GB 87.117.239.150:80 dl.driverpack.io tcp
GB 87.117.239.150:80 dl.driverpack.io tcp
GB 87.117.239.151:80 dl.driverpack.io tcp

Files

\Users\Admin\AppData\Local\Temp\nst2A0F.tmp\System.dll

MD5 fbe295e5a1acfbd0a6271898f885fe6a
SHA1 d6d205922e61635472efb13c2bb92c9ac6cb96da
SHA256 a1390a78533c47e55cc364e97af431117126d04a7faed49390210ea3e89dd0e1
SHA512 2cb596971e504eaf1ce8e3f09719ebfb3f6234cea5ca7b0d33ec7500832ff4b97ec2bbe15a1fbf7e6a5b02c59db824092b9562cd8991f4d027feab6fd3177b06

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\img\installation\drivers\Notebook.png

MD5 e9c35a488b41ffa9645c0592b13c8c15
SHA1 f54aefb44fe34cceae28a808c270fe8f670b922f
SHA256 025e7e8699fd9c246452c6634d4935149baa6a6acadb91b0f9adf52d11a094f9
SHA512 33ab1cace6ff121a34d262855219cfaf22c4e3b94eeacabfd3ee290784c261885a270aec9354d639ccd9bbcba3eeb658554ae440373c43cc8cc35313f7867485

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\run.hta

MD5 d20765817cdb05d0805f682ef9193386
SHA1 5dcee6bf0aeb0e5ffc9500a5d0bfe93ed1302cdc
SHA256 6d61529ce3e58354a6476c51aaff4b28e4ddda2433108376ee5f736e78ee1a04
SHA512 46a030efe7f87f625bd93f7f6487766b78565f9b1b7004d3afec5072969e5f7d93a46f3b446ffbaf0b3cc1a9d837eba17c3d83b07e40281082a1152a8c08a258

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\Tools\patch.reg

MD5 d49db2ec30494b46d332d516cead4969
SHA1 3d9ce116afe59760c9a1c149ddec92a2f92a0028
SHA256 c86ef9ed6e111d166818e8e0adb3cf5e2a3a5dfc6edc932abc298141ed6f2208
SHA512 1314c6bc4095e445c930c0a0a94a83ff39670081ed916337eed2f74e3453702ae0e0187c0e6c933d52868d80c36e9acbe558faf86f10146d0a825b97c3bc261d

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\DriverPackSolution.html

MD5 ef5e55c1187442b6278452429b93ef85
SHA1 012bc5f42a31ccb817e12457c50d8ff51450e33b
SHA256 ba9168498ea0e20f95d9c1c67cfb9e4f79e0775db8aac50d2983494316e38281
SHA512 d8e20e220d156793d2c2da462c36cb9708396c2db08faa876aca7fef63bdcd6b7d31a6fc7d78659f682ba30cf73ab7b565a1f9226e434deaa8f86f7f9341c3b8

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\css\normalize.min.css

MD5 e8908cf9cb9504b285327d240187f53b
SHA1 20eadf1695eb38bcd92d1706de5335db61b96502
SHA256 86235e2c477078adfe1188d07ca1e5d8198443aaf2436de1785a169f3e1d5463
SHA512 9c828e8942d40da89f33d1db459a7fc12621660331bef307df8649e89758e76b044bf97a2cd36d656915e19a8b04f571cdb61d7cb6f926a3ba151ee67bbcdc4b

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\css\roboto.css

MD5 f5f5b5e4955262430e7b496247425d2d
SHA1 d4bea186a0d525ce3060e8dd7901311ae4a0735a
SHA256 2537efe2fb974f58cddbc99abfcd7aed6e9df81992eed3e528b5f1748167b8fa
SHA512 16a7ec3d95ed773a0a1ce2c2dc4430677106f0d1042e34cb39ed48f4a495f637ec3eefad05a4ebbddbea71a67e933fa0b56e6beef69700c6e3ac9cda9c17e7ca

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\css\open-sans.css

MD5 9ed298542b45ef98492e159f68e89f48
SHA1 c4521d9a5dff8a71804c40a909378e8eb5bd66c2
SHA256 b9bd51ae6ccc7df20417e0ef341295b86bf8f74f6e235ee99ddefd675806f47f
SHA512 1c7d5b378d6c627fbbef864035b157c3e7647b699a50d64f6ebf22faac38bf774e0c025bc8dd4ecc9bde7b377b729bc89bf6fbac4d2409240e2d03753cfe680e

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\css\proximanova.css

MD5 cf0c65f6d17307ccd7914e984ac86a6f
SHA1 4fcef85545731123eb5e3e1886817f8014f22e21
SHA256 58a658fd04bb4aa2ff90ff7125ca6e1775b1a9d053e2cfa44b8697990f9f134e
SHA512 0f171b8839385cd192d10c5c06e1b2284e6f2d7d74b9a9d7559252d1b63b8f94c670aa5225e80a5dce9056e92e0fd1506754c6f94b74703a02b7c4687d4976ae

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\css\icons-checkbox.css

MD5 3be98220035017d9b818f3cc94f87587
SHA1 bc07f11d0a59f942ac942dba02214a7041ad6e3a
SHA256 cb134dcb95a407795c671a512c389894d3525fba3f6a2168fc5b9b7e875e78dc
SHA512 d2e7d57cb7b7e771c82c75a04fbfb86ebecbb409ecf2c5666aeaa99695474a7985e3367f6a5b3d4ac59f775f60fb084efa9bdda99ce3c077df2690a5f0a6b1d1

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\css\icons.css

MD5 ebae852f3327fdaf3e2fc2bf1cdecb8f
SHA1 f9753fe176069974fc9bce49eae877745282e183
SHA256 b5f111103f7f090c246a223b1ff497b94c4dd3ac64bf5b3fb2d91555fcfd6f2c
SHA512 bf8e7c5db7a1eacd4344d5facfee1cd66e883389b53bc28e4e387cdb67ea40ee26266ba4282e50eb50a7bc3c810d9fdbb50792a46135761b2e8ce52ddc9e394a

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\css\style.css

MD5 56f7f26870409fd4928952ca73d66007
SHA1 10383d748386deadaae752edcf0b7a39e9609d48
SHA256 3d09c0356af5403e0c5e0450fd1581b9e01cadce216c2d37450ff84350b004d0
SHA512 da83aecf7025ab1798648c932c59b00b8238bf3c2ec476078b761ef38f4c8db8a353cf696b7352ced931ef1f66ec48de69ff380f5a2c86546df926887e9091cc

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\css\custom-control.css

MD5 f7f8703ada2176dc144343a2c2acb1cd
SHA1 091334a48056a8baafff0cd672232de1c1f6c838
SHA256 7d7853e95258a7a3f8eaf41795f7124e7d2dacdeb5f1efe212b3ff7ed0da9e50
SHA512 27d46472c06103e0bdd9d40149804c16f469305752c3a6d8473c2f2ab22b2c8fa5d65d61dda7c617a3f12d8526b56a10320b8683f31d210ac2185fd0daed8e97

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\drp.css

MD5 776944f023f16e729ab02d8a7d24b877
SHA1 80d8dd12b9d4242d55c0a9a0b15cb6e63e1178d7
SHA256 578dfaecd5cd9d6a072c383b784840fcc789a687e0c2013b04e23a135458a05a
SHA512 2a4f62ff19148881aae0228e0ce224aa5c43f61d273548010b81a2f9a0f91ca06f95eb525b45b9f5c490ed789bed123cfba7451c7942f92f78a1e7729ce7ae2d

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\drp.js

MD5 b7674027589c6a154ab53fde901a6092
SHA1 43e7f020a9ff7723b3aa49e95d8865d9f8e20e76
SHA256 d6e4d36dd48968e7fc1e83ce57b4411dfdaf6c6c359e682bffb027432e199d32
SHA512 f6156c1b973e6d0849f7ae894bc346839c315d258f5818dfed886e2e52cf5612b1d55e2f7178aba71d0bb81b26b6fb5689e8aa9d1d043f9b72ce44895c445ab9

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\config.js

MD5 e6f4bc31e1a7820cbe3412c418a2c7d5
SHA1 5d257254c6cd68c466ee352f372eabb62fd3180f
SHA256 7eef38152220cabab121f551d92fe40b850c41065653b9d43c021de73bf6c6d2
SHA512 e16a2aa03615ebfcafa3f88ce79dd2d52e6ab1379ac62a0fa72b8ffa948851dd07b561ff3c10d411d692ff19290ec829faac9e91e261135e8c79d8b10f73d982

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\css\fonts\ProximaNova\proxima_nova_light-webfont.eot

MD5 ee9163c34f600221169f8ff531e97182
SHA1 57f0b2c837c94f2a0df47ee62b4639fd6426bfa0
SHA256 53f30a622db68cebe92dbd384cc292aef13ad7e3349a10a77c29326e10634c21
SHA512 d51e2a5f6df706eaa2c5ffa071a9a9c08e58a30b4af64a1ccbe81f8e9c38f20429df665cabaf295129490afc639b7e19c0fced428610a284a17899c3290904cb

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\css\fonts\Open-Sans\opensans-regular-webfont.eot

MD5 88a9c629f26f8563a72eac95cb0744bc
SHA1 484bca13532678133dc14a668c580be2c1346526
SHA256 3ae576bfa96d7cf6614c8c97290c7abe03191a8ceb0c837a21e7ffe70d66ca62
SHA512 b4cdaa3a5a46ef368e9138c9874aa1173b466bc660d5bbbd13fc3f10f509cda9af151a2667ecd079935d60992b1436f6d5843ced5a063769e19e67f84c402af9

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OORQXHVT\allfont[1].htm

MD5 5255b05e221a2ee9e73b8d9ca6eaa4ad
SHA1 28d5fbabcdcc49246e71721c45d49a0dd025cb0b
SHA256 ed2ae741d3478834f11bdecc1f4a8e179bc295a99e489936befac5ee4eaf4cc5
SHA512 59941bf156a18037f99367a8455137ffaad3ca0d2da6b3b604e6d17caa4299789b463908cf812e07477aee07e7a6fd4b7fcbad598ffb48d57a76a018da368e05

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\img\screens\new-logo.png

MD5 fafd3d362556a1f9e8cddbdaf26c5356
SHA1 04797d778ba3fc7ad4cc4485c7070297f6efb796
SHA256 efa3de8589b68a4ca83147ed77a67bc6af449928368aab0f740d81c11d78dd90
SHA512 3f532fa1677b50931fe98e9d0addb49c47784ae59a13415b3b91c05366c24c91a89f944a6675ca1feab123cc8d541739094bb25ea115372ac81233b1bbd9014b

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\languages\en.js

MD5 8bb7025aa724821a5b709bb286334b9c
SHA1 6f06df61c235281b5886501f086fcbf4cdfc11d6
SHA256 dd7efa9a1b16f5d316e1d865fed11a8a8e77f774d8b0c1b10fcdde62a0caa98b
SHA512 06b6bef399be0e4d19554b6e0b0e93295ce8bbc0c8c5db5ced945bc1651203b9802290ad4c021f4c4dddb22c2b45618767586025f4ab94d4fac50721aea32260

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\img\installation-loader.gif

MD5 753622cdb83a6a695b5e98d7410a3072
SHA1 aa08f1e0ffeea39d3279d5fc8c0f490458b4966a
SHA256 30f1b256b3c6f1b99a240ef7054cc5894aa19f1cd5aae2b977fc5beb9923b556
SHA512 849a4f08728901d4cd907b06b043e250e8166af09f343df3b127302eb5a66ebd4d127384c87d3b18efd27fc964f92e4d2fc9e928f69c40a96dc6cf9e8071ff33

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\css\fonts\DRPcheckbox\DRPcheckbox.eot

MD5 96d44740679ffaf2e5e1d2a8a75c48ee
SHA1 d7b354e3524bea85e065675d61e0d37c637c87e1
SHA256 c0c660ec085e958acdb6dab93f7df3b8c2375df26399ba9c62c79a14f4a23c58
SHA512 32f60040c4ef1d3e8a7c46f1d078ea0307bbf948761fc053ea14d7edd2dfd41fe6cc2506bed8d0a2275105cf0370592da12c0159824d4de174f7d5e003655ee6

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\css\fonts\ProximaNova\proxima_nova_regular-webfont.eot

MD5 e5835857d5dddda8d5f0725a386a2d0e
SHA1 4c92001174816e973c374986e52af2428af2f6b6
SHA256 750e86dc4965d1d63216327777239692fcaf377106e0ed9e3b1e73e7eb89b2a8
SHA512 4eee43c691475031bc219bd6bd7001128b62a22b69b89e7668434318b72db61942a58ee85ab49f4864abebeb451b68145543325f1d42840dae7f90b7ea363dd9

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\css\fonts\Roboto\roboto-light-webfont.eot

MD5 889478bc69a9cfe7ce00665a2d307606
SHA1 54ad4852e48a7e4762531fe1dce91b2b95dd5406
SHA256 1ee590bcbf3a5f0c1b70e93ab1332e6a230cd44dc21fdd87b80d7e8bd3ba1499
SHA512 ca1be8f6816206b0fcbd1b131a09424a7ab6c0fd4bf40d1643dde00f9d73fca6883add523ab27fc956d4d0244a4495bc6b6291eefb1ae59ea998e0b67c7fcdfc

C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_45717.txt

MD5 02466847c63e90c5041b8dd7990dce27
SHA1 fdcf71f16e2efcb8815730b4cca5f580b185cf5c
SHA256 195418a93d769a17558aa804568eff487979e62d0731aa8c63d8d0ffc1723321
SHA512 86b11957db369afa71831c72848b897aafd155887467a377484d0346dcaeaac88476cad2331e34a24e7f8ac3a07335dd1e639ae27bfa0d4491dcc6a48a7e6ff3

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\tools\driverpack-wget.exe

MD5 bd126a7b59d5d1f97ba89a3e71425731
SHA1 457b1cd985ed07baffd8c66ff40e9c1b6da93753
SHA256 a48ad33695a44de887bba8f2f3174fd8fb01a46a19e3ec9078b0118647ccf599
SHA512 3ef1b83ea9821cb10f8bc149ec481d1e486d246a0cb51fe7983785529df42c6fe775e0d35c64a97f997cdf294464c7640df392239b96ce1be6143ce8f07b5a8a

memory/3028-557-0x00000000022F0000-0x00000000023DF000-memory.dmp

memory/3008-575-0x00000000024D0000-0x00000000025BF000-memory.dmp

memory/2548-577-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2780-593-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2448-598-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2520-596-0x00000000022E0000-0x00000000023CF000-memory.dmp

memory/2724-592-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/1500-591-0x00000000022D0000-0x00000000023BF000-memory.dmp

memory/2196-586-0x0000000002360000-0x000000000244F000-memory.dmp

memory/2696-585-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/1700-584-0x0000000002360000-0x000000000244F000-memory.dmp

memory/1700-583-0x0000000002360000-0x000000000244F000-memory.dmp

memory/2684-574-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2176-573-0x0000000000420000-0x000000000050F000-memory.dmp

memory/1508-563-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/1944-562-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/3016-561-0x0000000002390000-0x000000000247F000-memory.dmp

memory/3028-560-0x00000000022F0000-0x00000000023DF000-memory.dmp

memory/3016-558-0x0000000002390000-0x000000000247F000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\img\new-logo.png

MD5 0e5049c588bbefe19a5d6bcfcf20c10a
SHA1 7c7f7fc8af7794c72daa971b3049f1feafe3ea1c
SHA256 002b2c4a348040e3e5eed6fb9d5093566d30cef11133714c7f497e64e96c0ec3
SHA512 f6ed35782ece1de1fb3976c8e2157a9627043b2ae09a1563b78afd31676fa8e346415938715631c912886dd3830cb323ab71a735c13bafb6b8e620409239aaab

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\img\screens\start-info.png

MD5 a87c23821dfbbb5bc861a21c5987e335
SHA1 115461478fb9d6ec2567456613bdf4be391ac9ae
SHA256 e8bde3293b99ca7153ed9bf241e03351b9a3badf7354ea259a29aaaf7b591245
SHA512 833d7df71720bed7c41b23b638b484c4810acb0d3211eb89f228b9957e1de34bcbb3bffbd48b5b0106e21aad14ed5626fafba06a8c819617ca5b80b43be84cdf

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\img\screens\arrow-start-screen-toggle.png

MD5 9b148314e780c750a8f1086541de48ab
SHA1 abb43c5860a5818822bbdddc12b884ac0eff4c3c
SHA256 42fb6d29d67faf063a74f54246770b28917314aa1ed91aeeeb94cf5e6d8d2c18
SHA512 d0c83bf80ae446faba496cf56e70a0c743c38c10131e39fcecd0feaeefcc7490538bf3fc686b695a76e913bfb24a228c4bb1252f3aac39d1c2375b040e20d593

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\css\fonts\DRPicons\DRPicons-webfont.eot

MD5 d85a00ccb58d531afd9ad80a067fbf0e
SHA1 0a3c0cfea5b9c0fdd5f17a1df49cb1512316330d
SHA256 0a04d85875091cc334f63b90c8ccfa0838f20023945d949296363369066870e3
SHA512 bce1796d0c71291cb779e2e99399a213b030663d5968330932b4a059ba48f3679e2df9e9c84201efb090a44b499bc5f46d174ad40b4b1d3afb5df5d2f3299261

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\css\fonts\ProximaNova\proxima_nova_semibold-webfont.eot

MD5 044aa0b596161750cb58aca15c52cf38
SHA1 d40e645b34188a54d909fa40f7eddeefb8b9df03
SHA256 790579e11608136663d073bc6f99848c04b4dcd69216df7daf5be00df573a3fd
SHA512 1a3b3abc614a7ddf673e34a936de63809f8c18a86409364b2bbdeb608fbcd845095ba7cfb34a0826e2ac18cfc5ccd4d47d4bfa13fae3caba7fbc4470d36c8086

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4JZQ5QLK\collect[1].gif

MD5 28d6814f309ea289f847c69cf91194c6
SHA1 0f4e929dd5bb2564f7ab9c76338e04e292a42ace
SHA256 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
SHA512 1d68b92e8d822fe82dc7563edd7b37f3418a02a89f1a9f0454cca664c2fc2565235e0d85540ff9be0b20175be3f5b7b4eae1175067465d5cca13486aab4c582c

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\sync_cookie_image_check[1].gif

MD5 df3e567d6f16d040326c7a0ea29a4f41
SHA1 ea7df583983133b62712b5e73bffbcd45cc53736
SHA256 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
SHA512 b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041

memory/3028-658-0x00000000022F0000-0x00000000023DF000-memory.dmp

memory/3028-659-0x00000000022F0000-0x00000000023DF000-memory.dmp

memory/1944-660-0x0000000000400000-0x00000000004EF000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\EXPERT-DRIVERS-2.mp3

MD5 009af8af189f6446d8ac3552dc659623
SHA1 77878aa1bb829fcf950fcf0bacd0b5f89e44fbc4
SHA256 9f35f0dbff0fbd1362b8f221550bf9d63e5d30ee8487bb47c78edb1661a52b9b
SHA512 88fe7b3bf30ab34976d5f9ead3dce16861c19810bec70c32a7e651d75842390b0a024bd40ad070d0bf5665b4ef62795f03acaa8070aee2f79165797624bfc9fc

memory/1508-665-0x0000000000400000-0x00000000004EF000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\START-2.mp3

MD5 76aaf0ec221005a029f871f74e091a72
SHA1 091671daa5d51fd57ea0aab700fcc2ec363554b3
SHA256 f99cdc39100c077170d63352ede27206dbdc439ac985de1a5752b8360d989a12
SHA512 fe333bd11826bb2c61eb1b80ea334127be8d1736b76bee12932cf2ed97ef5e64f5dcdf06800fa8c425c127e68e891670794d27ad9e42defe959bb9823bf85c8e

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\EXPERT-DRIVERS-3.mp3

MD5 4314c886eb7bce481ec3209b96fad7f8
SHA1 e365140263b4903945d6b20926b3b1c66c8d6998
SHA256 540abfdf5e2894d09dded9dfffe2d1be207b484f32f8e0aa237aba52142eeb8a
SHA512 9f83709548764477e812157b86fbd0d958b189861b59e8b2f308f734be04f15f8b82938c178b4eda5ee23c12176791f3792ced856ab3f2fd4391513ee37eb706

memory/2724-705-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2684-703-0x0000000000400000-0x00000000004EF000-memory.dmp

C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_67197.txt

MD5 d0d964be87663c957866cc96319a0f2e
SHA1 5a4af1923a1aa9fbdf7f92e9afbc2e47a0297e7f
SHA256 9a25234ae91ada142892f61bb4a52640d8854872909068b7b1c307a8e16591ed
SHA512 6f4ded4aeca348cd9234ca0ab1db569338793c586e086db06580a1a879c0c62258fcdfc25fe80d7da376508edd9f023d07183ab89c70ed8663d338ac4163b1e1

memory/2548-694-0x0000000000400000-0x00000000004EF000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\START-3.mp3

MD5 1d67319175e862dd3ebcc415ae18692d
SHA1 6e0327f63b1c5d97aaf1c1e9d51430084c053ae5
SHA256 30895985c3858cd2f60bb1571904a07aae67e8d3b49bed90dd50408d90acceda
SHA512 0358f58871eb33c89dfe85473569fb1ea30a3395d892d42c8bbf0b77ff7178d7d7c4eee2b6b4e941355c073d05235cfee435700417443a6419f03df08805aa3e

memory/1944-691-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2448-688-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2780-685-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2696-684-0x0000000000400000-0x00000000004EF000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\START-1.mp3

MD5 a418fcd9166bd7d125af4c2239cbac01
SHA1 4848c54f7f244decb420cb6d5d8a9c3416030afd
SHA256 aa8ddf3226fc79b6c30f0734010be378623fdf22835a8b828bc7f7ff4d74dd10
SHA512 61fb80ad45a06432598db24367db7f5e5bf379cf60c286d17d4390fdff931c70e916708aa3a4e78f572c9b861bf5abf0c8e6b8f6fa880c3504e008c65520b76e

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\EXPERT-DRIVERS-1.mp3

MD5 540072f31fd5aa996268425beac11da8
SHA1 2aee0efdd9ed72e969a1bfa8bc4c84656f972f80
SHA256 1f19a45b24a98014ab4821a1c80b1d2120f54e24cf2517b73f015141d6aa98ed
SHA512 477fa6616ce8a55f5e6e7d0e28eba3e821189a08edc11a238b1066a4ae0f4930c85c5684e2570110f30cd04f4db5ecc230c1088a511f46ac5b8fa2168e72ceb1

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\img\screens\startscreen-slider-oval.png

MD5 9b06a737f28b265084ebaa8d58237cbf
SHA1 298d77f9bdc9002efe1b87884d051695cd32176c
SHA256 df6597bad7ce5ff019a0cab296b4933dbdb502af4a59a813a4fe281e4dc562e1
SHA512 0dc37fd759fbbab6d8c4eff67f52e8f097043e826c9b8180449ce3309c60d770059f0c6225698eed1119a67ee08f79811c019b60552bfa7cc8922d1e3cf381b4

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\img\screens\arrow-top.png

MD5 c88c78c9dcf11880a801e44e705f9708
SHA1 7b98255e87f81c3a655d375f112c188d9bd241a7
SHA256 4f2785a950320440acd22fcc0274944b971d5975de008f69bf81d19d44842925
SHA512 ea1fd00c23c7abdcdcecfce5d93b1946763043bc18cb17846ab3ecb607f19a7ede63ca5308cae6e2395053b223a4e438111cb6170264cc42c817130bd178ff4e

C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_420.log

MD5 6d432ba96e6db9b2a879335795539535
SHA1 1a313cbd1b6956d98c1264e1031aa1b3174470a6
SHA256 65712363a25026f6516e2f2d031fd8d71a32bd247de7f84b3bcab15572738fa1
SHA512 95a70f35c589f11b0a292a14fc272d42fc1dd2ea8c2f05f4655fceefaf89a90ba393ee686350e7db618262fedc26078d90a27e6f975fd046337ad8faaff07c55

C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_1490.log

MD5 9e5e252bb6a4bc3c9b0a431a2391e8a8
SHA1 8a23f2acd7b2f8ecd393b9d4ec6b0b50fb6cde37
SHA256 5281bd6156ceb8dc583e54e2c2c94ae2c83c5ec9328212f057b6cbec6c5ccf8c
SHA512 c06435c41556246ffc596b0d17a3028404b69f62c576b5a053d52a5129cfdc78ef27ad79f687f4f48037682048de511d2df4d931eecfda0bec90237fd162279f

C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_25659.log

MD5 baa3b1566124e3379ae9c5e856f382bc
SHA1 43de35785f423babc96567967d9362446c3bc4a4
SHA256 2d6922afd72fa31c9069e51b066022647c3119556acc556115d3bc81eafdf03c
SHA512 cabf4192205fdd91ea6d77ef143886e827562b223d763f9aded77eb563e8465974a81fdbf7476becd2c40c8b4f2a668d5b13c36338de86b69e339ba327b78e26

C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_83403.log

MD5 378bd2dd0bf8486a8e2b06766b225ded
SHA1 98cd37b1d937503cb3c2b3bb910c923115a49b5e
SHA256 ab6c022dffb453cd2327c132e1a7c7f27410e15a2e16cac460e17127dbff37c7
SHA512 d27ed8557dbdb3d588d77e67962c901805c51b321ccb4d9ebdae8559a9b59c39a6de5070291c1dba9764a34cb7f19abd1d687174ae2fc15ba1fdf91d9aeda581

C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_67197.log

MD5 8810113d6d73f49e235287bfc6685fe2
SHA1 50eed8eae92dba741e199c4f7716db22df0ce981
SHA256 4918e11ad008183e95dc709a199a19d50e3bbd74a2aca6c45630ce6b6b97ec71
SHA512 c5380fe945e88fb7fbd823b80f9b5c75c2fa6680dd8b5b11cc0390737e9912920638fe3635dd81b66e2a81b5659e9935728142d4ff312a6083e6af6253447e4d

C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_48356.log

MD5 fc4d27b243f109eca3ae66c7d5e89f14
SHA1 8104f5ce47590d339a58ed62ed11e161bf07108c
SHA256 697ed9fced0bf7edfb8ab7543cab2226735fdc11c74b68c8df23c687da34a40c
SHA512 8f5ed06116d569a7bc0528d53604423678d999b4c1a7e94abd3e29f1dd4d47c3ce4227821f4386f2d706e804c4f3ac010fc50bac123738e4e81c89de73fc8e85

C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_34592.log

MD5 410e291ae997a555c68cc0af6266a895
SHA1 abe8030b111ac5dba1561ce2813541d7ebb187c2
SHA256 8a5ba1f9a18537bfa6e76d89748fc18312dacfe94aa9cf28e4e5826a9876ea07
SHA512 ce51dfbfc005be8eb187e60a87a48152677d5532f9aab89a59bcf041acedf54b0ba206dc28e1f796055232adf6e93e1c6ac95e661f16234b0cf94acff09a0fed

memory/2532-728-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/1452-727-0x0000000002470000-0x000000000255F000-memory.dmp

memory/1452-726-0x0000000002470000-0x000000000255F000-memory.dmp

memory/1912-729-0x0000000002370000-0x000000000245F000-memory.dmp

memory/1912-731-0x0000000002370000-0x000000000245F000-memory.dmp

memory/1568-730-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2532-740-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/1568-743-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/628-745-0x00000000022F0000-0x00000000023DF000-memory.dmp

memory/652-747-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2972-751-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/1588-750-0x0000000002490000-0x000000000257F000-memory.dmp

memory/1588-749-0x0000000002490000-0x000000000257F000-memory.dmp

memory/2556-748-0x00000000023C0000-0x00000000024AF000-memory.dmp

memory/628-746-0x00000000022F0000-0x00000000023DF000-memory.dmp

memory/916-793-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/652-791-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2972-790-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2420-821-0x0000000000160000-0x000000000024F000-memory.dmp

memory/1528-822-0x0000000002490000-0x000000000257F000-memory.dmp

memory/1528-825-0x0000000002490000-0x000000000257F000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\EXPERT-PROGRAMS-1.mp3

MD5 f5d09d70c6d2a65691a2a81ede02e67d
SHA1 11185e544d995b3038afd0935b85185b8883e69e
SHA256 3a5402536eebf3a5c29ca1e80cb756f9eeacdc8b09762d9a67f344019ceb657d
SHA512 91341667b3b0bf254203fafd1b8144910557ab8a7d7c6e4cd71fa21489e49d4914e5fb00ae571e2e981e520387cb83621ad222b831eb0abec8cc1a199b57f68c

memory/2692-873-0x0000000000400000-0x00000000004EF000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\EXPERT-PROGRAMS-2.mp3

MD5 a75bdbf4a6eaa47f072ecfb9365680e3
SHA1 8be8fb77603f01c593864cdffe74c227b52502ae
SHA256 a28895c390580f1c9748a6daa1ab37d92c8aec2c395e5484d180d5521a830dfe
SHA512 04b40a64ace4804a6529e1999cf48c33964afa55345d998390a982157c7625a2312d52c79bec8df75fb46f3cab32304dbfbf432141b8c955008218ff26d2e5a3

memory/2216-879-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/500-881-0x0000000002420000-0x000000000250F000-memory.dmp

memory/2164-892-0x0000000000130000-0x00000000006E5000-memory.dmp

memory/1516-891-0x0000000000130000-0x00000000006E5000-memory.dmp

memory/2408-893-0x0000000000130000-0x00000000006E5000-memory.dmp

memory/2924-890-0x0000000000130000-0x00000000006E5000-memory.dmp

memory/1244-889-0x0000000000130000-0x00000000006E5000-memory.dmp

memory/3016-898-0x0000000000400000-0x00000000004EF000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\EXPERT-PROGRAMS_CHECKBOX_USED-2.mp3

MD5 c32b72662de149efdde414c6f62b755a
SHA1 219b03d40974b059bb3a162f61c2aa1446d0fa51
SHA256 a5062cbc572ce18afb6e590a74a299f288c593de995841c13981c25a5cc3fcf1
SHA512 f57805be7b781fbc160cabbe2594f3f0aaa45d74608eff486ec077b065abcd87ced756f60ede04d1c9b55bed2932fb7fceabc56e22aa80ec719fb62c6247cbbf

memory/1924-904-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/652-910-0x0000000002310000-0x00000000023FF000-memory.dmp

memory/1524-908-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/808-907-0x00000000022D0000-0x00000000023BF000-memory.dmp

memory/980-911-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/652-909-0x0000000002310000-0x00000000023FF000-memory.dmp

memory/1632-906-0x00000000022B0000-0x000000000239F000-memory.dmp

memory/1524-927-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/980-936-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/1176-937-0x0000000000400000-0x00000000004EF000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\EXPERT-PROTECT-1.mp3

MD5 1c404baefb6d12a0792fc622b2d68cc7
SHA1 564a16fe633873ee52161ff439162bae299c3bcd
SHA256 9545c34922b77b59a2fb172bad55f064e14761cf213b89061164cdcbdf8963a7
SHA512 8af7ebf97b73182306e96e6f98a6103ffbb3f8faeee032cd1280326ec2607018c868822114bb4b9527692c5377880d280a2387067bd5a63e2fbfc22752a57ced

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\EXPERT-PROTECT-2.mp3

MD5 b93826701c603537a71054bca4cde2f4
SHA1 28e4e28877a3fc864c42072770e604790656d98f
SHA256 82d48381d03dba7f4a566420a4921553c6aa15bc6a22bc6e08bb6e8466af8274
SHA512 8231dda9f00aa4517f2b43d55df704296615bb0022e3a04c779295382ea3866f194741b77838fc516cf1f4d1ce59801cb80a98ee010e9b3a719bb28155e3b6dc

memory/1564-943-0x0000000002350000-0x000000000243F000-memory.dmp

memory/2564-944-0x0000000002380000-0x000000000246F000-memory.dmp

memory/2420-942-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2692-945-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/1380-941-0x00000000022D0000-0x00000000023BF000-memory.dmp

memory/532-947-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2352-948-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/1532-946-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/1876-940-0x0000000000550000-0x000000000063F000-memory.dmp

memory/2352-974-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/532-981-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2692-986-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2420-990-0x0000000000400000-0x00000000004EF000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\EXPERT-DIAGNOSTICS-2.mp3

MD5 7afb5dcd2817c489e3a501b6e13c9729
SHA1 87ed1fdfd13c41d3e5afc9b9d2f9a5d843e79bca
SHA256 37570e3dd380a1c779db17d7b4ee8b0ca4a25a2302f7112f087c7ab7dc7da517
SHA512 3bd1eba015c363e685e1f7f916c7f522459b4d1fb6e8be678516180d460405097fd4f568c4cd70123fb434037e95ccd607cba36c388283286c9e1a9a98e95aad

memory/1532-997-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2596-999-0x0000000002260000-0x000000000234F000-memory.dmp

memory/2596-1000-0x0000000002260000-0x000000000234F000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\EXPERT-DIAGNOSTICS-6.mp3

MD5 ee7ef721982941fedb8891f5778c99c0
SHA1 e105c9f19515e4238c3f0380fd6b25c5dfc0e886
SHA256 0116eef284c5228183cfd27992eda255775e5ea88b4e7739f2779967bd1b6fb8
SHA512 922c9fa44da70cf40e6de1d2c644db838fb78c0cc0ea0a89dc1c467ae66378aff77eb2302625b1efbb70108beaf7cb3d67c53872693219496b1480aa92e11022

memory/2588-1009-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/1700-1011-0x00000000023C0000-0x00000000024AF000-memory.dmp

memory/1072-1015-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/816-1016-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/1700-1014-0x00000000023C0000-0x00000000024AF000-memory.dmp

memory/1952-1013-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2460-1012-0x0000000002410000-0x00000000024FF000-memory.dmp

memory/1072-1044-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/816-1039-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/1952-1038-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2856-1048-0x0000000000180000-0x000000000026F000-memory.dmp

memory/2964-1050-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2856-1049-0x0000000000180000-0x000000000026F000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\EXPERT-SETTINGS-1.mp3

MD5 c71332f76d4e33dcdb1702b6f65c4b0d
SHA1 df6151eec74f279e30fea571e26e1a37f39a6c4c
SHA256 c924ba594bd39760e0939729a27a0bc201f61f8f2edc5123e4841f13cb7c5ccd
SHA512 f69e2b356e619de01196f8607043294fd143a5bb224beb7e72eba484107e1350dfc0b04df64186bfcb9ba96041ebe01b5566dd6af6ca3d902ef56ed6a3218361

memory/2964-1059-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2232-1072-0x0000000002360000-0x000000000244F000-memory.dmp

memory/896-1075-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2232-1074-0x0000000002360000-0x000000000244F000-memory.dmp

memory/1876-1073-0x0000000002310000-0x00000000023FF000-memory.dmp

memory/1276-1071-0x0000000000400000-0x00000000004EF000-memory.dmp

memory/2844-1070-0x00000000022A0000-0x000000000238F000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\intro[1].mp3

MD5 691c1edc79b032ea6d150fc291b7613d
SHA1 56049f75783bbed2aae6d03eb91b752bb16548c3
SHA256 8fcbf2cede0ba798aabc145593b273d3c76596ca9bce0a3138684fa7b416359f
SHA512 df1623c1542bbfe3ca2e6505d46538e6ec0eebbde8d712e03d32e8c22aa2a5e62b8369a3ae9263139f0e523826c15749c188b2005212ce6eb2e033054fdcaaa4

memory/2408-1096-0x0000000000130000-0x00000000006E5000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\install.cmd

MD5 35364c85c52a67d49d59a010d2588247
SHA1 16b5d087a625f86a8906d62943cd109dd461e34a
SHA256 135bd8395ff08553815ebea4892331e801d36e2c601d1ec82a55ab1bbc6bb0fa
SHA512 9ab44039bd8e9c4cc748c98329cacc475d241345c4a934ecd875d0023115ede4a1aef7b93d299dbfcdc00ce9a9133691022ca39490744bb84d3388cff78e7c91

memory/2164-1430-0x0000000000130000-0x00000000006E5000-memory.dmp

memory/1952-1434-0x0000000000020000-0x0000000000027000-memory.dmp

memory/1952-1433-0x00000000770A0000-0x000000007719A000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x64\Microsoft.NET\DirectX for Managed Code\1.0.2906.0\Microsoft.DirectX.Direct3DX.xml

MD5 dae21601cf373590e5ab8eb13fb79b7a
SHA1 bf15bbbc72980a5a506a8333f150f9cbb73bb35e
SHA256 59986eba5cb424d9c388a2d23e4581ae465d3ff767eee913f6cd07dc1f9e7254
SHA512 c9d0b272634cdc5f6dbbc4789789d1d9178df9e90cc906be90326384699d49e69ac095a802a90d02ce84f69f7f9b0412ec2f3582709100912e23f344bb1d0d4b

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x86\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3DX.xml

MD5 fd193c64b3fbf6210d4eb6aff167aa04
SHA1 ef593c6935e75e55d0badd0f6405d05dadb4eee3
SHA256 80423d7cfaa5945cbad4cf96b65724c398ed503b4ff70b6951d8609987f15f7d
SHA512 559e9f49ea94e0daebc2c78a48cea6ea8ab81cff12a303a39fab82e22554daa929392f308047575726c74760f891fe8f9ca6f0569689647d8f4bbd1070744b3e

memory/2924-1769-0x0000000000130000-0x00000000006E5000-memory.dmp

memory/1516-1770-0x0000000000130000-0x00000000006E5000-memory.dmp

memory/1244-1766-0x0000000000130000-0x00000000006E5000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x86\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll

MD5 7ad4d9fabd109432eed91b359ceae430
SHA1 c1dcddd86f9fc630cc0231acd7b732fd55dc5f63
SHA256 f3359d5e41b1d4fec7230579a593e40fe44f6afdfacd1e2bbe52ee06d84686fb
SHA512 bfeaba581a7aeff86bac0c184da823e4a26516a3c4f39af6b6b1bfced73117f3816c567b182f4da0df1935a6e97b6d0520cf02f518736b52fd27d37750e863fb

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x86\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 a73e7421449cca62b0561bad4c8ef23d
SHA1 cf51ca7d28fcdc79c215450fb759ffe9101b6cfe
SHA256 7986e3fbe05418fe5d8425f2f1b76b7a7b09952f3ec560b286dd744bf7178059
SHA512 63d24647ac5d0beb8f1284973927263cb6e05b4c399cda3912178114b42d541dd516c6d67a453ea997d9d0cd9126a1802678062f0951c2547e1b445ba50dfbe4

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x86\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll

MD5 c0843f0f45edeef233b1e581ae75e3bb
SHA1 04569c78868eaa8927ba64f93312720117152843
SHA256 8c9685959706750091b0094522cec8644de1d1c6309e7a2fe02cef130d3a2b9c
SHA512 8fc293f5c5de65893d92c54f921c84f8a3f44fc733445dda7907ee09d062371ef05c11d014ba2017fd15908b911d0185a14b89d0a311a870fa33650c3176e442

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x86\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll

MD5 75933586afd94ea24c5acd3dbc89a272
SHA1 970fd4b49d1368330c10279798991b901a233c2a
SHA256 406f473429573e9f0084aae125ef8f19f59291aa4c33cf7d40e7d996995a3238
SHA512 c096f0f11fb306c6a84886826306fe9c2862c3c79b14a8991a174224b41c2a68b76e5be506494d23d354384c715c5d82a1cacffff9644de9d6b93e9478087a1d

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x86\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 5e2b8b8a5ed016468716b9ff82a1806f
SHA1 f1772121149d87745738cd471d0e504301a9ad0d
SHA256 5b70f0ac40a38c903062a12ff7cd71d907e75238a044ded9b34fb51e9a9a2799
SHA512 4620c9bafb7dfaa8d4351d0d99ae3442ceb2220201f16bd9bab4fbeb1f411fd63d4f0e79abf6e762f4d0e62d42608fbeebd13943ce338eca59ad1080ea6c2728

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x86\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 ccd53738df4fa27849b6bb05dd67d10d
SHA1 28126653a3d1b4574fcb0c09176f5fa0ff28ef78
SHA256 c29d337bf7639fbf424b34cc0409d2715762e1b4d82881fb524a2508381c9f62
SHA512 aa3a10504fbe49a4c44151beec7d9b543f4b89a51621fa60810f385bdc8a6821e4bfc37cd46f3688013f6f4facd33ab45bd0deb4a1fe16453e1be8f11f2119c3

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x86\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 afcf5f50c632f3a5598abc28f196d77c
SHA1 294385693592f9d6320f8b0b18f45bc194d01a4d
SHA256 5e90089e69e4f7e2e42ea4a81fb62005c3710d0a4acdf207b97ed03f5641d013
SHA512 29746ffc665051e13386e452c3e41a593b6339e09a228927929be100cddb3e0e0fd3b54abe02eb7d46a3d97466ecb02bac362398b72fd8e804cbb21c8bc856d9

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x86\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 fb3bc0754921873a65f5fbdca845e6ee
SHA1 67cde5bc8577cd3040e275d290ac021874da9fe8
SHA256 f500c350dd71df7452b92444e19b4644b04283434a6557123f1e4d9fb078c3f8
SHA512 292b8bda44e6ff6449c4b38da9b8317491c0f0da3d1e5f7947741de27cc51bbc078fbf947c89c4be3a0b54f7066f0480990d1de57919edba3414aace77c47635

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x86\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 d3f1922325be8e7e1c72bfd8179454ce
SHA1 89134f43ce2af4adfbc4087392aee6fe56be7ff4
SHA256 8418941d8f1d4c84288e0bf54392378dd3d87b602bb693ff4f8a633022681c12
SHA512 d33f513ff6c199acabe86eca6dc06d56c330ccb78be4d13fb6b1906a3cba3c93afe982b05cb057f2b88f6e6637452f4d99d4a4fe6f3f7c473de9e67a40758bed

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x86\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 43c280c3b15ceb2472ab560d09629664
SHA1 e3a897d7608d03c93b5c2b8aef52703452cf6696
SHA256 bebbc40ca25ef22e9d16b0de1123e0cb0444fe7a78b4f0b4395bdfd81618698c
SHA512 5229eef9153b992684b6dcb4a32b231c63322b5e4b49ef262228c0dcca4760f97cda5d15a7fcdf77d813eb24b359101e716f72988374106ace13473f27e731c5

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x86\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll

MD5 0c453970e89db1c1eb9de087e6eab5ba
SHA1 c4c7e034773a240909332814f499730575a1cd71
SHA256 942e98f142373547493f13b14e1603b2420851aff013d3085bada7b6b2214d9c
SHA512 ef3b2cc2598b4ea58f00f93155319674450c8c35b706108ce3bbb5c2502efa179046d9d50e12725e6dc7a555f4880404ed03de15a0753606f20a1654799886fb

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x86\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll

MD5 d035348ec8968861af585b7132fe4c7b
SHA1 877ffdf77b9cdc1be14135cff0b756a231401617
SHA256 2e28c8fb8b87b5ffd1e0ea27710a2e785ef4741a89e4b3c3af726ec63d15a1fa
SHA512 94358b581510c68049ac92990674a6cb495cb8ff005f7fc03696c57ba8b4cb384c5035d9332d0ea39093ba5fa5c8082143896cd2fc7ac24a192520789c707458

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x86\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll

MD5 46f26e2bafd44960e7f13b2ef80aa0bc
SHA1 2277bc8980e0f6c3672c2348b0494f0cc0ad611a
SHA256 489f65e1e00534835486e9255eec92b83edae4dade6dff867a380859ae53006a
SHA512 5b5147940803bccd0184b46e60560f967831541e707b5ef19781103e31235f1ba05d00e44a6f2ed061ebf5dd7013d9c696131a3edaa77d3aabb85b3255ba5489

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x86\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll

MD5 cebd995ddeab2c525a5c4e95789bc961
SHA1 1c98da39d7eea36d73b361ddb24054038c2b8331
SHA256 0ee2a2c371a918cabc85143202864d0c3a4abf1b93a5029081a622e0acf17ab7
SHA512 158b3fe6e6605eb56a99b2135df529226f9af4b001ed0c2e1fd201a60054e2201dc22245ee5a02c6e7778337f1974ee21fa088e94b13a7402e61f64658de49a1

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x86\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll

MD5 d9824a9dd107e598575112b4ff897292
SHA1 adcc54d159f1eeead01dbd2fbc73c808ce519920
SHA256 ff4c03bbeb292317a77c86c1c81ae9564acb984b352fbef36d66e2d8bcbd79a8
SHA512 caa1f0411e0470a315ee8c7a62defa972ff17557bcfcf74016c64ad11b0f6fa46a126131a18e275e59e025814545e1d7ffe145377f6a0bcdb8cc93471e4c9bd4

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x86\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 25c76c1e29d3e8e7398f0901f558a629
SHA1 2e907c9688a025538f1b2d0cf1860a2ae49fd2e9
SHA256 2ee41d4d591a39d648e90db4d47d0fa0557fd68197756ee2ee94fcde4d820cfa
SHA512 7308fd91859d00debf446bd6b594f3ea196dbe46a3583858c76d2cbb008a8698207f1ce7746afe3de4efb9a27980f5f813c77cc88e273fa82b2695d8f3d15039

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x86\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 933085360527de1b4947289ca468184e
SHA1 d5ee5e1e3c992c7518b5ce510c627c1564131b12
SHA256 78d85f0e2cb7d7bde534222f4ebfea1c9e06d37ecd3bb7ebd59e35f00b94b11d
SHA512 2e22398d7cdcd6a46daf3dd3478d861bc4012ba1b54862311ae031ebcd3f908352157cbeea528f22ef1824f8924c3f217311feaf1804cf675eafc07a8d3962eb

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\x86\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 490807c150b7d8be44bde871f4df8c56
SHA1 69b68a5b8cc3f3e75aa2ba284654ca58bb62f23e
SHA256 36a21fc4f4c8f6ba4ad900613ee1b08ff43f2545585a2601c9fc4cf083d68a77
SHA512 9442e26de55009428cc6e747637c2cb64bd2f008541ccbb37fed4e83ff66845c7cf3874d93542e0ba544e2db61f4864b665b7720568eba284beb095489f3ca64

C:\Users\Admin\AppData\Local\Temp\7ZipSfx.001\set_x64.cmd

MD5 80533f8a7b9241d9ebd14ea5f93b9e13
SHA1 3bb90809c92a801fdc73849894630ac08f3f18c1
SHA256 d72fb04bf4f857b7fafa4e83b6cbc34144085a828c57e145a81c44dafd2aabf1
SHA512 8fea92005154f3a9d2453f7e6f83f975e5b39f85a686de54ba92c714160a04ee031e31c65480905ab41ee83037e4f79b8fd6d116b2c6d85fdfd509d3b85fed9b

C:\Windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 7866a243265a231fa4290984da12cd44
SHA1 9c8651c8f063aeacf3203af685f10be914fb7368
SHA256 ff62666330d163eab0582feeec358d382e21d3f0f8ed1e95e3985eaea5d3aa19
SHA512 078e90045529485aad753d015892979766f15d5d646e81c8f3c52652cc593ceef1e07d6815c237c887aced2538973ba3d1effbc636f2f645dc79c7e0225a86be

C:\Windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 c973006748cdd83902293cf8648e9e1a
SHA1 bffb718abd99df9e09383e8bfe866ee8f5795b96
SHA256 01cc608547fa882f3f987995b9305e97fa42df68a6a09b34749e71fe7952391a
SHA512 343d3c807cba496d9a0179e011d9596b18ae03e3259091e4a5e61b01e8fa2d855cc42782182bfabdb38ef8811337de9f8f3d9a89614e86ff9ad16aca0fd0d52c

C:\Windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 bd5f8ed7db39439cf5f23f9b17642add
SHA1 457279a0853dcba20ba279073eee26b21acdf6dd
SHA256 15d015cd42c692024f004f47a8a6ba7f32408759091d7b06ffc897596501d605
SHA512 1b185c12c676b0aff9b1d3de43d9137e1f83e332b4e63edb14a1b307494db344c618a48f7d2e10d99502e3beb90c57183affa4add01dcbebdb5c9df324d6ab95

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 fb36a55567d3dc3a1f409f21663bbf95
SHA1 2cb2e4938bae2eb85d72dd18b0849813611d710a
SHA256 8cd1fc0c30badafb40b2d1b92e1d595dcdf77303ab6949670c863b12f3a7a574
SHA512 5f1635a5eb217515f2d57dee55a3859795f929d1cf6d452dd273c638ac28eb6ab41906d29db92e4e423f3ea8a984437746ed0ae4c4c1c95309f7739adf24f341

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 fc0a052c477b13aa39659e77f999dc2e
SHA1 df3c61c5f3750b47d10bfb59bf18df854a4b9e56
SHA256 c6ff432d7b3ee5a9115e40f6165e314ffb81450589861471ec209cdb7e3f46fa
SHA512 ad49a3b020d7e5de2252cdb4a8eef5b676bd56e15622f94f3d5de957813d853f6eea211001c949c5c3cacd90a21627048596ec153039302c567f597d5a18ab37

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 57c181887f9615f478974f2453da6391
SHA1 79c6003cf265a915cdeb42d09e5667dd4cdbf2e4
SHA256 339e418d4899b874eaf3961d0ee7310047289c3337884a03a85da1033089e087
SHA512 354ff81682e6ffa612b2ce5fa1a8a4a0a73a23daa2e586fd98f15aaa5eac85c8a4713e7012b6f79b948f42f33a925a9f4919d28f5f0feaec1849a3c5db221e25

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 f5b344a085acf8c0c4c79cf96d8eebec
SHA1 65369857e2e186739a79ea7d5f8432504cfd34e4
SHA256 7f37df5cef25aee3be4e6c8f751e1c7278acc2f8b7eb0bc2a397706b0b49857b
SHA512 b224edbb97a04f6b614b64e860989d797286c204a538ab649e81b7209d6874cfec5a3983dbca449a8d147c7ac5d1e6874598105bbbb4df1c761d576dd795b0c8

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 774e147457a2860bdd3c642200782f5a
SHA1 ff2b8976a35b0a4e7e1f5d374250af31766c58e4
SHA256 ae898cddeb8583fa47284c516f504780e94d4c95715cdaaee4519e7b0e5e27ff
SHA512 0427cd6da27d38dd06c872ec904f266b40281ab550246b6d5b5f4a362255505c62739dba95f301db39dec55417ede926a7323c20e6f8d598d4affe44d3b91a81

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 e82e4d729fc6cd877b684cd1a9f09b86
SHA1 a0c0ad704dbc2a5e7c34026d83356fa2e5f8207e
SHA256 4c03cbf640aed9323bcc8754d3f768fe43b3680d102831851e8bc128b2d401c8
SHA512 114cb57f0ccd383c3604bdd8a7bd7fc3b26e11dc3ca0fa49677f58994c5845ae1d993e51087af86ed069c0c36a805086b56882a1641d18e6447163caf3c11d4a

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 b0a0b4c6ea822081e8f0bab3e128d9e8
SHA1 28ffd78b77e12e8430cd6006108ddb6f6844f746
SHA256 b73f07b7f096c68f6125a4a7716f356001a6b38e34905bbab32e359fd51815a6
SHA512 b58579a0d7ef8c04aeae1eeb83021aba56101b0a29ad008926bf5a0b8512561e64b899ae99f45d5841635db66c4c47b56f724d673b2f0da4e49ea19b6781c30a

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 76de838aa6630e1fb9a80a247cd9dafe
SHA1 9d814858d6c8803b5f0c89ca1eff1b928f12ff2d
SHA256 4b5975251c01ce562b9fe70029988202344d007eb7072279f2bcc61b05e954ef
SHA512 0585cf62b06f85f3616180129a13ca2b16ae61178f177edb90ce5056d8e17dee6568b080f22e1a95b341f7bd6b24a1c246444055a7041b58e65f6c5e38e2de3c

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 826acae54859bc7ebef2d7ae90d2f1cb
SHA1 9af30d84b7b0be9e71f9c218c2c5d7c1a5067404
SHA256 593a2113d7760c8895b906c27d1c320904ea46fbec32c58d8253598227e20261
SHA512 34ff1702318eea40708b88ce027d2ba99381469c49f3f377df2d918878b35ea2e9f36a836068312668d2914f403f439ebd506246832190122fd8c60a6bdc70ca

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 43bcecd239fc92367edc41ec971e2856
SHA1 f4f70cd9bc9c48ad326b877804c048a9fbb1d48a
SHA256 2c8ca5aaeb3e271edd054d6bae44d70f9d7ea362bc970c1cd8fdccd5b35defe3
SHA512 feff79f78de879a468b8ab2b3d45eafe617ed3de57b78381ce269c4b52775b6cd9422d3e4565d59344c04f7a8949bf694e4f4bf376f8bbfa338029fb4fe994c4

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 05a965f18b8d7b736f0543f96b89f6ca
SHA1 1004dbfb2128eedba659029e699b4a596f429a44
SHA256 5d0ec650a3bb39ab54f38a3ec8f932c0a50e559c7c1fe3f389bae0768753b1bb
SHA512 a48922987ece729f39ea5e0acc99265173065d609e1ae262cbe4ff8bb07e09597ae827f2ebd4ac946b1a3b745ba0ce4df540431c96d444c8368ff97dc5f1e25d

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 2ab0e13dee96f5ff207e4c1bd415808f
SHA1 1248234624cac470c2f87d36b37ba27fe5eef856
SHA256 b0f47ccd6d6f710eb77c3c04af0e9461b4d5501b6d7310d4aa79cb6d6088eda0
SHA512 989415a9624818d646972c1a21a5d65d64a7ae1d70e3221168e23c5ea6afea4bc727d1fb2853e6f1382de159f49eb34ee11a28c0077a3c8f2af79b26b5f0767d

C:\Windows\assembly\GAC\Microsoft.Ink\1.0.2201.0__31bf3856ad364e35\Microsoft.Ink.dll

MD5 dd2eb5e64619613c4c108cfb192f4950
SHA1 158036cadccedb7b35490c23e550310385c9c7be
SHA256 338edffffeb28aa47aabfd58d328915a6f6263cc9ab379c7294bdc5d544871b5
SHA512 d2c47b83aeeaf6404273d0ca2dafff7e8e2215d928b9ce7d9e8dc1d36119e29cbc7f2fa3e16300b7785d6c20641f4cfd736b71c92d2f54cd38397d385b1a6460

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 a50d18a73fc028effaa5086deb909a2a
SHA1 5fb3114bbf653a477203f0dedd113fa30d8886e9
SHA256 2c043baa80c15f29808c0cc4dc557aff6cae9c376081b945e52243d165a08611
SHA512 62e7d03239cfd6f551bc2966270272638d24efd9e6476c5f6ec0b42ffb6293efeabe74b3c3e505ebf0c03785957b949c7428bda307c31b06e7ff5ea0f4406f88

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 c80e82d19776af5d22315123d29006b4
SHA1 88c3915b369b47b7ddce4410f0127c6180dbe526
SHA256 ce6dee8ca0192b6638746b84d4f0d129f3fd6e11454713194c5438c6436daaf6
SHA512 ec8a6018f5d46efc04eaf24acb8d042da2b44deb378b8b01c1d0b3c544a58a6f81f3b73e8519a3a32d3e8ae0308877744b22b2144d091381026020c813390d20

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 2323e8c944d85a1a3e6d9ef78ca7b092
SHA1 0fba85daafe22779da77c8cfb86569c38ccb5518
SHA256 e20b067fc4e29dc4a467187f085d89d19fd1dde0da9b19e01955af4086d9e0c8
SHA512 2ec8f383debd2ca772867b77a501cc932a1b437dc42bc0a478704c5b0bf153ce419cb0152eaaf1d6d807ccfec66319116c460f4584c7484269e2159a2b773351

C:\Windows\assembly\GAC\Microsoft.Ink\1.7.2600.2180__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 faf707724a740277714e33a65f4995bf
SHA1 f5d715d9d59d6bd7a31567125d32332fe1886854
SHA256 4e2a4865e5bd54c77473e00aca185ba9aedfc7e067e437648df7dda97dccdb32
SHA512 c7f44573df66be3e88fd5f9c2a08491d5c1f4333cfc9fe401d7edf0797a8ee850a0d3f2dcd452bee3f1251d54ba58dc69ac4ed8f82ed0da8f0fec680be9342a2

C:\Windows\assembly\GAC\Microsoft.Ink\1.7.2600.2180__31bf3856ad364e35\Microsoft.Ink.dll

MD5 a02ee61542caae25f8a44c9428d30247
SHA1 067495dd6a6d722757ebd94f269ef15f4198a239
SHA256 71b330cffc2bde77bd77c254280c8a9041ac98a9a7868b21e09e0fcd3953e672
SHA512 37f4516f998a4a020ac18ec02f083a4132d100794f0bd3e02f8b8dea8846732e460cde34d62d6b89030ac1377d573af598250ed9708ebf42869025a1e7248e92

C:\Windows\assembly\GAC\Microsoft.Ink\1.0.2201.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 3a74c27634435f509dc024feebe670e5
SHA1 1a83169ce6f0d2777568afad8480b9fb45543d4a
SHA256 8fc184471e8229e04bf9b00e12d92ac12e18c8c430c46503b36da1a103314ad5
SHA512 e09f16fbbd781342cce59c15278b6d10f69f5a838db6df44d20ec400d4ad283b07a1b06e8e6522d8f9fed8698fe6437a997b71577a9f9c3213b2a7c7d73069de

C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectPlay.xml

MD5 ef20b9e7bab9ec215addd96faffce4ed
SHA1 0539f00904baea079f1c8310e1f7ada0035820c8
SHA256 5653483207a6e0e821afcbeb9c9ffdb7130502c5941f8df55a1d1dd29564aa03
SHA512 4a9bf7712417034066962f639534bccb619a720ffad2bf8b155fef744bb575cc6b74e426ea5716afad8f8d645886a5b083cf548588efdca60c4bf605d3e6dc96

C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.xml

MD5 e7de298cc763712aa289339f2a18f4b6
SHA1 c9b7200a33fff144fdc98d81f8a9ab521952b0c8
SHA256 8600ecd86af17dca452991e55d7f54db97d9a99d81418016969677ea3ec96abb
SHA512 ea9b81bb18fa966695bf1ed06158a2cea3730540b1fddb8ef2668f61cd053d52ff7cd75888477f1bc3c6c84c9a38e81490ad29975dfa1c4ac5e6005cd0890cc1

C:\Windows\System32\D3DCompiler_35.dll

MD5 b21427edf0449e92000ff497daaf89c9
SHA1 520c94fcdfc585a4d327c7c8cca0ee313a0020ee
SHA256 b82f096607a52b76f69a2db03392e008dd60a7dce74665b0e09f5593ba7ca7ca
SHA512 79b56fa1884500bcb5c728fe38a5135ab752f346d976a02a7c9043ca990eab54ca0e21ca688fe9a1246525cc1b21fa1985e77b645769a6dc444165ef13c284af

C:\Windows\System32\D3DCompiler_39.dll

MD5 7741a0a6ced6c441b97d625b730d6075
SHA1 3208ff2450f303e618c7ed62cf1036d03a2cc58c
SHA256 54f4f734dd149ef9ee8c999cc3d7858082b85c551f17fa08553cde1abdee3c3e
SHA512 057089bc7ba1faf974ae69dd29e6952f32c773b40393f405910058ef7e3a49c85e11f97dc5f535452c58a109bd989a7dfc741293baaba1d42d0b53cdacd34d8f

C:\Windows\System32\D3DCompiler_43.dll

MD5 ada0c39d4eacdc81fd84163a95d62079
SHA1 207321f1b449985b2d06ed50b989fa6259e4eb8e
SHA256 44c3a7e330b54a35a9efa015831392593aa02e7da1460be429d17c3644850e8a
SHA512 1afc63db5d2030b76abc19094fc9fef28cc6250bd265294647e65db81f13749c867722924460f7a6021c739f4057f95501f0322cdec28a2101bf94164557a1a5

C:\Windows\System32\d3dx10_36.dll

MD5 570fdae7041775de0c67747bb7081939
SHA1 45d29a908817c835099ed6bbb6af744b2f001cba
SHA256 6b632dcf9ef779d72855eeb1bb4676ab922ffb9204f7d587475477fa2f51be4a
SHA512 c4c2627d3667e1080dbbe5ab0b6d252bd2c52e39d2ec0540b4103359ea9bc223a9645f971d79683db04b0419ffb750e1e49e5ac8e10dff8176a88d422f169909

C:\Windows\System32\d3dx11_42.dll

MD5 522749761b6cc69f8630f4b472dca623
SHA1 f454df63abd6832cfa591878c9132f78a1ec58ce
SHA256 fedb54eef0fb7a61514fd4273f5f13535de1082f55bfb5f7b05a1016f495dcdb
SHA512 8b45983738aaa6dd061472b09363c4581fea40f2bdddfd813ad9a7b39d7f2a75cb8379309602132f1e6fa20e87b1cc3d9f59797e85f5f192575d28f72fd51a85

C:\Windows\System32\d3dx9_31.dll

MD5 faaa0bb9cd2905b25334132e5ba093eb
SHA1 d31aa0bd82d6c968b882c57091252190d74458a3
SHA256 84167b7df7e97c63f0cc15c1d272cdc7bba942f6f36a8801aec9840825891d0d
SHA512 dee1fccd5af1d0dbd470f94efb7fd18776b3fc9bba3f977c0b401cc8fa25776367b7eb3acb585b790b27765b9daf88379712d967f3b56410b2db5ad3292319f2

C:\Windows\System32\D3DX9_37.dll

MD5 8a10974dc6e1e42bdc635c2c2afbd2cc
SHA1 d95971e1df5d1438600f0787e1b76a8284e25af0
SHA256 8c1d75b01208b59fcabfb389df296e00a58713322f00112fbe80aa7b6221708a
SHA512 f7c134cbee9d1c82522fd1662fb34f415ae555c520375595337f82b4d6dece4b501194d6295979b6dba721b14d5486da82a95fde9cf2cc2418166401f566f2b0

C:\Windows\System32\D3DX9_41.dll

MD5 ecddb13bc805b9f3ef3a855e6fd85c69
SHA1 d4f348defccee8e8a0a8e927081dff1f4c803dcc
SHA256 33fd649d5b6e90bd7b7f51d1431ef3501772ae985e320442e5fd750e4368669a
SHA512 4fda199679141fc6c7f77754aa55cd94f6690708916053f98933bb6f40121a371dde61fc8934d8639a564d39b6eb0ec5ab3502fb72c68959de1cbbaf43aa3bc4

C:\Windows\System32\xactengine2_2.dll

MD5 dc5a914c34eb12056531777d4dd0f44e
SHA1 cd77b5c8485fbcdb8bd3db5ab1c66006d3904686
SHA256 7b4e5938f1f69e5b8aaa8ecb479245b5773786192a47f9fdf6bd8eccfb109b83
SHA512 07c56e7754f179f72d5193a826221a02c6502803437cebaa8ca0dfa9f3c3488a28b4b45b551943c7094a6de402979c37f477b8bd5e19cbe63cba7197086b5ed3

C:\Windows\System32\xinput1_3.dll

MD5 bfb3091b167550ec6e6454813d3db244
SHA1 87e86a7c783f607697a4880e7e063ab87bf63034
SHA256 756cad002e1553cfa1a91ebe8c1b9380ffabe0b4b1916c4a4db802396ddfbef8
SHA512 ce2ead2480a3942081af4df4baee32de18862b5f0288169b9e8135cc710eb128f9a2b8a36bda87212c53fd4317359349c94d38b5da082638230dcb5669efede9

C:\Windows\SysWOW64\d3dx10_35.dll

MD5 f3764552e45880dc49b82f38699aa87c
SHA1 25e347799bb3f36bdee30aa78cd9e59c7faa5add
SHA256 db775655fd923e29509402556f86002dd9aea062cdcdba7073e1057a67b5ce50
SHA512 7e52bbfb4f309b9f5a9632efd3dc28a0509b7d5edf471267f7e794ce8479dd8cefcb29535327a7384bcc25b5331ff87c223fb70fbb5da22fea3c919ba4c5444a

C:\Windows\SysWOW64\d3dx9_32.dll

MD5 26af232140c88b42d92a88f2198edf6a
SHA1 b62aed3f71d8963227e5021c2222192873ce753b
SHA256 e96693794daa05a75a83c11df2e7b42f2de61567c6ad0b69e353b50f6c88119f
SHA512 54a6a235af4dc3f3c693fba5ac2d487d96c9d7a2bb7deeab35d5a252e723e597226ec84e953625c8808546f91fbcfc42add85076846a63925fd9eabc09dbf935

C:\Windows\SysWOW64\D3DX9_40.dll

MD5 eea5e428ce63804f9b12d21c97b5968f
SHA1 77a7f48f4bdb7e66ed5e524bb8879e3da0d6cd1d
SHA256 16fd909aeb68d0d1aca8529dc7f78880b97d6649d70ce8d03a2c858bc28e216b
SHA512 545518dabd82441ddfc17fe1c1cbd7d14603bb58130de1307a31f73b93ca42afdf25dfcf481f0383c4e039edfe4a88ae7b84b06a2850c29bbc3550114e499c73

C:\Windows\SysWOW64\XAPOFX1_3.dll

MD5 30686ece80545e06d78d156eb9f7d463
SHA1 b257ba4ffad8003fb7d12e9babd3cf4e88bd52f9
SHA256 b05ad9417028b9777f69422caa01ae9fd22c7bfe542bc6e7de2649e28a4ea643
SHA512 ca03bb01d8e2608517462597076bfa96f4b2595c33b2635d80e4348ac3926e17c93e5db30d7e43c30277cf8ac07f982a0c729f83a00df8965993d4f0758eca13

memory/2868-3120-0x0000000000130000-0x00000000006E5000-memory.dmp

C:\Windows\SysWOW64\XAPOFX1_4.dll

MD5 e4ce2af32f501a7f7dddd908704a0ee6
SHA1 9dc2976efb15b6fba08bebdeb98929b6961063a5
SHA256 0aee44b12913a95840ee6431d90518b0d72c54a27392e21ee6995e2151554a06
SHA512 ec14a58414d595a36c6b575cdae690f11481cd3f0b35fd2f4c6a6d162a6272882cfe03da865e09a34972775790529f51c80b69056a2fcb909f25b549ed2f7f01

C:\Windows\SysWOW64\XAPOFX1_5.dll

MD5 8a4cebf34370d689e198e6673c1f2c40
SHA1 b7e3d60f62d8655a68e2faf26c0c04394c214f20
SHA256 becfdcd6b16523573cb52df87aa7d993f1b345ba903d0618c3b36535c3800197
SHA512 d612e2d8a164408ab2d6b962f1b6d3531aed8a0b1aba73291fa5155a6022d078b353512fb3f6fff97ee369918b1802a6103b31316b03db4fa3010b1bf31f35fb

C:\Windows\SysWOW64\D3DX9_42.dll

MD5 c6a44fc3cf2f5801561804272217b14d
SHA1 a173e7007e0f522d47eb97068df0ca43563b22bc
SHA256 f8b9cfab7fffbc8f98e41aa439d72921dc180634a1febca2a9d41a0df35d3472
SHA512 2371844bc86cdce2d1933625b921b982c4d1b84a39698b51180b09a2d45732407d721fa01d294ca92a88777607a1bb00283f6bcdd4231137a388216d0b09dd5a

C:\Windows\SysWOW64\D3DX9_43.dll

MD5 86e39e9161c3d930d93822f1563c280d
SHA1 f5944df4142983714a6d9955e6e393d9876c1e11
SHA256 0b28546be22c71834501f7d7185ede5d79742457331c7ee09efc14490dd64f5f
SHA512 0a3e311c4fd5c2194a8807469e47156af35502e10aeb8a3f64a01ff802cd8669c7e668cc87b593b182fd830a126d002b5d5d7b6c77991158bffdb0b5b997f6b3

C:\Windows\SysWOW64\x3daudio1_0.dll

MD5 4e961525cc7ff0e5d7da19e170b7c14c
SHA1 7e3654ef7f7c9524ff415582f1b066f29b4234c4
SHA256 228dfece2b4555a243a73e7bf461036f1e53951977625651ff5a59deaeaf4b88
SHA512 8785d0b2188f36d53c1a2b99a669d6edff1c0c27905d5bda1615a503f115d5b0762f008481145cb0cb6a2589926543b9c8ed0ecc2e328593682e39b90fca2087

C:\Windows\SysWOW64\D3DCompiler_33.dll

MD5 fae7e1d578c42a7c3d9d61a99d178bd5
SHA1 8ac88ff2bc5f616ed284a04ddcbaeb72fb1f304a
SHA256 12e238af4b4edc1f774213709a87a91b77b2c9d2d18fe475b027872923b6fa17
SHA512 75107c64acfb6d84e1b05ba78377dc4699ba83b694b7ace474665c85f3e5843db6d06348fefed539c6c2b233775c7ef81d7bfd81937207e04e637043633cd0b9

C:\Windows\SysWOW64\x3daudio1_1.dll

MD5 121b131eaa369d8f58dacc5c39a77d80
SHA1 d8fe20cb6f28bc5334ae64a8df3563d1985beb9b
SHA256 ff15f14174a5543f028fa49cca745582fe4cacf3bbe490749cf43444690ab359
SHA512 ffe19ffea137603e5401f133d461b30af6fc25b3affb8a8ce20b98e3270de398b9ecc83a6cd904ff42c5885d3806c7e175957bf4a5827dc2f067756a51bc40db

C:\Windows\SysWOW64\xactengine3_7.dll

MD5 4fd7bcb9d8af6a165e9ba0c2eb702e7c
SHA1 a90863632c2d54dd06e01537744a7b65bb3d0db2
SHA256 d7b1cf58898046c430d49cf8f778e4898280f4709340c3938d3139894166fe8d
SHA512 7fcc435d07c434ec392bb9bfa98aee20b0b1cd2ad6a31f073af80f6f37639336349728c9b0fcd967c4c395fc40c0efad1e36142fe7632512b0f26aca1b1c4bea

C:\Windows\SysWOW64\xactengine3_1.dll

MD5 2e0e25252e1d41752876e9fe12ade175
SHA1 d9de3a83235166a4bbc4bc356419c07aaf3e3f8c
SHA256 088999560171c60129c95f9b541852392602561dce43e4c61a453d48065f52ca
SHA512 a4555cbbde372893c564e1fcd707525c92fbcfb6915354b0062474cc47fe36ef66a3af212c08da117f2f2121698e556633f8c399199344354ce0d4cea4d0a2ca

C:\Windows\SysWOW64\xactengine3_0.dll

MD5 8a83673f0ab001870583fde2b004fa59
SHA1 be8d312b359a9b8f9f184d78c93c762cbc46e321
SHA256 887329745c479ce8d3023c969adf66780dd7e51ab536f0a08550ba4c77066c20
SHA512 583c73590d4b90576955783e24149125615b135f5bf5a815674e2546b93a8f89f6c3a286df09257e547bcfa8c0bc399abba59fb64158b411a83f28a4a4feabca

C:\Windows\SysWOW64\xactengine2_9.dll

MD5 46ee68f04a75a1ccf40235ea6f1cba05
SHA1 43a30e195b8d894c69bd857ee377ce7fa6170fa0
SHA256 93a0d8fc38e4e9a301d9e721afbeedc5af40becc0b11a6e7e8e38f08f366ff6e
SHA512 16e4c624e4e74d8c1fd7652ae745a87de3698567faf0cf03651ad87f1f730405fc0d2eca68e4b0ff3c5c526c254aac232f9bd359ddb6563313a8f02db3603fa9

C:\Windows\SysWOW64\X3DAudio1_2.dll

MD5 f6a9fc2ad2f9111372b5ab3bba3707ec
SHA1 bc7afb780d42a332497139b5236b809433d86009
SHA256 4c448c7f77e3b4385d2cd35d0c470589cdf0524e532f9cf7ae084a8f88aa949a
SHA512 6cb44bb174ef28cee3e3a6ac51897b5cceb3f2d06d08c556cf6476a285de3e3b03a624ca92fc11b95f29694629457fa39747e3041736f9b76e84f19a052ecba6

C:\Windows\SysWOW64\X3DAudio1_3.dll

MD5 c593fd0a96ee4b6390b653c4c641313f
SHA1 60d71ca2eed9ff8afa5561cf1dccca03607134b0
SHA256 74ec3e6b253af1b68252e62a5c08479453b3341d49c606adcf36913fe9ed9717
SHA512 1bb328d1a68dd7b7657d033bc2bcb8e2c096bc591e435b5691a4ad4f0f49cfad70d4e48af48d10eaf4ad13d479a3f4fef66b09a0852f8c61ff33937c7ea22190

C:\Windows\SysWOW64\X3DAudio1_5.dll

MD5 350fefe18b86bd4d9ab2a96d00215a49
SHA1 be4ddfa0edc3a463471fc170e9706abac0a672fc
SHA256 315944bb2a1959c8a4bd2677ed415363e1611c7351ce55319dc98fd2aac83f87
SHA512 490bdd66920e36aaba2a4d12bfe4aacbead7403b1a623bead0d9ab5f68d80f46fa530c5f7de9e747eb8acbfbec8c635aea32655dddcb6a9d8e006339e1e8857f

C:\Windows\SysWOW64\X3DAudio1_6.dll

MD5 e763798cad2a90b6ab61854f50cd47dd
SHA1 419f2c98d2a3f419db1b1e9b5f4f7c3b9b636c1d
SHA256 574d14ab9a641c6cbadd78f2cd6c088b64b59c3646057952e63cad7d2778e1c3
SHA512 b455b0078786b7ff8362f7404095037a5332603383707a6dd493f381eae3e28135696fb4863e1915ea01c0f12ce10d021a18ab91cbab06b4d20142e0b38833fd

C:\Windows\SysWOW64\X3DAudio1_4.dll

MD5 e3832514bd21236067b7227f6165ef95
SHA1 bdde126bfa7e3133f33e3d3e7b4618422c61acac
SHA256 799b38139523a3b30d26e21798ee705375c61eed8ae2434fddb52fde51f4bb78
SHA512 e60bb2b8cea5864f3311dbc0ad8f7813764bd55153bc0554e2842b6973fe24a1ce9e4381fc6fb05792d97799fb247d591e15b7dc41eec2bf563bd4f7ca797d85

C:\Windows\SysWOW64\X3DAudio1_7.dll

MD5 c811e70c8804cfff719038250a43b464
SHA1 ec48da45888ccea388da1425d5322f5ee9285282
SHA256 288c701bdedf1d45c63dd0b7d424a752f8819f90feb5088c582f76bc98970ba3
SHA512 09f2f4d412485ef69aceacc90637c90fad25874f534433811c5ed88225285559db1d981a3ab7bc3a20336e96fb43b4801b4b48a3668c64c21436ee3ea3c32f45

C:\Windows\SysWOW64\xactengine2_0.dll

MD5 2112fe0c46662d429347a7d7b49e3ece
SHA1 8cf607547e9c5a10f129a3a8f8f32bd295c0d5b4
SHA256 cfd1c2d34feb7d94f282e97bf762a99bfa7309dc7353d96dfe4aadc187d26c67
SHA512 77f77add8411d418798d643d783752896d3fcac002f15696caeaf45b5396d2d42fe53bfb409d66ad505cdaac0ef0a20a62aa45b50aebe65237d2c44af36bbc34

C:\Windows\SysWOW64\xactengine2_1.dll

MD5 7c9952111f4c743b9f0d8b68b6ed93c9
SHA1 75dc863ed10e4e4a18fa06dc32789cf16c738c38
SHA256 666cef7d27a38f709063c9c581fd95e6b3fa27167bff4beff484dba2dc922a2b
SHA512 aaa3396fa9081f25b2eff6682ea26afbd297c8a61cee4540f9a947c1a96ad51f114a9985bbc69ea7d0251f6e4b1e835c92daf0f8c5fd66e477e3243ced3c9bef

C:\Windows\SysWOW64\xactengine2_10.dll

MD5 73e055af78a64f9b2779d44407ca2ab6
SHA1 d771ef11d22a79dba7deccb9b3efedcbe74532d9
SHA256 113640ae8cf78caa7cface2f906f9e6b60809906f5c26e08b2e90fc48430f3b7
SHA512 a8d979297ecce24a29459e7ff814e53c649a6c969869279dbf0f29edea4d73883441519a27e5e46bb1e4b5b942cb26907cea9a488de0067e589632687b25b5be

C:\Windows\SysWOW64\xactengine2_2.dll

MD5 5c4d3843b491c047b7a619901fbd2ec1
SHA1 e02dd40f54e7dde0bcbd648e4fc6f723ac438bee
SHA256 4f996edb65022e33ae9c9f7acf7232c8d444f75c50c72894f6d3173b55404ebe
SHA512 474105b213bc067e0822ee22c769f0caa7a02f2d74a0422b676675fc45482db3a8a3dcb2744339a4c7fa029a2f58a2aef5db500c65cf646106d8ed096b17d062

C:\Windows\SysWOW64\xactengine2_3.dll

MD5 69d841744b2bae38fbb2d40a230a549c
SHA1 2a6429b1b1758bffe3366ab72212fb9b02152d77
SHA256 ca20cf8e4034719a46bf67c6009486c2c1cfc2da10ffed3a67dcae677b4f6793
SHA512 d5e26da74fc84da90b0f60451479524f1d03946076d009328aa7f9939456762633006d11970dc4c849101728ca32350c125005eb4e3f75114d4528cb17a35b44

C:\Windows\SysWOW64\xactengine2_4.dll

MD5 6550e1a0a7be611592c31222fcb981fb
SHA1 2197a951ecac85f7144fb925f6daff9ae7811e5e
SHA256 1e0e09fc077bdeee3de065c663b83f6717d39d56778833f030955077d490d000
SHA512 4013fba5e4211e66ebd9f733ff35635cca82875d6af71dcfeb481a436efeab608fe41310bae63d55c7fdd64a5c5f64068ec1eeb997160c8ae27f21f28e2bade9

C:\Windows\SysWOW64\xactengine2_5.dll

MD5 86c93789e9006f1ac47ed9dd47d4c8a1
SHA1 e9de46eb68271018aa31c71ef89d1ddef19edf7b
SHA256 ec68b5163cbb5f15e2fbe37fdf5fcb0d01dffbe53a460cb2cf668f31f0127ad5
SHA512 5a86661171f039946fa0568c6a9c655026c0a74c04a7789fadcb4acfd6a4faa5179d14149321920ceca9a1214910abec3e67e356898d5bdd044ffeefaeb57df3

C:\Windows\SysWOW64\xactengine2_6.dll

MD5 39000e033d39d19ccce21aeafcce2476
SHA1 6e7823e689a9b720a049a260380805a235ddbf75
SHA256 be45aef0889b03e2243282a912f41580e8566db666a782c26a1d4d7988799d03
SHA512 65047afe28308ce69e3b410b3b52b5fa4f615c95802019cb9b78ac69694e9987076af4bddb2ed7e47b0fbe73729c91b94c525e5b7644a42658663ed044b384e6

C:\Windows\SysWOW64\xactengine2_7.dll

MD5 7febb8ce2233cbae738b16d42ed29674
SHA1 fdc5682d6aa0ec57b8f3c742fe736d74b3c649cb
SHA256 a43c92af3fbe91dfe2a1d415342631fe64e18c7dd3e16e93b6c78947b68e7bd6
SHA512 73a3c07b13b31d2df1cece720a0268cfdb7ae2a066b9e613f7c4ff0fc37b94bd4f32207149d56e1bcaa5656fd4501b1d136d94e18e97c07a8e793906dbc7927e

C:\Windows\SysWOW64\D3DX9_37.dll

MD5 ac3c517fb0fbbe45fe44007bcd3625a7
SHA1 eabe1601d0132882c7226a4ed04fbbdd5e8f0db0
SHA256 c2ccb84c672a9d8966e82a28005a4269886ee304972ac3590c0b8a9c1622a3d8
SHA512 89b44142355c494f2a21276d0629f3536adc0dd7cec101a1f2816031afcc8a96f94663ad46744c772d6b63d172ea62e9b957d6292e4a6184f958576f62b05836

C:\Windows\SysWOW64\d3dx9_31.dll

MD5 797e24743937d67d69f28f2cf5052ee8
SHA1 7d39afbf94675487a9ff7e41d2dbb8daedf7ad00
SHA256 e2065619fe6eb0034833b1dc0369deb4a6edc3110e38a1132eeafcf430c578a5
SHA512 8804d0d95688a932c7bf7e1a023179de8df3a5436e356b36d803cb9781f3a378adb9fe69d03b28362755b808cbeb2cc718ab920672270de0b954996996328f5e

C:\Windows\SysWOW64\d3dx10_36.dll

MD5 d9158e78a368b08d9133043eb3058c12
SHA1 d71d6f103bf7433f442f55c355dc74fd4b8a736c
SHA256 aee0248f18dfef8194451a22c69adda1cca38c03ae9aa776114da9d8851d4c38
SHA512 8bcf2da86f708ae84141089f80131244d957e64c6fed0fc39dc688201659cffa7005bfd4cbbb315ee0a60c61e38ead3b4e4fcb3d2f0ecd0386a6fbe486d82bd9

C:\Windows\SysWOW64\d3dx10_37.dll

MD5 4a43e9a2b17e4cafa9cb5fec0b5b686b
SHA1 9e28d3d197958e65ab8dcaac91fa55cd1991c3f5
SHA256 61aaf973712f848b24c3e769e3252248ece96db63f206de0ca7ff43d9ed87a51
SHA512 8411bbd130427b690332d222233465bf79426670f565ac3b01a71929dadcfdd18002c54d60981dc1f202e6625f99ab73451805d64518fad9b5a9793407df2d71

C:\Windows\SysWOW64\d3dx10_38.dll

MD5 a2650b27472c21cdd817eeede65648e1
SHA1 c0e5f70386bb229e289a476f2a95965699ba53fd
SHA256 bf463b7ee2235f351309b5fd790f514acf2b55a4a1f90222f7479024cc28fc34
SHA512 85320f262c10d80e889258a8584648dc20283d1af0467924e8745555c94a8fc056ac609b31d36a898829ad418c9df06047ecfcc644693bd136ccb50ecbd6fe91

C:\Windows\SysWOW64\d3dx10_39.dll

MD5 e6c2f1d8b667ddc04cb55b9f0159ef97
SHA1 9dc5c2d54397aeb56deafb63ee34b641f7030ee7
SHA256 613afdb8b44bb3bed945279229d9604a3cd553f8c2b9b091235cbab8cd00de61
SHA512 5cc39f19b6de99bad0be00fcbde9d498e23f29303c6ed4ba79c2b2bc63f259f9b617ecf6ac67beee8a71c03a0e80c29412e0159a5014a43a6168c37835bb0e00

C:\Windows\SysWOW64\d3dx10_40.dll

MD5 91b4aad4412bb223b466f3dfb43e86da
SHA1 850aeb2b3ca15158be00faa5c161312cf4a876f0
SHA256 c05787cbf3aa4527baae96a425ceac910090ef48809990a450c33f3cda0e4767
SHA512 413f68d1ad36aa51389da62eb2fe89969e4460ab166ce44943e382fd2d1cad0953979eebb20af58dd51def3fefa1100ea9fe95c05714c36d5322e281cea1a1a2

C:\Windows\SysWOW64\d3dx10_41.dll

MD5 1aa571774936717ee776dbed51e9edf4
SHA1 98eac7257ab3350504c0a70342b6b24658411f55
SHA256 9f4c15e1f68795727eded4737acc5a1aa85f896cd9e6924fddc9128b48f1bbd6
SHA512 bb47d95d594b249608e323c8ff383c0655a56e9192e1a2f3157e9c18dc7b9baabcf8e6b09d30fef570e0718edf673c56a23df5b5d5c6ec3242ad3d887669127d

C:\Windows\SysWOW64\d3dx10_42.dll

MD5 501ac862517c5445742bee8a2b88414e
SHA1 49f3f2df66d357aa84a5e7a0eb368ea595b7d95a
SHA256 46429c4affe041b08a7acfda0e9162ba42de966acb2cbcaf09ef976232073b51
SHA512 08dc13d5ad0a0d2aaca9d3dbfb53304216111da73bf48810df2982650d580757c10c8b9bf80ae5191e06ebaa44b2bf9c244ae141308748c3e7fb9ef6088900ad

C:\Windows\SysWOW64\d3dx11_43.dll

MD5 8e0bb968ff41d80e5f2c747c04db79ae
SHA1 69b332d78020177a9b3f60cb672ec47578003c0d
SHA256 492e960cb3ccfc8c25fc83f7c464ba77c86a20411347a1a9b3e5d3e8c9180a8d
SHA512 7d71cb5411f239696e77fe57a272c675fe15d32456ce7befb0c2cf3fc567dce5d38a45f4b004577e3dec283904f42ae17a290105d8ab8ef6b70bad4e15c9d506

C:\Windows\SysWOW64\d3dx9_24.dll

MD5 bc831661963763ac4d504c5cabb1fdd9
SHA1 51b323ea377f9dcd52946f5fe77ceb5673d1592c
SHA256 94ec67763f67932dd4273ef5cc12889a5cef090ffea3ee78a80c7b530272b1b5
SHA512 fe97241d5d9ce298f62ae3295eb9f4091430c8c2c53e967b76e0aed76c3579f8bb07338a0de48e4547c63ab381b3b3d0989a183447b8e47496f35493541295e3

C:\Windows\SysWOW64\D3DCompiler_39.dll

MD5 c4f1972497fe2ceb7d900938c97fcf91
SHA1 27c1886e7823813ac61c35ea0cd5b72ea0ea7dbc
SHA256 b99b655abc4ec45851cc2acdb7a348e739687200a4fe3be9c35d6738dd61112f
SHA512 8d35dd4000e1d632d0924b594d6ef13454159f8c3b85636f180486ff794b76f8a84d7977e340ef08217f0f68747b593eae0b44824a20c12494007f4a40cc3d00

C:\Windows\SysWOW64\D3DCompiler_40.dll

MD5 3384134eeb8f223178c2eb8323003ec0
SHA1 c8eaef8cbc91f4386e42904dee70abb6ab7304f2
SHA256 f0a6f156d13150de6ebb094233e5ff78581fbdb77bd0ff8d083698c42bc8e13b
SHA512 dafcf4c116d994c17d47d36b1dbc2ba8ca61cadeefa5d770adc391713d2c13ed2b6eb8d2464f4811cb472c8e1eef384ba21d7ad8203ba4e9ef07f33781feaaf9

C:\Windows\SysWOW64\D3DCompiler_41.dll

MD5 781e8b5b6fdb3c9b4e4a4a9fb019960d
SHA1 292b9f02bc2377c6f89b505554394ace161c68c0
SHA256 69ddadf8f5be24f10382706480b55e2492008d102001779f976608e880c65aab
SHA512 718955c983708f3ce5b6796de28658603bb61270ca6f1b3ee01d73ca9a789db326a7998df38cbd6330e69bfe3d9504b0fd351fb7bb18566be6af03fa36b7573a

C:\Windows\SysWOW64\D3DCompiler_43.dll

MD5 1c9b45e87528b8bb8cfa884ea0099a85
SHA1 98be17e1d324790a5b206e1ea1cc4e64fbe21240
SHA256 2f23182ec6f4889397ac4bf03d62536136c5bdba825c7d2c4ef08c827f3a8a1c
SHA512 b76d780810e8617b80331b4ad56e9c753652af2e55b66795f7a7d67d6afcec5ef00d120d9b2c64126309076d8169239a721ae8b34784b639b3a3e2bf50d6ee34

C:\Windows\SysWOW64\D3DCompiler_36.dll

MD5 fb4299688a0d3a37687c015ac2b9922d
SHA1 a4898d246afbb0ed399e77fa5ff29c99caf912a0
SHA256 f15efcab1780fe7d784a3cd3798f147fa249e81b7ef9a494b85dc7fdab084734
SHA512 664b139754d587dc32820354c1333fe6a5528b07b8bbfaf27374a5da7e86a4c3e7904250976ef3cf8620fd0568c34fa75704a8b1585c382b99d4ee46518617ae

C:\Windows\SysWOW64\D3DCompiler_37.dll

MD5 ea752dbce35045d3c830dc16578cc8ab
SHA1 0a9bdf391ccdd113fde4d10f0afc80d54df01259
SHA256 715876d15b590936e4d32602a764d810650eec134922b32eea742e2fa71791c1
SHA512 3cf5e79062203d39fdb74e789e22405b93de126deda3d698963682d51f264cafe9a91d433312bb7976fa9b50a4798060fcb97b6de7f0dd422eecac2a922e31dd

C:\Windows\SysWOW64\D3DCompiler_34.dll

MD5 75f206c195bbaca6ef28565b1c0cd75c
SHA1 4687454c58f64f2154f0e99bf5a323f73ca1790c
SHA256 5044a5810fd931339933a8d0c56115a5a5c27d8c0d8e348977e2724a032accf0
SHA512 84c0a8fd3e4293d85e919940f6f24d88fc6fd68f39cffefc34014656fee54256ce581ba408eebf5bf9dac3da9de19f2bf8403521c55881d3877dd64a8e50120f

C:\Windows\SysWOW64\D3DCompiler_35.dll

MD5 5b441670a4f5f8bcce76741902b8af56
SHA1 b98df0c54483664ecdc92eccdcdee09d082972d8
SHA256 5a866cdf74f981e783624dafb0e72f133ad9f9b293856d7a18c7558fa357beb1
SHA512 0243deac1124425b65cfbc7d6465bfb09a4849e6c5be3645b808cd3fa487c3044c5b45e9943ee31542a7a47803c02f0b92c05c1e4bee18cf6076641e1c0794f6

C:\Windows\SysWOW64\D3DCompiler_38.dll

MD5 103cbfc5591008ad33046e20e8e1eebe
SHA1 4a8bd29d7cbe5652ba58cd6754318a03497d841a
SHA256 ddcaadbdd47bcba02c8d1880d456acc20732d21554977338ae507987ed04046e
SHA512 ddab1a2ab33b224ac3f9ed396415bbbdf96bd59bc6794fe26796ee87691154d5e1ca2abf8bb85e7a9fb6793446bf17f6f6f53b74e69443270f50ce0b85e06b6f

C:\Windows\System32\xactengine3_1.dll

MD5 a2a098bf5a8c255a0090818ad8e87b0f
SHA1 6623968f06553163666415163783f7f419c89573
SHA256 444a0b9836b0116edc50e4226c5b6baedd4f92fc099dab21cfc246aba0c24975
SHA512 452468861c2f6e8e4feec9bc75fb030a5966be14ed4e181a48d2a201f70d8bfd469ff9d1469f8eb547f6d6892e8930baa611b3c008f195a7e741a4d082c27a58

C:\Windows\System32\xactengine3_2.dll

MD5 cc8399a9e51b2af1c2c20a26d85eb60e
SHA1 922852e2a199aeb6c4350d4506e135960d3fab55
SHA256 7d0d28dfd60a28283846c9b00f26ba8f98af16d95e81ad577ee0e89d56c2ef50
SHA512 ecd2813be00553e1d6533125f5bad74fa061b3e6f7db0a8eea8833f090734cbded81d8b150e7833d646f6cdd4961a7307f94e0c89c69bcb29c568fb5f006f5cc

C:\Windows\System32\xactengine3_3.dll

MD5 84b41fd03cafc5048346b3b2ab92d199
SHA1 40eb2b419b21fec87843e5889ed5a54e1bfa6d56
SHA256 2382bdad39eb8a94194ec4d169203067710d044b31e8f9b1c0571fd6ce32f23d
SHA512 92182aea160eb553be5f50193c8815f9168078886bf5f13f1c52509c67bddd3a0215405e89d005e3c43f3ce6bd55d6730879e509ef374238f3e68c4ce6b00add

C:\Windows\System32\xactengine3_4.dll

MD5 1ba01062450bd1f052c54c01c12248f6
SHA1 07976c294808651ac8e835154956b7b3e01957f5
SHA256 e4296c55d860e9f14f91c58841a7100036152d55bcb4bdcdf659ddc1d8a4c52f
SHA512 e7c796c9b68be98dd2b609d99ad317fae1ac612163f6a9033e3b663b5b30bc8e1b23e4956e5dcbb189b71c807bfcea063185217959f571492fcb810808385f5c

C:\Windows\System32\xactengine3_5.dll

MD5 a8bdfdc53d1512a4e77b65701b4f9407
SHA1 e6019ab6e0a28ba9c2f50dc3c5892f6778da67e0
SHA256 9dcb6402c17fe24aa54c5ea5f6e5f5e615a093a624f8512678abe4f0b262fced
SHA512 ba897310f34ff6eaddaee19f95a49dd2763c7124937ce91636312661012e7c96331719e628945f5a5b3d2db3d27392db751c454407bebc969649fd066dfbf269

C:\Windows\System32\xactengine3_6.dll

MD5 936dcc640b2991905d909395e03b64f9
SHA1 56da1a5a1cf78c414dda190a3bf55cbb2ae7bbb1
SHA256 6e656d37eadec5acf8ca99f2df37768eaec1c919e616caf3805c0884b2af7c26
SHA512 79a7f824d87aa1caa069d2a90a1bcf2b9b54db0d813f4a3ea212e0742b209e0fca77cc24c5042c7e3d841c3b43942c6ddf45e267fbf1dcc056959dd74f380aed

C:\Windows\System32\xactengine3_7.dll

MD5 bdec09a032db44d9cdb3a0d97224d64e
SHA1 ceed5e9e80626e67ae5be98ba8aa8d63a6731bfd
SHA256 31b7d87c0b7a5e44ec6fc935f11ec9ba949d8161c667f8396896ac92e9bc6745
SHA512 b89ed938e601c8d35e96c75b88b2e4083064df97672a832bc568a17c9fd99d81208967ac09d3ae8ad50948c24993a8319ca90bd215c37e9d15366237ce4416d3

C:\Windows\System32\XAPOFX1_0.dll

MD5 0e92d8c0eca74b6d0a55abad53226113
SHA1 9f1ae4dd23913ec43d5c32eaafeca282aafdfb1a
SHA256 671c24f825629381870567d726b7dbc3890d665648043c041eb1100163c49e12
SHA512 e0f254af646d7e48f87f5251bd1aff70d6be3896d757682051f419127c7a5c63cab0b05f7c3b76f50454ddbffcddb5abbe3835cf3e4bcd8afe0e1e24ffc206ea

C:\Windows\System32\XAPOFX1_1.dll

MD5 0f2db378fbe2d124e4d3631b329688ae
SHA1 158194d11db048be5fe12cb6c4abe46e6ea807fa
SHA256 cd03a9ef13123c1b9ce3d92b9e9fd9b9682c9f66c167dd8a326e4bd0acff73f2
SHA512 7621d4c9aa037a7e0e2dd91bb16e5efb496ca0a17e54b1871d58017c02f25340682cda080db3eb2284cec75485b60f7d3f7e06f9a63b7671e8b413e1e2fab7df

C:\Windows\System32\XAPOFX1_2.dll

MD5 2f8f9b707fed2405a787380230cc6fa9
SHA1 55c01dbb39e6fd682ab9f77e4ccec06f5d81f370
SHA256 f16e5795fac7a97fc1ffb5d049c011ee5f0dcdc4c6393664b6a9d94f949fdf0f
SHA512 c2548503380a0fd940167d9b99945b89469076f88fc97b55ef7a7ea5b0a5ff106c3ae935b2bf4e34a0b380c4c946fb99a1a638978079463612b8d14811d00ba2

C:\Windows\System32\XAPOFX1_3.dll

MD5 37b348a79c4c9b8ab925b18ffd241e96
SHA1 a0b030e5652eafca2cc5d741dbbaac203781ed1d
SHA256 787e10d48d90db50dc155fca53fe8c5c1a383ca24d468733d4b8fe3acf2d0a34
SHA512 20ad359ed0a1fbfacbbba2749eaac9be4e9f416e24cb7ac9dda55c6d2d372fd290781607e5f806b4da3a9d01abef58b979153bc144a8cc8c6d7115166178fe85

C:\Windows\System32\XAPOFX1_4.dll

MD5 a9724eb3d6cc032d0c4ecaff4ad8c17f
SHA1 3f951a9eb2d50cdd7a0d2210391e14ce9acacc63
SHA256 d42e7e91eafce25550f08a63240e23fbe3ddd278b852e36e4eab05bc42f5ec7d
SHA512 ab7cb86abb44e0989047de945f723fb0c42e7a527d19851dd52847b019b13028280a71b7581b2600d942a0576ca4b33029f589bc08934208d4250c2cab3cbe25

C:\Windows\System32\XAPOFX1_5.dll

MD5 e9739ae8b2fa28dcd6f2ef5525da8827
SHA1 6edf107e02bf7db7193d1d724cfd2ea5beb3fa8c
SHA256 e47dcf74d50403b376c562e4121e359e5886e42fcc60b3fa8ba53e6826854c49
SHA512 a6d4c71eba226539a692fc36355a279d97a1aa5f4caaa643981653b8d1f3172b52bfaa3942a48b0af71ac39f2bdce568e4686ac8db423ff9edd2f3928a90a6df

C:\Windows\System32\XAudio2_0.dll

MD5 29af48f6c894328a58defdc560a70cf3
SHA1 f4961e75dc4878ec52ced7a562312c7ea732be1a
SHA256 eed9479428df33f7a9be5eca9806c2e3412509274638d13032c6c0ed1a3a9ef1
SHA512 8e2c1dea106f2e1a997c7d6cdc8d5eecc69032d4dbb2ad0b9fcfc3a1072d6f0d23c8976d8faabc6f7b2735955f63fca862e386e885308de0eff8fc1a2e467c3d

C:\Windows\System32\XAudio2_1.dll

MD5 e9c0f926d7c9082a805f4fef81deeb30
SHA1 546c8566475682e7c55e8140e3e17eddd6f6486f
SHA256 7c7c67e2255217d12c5c2afe53556c0f131049be7db4043aed9c1379b9ca9aa1
SHA512 d75fe72fe50476bd3098a6cc5d519e61d4e388359f51715928e792e27dad4d5a03c2e33b899b4083bbc39a315c75afb9f3096944252949c4b62acf8e997f3c55

C:\Windows\System32\XAudio2_3.dll

MD5 758139a39aecc1b512576275a27c1177
SHA1 2f9a06ce971a10a0e84c2c3b0b4da67c3d271ec7
SHA256 d8e9c006edcf959f414ae7e3ff2e11af0885bc84cedc8249fdc1c5e71cdca8ba
SHA512 39ebd0b277ba324a37cc422454f1cf525e6365ecb1ab1ddb78299ed31c94625431e4079acdbb50385fa97e20fc5eca7cbf321747f3b9792fe5105b0e82bcfdca

C:\Windows\System32\XAudio2_2.dll

MD5 e335df094836ee7030f1b9ce7429e884
SHA1 a3536eb1f08f6ecbc3e15948e67c5f85203a966b
SHA256 9ac81279b1625cbd9a8b59716aac63ef68d722dae586291457d24366a5f4e78b
SHA512 3e6e7244b7b019297299ddade0251dcf30e8c031e5898311595c578f847ce1106904675177345228592d06e3917ad07e4e5d09e9f7a83062cec17fa433085888

C:\Windows\SysWOW64\xinput1_3.dll

MD5 77f595dee5ffacea72b135b1fce1312e
SHA1 d2a710b332de3ef7a576e0aed27b0ae66892b7e9
SHA256 8d540d484ea41e374fd0107d55d253f87ded4ce780d515d8fd59bbe8c98970a7
SHA512 a8683050d7758c248052c11ac6a46c9a0b3b3773902cca478c1961b6d9d2d57c75a8c925ba5af4499989c0f44b34eaf57abafafa26506c31e5e4769fb3439746

C:\Windows\SysWOW64\xinput1_2.dll

MD5 33b62be226934e1b01f5043870c70427
SHA1 ad96f837accd277da2933d07aa86ffe3ef803b5c
SHA256 9714d146a785d458f0de8fef387d82c9f8e101c02407a0cbeb06f02a69518eec
SHA512 41f859fa59145ef6cdd6cfc4a14f90bb932d2c6aa339bda1763d8e315e6a78bde561010152460e6f996c9ac9ffe6650ccdf6ded34656081a0ed9ab1270773710

C:\Windows\SysWOW64\xinput1_1.dll

MD5 f1726346e583442541fe73429f8e9c10
SHA1 a1b7a4edd7d1164197f734218fb485165c075d0a
SHA256 69cd725c53e0302e75db20e9a3e4b33f58dceaa2e6ea4938b2733df8bc289a71
SHA512 ba17740271ea92c917db85c64d4ef63a8f2036fb1398abdcbedf9d49c09a53e34ea04e8b3f5a2ee41c2b2ecea6196ed7f9866ee48a9f3528c3b4c1f19dc167d8

C:\Windows\SysWOW64\XAudio2_7.dll

MD5 81dfddfb401d663ba7e6ad1c80364216
SHA1 c32d682767df128cd8e819cb5571ed89ab734961
SHA256 d1690b602cb317f7f1e1e13e3fc5819ad8b5b38a92d812078afb1b408ccc4b69
SHA512 7267db764f23ad67e9f171cf07ff919c70681f3bf365331ae29d979164392c6bc6723441b04b98ab99c7724274b270557e75b814fb12c421188fb164b8ca837c

C:\Windows\SysWOW64\XAudio2_6.dll

MD5 4976243bd70fae3d1d24e49739ab2710
SHA1 6ef27b10bcf4e697fe77c3e964b326be11e4444f
SHA256 61b57170f7c6365714396072d22cb98746718c0f44c9f0d5c62fdb1b218639c7
SHA512 af2d6aaad44bed880a1a2ee947618b142c76a5eca42d4608196b74df9108a9649059d8207e84a58b76ad43aefe9b66ffcc519f8126667177011cf4199f163e83

C:\Windows\SysWOW64\XAudio2_5.dll

MD5 8b01fb723f3b30ab3debddbf97cfe577
SHA1 e379c3b7d0a66da06b6a381deea19bc541ee0689
SHA256 c596de2ab8394fb62538fef0b4657317f4ead50a6d798c5d066e25e334576c27
SHA512 ba8c5bf7eb657bce6e2c937e082b97bd6169d1cf3daa5800e5112d62596bdea47e5c1f23146f3f696cd68e8def4df92e3fb24a9aa8b9a08320738b66fa6dfe2e

C:\Windows\SysWOW64\XAudio2_4.dll

MD5 e684c5fa18adf9ea14737757413bf727
SHA1 1dd454144e8c0f3aaf24db0b77f03737914d9a72
SHA256 bcde4317debd0052b1436a6fda60e1dcb1e308979498117fa0cb50061f38101c
SHA512 9686f92745a30fd9e442ff6a24dd89410aa483ccd46edbefce0fe378645292255a323e1aae146180e8a4ecd15765a996df959a302d5cdbc6dfa4c5fcb8252e4d

C:\Windows\SysWOW64\XAudio2_3.dll

MD5 47ed15dc87ae334c13c4dacd1be2cced
SHA1 54f94839c4e4d798a1f4f1fb6ee240957a738cb0
SHA256 04dec9d7c68962e01efec0aac0ef7a3499bc4c16e8a41bd61fe6641da48d7dcc
SHA512 da0707a153172c48036d885404035829ea251b7df5a9246fc05dd164ceae9604cb0cc931b85d77151bc613cd5e7e4d0430a4fd92697c8bbc8faf5fcfd1c140c4

C:\Windows\SysWOW64\XAudio2_2.dll

MD5 50f4a0d5e6a0bafefa78f353533b8e06
SHA1 d370434eea3a557ed77b2363dfac720a5ed98666
SHA256 9c7897b4ee1bcd190b1c0b7b77e64ee731d234764683a1e2286af70d86b62753
SHA512 7686b893996b76a25ca7da971ca3a10400dcc682a05e8317a9d159a9317537de0bc20dfdef643e85e6ee548d7893138497fc156f77534124a8eb3e3ce47f0cb0

C:\Windows\SysWOW64\XAudio2_1.dll

MD5 e34ff0115b1ee3b4e03d22ae9840ee03
SHA1 746e6e84ff7f630643ff9381b9dff1f40a49ca16
SHA256 32a7c6a4edef46f025a4a5c64b892e29baaae948e86d9ed49e82014eec1441de
SHA512 7448bb3ebb8815e13e14514c8580dfb7f6de1a96c90f6611f6766dfb48ae7bc4a06efdc493060c054f222e7d9b308e062e1cabb19a60f50ff9e20f06905df58d

C:\Windows\SysWOW64\XAudio2_0.dll

MD5 418cdc57e55ee79c3f86c13a19b3d5e3
SHA1 cac2b8396b1c82a6f7ee2a3e3ec3d2e4c2f869fe
SHA256 e435b73193bdf651f7ae564eba05266595ac672db45e0e22dce92d0bcb3c6513
SHA512 1ba5a49d9102911d13d86ac4f0e4ecb44069c93a58e2e3225d9464755c14f8d57f230eb32049c2747385f7cbaa9c0da0f6001f27b685eebfcd94f3f5b8fa3250

C:\Windows\SysWOW64\XAPOFX1_2.dll

MD5 295e47a75f278580f9441041eaaea3d2
SHA1 0716ca729ca3d84e9dfb4bd97c1e12466cc68625
SHA256 d1a55061bcb42f69b7cf35e2985d48e30c7a90f0bc668e90390f465b36bd0161
SHA512 a3cee1d45759fe3323fe8c3c49600856a86b61b3174c4d9c71e58a95db4848683c71605f5bd8c04bec591da02d96b79c68c1135410930ca63d17f7a929f2dc4c

C:\Windows\SysWOW64\XAPOFX1_1.dll

MD5 d95eaabf5d277ef91d9ca70151209e56
SHA1 3d47ebbd6236045309d2222a696b7141c0957379
SHA256 5ab63c0f040fdf65e681eba4daa55ed83e89ea10c426dc2fc763da0fc94f3ace
SHA512 6d2e73468485fee2b4007f1fdf16381cdd6c77edbe5530f63cbf8696646b14d06100fdf54a48547f29ea5775f29226b16808a5a1bd4c0778413855f80e5b8259

C:\Windows\SysWOW64\XAPOFX1_0.dll

MD5 dd165760f1b95200a3da2d9dfdb84234
SHA1 0724300a1cbaa32e03a234cf6080a67967c335d3
SHA256 8b396d275de2550af8ada6a1ff71f0f4870b51c8407e44044c2dde7ad6b754cc
SHA512 eb130afda1481dd0e27a19330a8be8045b3172e46edcc5a0cb089e191fe415c41cfbdf3af8f084a6ff58f89cf8d7d4d0879a3bae8f93a52ffc84da2d4fec5ccc

C:\Windows\SysWOW64\xactengine3_6.dll

MD5 f81c4678a55ffee585ac75825faf5582
SHA1 8fb2e6cf2a022eaed2ff5e3e225b3ca1e453d1cc
SHA256 8a7e7c5ac2e6230f0249d46751522e7ecf85e7490cf7491ab73bf2e7e59e4c0f
SHA512 8c8071bc2640d5c0fcf140ad68d4788cbb0706d17313c3cb74e25624a748b282acbf77eda678cf0d5fecf2ec3d583508c6f4eaf5c84073909b616f59b4f4e5fe

C:\Windows\SysWOW64\xactengine3_5.dll

MD5 db3c93e87452b8dab4f58ed1fd2b1998
SHA1 fbcc3c80c74e98e8554260b8a08e14dd1670075a
SHA256 1d37ab9b90372eaaafb5055401449dc3184428fed559baaf36fbcccd2479611a
SHA512 af693d7d326dd7874e0eba5b4163c21aad86270f8e54058c637f1cd200e45eafb75f79a2d579c477c06082ace44f3318bcef71698089808690ff88443ddf348b

C:\Windows\SysWOW64\xactengine3_4.dll

MD5 686f8d1b4926d48227a06acd4d41cd1e
SHA1 324fd1d21a42f0c30bb071beb2cd5db9abbf3138
SHA256 d3bad7995b998f2c95dbb33020a198ef5a248825321032f051619f353d46182b
SHA512 6ed69ab933492870b7fbf4e178999b835846075fe103e65f9a0f9b1ad8d47c9277f31a7a0fb53f3620b591b103b02bfa8efec530d7372680f585b82e128edcc4

C:\Windows\SysWOW64\xactengine3_3.dll

MD5 8ba296419af3417d1e9806b83166e472
SHA1 a2a8a64aedcbda68149a2726b094f1710cba71d1
SHA256 ef052bc9b7fde596fff3ea2d9c8fc994f3282953dead1b7f5477e7154af67245
SHA512 877e89553cbfb6afc6dfb22a590a468f035dccffecf842cb26010d5e62e33fe10e477d5cb157d321de3ecc59112ba616b80e767028eedeb4e70a591f1b81b902

C:\Windows\SysWOW64\xactengine3_2.dll

MD5 f3c6be26949caadb11dbf0086082fac9
SHA1 6b7a2475aacaf63f30964e9958713bec331c82ba
SHA256 e6a34c1f068f89d6515cb460eed3b4dbb53522c5579e6c75741482f0d40d9f99
SHA512 167afd32d847088d4973437f8b89badce194211f8fb1a14cf30df11848e4d4dd8d5243765edb1ed09df0f9b674cd7de764f1dae9fcac91f0ec98ecd259181d3b

C:\Windows\SysWOW64\xactengine2_8.dll

MD5 499210c45afeaadee8cf4dcf7d5e570b
SHA1 de5ca60de47c8f54d531b88ea80d9a24a8e87a98
SHA256 15d82e89bea30bf82de6ba0cfbe97eeaf05d1e06bc0133f0d1ee8d0cc41f51f6
SHA512 f76f69bc3b6cb4f92e675eeedbd10a80f0b970d75ea04392484d477a4d02dec670cdadcb90be9eb215c4ad48a90d28347c9104f0835e93b5a9803fd62670536e

C:\Windows\SysWOW64\D3DX9_41.dll

MD5 3fa06cf5079b84155d18b05c08f7131b
SHA1 fafe52876151a08f39dbb6b4aa137dd85558ba5f
SHA256 6ac4df203af419d3f3b7d9a99e14a3490ea3ad307c474bfe36baea642b1421f6
SHA512 24d29c3ffb6532da860fef4dd93e61f7532cea3af94928495a3af0231e7dff6db5cad25713451a2e722c076462b94818cd6969a1c7d8905585b0f64e12174d1e

C:\Windows\SysWOW64\D3DX9_39.dll

MD5 8cb3defb8887c4f0846db1fc1304d6d2
SHA1 5fbe058848db16117ce7cfdabea1f178ba229a6b
SHA256 5d29988cad858f754ecc62c3d30de555f82cc21b5b26c448b890295e9b7bee82
SHA512 4cb675b179d05ead18d2e42329e0d10cd1d520cf9c8c0681b89aca79ac9c814e82941b0086135bd57721b66b55b6feae00bd29af804f59a486e935fda413fc43

C:\Windows\SysWOW64\D3DX9_38.dll

MD5 8f3eb548ac4ed90252394f60c77e3196
SHA1 e40bb2e3c99c55f2df9def2765bb014e01389622
SHA256 743e77a228e7d75442263ad70051e44534f7972c6326fd34b505a9c2c245894b
SHA512 bad441c93d37269a9d49edc39ded933e43baf2a563c425ea2db222a9859ecd1f076c2255c077a5afd07922b50adfda2bbb731ff6f292623b353a3dfbde4ce4e5

C:\Windows\SysWOW64\d3dx9_36.dll

MD5 44bfec5c9c82a2ee9871d88fd3b9a0e2
SHA1 e2aeb78330d0815cffedfe88438a71024577d4b6
SHA256 c12f0ab0338eb5031d3d04beaf7208ac848f7e037d21ff963d2af90221cbe935
SHA512 35c42ce3afeeb3710d3d96d2cf9ffa2828fe17f8d749fd149e3797e87e154508c77f637de0e424d38bb3fa56bca959cf9da7787323950ec8261b144c09ae306d

C:\Windows\SysWOW64\d3dx9_34.dll

MD5 1ca939918ed1b930059b3a882de6f648
SHA1 0c388397620ce0edbb362bb3ab2d4a9f31a56b6d
SHA256 b6f77f06518d35345fb61172b6a13159125ed60c469d28b1a2e07970e9ddf81d
SHA512 d1e09da8551e588b8d5d5837a79da9ae4ddd6a372457d3c341e68e3da07c0c1e84decadea9534cc87ef9ef38c094171004f836e6f74831fd6531ce72aaefeb5e

C:\Windows\SysWOW64\d3dx9_35.dll

MD5 3ef18b78d17c962f2b71ac1cb7757684
SHA1 2380329c17c7a530075c7572d17592bb3a00c4c2
SHA256 2198022938156b790e9cfb0f7997494b66a11a1ad49b395be58251d635b66b26
SHA512 93e9bff79630ee5897bfb3bc496f778aba160312edcff9f0b8cdb8e8af3d5c7b73a8d95d54ab26cc638a2ff7cfa27153629f9fa8a4a687ae3c83e1178471e720

C:\Windows\SysWOW64\d3dx9_33.dll

MD5 cdb1cd22baff21f48606b3c1a18b000b
SHA1 9315b5db975a34dbebdb4dcae652ba1db01c482c
SHA256 c6b7b2ad7742dde5dd8d1a35fdc1c185e586e551ad9c74d3fb21759cd8ca4da8
SHA512 c5fb24de8f1ee6fc1ed6e74580b5d22599ea4eb6c3589645fff0b15dc8dca051c4917e60fbc00ca86542dd63a8f5e40da92ea77e24826c0c6bdba9b58c36d4db

C:\Windows\SysWOW64\d3dx9_30.dll

MD5 e415862612e65f10d7d888443ecd7594
SHA1 aa8440ec3b5bac6594fd58d97c10c2ab7d419b2d
SHA256 5edeed79f2359527a55b8189cfa8b9b121cd608d44eead905a0f3436938ad532
SHA512 f5de2f9e045c3d579d98b25fbbb7b90aa9ddcada0c6bc4e103e5257394f3cbb7c968d89db61e15b10605561cefdd63456912aa428af5a62cb769ac8c4e5eecba

C:\Windows\SysWOW64\d3dx9_29.dll

MD5 99f4fc172a5ace36cf00aa7038d23f2c
SHA1 893e05e369c2388daec359ec550fee5b9122ed40
SHA256 c5e21c18f8c79bc517da59e3192c39ea73bdcaf85867628187f6b3cca07dd21f
SHA512 a4b86d84f99c3d0c0825e3581878aaa25207765bcfbf31cb07cd6bf69a9cbbe1c3068719b212e38f741e06a89b9bc6d217077a0dec7f9efb1be75fc3c214dd52

C:\Windows\SysWOW64\d3dx9_28.dll

MD5 be19b603dfbaa829ee5b7749b3ba97db
SHA1 3d42825b3e7fe5744f67ef145ed47bb524496305
SHA256 f3e391b5f1c1f9637cabf2b812b6f5d65e4776c89d779f506f6b643cc563176d
SHA512 095e8357911c1a06000f5df291bc3cbd80aa3a9672f485fd1f2b9bdb1172d1c7235449485948bee26fcec630d6b80fc927454f9b32cb31c823494c780e0e3df6

C:\Windows\SysWOW64\d3dx9_27.dll

MD5 852edc778a7a50077694f84d8e601234
SHA1 14705b638e1af81ddda5dc52f68c61ebfce5e9e3
SHA256 a70d571cd675c97c9eeb4a234dba1d667ffb54ec3bb14defb36b3e2f605ae257
SHA512 51c4031d98bfe3251a81ea9f4434ce38f077645a40d0ca413e31b6951c384a1635cb040c24ccf1baeef3d5a47d0d18d8b47fef3bcb28570d6e936fcea6f912c2

C:\Windows\SysWOW64\d3dx11_42.dll

MD5 d09ac80a4b5312239852836c84df3392
SHA1 ba838d90a1e74d6b9a57abfc9729dd3b2e7fb192
SHA256 8c8fa8dce19e2f43e82cecd73a268e831a5ce0a16023845f7fa7fcb597772e85
SHA512 69232a47c80f01433716f3a9202af25e1b9a298a2b7b7d23b959e59d9c4ebf329cbe9a9a5bde41c06e978fda062225447114f9ae736920e7bbce8587a9390613

C:\Windows\SysWOW64\d3dx10_43.dll

MD5 20c835843fcec4dedfcd7bffa3b91641
SHA1 5dd1d5b42a0b58d708d112694394a9a23691c283
SHA256 56fcd13650fd1f075743154e8c48465dd68a236ab8960667d75373139d2631bf
SHA512 561eb2bb3a7e562bab0de6372e824f65b310d96d840cdaa3c391969018af6afba225665d07139fc938dcff03f4f8dae7f19de61c9a0eae7c658a32800dc9d123

C:\Windows\SysWOW64\d3dx10_34.dll

MD5 5aa9987f2e62b56d7661b6901901f927
SHA1 2cd4e3e70c3b37da134ecfeeedd377d1726d9759
SHA256 330e120d745e1132252df81800362a7ae0b61a9060afc800165ba8a1d55d3fb3
SHA512 af9e39f368b47b1500e5d68a6f234361fdfc29ea31c32f614c5887f124d6097be0b2d8f37287d0cd0b094d3a12e3f5881ea822542a1c85f10566604fd6228988

C:\Windows\SysWOW64\d3dx10_33.dll

MD5 37a8171accf46a9c196054066c28827f
SHA1 886264510372602c2ee0193c5a185d719a61316a
SHA256 b04e2b089656eae01a0071359f9d7fb040dea804c1b9d2379431864174259c2d
SHA512 713b843a35dcfc32caa67c52ce0a32af6f54dfc4c11615d32613017aeeb257fb3f9168443a4288c71209e5d40f2e1b281febcbae6da076d2b57cf01aa3cd78b2

C:\Windows\SysWOW64\d3dx10.dll

MD5 6f34f7405807dcbf0b9bf6811c94c6d9
SHA1 2de04a49825acf76a6a7aa02108337142d30b6ff
SHA256 fd2caa28493ea76021b93641958238b7a933f4f6db1a2070be03cc81d87d8307
SHA512 df623daace6702d25365697b62a4ab7d03d944306521022c6e65e94cf1970b5057da811f10e675c952d93a37abd1b862b8ce8648429780aeb99a4d55fda6aaad

C:\Windows\SysWOW64\d3dcsx_43.dll

MD5 83eba442f07aab8d6375d2eec945c46c
SHA1 c29c20da6bb30be7d9dda40241ca48f069123bd9
SHA256 b46a44b6fce8f141c9e02798645db2ee0da5c69ea71195e29f83a91a355fa2ca
SHA512 288906c8aa8eb4d62440fe84deaa25e7f362dc3644dafc1227e45a71f6d915acf885314531db4757a9bf2e6cb12eaf43b54e9ff0f6a7e3239cabb697b07c25ea

C:\Windows\SysWOW64\d3dx9_26.dll

MD5 523ab607eef81cc4d909e7febd8a788e
SHA1 2fbf1444daab3312da6b34509763656a28252134
SHA256 8ea96fe01c3c86a36fcb3795ae03eb12034003e335ef475571efaeda17c5bc78
SHA512 791f520533f58cbccded4e7c1f64fc14d20942efe57f32a5ee75eca4107543718eb35ecaf52e6eb3d9112867141271b8c097766fcc3562f016bb612bf840528a

C:\Windows\SysWOW64\d3dx9_25.dll

MD5 5b48fe9d6686f0d54b26a005ace24d1d
SHA1 1c395f6d2aa729a607e69dca73f8205cefd26aa4
SHA256 4c54df27ce84d21b2924e64ff79b13e7876ce85d8e0c9c1d0abd8da73888187a
SHA512 6a4fa549578097ba36495ec210365c27d165065820f0fdad20864a3139949e72da00f9b7c614d07d8950307e596b693ed7a291a5c69cc0f9ba30c5f74d6332f1

C:\Windows\SysWOW64\d3dcsx_42.dll

MD5 b337306dfb508a1bcef1974bfbb8d924
SHA1 203c32d73f99e1097bc306c9225307a18c617f4d
SHA256 e462eb3d41db54988ce3be46ced60b0073f8d939a9946cda67fb1df3c8afe0a1
SHA512 5c7a101e403aa2eab57e2972427a67ae6cd1598a35f983af784ca3a7446f7c60ad3cff7e52510f14647645a49c387020a06242663433db89e6454188b93813e0

C:\Windows\SysWOW64\D3DCompiler_42.dll

MD5 b33b21db610116262d906305ce65c354
SHA1 38eef8d8917351ee9bdff2cc4fbfaefaa16b8231
SHA256 6c976311406c23aa71018d274da0ecdef43b6e3a3b0b01e941a5e8e4e974386c
SHA512 7049726ccbba90d06b3a56e1dbde8196935d4681b5548248cd3e6a8e38183c268152ba2b07eb90823bbe327c02ec946c59abe3562b59e29d9bcff8fe90e0adcc

C:\Windows\System32\xinput1_2.dll

MD5 06f15d3cb1ae0eafa50f595b3ff8d9f5
SHA1 47f8366705c64af17e49c391b11d722e86e11093
SHA256 77055b6a144c4017acd0a8b34520cf9a84be6b9c75db40f7a708b9f4e38aa138
SHA512 c34c3cad5d2011bbe816c7185f020e0b89a2d9f86fcfdc2f12cf8047a5597a850f537c926674ca3b8877e7ea5fb55f493b205794f247de526e42ccc19ee902d2

C:\Windows\System32\xinput1_1.dll

MD5 6f9d3289d8b166e478afff9efa92c42c
SHA1 ae6da454090e2296c6806fda747f4d795f5fe375
SHA256 87c7f921bbf171fa04f7c2adaf8b25d4bf152d12c6b99771da42f3af07f78987
SHA512 1116209a5660d4e5f781cde54b99566f210f2a7a030216c82f1b335b4d7bce424d957cdedc7d87386804fa792a9b9790497c64bd70390f3d3c61fb72f1ea374b

C:\Windows\System32\XAudio2_7.dll

MD5 4f7513ff4de6303088db28dcbcef372c
SHA1 a4113b07de75a83cf1481ea92a3b98e7c1778783
SHA256 f8636ccc37bbfc84107992b60e4226eb7237417112267ed64b08f72983ac4314
SHA512 2cf5ea114546236f55b9cbb49643f719d892eba8649343bc3e72fe08c998e88e26c010232ca27bca255629ae7d0d1e068d6ed1dbd76096b1ed09362f65f5401d

C:\Windows\System32\XAudio2_6.dll

MD5 05e88c8d8e652dff03b469331f474cce
SHA1 a2b70fc91e5e598d1e63ae6f563f4c1f511e2327
SHA256 3240447ef7bab48ec32a19f36e990bbddfdcb0f664fd9f58449f46788b5c32dd
SHA512 144a89c7870fde2bbec8b6fb1959496fb32cfc005d9e02cc1fa78a0749bca926e6523ea4ee6528ca4bd05d94b23622837d2e61d91d1fcbab9a2d8c443d858ca0

C:\Windows\System32\XAudio2_5.dll

MD5 c291aefd47a587ff5f509e2f96613f7d
SHA1 40a908b9043699c2a91e67aa132a678463d620c7
SHA256 36c77312026a3bd5fb928f4fe599a077b08264a82f2863875c2d4619ee133b71
SHA512 45ae65f233179939f8a6ec5eb4526494047cabbc969fb941a5aeaa134e33bee67a9b1609f4aa422c0bad52f0e5a7886da7defd0335bd838b129f6b59f757b48c

C:\Windows\System32\XAudio2_4.dll

MD5 b94f08069efe2f8151def350e526e063
SHA1 d62bccc7cf95295ff235a261613b8f7b6fb386a7
SHA256 df7ddbea32acecc7fd6743002d211506ab75cb1685b4d2b708ea160c610a6f0d
SHA512 412833f57f7b55c57cfbb55748d6576d053604bbdfd48418fbb4577ea04ef844722e7bc0cda3b32bca850565034bf2c9332430d31599ef7ae988831b2b53bd85

C:\Windows\System32\xactengine3_0.dll

MD5 a8b5370b7b61d3777d840da1c64a1c2d
SHA1 5d3bb89c92fbd1f4a541dc37115625a89e7837ba
SHA256 1c953325e2f9e2033065c9898420453ed8b812eb739a7adda5021114a6fc9074
SHA512 5152103052f14fc8613a8d6fbc9fbb1c9e537e9a8420d8e82149208b7ba14c4ff838e2246cd77e65c9b75b686cff142784cd09ba67077bad017ebac82da4af34

C:\Windows\System32\xactengine2_9.dll

MD5 a69c32c2bd01522a088d254342826866
SHA1 3b80ae6ef4c5189f5e56f7e5cf9064821a111f11
SHA256 28ee04a1bd08faebf937367e3c3fae4d20980ba08070382497964ec77951b749
SHA512 8ce8da4459639174767017891caf1a7c079e03dc0e8380e54c13d0e8e7ba4d86ec08ad35afc3059dbbd2b102370e92ec7499469d90f0eccc284c416b3a9cced8

C:\Windows\System32\xactengine2_8.dll

MD5 fa485e76f94b7457767e372f47757733
SHA1 9080a919dcd27544045f51ae03093314c34e6def
SHA256 43a29c6dae6468ca4163795a7555003a71384b8dbe052be0b3bf1d7d4d19cf24
SHA512 32b32f9b2c7b49afdd533c1cb94220204c9006a985810fed9502727fa1045feaf5aa962a5d8e0c57c698a7f34eb1b55cfea8d94414d98409c9098448fc80ba89

C:\Windows\System32\xactengine2_7.dll

MD5 8c970509e0ae10061e3ed6d51e34feb9
SHA1 29e2b6c6457b04c736b874b91a492d1db3a26124
SHA256 bcf3012a44b448402166bbab661a9fbca7f9e3c11ad17b3f96a54bbbb82bb235
SHA512 765ab00113d1d16775be9edeecb69b9a050b7e43eac8b7738e82f2d47d8346f5ffbb9f38c9bb308eef79c1167717fd8a297b5285cf696bbdec4dcb089c596b76

C:\Windows\System32\xactengine2_6.dll

MD5 4837a54574a6105d404a8560984b93dd
SHA1 066bd03f63d110c767496fed1740c5dcc9d8fe40
SHA256 9f4c316be32e4de8c6594c26ff50410d2763b5f3320741b912a81a9ea9b7728e
SHA512 358055685c53c2c533221f3ef84c34a2d47afeb94f7fab44b9f57251ca006fcf303195ae7518e1ae01d8b08c29313741e1c45639c3e2a7bd8f4fb65b918013b9

C:\Windows\System32\xactengine2_5.dll

MD5 398ff46ff7354fed2f0f1aecdb546866
SHA1 e9ab65083f70a8ff3bc5fcc9e2452f4411e33b57
SHA256 a737ea87fd5b44343c26da6d47508901b916b83c5f4a508c0b18c56faf8c0329
SHA512 d3efa67ea02aec3ec91123b002615c2cf2c9f839bbd3d996d4b6296f6c535bfe5e67f46bf92d81fd0ee9c9de878764e3cc248ff7474e6405c1661b4713da2d61

C:\Windows\System32\xactengine2_4.dll

MD5 58bb51253427a834a8807b9245cc5965
SHA1 7af8cd08c318b81721242fa2ed472ce86be13caf
SHA256 2bfa6e7b793299a306a554b60a39d001e493937e88dca403d9f0dd1ea0de1aa0
SHA512 8adcde6a765e65c8684e339e65e0d3eda1df3f26665e62798c6fe9579ad65a235cecd95661cf39fe7a0b82912224ca1d6d6c66d5728e3ac2ffdd56b20313dadb

C:\Windows\System32\xactengine2_3.dll

MD5 0396d2a98b0ccd4419b572ebf618e81e
SHA1 48583c8a4573709502266fb3d42c43de66595807
SHA256 1cf72300e03b4b6fc48e1d9e79d93c42d657ee1f87153035d1578d1af8616ad5
SHA512 6e3168ef8035f6ab56012c64c6cd40adfd4caba391162f856c436555624ffa845321ec95147af35ba9bc969779b44f052818583352b5192de4529e18ca51ee4c

C:\Windows\System32\xactengine2_10.dll

MD5 e8932af24786765859558cb79e385ac2
SHA1 68cde2e238460be604a49b5f700620830425174b
SHA256 3fcc50623a5da6b23788dbde6eb10418b414865b12c84247ddb3024fda59a8ab
SHA512 136dd820898ad64963a419f4d7baa118e63f8c28cc7aa538cf9d6bc60d30372d585f75ceaf03055d965451a7dc2dec965950a68983e30f1373e303f5899344dc

C:\Windows\System32\xactengine2_1.dll

MD5 0cc809422ab40974dff8078392e4d507
SHA1 c20b6ff4216095890432a74c4b59405921657c64
SHA256 3ca31f274ea55cb966ec0b49addf72e1e21269406ae5fc44de3d5bbc884a6ce4
SHA512 07dbe11583c7c83fe5d0a1fd73d59f2d706198323058664d167e280127adcb29b20597abee17800b140de3c41eb3b684abd516290e62c65f72eee313dfb76be8

C:\Windows\System32\xactengine2_0.dll

MD5 ce5753f9a27837259eb52f3f47f39593
SHA1 2eb60f397eff937249521fe0bf5fe89eccee4914
SHA256 a00ad310f3d7b2d4de2f5a4c081359fa443ce0baecc72ebf39d6b30ccf7babce
SHA512 93fa47262f1b1ed9b284337f7225bdc06b6931931f385eeb30faaba25f1ccc483d633a40831471da70077d6a1f6a84c21a909daea059ecf316534b1994467230

C:\Windows\System32\X3DAudio1_7.dll

MD5 b4ff2a39685c1a6d43f0e56eb350af3a
SHA1 466f80be26352f8331900a6da5b0a18dc7b39c0e
SHA256 9460709339701ad471a5cabe6365355f4d586dc4fcb86507c1331839dc555446
SHA512 cef31793e1b1714826aa95d256ebbec457e8cf9003767db46909bf879af86f954f475ac84e1ee8cccf1dcfe4a52624e3d7e8bfaff5f567e97cab19207db7f913

C:\Windows\System32\X3DAudio1_6.dll

MD5 eee871cc4f5563ff8b3c8385b32b0c5f
SHA1 940fd8c5a0cda898e55c80b36b139d766ed7e126
SHA256 0afcf64138aacab2b4a5e110392a7d978694dc545845f89782c07c650f212f3b
SHA512 e2bd013d7b8232bd6bab21832374d48f4316a02299c96e526c416b832d13bf2824f81db9f9a96c76d4d7ff1cc989053392f413132592757c51725ffa7cf722d4

C:\Windows\System32\X3DAudio1_5.dll

MD5 cff1c1f7b9f855ddee431d7b5dcacdf8
SHA1 7199379d9e86d512f7536a6d74d133539492c8c1
SHA256 8dd91637f40136f8f941d0b9e8a096964336759a91beb3265a78627e800da85f
SHA512 e5309418b9d4f9cc715431cd744465f75213836caa417ba39d82388f7f452e3c9626341858f019d030d3390e555d6130a325408a6ffea138bd4fe5cd4280223a

C:\Windows\System32\X3DAudio1_4.dll

MD5 de6004d16dbacd781ed4596c4fea7d14
SHA1 1e1c8b6b5b1b2094140ea8bad543639c8a0f29b4
SHA256 e38b62c0946b9e4e1446e0f8c6335fc7328eb20cc587e310983f3f6d6571ac5d
SHA512 dd5fc2e7bb8fa922afed47a820cff84d896c24410ff1038548036840d7fcf649d15765aa137c3f2cd9b6a87189c62660c15da56bf03971e70e62bb81b5556df4

C:\Windows\System32\X3DAudio1_3.dll

MD5 c4c2ed69b18ee1c60026877fcc470fa7
SHA1 59dc0272c4e376a2598dbd9a82dc07be32fbad78
SHA256 96c2a80a7fa7670d323e584b956cc98f69f2a22e5329ce4a93269468b142de44
SHA512 f85612fae3734054722a030852ea46d303ffbe3920485344ae8e48cef02ac1a0a20e608a1b44645c93bd6d1091748e16cbde605640e982132415144013763f3c

C:\Windows\System32\X3DAudio1_2.dll

MD5 bc78d5328541410510dde06b9fa92024
SHA1 f6123294896cc3c3d3cf5a9e0e03319f58da7cf3
SHA256 7a34a7a8af47c6b2cf890ecb56bad2454ba5eb1ef2df6fad9ee53c4770e941cc
SHA512 5284d695216aa4f70abafdea130326d8ee3c6d9a9858dfa3f5b184c6b8b185adebcbc92adb8a7530f9127ae1de30561986bf9c85bfb8b474a9812151a7843c59

C:\Windows\System32\x3daudio1_1.dll

MD5 489e5b8bb1bd1028ff1c798eaaec65e4
SHA1 da9c385c48a6f590347581c5c3dea67502b99837
SHA256 fac23787e7c199c1969806850b5a9652f66f6dcac86f48f6f834abc253848a55
SHA512 33e3c28d60c7063d76c6959ef18dbb0227466766c4be9ce920911e192b75c18d11943a2eb0bef2caa920a6efa29162acf9f6c9c07ed5ddf5858420b240e0c0cc

C:\Windows\System32\x3daudio1_0.dll

MD5 f77d5ab654881e683cff6650916c424e
SHA1 56d8f090755f1ec60b13e748b040069ea8759b5b
SHA256 77cc09cea6de69f12106e6dd9df1c0446a525a54c3953d69d64711b9394cc38f
SHA512 dcd1273673f4088e854057e47484bb363e1e7ce094bc2c98ad7cc9112877892c1d6fd591dd9cfb325d6c451f2d03a4cdcc238af1ffb5382b7153f079cbe13abd

C:\Windows\System32\D3DX9_43.dll

MD5 7160fc226391c0b50c85571fa1a546e5
SHA1 2bf450850a522a09e8d1ce0f1e443d86d934f4ad
SHA256 84b900dbd7fa978d6e0caee26fc54f2f61d92c9c75d10b35f00e3e82cd1d67b4
SHA512 dfab0eaab8c40fb80369e150cd36ff2224f3a6baf713044f47182961cd501fe4222007f9a93753ac757f64513c707c68a5cf4ae914e23fecaa4656a68df8349b

C:\Windows\System32\D3DX9_42.dll

MD5 1af7ae1fde027a30b9097280819a0a86
SHA1 79e158e4b9b04bc5b69537343f244fc2d12db1af
SHA256 1d6f5aa25ac2f1e55d3fd89cd5b33edd4de3709bf0353c75ab8645cebc087fa5
SHA512 92cf7ae0dfe1437227f8be37f50d84a6b18876485cb953c6a972a2f0c9f10d940941f34e8c8188559523b69bf2f6ad463526f87de52f8f142337031e753f6f0d

C:\Windows\System32\D3DX9_40.dll

MD5 29a79f0b607faf5722d7baf2485f632a
SHA1 ae2071ab9376c13c6c7af6c1cbc5a246cd065c08
SHA256 8a9ea8bc06786d342af4e7d171abbe6640cf31d9d01afb86dbf63f26302077db
SHA512 ce435c8504ba7516f982104cc145d1a63c2d067b4be9eaecf9e25e889704b34b03de839d849d4fc16f2796a4b6b1889147bfc464996966cebf116f70ecd5bbfa

C:\Windows\System32\D3DX9_38.dll

MD5 e5ec2ab7156a752f9614cda4be66efe8
SHA1 08be46f96fb866b3b0bfee3bf204c4240344db5a
SHA256 b54e832bd8d7e94772c680f49c31b86f9c5db456f8e5cac66720d533896f1cfe
SHA512 f739b39925500498557cb3082c10629fd8a96f158e8846371e19446990a550b68ebacf7c118d0468cbc17869d72b48f7b6ed8d6bb3dc783e32716969ed7f935d

C:\Windows\System32\D3DX9_39.dll

MD5 7505c133fc704b40cfddfd38777baac3
SHA1 34fcfe7be4a9ea08c63b6f5392ac8cd10a05827a
SHA256 aecbe2965f7c9aa60257670114c06b21a3de914b03e20ff569c5cb44ec4807fd
SHA512 8ca2d8be9dd148587906b154ec9d3ca0d1d7cd781c2bf307011407303fce981acce63d28329083a6a731442743732789aaea0a7bbd4e2d2a57d4f3e284f7b471

C:\Windows\System32\d3dx9_36.dll

MD5 bbb6c6833c30e323b41860d6df61972d
SHA1 71004a6c62bbbc008b507eaf04768e4b4955a485
SHA256 c683e8e543bdd678dfdea0b325a3de04a419eeb053e2f32702d8b472aaf54c6d
SHA512 7749ec296517871873dda1df0ad0cdd7101cd26d77dc15f2fd3425c0fdd777392d3842fb508425274890d9c25f62a6d641cf31c87f39e0c98edd15fd07cc6b06

C:\Windows\System32\d3dx9_35.dll

MD5 1b3af16a27d390096925576202a64037
SHA1 1290b2e2e6b68366287eb5e79d7433f2a756a062
SHA256 ca195b7ee7aee29e6417acf0e6c1736d9aac76890a622eb62ed137394fc6f2b9
SHA512 db0b9e847eff021f4d65148862fa376340dec88e7ff2d0e4a74ece5017f6337d3c73fc4fa35491efa90d239a2bd9b6c7f1752e95fda00db1bc60ccac2648ea3c

C:\Windows\System32\d3dx9_34.dll

MD5 ae5d5439525b4a4cbf206058d493685d
SHA1 c7cbfc4b7140852fc907aa22a48815745fb2047c
SHA256 715fa6d4931324cca594c4fdfc60274ed29d296bb4592d102b36bc976c8b8ada
SHA512 f947d654c1a40ee916746a97a128515b18d08a169b8cdffd50b8473611e9f9938ddf439905cf02bba01f5c07066b52162af8e5498bff593bbaa4d5741da8667f

C:\Windows\System32\d3dx9_33.dll

MD5 3172c3cac8ea7ca1b5d5af6699c037d6
SHA1 e1e2d11a96072a414a710b93f0b4f6825992c374
SHA256 7338b1d039d0c08e45f24874e4918ffa642ebfe5967c96035f66f509265fa33e
SHA512 6f27d7a388675137d22d6a84449a42b53530b4b07b217e93367eda580f44315c24d520b58b094757ccd02a7690437f173e266fd0df0521dab6ade1e6fb2b4a3d

C:\Windows\System32\d3dx9_32.dll

MD5 a4ddfe5dc4e73d1fed9b1b3a3d885612
SHA1 318efd256f0e7e717ed215ba6c95214d212e29a4
SHA256 7c723479e3720a52f286d2e9e044f19ed893a34e6819d53e4de6991048febad1
SHA512 0734f7dc4292371def99e66a0787260577d307010e1a22190d5e78d9f2cfd562e85c03e4a1e56130d793e41115171f9cc8d921e8e8038240cdda2960cb7e723e

C:\Windows\System32\d3dx9_30.dll

MD5 e09a9cf383acf4a28038561e62277377
SHA1 131060defdee3648bc43d35830d9409ff921bd85
SHA256 7d1374e3b921a70b5028472ab164d9e582e3c3525334235d642664189da9b157
SHA512 6350b6931504bd37886fcbf577436b2c5b0cdb1c4b5b3027c4ae03dbb36edf7674f10fc457115b0d8e913b693af2666b5dd4b97b843aa7eb379940c780ea6ac9

C:\Windows\System32\d3dx9_29.dll

MD5 68b35cbdb4a8cc424718bbcc894feeea
SHA1 c1874de5c76a55a1c42c5da20d7204201586ca4c
SHA256 d496c31a6b0f41398ecad7698987c55c2cb88eb6568976ba9b01a197879dd9dc
SHA512 da3b8251417b63d086e4223219309faea6faf3ed9f70f0345ad77f6843fc8c121ed36403aa50601434962d3089d529baa1faef0bc29602567fa3f91749d8625f

C:\Windows\System32\d3dx9_28.dll

MD5 88bac8306d4ec79a82b1ffa17dc8cf4a
SHA1 0a0ab361f04ccba8268418ebff098d3da1ac26a9
SHA256 a2870f86e2f1b11646ff3f404bdbde10520c481c1400b20d25fdf56e66fb0a17
SHA512 b664033e270d71ff88139bb3e71fcdfc8417f65d7c80a12f921a60b0d825ebfe26a14bf16f9d23a10af5c866c1715e21c879993f9be1c54261c376a7cbbe511f

C:\Windows\System32\d3dx9_27.dll

MD5 914c3237e4d145a18dcd1d0d4c8659e1
SHA1 32503c8f8d80551c896bc2dbf2c8ae3c490f0ec4
SHA256 f9dd288c9895973f8db1856d172779041c6dee173ad1ef53b1727fc85cb6b75f
SHA512 c760b5b0b5507da8f2336b2b0625f344f28fac33da16a7d8771a122b0ba54ebf5d2a2f702f4ebb83ded746f38d63abd378a9aa3b3e50579fab7c047fe38e2c02

C:\Windows\System32\d3dx9_26.dll

MD5 44f5c5e27d6825e4e62420bc29b8b533
SHA1 046455294e199af99c7c2d9174d25b230e6fd0e6
SHA256 30b06dbbd202494bae3b87487e7273adcffd17a9d2c29977030fde0570aa841b
SHA512 0c9adca329c386cb2caf0f36d672ba326929f02c29748b13188bb7ade3fbec9131ce86a6bf1b3064a2fbb8de6b8adc34208f667df31c5db182918e79744a830b

C:\Windows\System32\d3dx9_25.dll

MD5 4c56e7c5b2a61353e534c7d15d05856d
SHA1 e6e0a59a1e8217ae06cda29942537bc4be25d5a1
SHA256 10b09474bfe4e2bb395472628646bc5f353fbfbec976575c45eeff49984ebaa6
SHA512 6f630ea0764b4551d80a96f6c2b9391ed5741f14431eec951699c0e42b9434a45841d71bea5576b285cc20d38fd082b4cfc8062e4aa61f80aed9e57869cdd5d2

C:\Windows\System32\d3dx9_24.dll

MD5 b165df72e13e6af74d47013504319921
SHA1 c45b192cf8904b7579bbc26c799aa7ffa5cbb1d4
SHA256 1ec422bd6421c741eef57847260967f215913649901e21dd9c46eb1b3bb10906
SHA512 859b6cd538735e5cc1c44f63d66b25588ad1ad32202cae606ff95b8c4a80f6a66db9ef7c5d43820010de9334b8bbbfb079939ce89ba0b760f5d651d7fa8268ed

C:\Windows\System32\d3dx11_43.dll

MD5 9d6429f410597750b2dc2579b2347303
SHA1 e35acb15ea52f6cd0587b4ca8da0486b859fd048
SHA256 981e42629df751217406e7150477cddc853b79abd6a8568a1566298ed8f7bd59
SHA512 46cbfb1e22c3f469bdc80515560448f6f83607fd6974bb68b9c7f86ca10c69878f1312b32c81c0f57b931c43bad80bd46bdf26ab4ffb999abb0b73de27ad7c56

C:\Windows\System32\d3dx10_43.dll

MD5 ad7fa9485059f4dc53c98b49cab13f0b
SHA1 eecc2f4b2fe17d9d8b9e3abd7160503d10c0d14c
SHA256 9bffa1ea073d79e9954cb398fc91b93ed9dc79ed2205995d4b949f1cc2ad3bd1
SHA512 ad703a57490a01f4e92201fafaeefa8bc60748aeb18be8c527ac0918b2a35f2a7884c9fbc4b23a3da03ad66954653f3e4314399ae1d9dd4509efce9b355e212b

C:\Windows\System32\d3dx10_42.dll

MD5 b739c423276ae62d7ac91773226ec13b
SHA1 42ddf7bd846a87c428629191592ea79144e5d541
SHA256 dfb4baaa5f06467183839f14f5d28466e7c6e7eaa90f292c4516ed6926f5da8a
SHA512 9280987b4f95940a2160d453d29fad6f4db4590ca86351fb153913ba12f443e220b3837f07eba2b4017c528905e7a0f19e7141dad33563114b726267ba6369a1

C:\Windows\System32\d3dx10_41.dll

MD5 e730967811e3702499446ffc8a432607
SHA1 9e6a7c58b2931206229255f703ef3a716e9aa9da
SHA256 464653c6c52e16d53b87c1f199c693f748fa48228f7690f086350b0f7bec581d
SHA512 7a15336c3da0e38b6bc4e28be1c752553be23e34a0ee9d71a92fada0895609c73a082c3f3766c36541238841bf315e18df7e4dc1379af0c809f9f6134c67bc9c

C:\Windows\System32\d3dx10_40.dll

MD5 862586ad4b1355f7dcde111ee0aaf350
SHA1 aadb69f932065dc3ce8641e575e6a5d1dbb49d64
SHA256 48af3a1834640969660a37899a4cb17677fd499c26185ac940d284a0b4212fb3
SHA512 2895b6a58f65c62807d48dd338e51879131c09e4bd267e43c3250fdd6fe1319d6ba2070535a71f65dac9e33bc64166189c834d9a2e6acd0b07fefb7641414429

C:\Windows\System32\d3dx10_39.dll

MD5 eaa692fdc990ed0407df957316da33c2
SHA1 22f313b0f533c483a726fe5b8d3b0bd1e194081a
SHA256 1ec45bdb37e9f8bf7b6684deff6799b06d4bc2e2ef72b5f278d6c4b3a7597b13
SHA512 cecf719e933df47575142316c617e9895882309823f0861dc7b689f31b237c688ef027f560abde84c5da0d9b2cde19c0201f27f1887557845d5d914439e73060

C:\Windows\System32\d3dx10_38.dll

MD5 72cb653cecf4ea670e7f5a8d74358423
SHA1 e3ca79e889df81e6fc3bb1e0805e73b726e883a4
SHA256 1274a3902a0a8ce9309d2b636eec3d42048ac90a68a0add0e372027b3f000104
SHA512 7d3419face3ee9f53071277510fd5a03fa8b13d9f00afe52fa1e1ad078b96a4a17c6dea0999c342827d81b1385951579e5a3ce0bb464d1b7b2c3315c97d2d8ba

C:\Windows\System32\d3dx10_37.dll

MD5 a8c5688bba00c1630550f26260ab5cae
SHA1 361840d4c0ba745f6d3c10982d9a9040f34f62fb
SHA256 3bb17715d9de0878f65a3a006b8614532a6133f56e12ef5fa392a63337c0c275
SHA512 e53ad3d7d4f7a2bd2dfd23d5bb6df897dbd2043ee681b3959ca3d36129a9e547b7b1b1f0b896d4f07183c0e2b981c5c899638551c5d93f4a233badad7f0e7c33

C:\Windows\System32\d3dx10_35.dll

MD5 84116aa94672d623b95217648ae5b5b9
SHA1 7858db123a9c7bb12841e0f69b633d8e8d6e7e52
SHA256 2030b7d57c88b653a0eb55ea85ad90c6c8630a00f5a56ea5f9b6985acdda5289
SHA512 4f7d4ffcfd105c9e12c2d72d7d099699c2a6bd24bbff5cf29c09b7bf296a391bfa88964ebc9affa06681eff7966bb9e2efe7d2edb4f51ef604692ad00d4b3ade

C:\Windows\System32\d3dx10_34.dll

MD5 1ed4e7a82bd5c7deed082f00e63bb7a0
SHA1 99bfa08d5c91db1c18f21c115386b923f83c8cf2
SHA256 f7f367df5d0fb5e32113515339d928a51d4253b1c0e21854277f67d0b271fce3
SHA512 3f4ffea3d06a9f85682cc65e741698f718d26291a2b21388356e9d146801318f6a0757b53368e3492ac0de071d8452ae95479b5d41d110f5a5e09051ba0c2ddc

C:\Windows\System32\d3dx10_33.dll

MD5 839c3921005bb41d441e3752c74f2292
SHA1 bb419fd4cd2e9fc9133c88cd6011524411a63fea
SHA256 3f0248c3bb9bda2a901b343b3b58172e175a86450d421f0fc4aebbd5a7d11477
SHA512 f814096af7e17ab01879d2976dbe0f52b0421f355087289f92b10719338852d6fcae88db06afcc4b9a6f95709458f90c4a14a1e26ba40918bc631137ac1309d2

C:\Windows\System32\d3dx10.dll

MD5 8251826f04ba0822d08ad9b92c65a3d5
SHA1 5468f1ee33710b5ad4dd43ab6eaf2e5e5cb2099c
SHA256 03115a37f75fffb7abf07a59ec6ecb5217d3479bc95f92846c7e9b91822a0567
SHA512 bd7a36d8bc7885f549b255e1bb636580c9235c36d34f8abb5623c23d3900df416150a79688eb464340fb394262a156c2bd612ee8f9d7e6a858b288c0eb4d2cb0

C:\Windows\System32\d3dcsx_43.dll

MD5 5f1da86286a2dfb01c4fed55c2dd1d61
SHA1 c28525d941f1db5169cd56839559a3e9c0bb0c13
SHA256 3c9e1b87f2763f58402b5104d21e0d9d5db352fcccf7801eaa4cd1f5dbc20945
SHA512 9099faded2fc4909ce43dfe1ac804eaa97bab747889b7f437b69c1624d78f59ee3575ed2849cb75b707eb00b6775c4780b96d856023c498309acd690b0bcd8a7

C:\Windows\System32\d3dcsx_42.dll

MD5 f13b90f5090eba9041558bc6aaed79b8
SHA1 9bfb532b69ffe30b60e563c091b695781558efeb
SHA256 8852c218583dc11113705bd89dabd51b0f77db6b393eaf9a9a751652b7cdef24
SHA512 7acdb168a355f2ced8273b6b0aac7a29a175f82362ee2e7e38158b881dea2609be96cbdd5a03a4ffb2e2b724ba570c80ed79d017016c10faa6c82117b3fc82b6

C:\Windows\System32\D3DCompiler_42.dll

MD5 e92d2e4afa43cd39a8c1c2c2db59667e
SHA1 35011f5ffdd070ce9d19052d589af02df9e3e94e
SHA256 4d61e843aa86d8801a60d01b8e872379c5b2503795a2bcbe6141978396ade00b
SHA512 1cd8966b58be205b99cca480ea3fdeea38214580fb464bd6e6397e3ba1854dba1f71a964dc4f1ef47ce668e71deb8c785c3b827aa2630f1827961b6c61514239

C:\Windows\System32\D3DCompiler_41.dll

MD5 a59a5bade4af200c720d99eae6e04e0e
SHA1 3c918aee68fa2465e56b93cb7cfe884e2e166c96
SHA256 f96d915c2d51346fe1a35a7d0b7acef7a3734af2c75579085fce9d1a29e0f2e6
SHA512 07a1d209a307ac8c66052e8b189ce86ae61ce43547bf633526784279182236041a3d3bc92ce4d4c5e28437464b25dd2d7a596d7cdcdccc6237a253fd60362d32

C:\Windows\System32\D3DCompiler_40.dll

MD5 37309b833480dc69fde7db68f9b8bc20
SHA1 2de2234f94d422a8f6d286150c307772850a8702
SHA256 bd81cf5c9b127519dbeb284e699e9d7545ee1130e655fd6a4e66b959e9d9aaac
SHA512 576f31d7619eb0dc98d90d8b831692eb9b489592c8605c27af7fe4b9c0fb1afc2ffc080b40a140feda01ca03d869cc577b6c443af6cdc52a3f6f9c456ce3a418

C:\Windows\System32\D3DCompiler_38.dll

MD5 a7e59bb6fac119fabb83f18bd72aa1d7
SHA1 4026fdef6f07ce8045350791d532d517c80b2109
SHA256 1ff6374215e326b72dbdc2fe8af4f9002c5d755358ed8795d781f4a1078af174
SHA512 384a2b0412557441178ef7d42380a39bfd96be691adf5ccb30c709904916ee42f874762ef74717b56a79ddbddcaa391524766231196ee4eee61c5b462d3b0e7a

C:\Windows\System32\D3DCompiler_37.dll

MD5 31026cea5afa2798292179102c06fe40
SHA1 d0a4291094d188e3132eff6c566f1a4074036965
SHA256 425f0d7ee0f2845424266aa56f2cdce3a61541d5e2c7d7813f4373e45df0cb8b
SHA512 5131bb146140bc5a9e3abd5408519d1bc350f64ff0c39ba10ad2ef576f5e45e6e55b7d4bbf75d443c825ff03f736fe71cf0f2430cf588cb5eedbf9b8d37471df

C:\Windows\System32\D3DCompiler_36.dll

MD5 7299df5cf81135934740211d9a946737
SHA1 7dbe7065b501306d60c083ef58da3690e05ae1da
SHA256 d002a8731182968d4036d54e401f9792a57c1c84caef576059ca18190b4698a4
SHA512 3b35409a58a0e7d09a4a9d81277304660af8829f614cd0ae2f46b9ec88f71a773a1e55ddc1e1694fdfe6b877e535cc1a588adfa7328d4ad4798d2e2fb542d7e4

C:\Windows\System32\D3DCompiler_34.dll

MD5 9d9407f52b8e24e99358d9944b0d5fa3
SHA1 323d9a17d5db1fa8b6d96cb15d14a41d1462d945
SHA256 95538ba7d65336b617f64d66789f3bf53f9bf52ffd4f717483d1a7e6a02c64b3
SHA512 61b64c2f4b33e7a5ddcf60d05212bf97fd8ac32c4f064959aa95225a9baeba9f22877074b10ebfcf768c894750ffe432f06f98ab126fa40f231d3f8ecfbce83f

C:\Windows\System32\D3DCompiler_33.dll

MD5 3ebf620536a13ca343e52eca4f0de7f8
SHA1 b46cd27a56c832b04246e22d4d05e0af3ab3d0ba
SHA256 90dc7e301a3dfb1c015cb73811b77a5ea21f8ee46944011bca3a270584473013
SHA512 456aa59fa6b1e3523544f3d644f946ccbe814f8f6ba175b18b2be0600fd72972904f65899d4a2768a261cd8d1f9b7618a2e867ef3aeded8167e0e45a0d4134be

C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectSound.xml

MD5 17d9f4cb25043942bbf4993c78916660
SHA1 7a112b31983f3bbd50994f67587d7731f27c6812
SHA256 65cdf4c3456fb46797776edcde06e16b1c17a1defc1c94c0c2af62f63a5cb2d6
SHA512 aba64fb373ad21f6ba5e8dbe92b562c78caeb4b7e95a73bbe92891118c1a84a50d38e33b76b67d8e60c64c95efb2850718c3dee6d7ae956cf085f5906904057a

C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectInput.xml

MD5 6528465da062cf483f754cad64137d2d
SHA1 1976a7ff25e1e090ec415056582f1bf6d68f5fd5
SHA256 6b66e10478cbe44c5a112fd0ed4e1d4b94ac34ac197cf2859082269127600819
SHA512 5f23df82c73a54d5b451c348e09566e2e6536833ffed6082882bde2b7c4a4723601500ebd7b146c76d8ddbf946d9137643028169dbf39e62f429dac53deec438

C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectDraw.xml

MD5 deb9edb5c271d99e8fcd52f207aeccda
SHA1 2b394b682ffea5de219664a53588bc38707dd229
SHA256 4ae5c1ca9e8583dfaf856e32111a36e5802962101d2b67e1f50800d3cde3bce4
SHA512 639bbe9df406d77a70c22e72ac1566f841ca632936e53a183ec4ef39c0e6b2af7e6289360bbc03dced9a6054ae6d0a68fbcc6898027830d3ee0e85ea3a65c8d7

C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3D.xml

MD5 6af4b128e10199df1c693f6160988838
SHA1 df308d8bf7227efc27f6915d7dcedff23c397f11
SHA256 3c76cbd0841fbf6044dab6af73b770e044666b5e8336e92d74f330677ae4816a
SHA512 28522459dd395cc576e0167b6e49d9511bc65ebee7c689451bce8deaecd03c4433181bde0d6e8d49ce407c64743face3471e10e17f9f5a38abe393ebfb0dd878

C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Diagnostics.xml

MD5 3b535543a4826d71679669e1880f51f7
SHA1 43e64a3a59a6502217d216415115f67b401f6c15
SHA256 73b5cf6b8ef13759e6a8131a71389928eae8c678344034ee57a5a8eaf2b82182
SHA512 34fa0c10daac12e249224584b2197793671487361dd3d30324a74f9fbecf9d4b983cdf9ce3bce1e3e89ede19c7a8b4a97b2581ec48020c9ee3c4e2bfafa224cb

C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.AudioVideoPlayback.xml

MD5 b82423568ecf1d9a1e79142962fd66d5
SHA1 7e85cfa952a7468ac35b02f256f0891d327e95bc
SHA256 d7ac200711a20e1e93fe3b61254f6535e7589e52baaedb396ae5f292a9f4be43
SHA512 0b10003b36bf5b145d18717c8974832bb3ed72c5aed7fae304514186ddcee88f809b4975bad28002db6300fca2db12b5d844b4f4449b1924c5bb860a581637f9

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\P3-OPERA-2.mp3

MD5 bcf391863f1e2c7a79df9488c5fd61df
SHA1 7f1e33d2b2ac6584091bb0d60d5a85af6eac8e7b
SHA256 70f9baa47404c2e4d3da11aefd7fcc99fd3cb41110f4da813a6e6be3d6816e29
SHA512 66c2425fff291e59e9c8d0ce04b84234e3232dad94f88de0b5a85cb02eff0a372c3384ff10459e202abdcb9ff15c1afd6b3d90ffa20b9eff5da1931c65c056fa

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\P3-OPERA-1.mp3

MD5 acdab38cb356d7bf803a0f4564a9daff
SHA1 d5a994483468219af45006c02931f4cef772bcba
SHA256 e47d2a223c5ba6ea94571d0a20f2343bd1852f8aea44ea0bef1463ca4a54b01c
SHA512 851122293616ff4ec6eb59d5e86da26d236d768198a55b81bd3767d983f4ee2668c4e56fb588ef086c9beee80c23f5687573879d45fd35b81e5d7a3b0fd60d3b

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\OPERA_UPDATE-3.mp3

MD5 64cb23db3439e7f1c25819699c21aad7
SHA1 ed571174ee078b3c04fd14c37285a4b6794bdbdf
SHA256 54f1fdbdc15d02d3521e9fa466b605d60e9c85075e69bff8848655ed489cc624
SHA512 c9c5d63f7562424e0ac6ad32da96c791dae9984f2e0d02b051609afcf222c5246e5888038286939686b12978b772251b0faa523aa95ac7deaa59de67b89d5b82

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\OPERA_UPDATE-2.mp3

MD5 f8b9ff5ee5276c8a56b4dee75ad9d0fd
SHA1 9ba979ac9060dd906e93aa71bb625b88de7a152b
SHA256 1cf68d3d88fb331173a38f9aacc62053d220afa77f4dfc3f9a307f32599b78dc
SHA512 e5d7ec2efb6cb5d9636869216f2a717df3c3a0c85aeca7d12bdbf645cfffb40a1d6e8556af7d42a7d145a0b5797b6717934d9160b4ce3a24a07a434c786ee497

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\CONTINUOUS-1.mp3

MD5 efa6f5d70c558614f18c17d54c155fe9
SHA1 5fcd5fe13f7e8dcb80c8f3f3febf6cdd00c67c9e
SHA256 571aed8d5306ecfa709dc894f6fe66176bc99380ee42694328b3da237fd6b989
SHA512 0e89ef7cb550ed7340b7e7fb612273938c5b0ce61edb8f4aca1782982067fbb51d099ae2fdf27782173ba0182f487c9fc6b11fe67b109f0c510ef8f2dc8f35cd

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\ANTIVIRUS-2.mp3

MD5 b9d3ff97b96457be067dfc0b4bf06cf8
SHA1 ef1d8323a077aec206027af7616843708e898e9f
SHA256 c87feb5bd45ff4ffb897f53c22e3e2f5732ad49d124724248a06627162bc40ab
SHA512 c0e09060fb1c32d296abd0baebf741b5410ed3923da3b942f6e9d2510323cc223597fd0f7d4c7eb78116df0036d5f9d19115305db104eaa8671e3809672a80b2

C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_60245.txt

MD5 47a22a7a342fd09177c62fcb8054933c
SHA1 d2b7928a34eedb04acc61c3a0e01d3138295e855
SHA256 51e6af14fa1e9032300dbf76a85cb8561e523e89c363cec09cdc2128801a191d
SHA512 b9ab174618fe617b061e27c8f0d4b7960271952a67245c2ad6155e93e0c08cab696191fbc7069c89f05ff545318f930cbd0dd7dc41b9cca0e7356143d3b47d98

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\string_decoder\README.md

MD5 3172f7d9461d11431b78995490555bca
SHA1 324e83b5b018b9e290e3650ee9dc907332df7ddd
SHA256 64417fec74bed1e4160c792189c85e6f37f4232a179e2beb04f32d80df76c4cf
SHA512 2cf37fb17e920c1cf82af05acdde7cd9db09f5e0d502a29bc5d77ab6b528c22b5c77efe8d8fd03736ad6173c26f7442e5b86f15caa3a598f1ba5b8f7831ee517

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bittorrent-protocol\node_modules\ms\readme.md

MD5 1e31f4878f79731feae6d1bcc2f1ca7a
SHA1 e5af6580facbf96aac53741846d5845ca716ff97
SHA256 8bf6c4f414b123ea2a9375b91982882d01d8561ce7d12e3bb4f448c23359f040
SHA512 a59c23b8956ed13c415035f09b19ea03d4c9b6759ef71d042735871f46352f444287b0c3dd55f564dde5d97cd765e4c1668d757387c0b5889c5858b10c26bf2d

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\isarray\README.md

MD5 e7424a48d45a2e04d52c15e786681063
SHA1 b4a604915101db16bb5aebc51cb5385b40c709b6
SHA256 ff138e683771b187f3629c383db72ee7d632009010a36d08e18e8d2a34222ec7
SHA512 e9a2c515e36973935a23352c05b138e11ce8b96f81349fdbdbc3e884dc0acd53a1d8c2a3d96e5c74d2c3fb9f11f52bff895f30ba3c974ae29ac369877d0f7c9f

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\simple-peer\node_modules\ms\readme.md

MD5 04009e125e00c7e93c7c1295707858d8
SHA1 bc16733cc72e710dc1d447280e17d9c2c0b3f3ba
SHA256 312f19921548f72b8432695039c4f8e68d3264bcb33c2edec59fb62bb3ac0d8d
SHA512 ad1e97a666779216847353c41448d0f9e5b204821099ff482a74f14f308d64f5b52ff9e9e250460db8ed52f1af1eca6c6b7a451976214c3a65eec53931c08ec6

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\README.md

MD5 729e91e9f4a6345d02006420bb34bc81
SHA1 f48fb91f1cf767e1665a3cf209774cb5b975e08f
SHA256 fb6579524007ebf9872f16601fe7cd7419bd9994f8ebc65dc0c304714a0d1541
SHA512 c6be333314273b15e301f5e3a9b7553d981b7ae8645e6b7dfa385f759e3645f1de3191ce54f3f0979e828781e9437bd3756cce0840877e836294ee94502f10ec

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\mp4-stream\node_modules\readable-stream\README.md

MD5 c0f81590a5106219fef5d95c35a47c3f
SHA1 c6e9344eaf12b0398f027d903bf4dd2c65addf00
SHA256 2bdaf66bb4ba368e12d7f8fe42eeee6956efdfe589403bfb25c1e2bcc9d98d55
SHA512 fd2a13e402046fea92ae2d297e93ba7a8fda8663d396b96f066a75b2e9187ff746de8dd3e468e22553a6d0e5a1894ab1b40470c293be03841d5c5f3fda94b10a

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bittorrent-protocol\node_modules\readable-stream\node_modules\safe-buffer\README.md

MD5 570381ffb15269fa623a0b75e67eb63a
SHA1 75916065970faa645bca603327ecbaea09afe12e
SHA256 d301a850808775718ddb510d4bf2a922d9b0afa72894e67137daa20fbeafac05
SHA512 4185327934cb42e8495da451c6fc1a3cb5fd4e3e5c91a46b0c07c0c4a49c03ef8622332e0c441d00dcb5ecde9d293e76a20bdc6a9fa6aa6e713c6f2ae11a68fd

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bittorrent-protocol\node_modules\debug\README.md

MD5 d20c693ad66eb5047b5f49eede60cd4b
SHA1 f7549a04dfed8f335756a582c561cf94f0da1175
SHA256 5653c9afaeafddf749a831e6cd20051bc5a6f993dd141bf078d81970515d88ab
SHA512 7d9c26fc6f01921369cf0022e1d562845a53cc6723fea3738c6ac182be50696fa2aff09ce7ae76537dee86714c2623392023922aaf70c046f4d6106c9cf9f5c4

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\node-wmi\node_modules\async\README.md

MD5 aee60e694adaa6c3e8ebc9b15ccc1a39
SHA1 1e5c0380861222c007090d0c0a1d8ca4f5272dc5
SHA256 79968ee3fcb0dfba86adc06d0f8b133dd9c1d4ab5330756a2393df8c3d3e79f5
SHA512 e74fea6dabfe750d3514da6f9f2986fcdb4b60d5ccd8a573ac9247fba4664391dcf976bd07efe015bdce266868e4f50ae493ffafac88599c7e2f9689b0e44013

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\lib\_stream_duplex.js

MD5 53328d86ad3de15e7a1b48f4772890a6
SHA1 5c9979ad235f24ffec84966ca764457a6a8fb933
SHA256 fd17d6a92dd9ba004c85f8e364b2771af10d012a83766437447dbae63879fa6b
SHA512 fb1a5f969530664257763e10cfabb30b62356d00a6ae65ed64fc85dd36ec261c9598b8ebf281c79fa0c200567f6fe1e5022ad682e1be8a3ad1cabd2d2a497f3a

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\mp4-stream\node_modules\readable-stream\lib\_stream_duplex.js

MD5 6f9b7f8bf2661ec44ce7b84b4248c379
SHA1 77b64724f649c692a50023ad88bc4279c7e4d6da
SHA256 c3d976062b770b4a88c91d244557bbe9a828b55dc2de1f9ac85c2d5e909389c4
SHA512 1a27ddefc6b4679597c65f0e47af82c6088b96fe770f91d1ebfa4b0b8a3a28c235ae90c8b47308af44797392769f5cbda951c6cda2d11fbcc1598c2895722989

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\mp4-stream\node_modules\readable-stream\lib\_stream_passthrough.js

MD5 7e0b4b4b1b26b5ffddaaabf665a9b047
SHA1 1f1082e006afd2e629ae81938bc09f25f3333da1
SHA256 14475641ec1d85dcbf95e2555fedb04bf02f8482e08822a5a09b01ddc6389f5f
SHA512 af2d871ae5010292660d986c206292660da3906a6b6acfa53da24bf73451fa6490be040b7c72063791e99cb668effc183aae49a3b6185aaae4ad2ca5f6d3d8ef

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\lib\_stream_passthrough.js

MD5 5dcada23e7d0fed2ac8320a06f0d7057
SHA1 38fe3358505ae4667dfc1f7fdaf09c4a35eef7e9
SHA256 bf61450b1ff5f94fea9d46665e931119642034c903e63cc224b4c96472eed4d4
SHA512 a8b896641c5021fe0416e1bcd3189ee8061100f78957f06055f2d8b68fa8dc5a53784cd204f04561af14deb6349f55777d393710f8c1192c5b69a84c31584a36

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\lib\_stream_readable.js

MD5 7c0f10aa2684ccc0a246b9c2bc13c2f4
SHA1 41695bf58bc2b80448a0bf33855c24146bf99879
SHA256 f0e34561f8b2138c0f156d54f552658f4d47400afa4cd5c486923de2e9878c71
SHA512 df1daafe2df44734d3f020304a9c7ac9cd444e1faa8e7b14a0a6190ac50804ed7655f11c77bad967478c88c21679c594d06ce95acd0d0289ad60e7aabe05171f

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\mp4-stream\node_modules\readable-stream\lib\_stream_readable.js

MD5 59edb8211c4b16b4e3346a4ace88eda5
SHA1 3f29c8f541b965784ebad8b1744305b0d3ba93d0
SHA256 c8d010d85186209997a60b3cf1b653a77a88490a3e11e015c2b5eb2d56c30fe7
SHA512 a76887d11e825f76f0d153232954d5c004d6648505a8f11c5fb41977e22ffebfc80ddba9c346a432719e067e203537a569054576b7441c4a6b2deac0cbb63bcb

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\lib\_stream_transform.js

MD5 9cbd9508cad163ef01dad4cee030897b
SHA1 52bbdae8d18908d8783c49ff2dc5803e7256c541
SHA256 56220d9dd58b976f1739bfc85948b267d79772ba23672ff402d13b6b3fcf4e40
SHA512 910af29c89b4114ad09e287c7d347538d494ec88095b80185a2f5bfb4febab54b337c328e2a05b4bab6bc9a3fa7447d00d07cee54e42e34c88f0ef0138289e42

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\mp4-stream\node_modules\readable-stream\lib\_stream_transform.js

MD5 84514210c10a286a1124be3952129919
SHA1 9547a265029e29b68db04c9935bcd7eda886112f
SHA256 d85bb2b8c6ba3cf71e6ae759342df89dee95981c6856e9f4dc0b85d70cf60b59
SHA512 5f1ec544dc61aa40b0e1f41b79ae0479c013db0c659332e32febb913a2ec8d2e7e1ec394bc92ef6e17ac5b314ee1bdff3e0e13733200452a59cae1c43ed118ac

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\mp4-stream\node_modules\readable-stream\lib\_stream_writable.js

MD5 c10e273e2a5ed4da4ca7f263ae165dbc
SHA1 e6c7d0be4a538f3041390eb17a0ef7957ede3fb8
SHA256 e97dc3728c1ba71414f84cb44cb4c4ecefdf0fdd1c3242a5f447e08ed20cca6f
SHA512 a8bac933349c2b2fa5078fd4a643af49f607c542a23fa7b93a5439e460367af0f30c7bafa3332d8765a6068d5ee0a205517d0457eef8bc56faebcc6f01a133b2

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\lib\_stream_writable.js

MD5 d4b6f37c88e824c30d72609b26f7a07f
SHA1 e51ada4a58f5a1a061586678e249f3ecf34ce51f
SHA256 3bea15e60141038162629b409fd21f2675e793da947e3afad0fb66a26d427299
SHA512 d1fda3a2caff9b77bd589194d2b5d66ca390c2236ab0a90637893e66110fb4c226a5ef4a8b0a2588b4df1754e4c1c3c6e43ccb90ccdb014985a532413943df37

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\@drp\require-dir\test\simple\a.js

MD5 23e256cb82db1862f010be9982c81922
SHA1 1cb54a26ca598c86de71fe2a63a85982bb0b4737
SHA256 25b6ae7458b20cc71b2007e71b916286b7204c9a4c6b5153f3b1916bda4726dd
SHA512 b733853d0fc3e6ba6e62e3f20d0ad10dcef472ab33911f85ce2442610b52b01c4d0905e4c054c6da7816d74666b2c4fb6f51aac0f37b8e2b07abb7f0d1ae7e48

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\network\node_modules\async\dist\async.js

MD5 87487eb46edaa0080452668793c557f4
SHA1 a410bed1e8c6a19be68101c293ff66c4961076ae
SHA256 e20becdff02350e11ac890abea9d6b773cb823b795472eafb81c50f3ff2aaca9
SHA512 a9bbff27b703de9147954ac615ace7cc5aacd3dcae82f78396693516359ac2ee9202a1907a24b53fd4eee76def0b67229ceca639f49e0055b072079e719f5ef4

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\node-wmi\node_modules\async\dist\async.min.js

MD5 25a1c2b9957ba452db27d0ff8b625790
SHA1 487f1a1adb0bf6b00233edb64e64f2fb305ce5a3
SHA256 52d02deb74b9ccdd0b4b6cb681147c3cf7c6937024232fb50ee6f1196f967599
SHA512 6b820497e4e007b029dabba0ecd07e9956f13dd161215e5142d9ff485f8ce20d1ca50c1606dfd29f1130f88ca89b000188743cdbc24758060d933142b9c5590f

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\mp4-stream\node_modules\readable-stream\lib\internal\streams\async_iterator.js

MD5 269418b1887c8fb6c9ed474eba96a82c
SHA1 4b46be4f95657b3fcb3e53c1f5b66c89dad53635
SHA256 3a752f2fcb0de353265f2d4928126183b5a08d9c9eb6aa4fab74808286e69844
SHA512 2ff6516244b819530b9028ef7f5bf14502ce0a586fad94d476a065e2a4255b96a8ebaa145299770ac1655b45829930a759b86ee600591866d8134aeb69092ca6

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\simple-peer\node_modules\debug\src\browser.js

MD5 20bd9fad97b79a0a28e550ade5cd3ab3
SHA1 e63a38b9e85d1d86dea2e02c6f885fa001b49d34
SHA256 4e3dc6d0e1db58a0d74206b443f35582d3b717be56a0f6d030c34af6c2ad9f62
SHA512 6905ed5f21c03abb872232b8356cd40ef3a8d095e2b944049563f87b006a4d480d7b4f5b58005f5d5265ab8a08ff0e3861fe342da060e5b73e45472391d3d47b

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bittorrent-protocol\node_modules\debug\src\browser.js

MD5 e1ac832399d5ab749022c51e32ab8d9e
SHA1 d9b188f58e358831a71973d994beddc9d9f63ac7
SHA256 7103921cea158e1740ed28463406b77fd5a05285690ccdba480bd5fb9c162bb8
SHA512 61f1594f904640bec1f1fe6a3949209b8453d66fe4fe687316ee90fa478a5603c7623a55005bbb95eddcb62f3af38fc5e02f5dc784d2c449a85ee087ed82395f

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\mp4-stream\node_modules\readable-stream\lib\internal\streams\buffer_list.js

MD5 38a82fbd25e6f573bd6831a98e30a863
SHA1 2f22e6ab6e45afa1d3d4da928f06475d04d8f0cd
SHA256 10f06e02f00b1e4c28afd01cd4b1ecf280c75c59e97fb8611ac014bdd614d2ad
SHA512 f90974d4eccad027c42a5a396480491dd8edf88bbde9635f420e730c39716c4686b4019444cb45d01a6836ea25971141ef3b7e77aabddcb70f45308b01b170d7

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\lib\internal\streams\BufferList.js

MD5 fd2284923c884dcb0a9a869de12f0f4c
SHA1 8fd98c787f1764c80b11306d6acfb7d3b35c7d27
SHA256 8b3ad3a63761a51e9668f88198b218379294019c77d3d8344b2e2f8d89a3e0b3
SHA512 5c28004883881369668c824d67612c21ba6c63f462e9ee4bb3911fb7101de4bb6bd11c155aee734954b07a3b1777f91c91165a0a9d48f14b0cee194f740b901b

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bittorrent-protocol\node_modules\debug\src\common.js

MD5 6a137e34a1c3b8d5d5d84fab272a06c1
SHA1 c8955212180e41f2d30663fe7fe2819822c7d8f9
SHA256 631983c237a5cf407a98526330f4cdc92b88fc557c34f86a9b8ee63285b346ba
SHA512 af869e471cb9b1c99fa903526eb06190b9671dcd98d1479a90008c87e6d89f383ef768b0d7669a520987b5fa4a606bbbbfb1655dc7c66c3a06cdc3182b22d021

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\simple-peer\node_modules\debug\src\common.js

MD5 4d6f06c79aa07899b5310a55efa097dc
SHA1 12e062d484e3742d576e2c4b5a9fe4526fa33003
SHA256 ae6855e9f5ef6687aa8f76e69dd1854f1b99985146434daff310150083cfde02
SHA512 40ef9132cac2f861576fafc9147f2bc6d3bd6d5647679ad7242fc2713c3ba3fa6de878fb3247f65bd8267dbddf6a5b58330ad07e49df67cf690b6c9391ff4c9e

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\lib\internal\streams\destroy.js

MD5 c7f40c3d8364df66ae6be744f5754d5d
SHA1 d0307824af8519303bdf619abfd31633e68bd6dc
SHA256 72fa9f60ff48129143de2e1c1f624cef0d7f41ad55c7d60d94d1014635299607
SHA512 8a976937b1e027e689af5032768c5b696ccff4d2af7f996c6ecb3076ff2c218553e9cc5524fa75662873ceae9313daba41f7da7311074e8397e528b1eb09dcb5

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\mp4-stream\node_modules\readable-stream\lib\internal\streams\destroy.js

MD5 7c68be171bda4af8418bcd63c2bbb3b6
SHA1 df451cb90bb4db3918ff11f758553d79a9c2066c
SHA256 54c7b9c8319baeffa83840ae559b5910f530bdca530292d9be190236f219a7b3
SHA512 e5b26f2f1e60f74f35e115dd9b3ab514bf73391b82704a80e2900e50d9c2833755ab91b053695a97c2e6f8f37db370322228ff4f6788a30501eca35e4264593e

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\duplex-browser.js

MD5 71bc8735ee8f568483daa0b68865b025
SHA1 9fa4bc0f1f8950e8525e33c376e0722b5be92660
SHA256 b492b180e158a495afa7b394de1440e037c5d60524bb2fce839aeb690e6ff968
SHA512 5d8c4d5fdd2081878ab19d18c3b29eb00f4aa2f6d1b691da90e603354762520d8f82425ae22b33897bbcd5084c63dcd769a379322909d376dc1dca387c853564

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\duplex.js

MD5 d128bf2cd01bfe3a6213e548804685d6
SHA1 65d2569a9805988eb48fc26ed9fb7123bb062c12
SHA256 16475035143997e924dc3f41af6fd657cf55c5843f415f00b155c20891da8a5b
SHA512 f784338065acee2075f8755bf4591694c62ee7ca3b722cb12e85f61a9903a45c3e6a28e9031a785c94ea4d8faac014c681117c3416af5d37629eafa3111ef8df

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\mp4-stream\node_modules\readable-stream\lib\internal\streams\end-of-stream.js

MD5 efc83dafdb336476358027f9cdf74834
SHA1 6468d3c55dcf6d8f6ecf2f78e3cfab4ca6144083
SHA256 75da6b5b0634012017a6252c6e130335de7775e5a02f10817d02af47afa8bb8d
SHA512 688d6ddbf3934551f9fdfdcf78d7cde9e23ab792a78c8df8395c36a69c1505de966a8853f8a1cf83813e850c701f6ef5b14f856fe635949af01fcf3fc40d820f

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\mp4-stream\node_modules\readable-stream\errors-browser.js

MD5 d86574a5b6f48686bcd88be75575a5e1
SHA1 2d9dbcf11e8b3d3a084bd408abfdbda5ad21f762
SHA256 346033597378d23e59068d120d6257f7cd85ae88c40b1f85c3329cece0d119c4
SHA512 8dfd61578f9defdd32ad7e726fe645075189425dc083735fe71d160239f4e56bb4c8b8bba1151b24ab4eed2fe07a80d0e342e36e173b82c99428428f0eee57eb

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\mp4-stream\node_modules\readable-stream\errors.js

MD5 548cc34803fb38415a833ae633b73048
SHA1 c12a741abe200aacc443f40633d398f1369739bb
SHA256 7028cca95b2f124345bd5b816e0d8184e7b7d208fe0aa76eb38df43e8644fd03
SHA512 db6acc32fc19eef87ae6ee900b7284cf686d9eb980c9a8a188353652dbe6e516b59962d5c5b98c4c631de06d1e55d53ffdfd72722d77089f91713b5e6f9eb56d

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\mp4-stream\node_modules\readable-stream\experimentalWarning.js

MD5 ca7fa51ebed78cb79b54099bf75d5662
SHA1 e3f0fbe7c78388bbf9f0e4d97ab318a852df082e
SHA256 5f9beff594347ba6765b806ec36e25699be1407627e2ee91be5d609e40baacb8
SHA512 9f587a44a76130befd8acb440c18b0176a3c5a403765c85fdc3aa56dd68ff060988b1830b97266171dae2a26cdf42f873092a6e648d37fdebda3ba87ab00b784

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\mp4-stream\node_modules\readable-stream\lib\internal\streams\from-browser.js

MD5 2ac62af594da915c368dd629992c488f
SHA1 2bea06bcbc5b65c53a72bb45d254edcaf19d15bb
SHA256 4b4404c7bd6f66a2175cb7a29c60ce4395c055775ec45eaa35af4357656f604f
SHA512 12f7b9a13387540ee91fee1e0e2608511a95d072ee7d072e635b5ccb6231e27e60e199589f02ffa49c1e654c49535fcbc93f17d305271768cc0fe2c1715c0a11

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\mp4-stream\node_modules\readable-stream\lib\internal\streams\from.js

MD5 962e1594227dcae438f0d6e169a16186
SHA1 220e8de3594eb4ebfa829420f919401c2d4f08c3
SHA256 9c67e32e4f371b72c83265a077c7e317866170134ff8dca4cc24313c5037426b
SHA512 f8a7a0f82a9a8dabd7e6b56402a33b46bfe463383e7818a5b4aede2797a0e0959386f319d8f5023fd883d1527a2c2db9db361105a12e9a0dc397d003de59e480

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\isarray\index.js

MD5 e32b2424bf3f56c47ac6a2a08478dce9
SHA1 5c3d1f3ad38be1bded1ec4e065f9463c9bbe359d
SHA256 9b8c691372802da788c9c5f4e1ca2f1ed0b88ab8722176c2aea15e38ec86d249
SHA512 0bba1c44572a14717efb494e8f00d67ea9ff40cc49d9cddb26da62094588edd0f57e25ad53b2b8b798fff06d81689bb50a87bde8771b07778a856ef515cb76af

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\simple-peer\node_modules\debug\src\index.js

MD5 d6c53f5a0dd8f256d91210ad530a2f3e
SHA1 0f4ce3b10eff761f099ac75593f7e05b149ae695
SHA256 aa127ff1752b7d9c7415c5c7bb6994d9aa722b81bcbcab4bd48316b013d23bf3
SHA512 4faa874d9d862ffc921528742c4f1fe8a9b22a358760f6e93fcef138523575329a801ce9659ed8e96b02b73e581b3e99d91973e22981b358ffb5e43103a536c2

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bittorrent-protocol\node_modules\debug\src\index.js

MD5 3ae50c98764723201e52e0689598a003
SHA1 12f31fb022b4bd89154d40d4fc2db181a15cdbfc
SHA256 49c2426f5032902827c51781dbbedfa5d77c0934d785e3125efde53b5238eaaa
SHA512 e18dfb188b3d0a67a50455bba9ae8739a494c0df2a80c8fecbe432aa6d32b0094848389eb3479cc1d9997ca0eeca4bf4337df979be4750327f2674b24d7e077a

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bittorrent-protocol\node_modules\readable-stream\node_modules\safe-buffer\index.js

MD5 b1622ff2944ba3f13a1cf6fbcf0f9e3f
SHA1 f67b8decb99eed068f28c9ae56df08c21bf4c33d
SHA256 d58af21cb0518864d0c505742d1af71e5b5e1f142f4c0f27353aa0f431a616d4
SHA512 600b49f49832ee51ffd8f6c99616387d93bb1fc2afee71d2066f982e39080a1508999ef2e2bf714d5f6adabaa8b72d3c5cdb445c8c36b67064dd76b377b7f889

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\simple-peer\node_modules\ms\index.js

MD5 fddcc2097091479666d0865c176d6615
SHA1 55f9b3a7d4cfbf68b19ccd0d698aa86483dd4694
SHA256 55986972f5f3c9446f876c576e1cd30fd4f04cd26527efbb5ad834637c740e4c
SHA512 252644169a9398527927b69a2f19c6578bd62dcd180b94984d991939f53bf4e77ca687e840db42f7dba3b37124a5e3f3eda83535e75491bbe6ca440a7149913f

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bittorrent-protocol\node_modules\ms\index.js

MD5 83c46187ed7b1e33a178f4c531c4ea81
SHA1 ea869663486f513cc4d1ca8312ed52a165c417fa
SHA256 e5f0b6a946a9b2b356a28557728410717df54ea2f599edb619f9839df6b7b0e9
SHA512 51b45089a53a23c12e28eb889396e2fa71b95085baa5ac34d71ffb625131bf2fec3ae98efeae537656e20ea257f44e089bcebc9ad54cf672cde852102e43e153

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bittorrent-protocol\node_modules\debug\node.js

MD5 79f3814f32362c1c6f9dbb8a1e3b01bf
SHA1 aa7655ee80c9a485313675f9379c2f18d33ea061
SHA256 996b381f353555cb172ebb2802bb2a7323442ff67b7b530cc26834058d7f31a2
SHA512 61367ec2aff9349e203a295fe1bc28faddc6d80b556660f56ea49d6625d6228212fe82d7398114509a3b8d9ad4026429f0ebb849579c7481928f47f37c8632d5

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bittorrent-protocol\node_modules\debug\src\node.js

MD5 6ba08444fe6d10ffe200b688053a1b9b
SHA1 08a632223c74ae52d80c49c9af9305385cc0fa74
SHA256 6c360c37e9dc1d14f41e35efdc66b707a56f069e24414307c76e74c7bd505702
SHA512 cab7253fbceb03c706b4db836754813d12679409ff76431d06444626d2a094d2c5a29c8680311d44b11d1f313b165d9aa7b2a3155ed04530fd5c3d9843f36bca

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\simple-peer\node_modules\debug\src\node.js

MD5 6e63fda079262f01e14f03bdf77146c0
SHA1 481608e3c95722f3a474336e5b777a6a521e76f9
SHA256 f237adcb52849de7c128f57e0468b52353c529a6c8341810477c0e7144359559
SHA512 3017b4717118f56fac106dcaa046aecf3cc63c37e64f49838e5379a13583c293f39ec5ace48fb2dabeac6af4a967f96219812733ead6f36c3f5c8d132d795900

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\passthrough.js

MD5 c91f046d756b80d527ec8f4dbeffa459
SHA1 1498c28497ca568d3dd207eac8b236c221a17988
SHA256 809dbc03b4c312355ff74eb14b2ccc77267ee71e04f519f437eb4b203407c4b7
SHA512 e36c7caf17eb5e80f85707e4fd41db5b50f8471904ddd0e98dd9ee16fbd2211de77730289f1990d519ca962adabfacb6f439af9d3b1986882f7f0a1f5c0e843a

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\mp4-stream\node_modules\readable-stream\lib\internal\streams\pipeline.js

MD5 7e4cc0707a284e7879ec39536e3ce6f3
SHA1 6a32140d22ed08d0748335a0430c366e12f73446
SHA256 16576b2011c78d0c5ceccdeba7451e83e1bd86f2c3f31c05de7df4ccfb149c2a
SHA512 3ffd639d2f61d1733daedbcf0e5fcdc813c3f0648c0a562d17e4a9b8bd39eb3e3ef2552c4d85b0d93336dc8368c2bfa04147e196a18ff586d168d9f6e66702d9

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\lodash\fp\property.js

MD5 ebb08110bff348df334274bd1d79e025
SHA1 563c5eb1769785a3350bfd1cb2b4e090a650c994
SHA256 af3533640c8af8f6804e9df53cabeac7767cddf1a619236e7226a784a2e9101a
SHA512 5f613471f700f4d36a3847f694774f9db9b7ebafd5037c00268af6edbf762bdad13a713dda2f93ab5f02bb01e8cdde2d6919f33a1bd1d74899bf1bf130b3fc73

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\readable-browser.js

MD5 73ba7f8dd912318c3d51d99674c77c4f
SHA1 c72b2b1c4f810d22237ffe40a6a2fd6e3f7c8c16
SHA256 ec8e6f4e484d5269bc134752e11770b66b6be3a470217c2a0166e977965f53c6
SHA512 f336796336340144adaabb2835149bc7e090dd4730b5f89fe25a2c43af22557ec34defd0dfad2f80d85d3021f28518ed64bfa2e6a64d9ecb5e2c6c3da6f4e4d9

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\mp4-stream\node_modules\readable-stream\readable-browser.js

MD5 ea67eda027d1f8aa5078acdff67d3348
SHA1 696dd57f91137e8efe4cb6448fcf63f48b33c4d9
SHA256 c4ff3ea62ef65a2c68ea721dcbd58b621150660facd02be95ebfc556c4dd123f
SHA512 53306f43fb3cbcf6f96783d89a20a40eb18391b299ed7060274a4e75d830519fc30efb34cd3e8ef8f37e910e469aec8760c1edec4d37f20e07c6f6414d0027b8

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\mp4-stream\node_modules\readable-stream\readable.js

MD5 f78ab238be23d4747a8bb44e35b6bc81
SHA1 857455f43161c4c63b67a42de981ef947385303c
SHA256 2944f1d3c8c5d5c5e07e7c30d6cbef5fc37440b7c73de47aeb37fa8424f04bf1
SHA512 b1413c818a305ffb1a4d249ecec9d011a1fd99ac43d6bfd05c4320251494272bbcf2bcc849e6a5c3c31adb725345556d3180a117d32011760981e267427c0ab5

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\readable.js

MD5 0fe4be4fe2e76f31a60e95e65d42538f
SHA1 8fcd80b248d1dca48a678abc8cac9d9a0664c7d1
SHA256 a1efa3fa06393aff652f3529ea1b1bc32134d49eb794b23272fb0ba13d214550
SHA512 65d18129db732c11bdf1b2953a95bf9e2161c4b6a7f90d705641b7b2ceb1927cf0e05a6fc4c6648f3c6b1573b7cf714697bf26cc44a429ccb2ef90fbf750028b

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\wmic\node_modules\async\reduce.js

MD5 9edc8f45571cce491e90a6603ebef607
SHA1 6bc395942d9cd3f85dbbccf8903df345062c08d1
SHA256 5a26fe36736fa39fcfc1792cf5c7255a31f7acdf26c6de26d2fd7f293a7a4d79
SHA512 58a65e8fc165ffa979b1b665780f915ce3250372407b7bb6106afd662b4d4e1844794324645a10f7a154b606fcdb00df607250ab8f38b7e4a76b5b5e36c42f64

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\async\reduce.js

MD5 59f3411f090bf81fb428d0e6add40424
SHA1 a0c5e6ab6bcb4970331032f5b53b6f452edc3010
SHA256 7268dfc223c88339019eae215131c2de7e3b2e9dab410c51661f16fbe022b853
SHA512 ee4bb28f237235764f667653c7d36068b672f1952831259e1560e01e960005c3364ab4c1eea73f9acce953e7492c5c2d27c2872f1e96c846f4e413abb00a2ca1

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\mp4-stream\node_modules\readable-stream\lib\internal\streams\state.js

MD5 88263ce881724b041c299337ea4eb67a
SHA1 9bd0682a7df682ef2f2fc244fd3eeac63ecffad9
SHA256 cdbed99634b523be655225df1547cd00295e3041cb02848c652ddad5e6787e49
SHA512 9d77b14a399fb327c8cdc979756672786410b763bd4530ba7b62a9bce04ba21ad49810a7162dc189673ef9bdbc8b8698311b6f157ec01ed6372fcedf812e7408

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\lib\internal\streams\stream-browser.js

MD5 df20453c19af8406babdf987facd76d9
SHA1 0167a0dc72daab83989846563aae870f37549151
SHA256 72d46a15491627d8fb1489a47d03583cfe5c21902918016ab532b53e615e5a9a
SHA512 8004aca5efc10cf89bf41ecbb6586f9acd707ef3b789cc714043c48c0d47b6479d9d2c2fd9894aedc683edcb88fad8b28517d329417d6e2d0e2b639d964956d9

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\lib\internal\streams\stream.js

MD5 76bae0aaca4d9c61a71995751b67448b
SHA1 90b89ec87417d1301e7615a3ba50b04626c2796c
SHA256 1e7903927df33aadb3659ecce55266c9c851da65ce6c8b723a60a305c1c5422c
SHA512 9be70625af9c47a3772622031cdc4ada6e009d9ddf71f7409109ef6b6adfb444414630897eab07f77bd268f66c9462d199cb72934e0bb4fdbbe614f16bb3de24

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\string_decoder\lib\string_decoder.js

MD5 0d4d70ba095a2af4afd7069a295d2f6c
SHA1 440bd1828612d1e583e33a4ec304673a11c782af
SHA256 f1d36d47b2c579063392c1a68963467f2d4f51a069af09eb068d974c63ee3b37
SHA512 f527fcaa28387a43a4df21c3c2e43e001b036a179383a61c58e194a33f67ac3ce445ef692d21e8f79139374f4a0749d1cebd2cdb59a4d9b4d2ec71bffd8b3be2

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\isarray\test.js

MD5 abae91536d765db34554068cc3f001b0
SHA1 d822e1a795c5658736d31abdaed0608e01d25183
SHA256 46997dc4554dd5a554b4883a9c13180c628bb36baadf8f89d2db5861f5239f44
SHA512 f240d0bef7ed18ac68c67fd3538a9e6d945d60cca871896dfe263b8a2fc4eb2578a2c8ca03ddb42e339323d6d0447ed8dfbf2da3ee163a24c41de4d54437cb59

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\transform.js

MD5 1c25db3b0dbf9eb68d7e2a7063cfcfcb
SHA1 50856785dfc8c7cd64838ceb52124fd30378a812
SHA256 155f794c5c789568b7bc632cd37f28b9064890e887bfab96a4393100218d4230
SHA512 1d1f666a6e7025e797b93ff959ef4df82989efe52e14e1cdac6b6b6041ab7c82a36720f3efc44ffde0a8784262c3e79f3250448dd926a7b82f0ff4fe167a2e59

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\lodash\valueOf.js

MD5 3b889e721c9c14f7a5cd312bb476f2a6
SHA1 dcaa02fb24d8915128f62a50e2782e30d7d4fe8e
SHA256 469f0f647beaf4eeca8d316133bcd0a0b3f5e55a4c1a391da1f10baba824ca9d
SHA512 3590cd3433b362223d3256d29a851a056c09d0fc0f4414d194cf39b64d166841dffd59f3029c352991682e9ee8e06fc97855fa1cefeb209098428dc5c2c7f953

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\writable-browser.js

MD5 41a26d0db5dea46383b4b625f05a9d30
SHA1 56a4597f339df94654933e8e8264b2edcdbcf2fb
SHA256 427bae9a6a026082e46acb500da48b270234ebc2a1ded1315b49eccfa6311c61
SHA512 a647f9f62968ab1f4e2cbbf35d7058a8edb8fa1d4c3d6f858ea1f59523a09aa34e8efe63e7f3dba73e1a3d15509dae82a058fb4ab531f9bd48ee314c446415d1

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\writable.js

MD5 8d7df10a4331d4707c47ab9913f5e9a5
SHA1 d1906d0190fe89683d34219a9407ae905cd91233
SHA256 74cbbdc5d60e1ee6560d2850515b68c3d6b39d9b2f32346aac1386b031c2a661
SHA512 7e3e6be8cd809385da3dca21cc0afb646218648dba1ac1e5b8704b1f3030b659f065542c727323eb0a4dacc1f5d8486002ab447296a9abcd62cdedcc06adbe74

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\SERVICE_MODE-2.mp3

MD5 553f50841fc352613d9aa55c274b6006
SHA1 549f79fca4f2d46b5351d35a2f13ea1f6ece37a7
SHA256 527f93a6a3159de9a01242e8a1f85c568651bd711da175e5a6c9fe1942224b97
SHA512 e3b3577b6de4321e913a700c7d53252a905740c98ddde04a1dc305f0a2197535cacf5bc29261dacf06b68b8ea4f6a97ec51d067f9c9dbc3243f7518d2da87f22

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\minimatch\LICENSE

MD5 82703a69f6d7411dde679954c2fd9dca
SHA1 bb408e929caeb1731945b2ba54bc337edb87cc66
SHA256 4ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b
SHA512 3fa748e59fb3af0c5293530844faa9606d9271836489d2c8013417779d10cc180187f5e670477f9ec77d341e0ef64eab7dcfb876c6390f027bc6f869a12d0f46

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\node-wmi\node_modules\async\LICENSE

MD5 dc113e0fc4029c29942399ad22425402
SHA1 e452de6c5360ba269a3bda17cca33f0bf51035f5
SHA256 4d3083ec594b158fd6adfdc6c9423ffe0746d2d93cebfb98f1a35b69da78051e
SHA512 bd0002ad2b5d593e942f38e42ac30a41186c95443ac4cf8a60781a83229de4f2b5d2ebb2546cda792dfe77aa75ba0d64355a8bc1d7043273deba4df04c5f1495

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\sshpk\LICENSE

MD5 38ecf0a3a3894f404ca99c2a08924afc
SHA1 10b8ac49ffb8f7cc8bdca9303209a1b3b2f3587d
SHA256 82f8e8150cc12bb0895291c63ffa618d5652daf6265f63203ce0043955066ba4
SHA512 f0c68e411d3b7759b30fa74ea37663f4ea4968fdb8ebd4016c9ecbc5bcf7d956941d0c1f81e66abb73676d40379240d828b0a6ac36c3ade7ba11b62b5ed14c62

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\fast-deep-equal\LICENSE

MD5 ea87ade09b9e6da4f2e47904a4ee137b
SHA1 44bdc0699c385cdf423dbadea7355ff72e5adc36
SHA256 7bf9b2de73a6b356761c948d0e9eeb4be6c1270bd04c79cd489c1e400ffdfc1a
SHA512 b2f5d8143f44ed9cf6c062caa0a83569caf4b51e071c30a08d2facd41e15dd5111ba76a908484fa5d638a1ca6afa53d0219d8ec59bde1a7a78ae759810d739dd

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\defined\LICENSE

MD5 aea1cde69645f4b99be4ff7ca9abcce1
SHA1 b2e68ce937c1f851926f7e10280cc93221d4f53c
SHA256 435a6722c786b0a56fbe7387028f1d9d3f3a2d0fb615bb8fee118727c3f59b7b
SHA512 518113037ee03540caae63058a98525f9a4a67425bd8c3596f697bed5ae1d2053fe76f76b85a4eefb80cc519f7b03d368cf4b445288c4ca7cacb5e7523f33962

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\tar-stream\LICENSE

MD5 9befe7026bf915886cd566a98117c80e
SHA1 a95ab3a4b0e4bd978897f09b3b430a449da20a08
SHA256 3fe8d55a98dbf260eace67c00cf9bc53edb46234e840098a0b93df3096b97fb6
SHA512 b52ba143042812d6dd1031a12946afddb6e8f8ebbc7169c59c138d16aafc5e261aae92fe6b1ea94a3d80e39d2415c4b219710ef46939a2df135db24a0cf712fb

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\last-one-wins\LICENSE

MD5 a75272c6b584d0f8e2c1676b4e72469e
SHA1 1eb8d0aa18d82d626fc09dfed59211f098199c4c
SHA256 0aa9add6a9158efad3e6649e3affd607c7e2629f6677af19f9988c8fbb0757b0
SHA512 097b288bd37dcc88745fe99dda219f0c7941a21e1ab0de17a9f1f0b874c66c08110f479809c4bfa291464bcd426c1b964b8cadfd999d79d59ae9153b8f70caca

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\record-cache\LICENSE

MD5 0033175ba371b569c73d23fd726c37e8
SHA1 57a840259e8db1f3c2f411845e92fab7b7c70e08
SHA256 2281f2db407bdbb54f069eec38128b2dee2c0c952f52b786ef1faecb81767b3c
SHA512 b9aa879cb15fd3d2a8485ed4f4aa24a03da8ce6efdbe397449c16757118ada68f86cf977c6eba735dc7c315288346fdf615c42817e087ee7a7029a74281ded13

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bittorrent-protocol\node_modules\readable-stream\node_modules\safe-buffer\LICENSE

MD5 badd5e91c737e7ffdf10b40c1f907761
SHA1 07d9563f6153658de124707787ff43f0458ab24a
SHA256 c7cc929b57080f4b9d0c6cf57669f0463fc5b39906344dfc8d3bc43426b30eac
SHA512 ef233f8db609b7025e2e027355ee0b5e7b65b537506412ca1a4d95e74f2be2fe284c3a3fa36cb9d85dbd1a35fe650fe14de5b4d93ab071f2024c1fc8cf40730e

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\chrome-dns\LICENSE

MD5 fb42e5aa12bb9e365d38b4b5691d6984
SHA1 0b07e9e19edfdc78ee5954f0373459dbf7ba97f9
SHA256 d4c2065e2b936e62a4eb400efb4576edec9ca1388a9f78aa288e147275e7bc8b
SHA512 50e2ffc46c70b93c6c6b22749ced928305c2d7cda8d272d904e79a82094345ddb6addd5c26396eb60b65a5d13c49de3add40e52a34765456180f51b21ebed7a2

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bittorrent-tracker\LICENSE

MD5 45ed81acb582fcae499e9b9f4bed8183
SHA1 c1cbde1dc78c883282e89d44745abbc6e3a37421
SHA256 821ea8b64b4994190b94bd629bbd897ba39cd25f7fb9747b70eec61f73dee44a
SHA512 1a94a7384cdb4098fca0e38e35e41fb7886f6132963930788903808d1ffc7998cb6fc60cb7a1c9f0a2fcd21f9e6641c59610636d96eed25f0cd45e8d41d75f7c

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bittorrent-protocol\node_modules\debug\LICENSE

MD5 ddd815a475e7338b0be7a14d8ee35a99
SHA1 d16a2786962571280a11cae01d5e59aeb1351c9a
SHA256 98c970de440dcfc77471610aec2377c9d9b0db2b3be6d1add524a586e1d7f422
SHA512 47b612ef4e93f1af62891e295e9fbac05e02cf1726f56c36fad5314376e28cbcaf7c8355527bc0bda54c26cbe097bc8ca5cb4f79aa9e3ab6f1d875dca41d4aac

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\make-dir\license

MD5 915042b5df33c31a6db2b37eadaa00e3
SHA1 5aaf48196ddd4d007a3067aa7f30303ca8e4b29c
SHA256 48da2f39e100d4085767e94966b43f4fa95ff6a0698fba57ed460914e35f94a0
SHA512 9c8b2def76ae5ffe4d636166bf9635d7abd69cdac4bf819a2145f7969646d39ae95c96364bc117f9fa544b98518c294233455d4f665af430c75d70798dd4ab13

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\decompress-targz\license

MD5 05240cd20679544d6e90fcff746425bc
SHA1 db85a00ab8daaf90050b20b30266c92a58cb71f2
SHA256 69dee148a2cc470554dfa7142e830662062394d0fe67cddd379aba90dc60d6b3
SHA512 4109a4e0cfe37c1732ca099caa4bd1106c4e298a9f1dd50828cef8067435cc668dab44be7d4a4da3fbafdda5aeee22ae5c42416cf79d0996089783cb13b2ff4a

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\simple-get\node_modules\mimic-response\license

MD5 d5f2a6dd0192dcc7c833e50bb9017337
SHA1 80674912e3033be358331910ba27d5812369c2fc
SHA256 5c932d88256b4ab958f64a856fa48e8bd1f55bc1d96b8149c65689e0c61789d3
SHA512 d1f336ff272bc6b96dc9a04a7d0ef8f02936dd594f514060340478ee575fe01d55fc7a174df5814a4faf72c8462b012998eca7bb898e3f9a3e87205fb9135af2

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\camelcase\license

MD5 a12ebca0510a773644101a99a867d210
SHA1 0c94f137f6e0536db8cb2622a9dc84253b91b90c
SHA256 6fb9754611c20f6649f68805e8c990e83261f29316e29de9e6cedae607b8634c
SHA512 ae79e7a4209a451aef6b78f7b0b88170e7a22335126ac345522bf4eafe0818da5865aae1507c5dc0224ef854548c721df9a84371822f36d50cbcd97fa946eee9

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\LICENSE

MD5 a67a7926e54316d90c14f74f71080977
SHA1 d3622fac093fe1cbcb4d8e8d35801600b681fc45
SHA256 ec62dc96da0099b87f4511736c87309335527fb7031639493e06c95728dc8c54
SHA512 e61de704d5a76afd66b5d9b1c78f0a5afe9a846686ca2fb28c814a4a60dbe82a190ed4a6a2f31e09bf6d695b8ec178ebea9804593029c58c1b1bedd793324d13

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\string_decoder\LICENSE

MD5 14af51f8c0a6c6e400b53e18c6e5f85c
SHA1 36791ee8e28518f9fb92b51ad9e4247708be9c55
SHA256 11f2aafb37d06b3ee5bdaf06e9811141d0da05263c316f3d627f45c20d43261b
SHA512 a7ffef419c24a9420ce268a6f3c7cca136bb47d2a33da37d08bd5ea213a3f58e9e28375ed3bb457ecf7c0c1b3f1434366da4e8bef219482fcf599d804575e5fb

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\oauth-sign\LICENSE

MD5 f3f8ead5440d1c311b45be065d135d90
SHA1 05979f0750cf5c2a17bd3aa12450849c151d8b7c
SHA256 d446a8c73d7bbe4872d6524b15ae206f9a2d7eb53f8c9cb6e6c893a43acc5276
SHA512 d52ead0329e9223dce3d54f83c9e8caab7974355c248e2e85a1a8aa3198af402507761c22bad31307ae3bda06528ed0b3487e9ac9f6a6c3c413e09a5acac915d

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\isarray\Makefile

MD5 7091387d1f36ef29a439633a20fb21cd
SHA1 6ab383baa5dc5f695793d66f5b30f0c271e15807
SHA256 928dc8c1df0d6ff86d985f520278a4c83498aa6353ff3d942270aa117397a8d1
SHA512 db4fc0501e20953af80c5d89fe8e8dc21dd6d922a467e946fcb94f3404b49c5f8720441cf8c2ff74a370106ecec984d9ab3700b47f389199092f9a303441ec5b

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\locales\bg.pak.info

MD5 f0125bebc76964a54ab216fbbfd6f486
SHA1 4ad5e3f0e20343fe8d0a9b16bcef01812137dcc9
SHA256 17c01f1a07a605525c61881bc6b22445766e790a1a6b907c9b5dd7fff24f64f6
SHA512 cdb189333bfa8a34783a126a9827f454dc44bb9bf0db95ad9e668ba1415901c402ca62d964b11b4b32adf64886f3a88dc4078ad498896963d278c6e4c8f8462f

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\isarray\component.json

MD5 32fed65eac22c95ae43ddfd1729b9bf3
SHA1 88615028e91d7872104932a02b78a75f04df8465
SHA256 f9e5ef95d8e8f65a5dcd3a200b38e5a13461ed95114dac053d908c391c12d731
SHA512 b4bb501d9533d0b787339a81ac7e2679b963a6122c511c2cd16c5389a2bd45193d36378d5b36ec27e4f34940c3a8d99828720ecdc2c513ba0d1d855ef806968b

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\doc\wg-meetings\2015-01-30.md

MD5 0d737de1fc474ed809c9fbb1d5e9934e
SHA1 1fafe6e2e28a4404db90ae6dc867199b74468ca4
SHA256 39bdf2c2d8d23df3239dde5e66449dcfa9bfd0accf840c91c35bb295f2bbae2d
SHA512 f33aad44449c6c62c3ae4e9053c1c884f6ddbce00aee35de5818b82e9dd238f6b4c362e1d947dafbb5504601ab7a475a786f8e8ab334a703f4b3541c5595e5e5

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\node-wmi\node_modules\async\CHANGELOG.md

MD5 5b6c2d55dc5ae4e177eff77424071a85
SHA1 f6dbdbec1d4babb8661eae69a9d35700ca89bfb1
SHA256 44f8bf3e5cb7854f541212ed62f6394ed0412e6bac66985ab85dd3defad6e35b
SHA512 9a28a1a9a0c6bb0318d4ea9e8b5b273f5abc924a5f16a0a02bd895197c1cacdcbdda2a7b084b7bf246bc08c8bda8621d2b3ea10fee13d0c55cf261b84f8eac9a

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bittorrent-protocol\node_modules\debug\CHANGELOG.md

MD5 28887cf82104b986b49ebd40f75f634d
SHA1 9e7ab0e94f1d90c8073a4f75c79e01e2d86bef4c
SHA256 7a4879d2b37c50ed15d18a51c07905f993588873d7730b1584db386f81588d34
SHA512 d80b28696521c44bc433d731a1b9caba83339dd87285bf08718db7d983edc3f07a5855964d36e8275afee31e13901f4352859cded972159e9240efc275485a44

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\CONTRIBUTING.md

MD5 08365b138b43284489ecfbf6efd44a25
SHA1 1b97e91ac67fcbbd711dedd3b5c388c08489eeaa
SHA256 56e4e12a6934a2c4d36c7bf893f4d8aefa6c96f9ffcec357dfa6476e36c4f1f5
SHA512 85494ca6582db6aa3679f532c540f2075516628c02abd6fc827369cf8ec1f2ac66092ff815406d4670c7a33cadc62f34c2c478136953656ce85a7d5755f8c31e

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bl\node_modules\readable-stream\GOVERNANCE.md

MD5 70b44945cec4643ca805d87f673fbd34
SHA1 f30fd9ba0fa4f12c900d1b7bb248aa568a72cc3c
SHA256 7a521e462d1c6f3b599c44637fb337bbf969dda311510a87236ec539a415331d
SHA512 586f0f2a46ae29e8dc0b5931e144d3b7536057cb0a6d2ecfc72544c5048a1fc9417d14fbdb45f33e21eef99a2a0e302a3c74d2f8e360573544c8328593053daa

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\render-media\node_modules\ms\license.md

MD5 fd56fd5f1860961dfa92d313167c37a6
SHA1 884e84ebfddafd93b5bb814df076d2ebd1757ba8
SHA256 6652830c2607c722b66f1b57de15877ab8fc5dca406cc5b335afeb365d0f32c1
SHA512 2bec1efb4dc59fa436c38a1b45b3dbd54a368460bcbbb3d9791b65275b5dc3c71a4c54be458f4c74761dccb8897efaab46df5a407723da5c48f3db02d555d5b9

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bittorrent-protocol\node_modules\ms\license.md

MD5 2b8bc52ae6b7ba58e1629deabd53986f
SHA1 ac646ea4ec65cd1feac459a194a15a52d147bdcf
SHA256 1662fae9b5314d11cf51284e2dcd1f006a354f7343f08712a730fcff9a359801
SHA512 99536ece73c2f788fa74c42bfabc044d3966812ffb9a9d30bb9183371999bb4067b26c1b36d40738444a37c341fd5b9b5e833c9d40884b99d39147e5a9e3f3de

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\bittorrent-protocol\node_modules\readable-stream\node_modules\safe-buffer\index.d.ts

MD5 372fa012d04e945ab97c27e000f8df78
SHA1 0b5844a33b757b9db574541363116917fcbc6d90
SHA256 5e379df3d61561c2ed7789b5995b9ba2143bbba21a905e2381e16efe7d1fa424
SHA512 e420c6f2a15605de938f77a085453e6c0e84b62aae7640aa7bf0e576534f6b07fdefceea14cb2773e9a7fb042885b5bd108ef98e90258a37d3e907307c9fc674

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\any-promise\register\lie.d.ts

MD5 97b214023a92a133a4df15bdfa51ee47
SHA1 1ebfad438f68fddb4db84d9ef5c0b922b59f895b
SHA256 7992a39d6cde5e050eb78461a8bf9ad986175a94826e835c110b3967290bd249
SHA512 bbfff7acd12649dcbaa64c9525e49808b3c214609635b0aa22c35e5b21b923a9535c00ecaabbc4bfd4fe5491b158e9f6a227cf1e35c728dd4d606cf6075e9b34

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\uri-js\dist\esnext\schemes\wss.d.ts

MD5 9b104059fa384d20d4f99137adff65f2
SHA1 48b9f9fe03f37da0019110022632fd2f0de9344b
SHA256 fb2f19ae967742423ded567ffc411b2c947a47813750a745e3de5fe3edf8a878
SHA512 dbdfffbaad5245a07ac744156d5c337d5c19aa40f1ed4a80bd25339bda727e25778609f5d5a23d376ceed67d4094f0e9d546426d0c66af7c993e57e59345ffe8

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\uri-js\dist\esnext\uri.d.ts

MD5 10d8cd218034e95aaf736527efdef7e9
SHA1 c6c817c167d253b816a519a24fc272505cf1d334
SHA256 9f3c5498245c38c9016a369795ec5ef1768d09db63643c8dba9656e5ab294825
SHA512 90c5e9c3106db0c435ecae0278699519a1c4389c0037e549a4b685f231523e3397b39e56e34fac7cffa9e1a35113722b965e4906a535548dea0e449df2b0f5c4

C:\Users\Admin\AppData\Roaming\DRPSu\Alice\node_modules\fast-deep-equal\react.d.ts

MD5 fd2074bf3f21a4f6085a133414905b82
SHA1 24e189e5af33180fb0add107adb9612bdbeee011
SHA256 d979def17dea97ee491c975f3d3cb31957b7970a791c1d5a3854ea6cd4cce91e
SHA512 8c3b737f047a8b2cf05a61d5ceb06c197c619e7342d6cd7b278b26d4b85477b12f0e4a9a160f868661955c45040a9e3097ab2b9a4b3c145df866fdec5174777d

C:\Windows\Temp\NET\1.1\Win\Microsoft.NET\Framework\URTInstallPath\regasm.exe.config

MD5 7447443b22778bbb3ae40b83bee03c5d
SHA1 688cb2d573ec931973efdb3c0730604c0ee1d634
SHA256 81c4231a7b49c0e4d4eedfde8d98e9330a3c5f87ae6047a5130fcdfe1614bdaf
SHA512 0e60f589f4673ba691780a1d6de1d227de09ad4c8b33ed8220a799a45de019409809f7f29af2a7ad242b323ebdea49bd03dac59ac2f17102624f21cc2192a3bc

C:\Windows\Temp\NET\1.1\Win\Microsoft.NET\Framework\URTInstallPath\Updates\M979906\M979906Uninstall.msp

MD5 bc949ea893a9384070c31f083ccefd26
SHA1 cbb8391cb65c20e2c05a2f29211e55c49939c3db
SHA256 6bdf66b5bf2a44e658bea2ee86695ab150a06e600bf67cd5cce245ad54962c61
SHA512 e4288e71070485637ec5825f510a7daa7e75ef6c71a1b755f51e1b0f2e58e5066837f58408ea74d75db42c49372c6027d433a869904fc5efaf4876dfcfde1287

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\STORIES-vpn-2.mp3

MD5 ca57fa5d4cdeb7a21b7455c92bac3b79
SHA1 1f4390e87de19e71000b7161d4e0e76b3a7b339c
SHA256 a0e8e9fc855945b2e31381570af75cd87d76670ac6908f611c4572dcb28d0833
SHA512 50af491578ccf7df7c8ec77ee97a8659fc21571e290048adf9f526c752cdfabe73291926526bce6ccbd19b0bb04a3c19b83092dc7274c29f832bc9b6d00c7ff3

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\STORIES-vpn-6.mp3

MD5 765b998cac6c8c877d8f093a6f32f47a
SHA1 edea6853dd84c2b619e48f34f2aa431971990901
SHA256 303a0534daa72756db9485bf7cac2ffc7d23f1c432854056293e818605af80f4
SHA512 6f4f1b0e6701899c9ffee3ecbec76ed3f85a2df4bb98544106c693e1289e4ba63ed55204d517a0ebacb39d030083d06030c35d31b279cd9e4339e8dc3e278914

C:\Windows\Temp\NET\2.0\Win\Microsoft.NET\Framework\URTInstallPath\regsvcs.exe.config

MD5 0366f988e5ea426d80338070d8fa241b
SHA1 153b90af59d0598a0d5f5e083cb7ff24e2f7adcf
SHA256 325b14941e79aeb570eb4062714d446f70b51db3c14fa58c5d2f90c8dafe3c3e
SHA512 563a39c5958ae6f507e37923959a8a2608c7e9a6f338053edc142d8038849043c6050df2946116876102704ff14d6b36314aca468d91a7f3279754df2aba0bc2

C:\Windows\Temp\NET\2.0\Win\Microsoft.NET\Framework\URTInstallPath\sbscmp20_mscorlib.dll

MD5 f2fea0d9a1acf3fe7ffb1372dd21a014
SHA1 25720cb0de50de9673856c5786c8d2a9530c5ce3
SHA256 0f8ff3917fd2e819cdd8c9dc63c5cf044f808acb713258e9225db3ec05d0aa48
SHA512 135e8079f7b4b7b0909d0bae2207ac7b94648484e81ffce0da153ae1b16b0db226a883623f0eaa5513c24eee330f2fe57b4082db6119796036eeb637b6e309f8

C:\Windows\Temp\NET\2.0\Windows\INF\AER_1036.ADM

MD5 a6df4b28ce8f5df252f4ee42625521c2
SHA1 402ea1f6eae365b76f6a033cfc0678c96aec02c4
SHA256 0b68354ad1d540ae94e587b9996b991016876563cdd17165d81fb4f28e740792
SHA512 bc9142a60138245d23a25c9ea7e4ecfd39e333d4cba2db06e8ee84979ecd43ebbe0a74952789bd8cc41c345d946ff7edd0bd2af21e67c03e7143e65ae2c059bd

C:\Windows\Temp\NET\3.5\eula.1045.rtf

MD5 253562b1d58ce2cc31d4108077d71c65
SHA1 8b9daba46e6287a4b4b91589be6bb613743dac52
SHA256 fa0b29d3132ba93baf3ad5f3b14e14e3f8d1cd91657e89896e07af7a5de50d16
SHA512 bff02e9cc71027186dea65798df47969c91be0fc234fffe735f6041ef5c07d7838666f423bce78edd7306d03869697e605d463cb4540ec24ebdb8083dba820af

C:\Windows\Temp\NET\3.5\locdata.1031.ini

MD5 49f898b066a50c03ec11c7ff70519cb3
SHA1 e77760c106ae65783e3f4fd413ea751d00a04c26
SHA256 8510f49a9e3ccab6f83dd743fc8c28286e71dd89b2c38b3659465194666fceec
SHA512 76e4ddd3b606e0177ff9a9745f0bf397081aaecd962976ef18b58c25d318325f4f4fb8bcbc20d35da0b198ababdcb35c6441afbed910a6b16d00c733cf4dc0f4

C:\Windows\Temp\NET\3.5\Win\Microsoft.NET\Framework\v3.5\vbc.exe.config

MD5 12c8c3f33e65f2f0bfe9d4cc566dcd52
SHA1 0b0d371740dd544178ea5d1313ca695a7bd150b5
SHA256 2676edf40299f52f249ce15ea1da621c8019364b85647c54b9fea2abdba85565
SHA512 ed3f6f91ed74d122af931eb1e060c3c2a31a74c71d5c2f23e3284ff1e51c83bfc64ab5659562cb5b869fc7a47577db23f13c9d64a66124b49f48280f307b3722

C:\Windows\Temp\NET\4.0\Windows\Microsoft.NET\Framework\sbs_mscorrc.dll

MD5 c3faf0f28e828a16018d03318bcc1bd4
SHA1 b049080d9c07026bb84bbfca243b0be5e2605e06
SHA256 280d917b98466e9a2fc991e26c42f85f1c62624b2b4eb88c126671f13397da96
SHA512 be1f81c346427b04ffd5b6b1c78fefe18c76421c6cf883318d4f120e697e9b8659987653ff4f0c3c01e8b4cc2be70774cf64cb16b83186087018b85dfef5e4d7

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\WAITING-2.mp3

MD5 ba50ef5294afa47fd8199ceab5bca9c4
SHA1 5822a694810487999ba45b77ff95572e789967ed
SHA256 49f80e6ee7ae260d208deea397931f9fd9f6d1cd540e27d2f3e3263385830dba
SHA512 1fca42480bb91e95155e439caf0a5e7fd5fc12865e942c4068eea20cb5f1df8543d8c8f5fcb1ba2ccc925b80e6868fc38a6cb6531ea81e8c5fb80811ab6e3620

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\WAITING-1.mp3

MD5 26d845b49a19513397ccd2abe6312682
SHA1 88c4d60e6c73af38bdce1fc346d129b9ec6bd937
SHA256 cc85ff5e54762063c62237ff6e23c59fafe4ccc5b91333aefcc4286b6eb5c68a
SHA512 b9571a5eb1e492b0ba5b260d4ce0e62d507b5cc124b1c092b6d4ab457b7e0612517baa893a04725739f647c8d4a0e1f384443e21d72d48852fa55af9ecd1b6b3

C:\Users\Admin\AppData\Local\Temp\DriverPack-2024050275013\audio\en\DRIVERS-2.mp3

MD5 dd951f2ac6c9f11c3dfe531dd2d9c07f
SHA1 345e204904b4b84984a10ac8e662a96b2e6cb24e
SHA256 f7a19341356126b54bbf079b8b99327fe00c4d272044eacd998fbb92beea5264
SHA512 93d91981900f2124fa4cd3fddcfb7465999f4fd7d5513f77e43788954f63532723ed90bb7e13671a3329497123b6efa19526827614f19f00e49d9f5ce53c4f29

Analysis: behavioral19

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win7-20240220-en

Max time kernel

121s

Max time network

123s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\be.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\be.js

Network

N/A

Files

N/A

Analysis: behavioral15

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win7-20240419-en

Max time kernel

118s

Max time network

119s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\ar.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\ar.js

Network

N/A

Files

N/A

Analysis: behavioral17

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win7-20240221-en

Max time kernel

119s

Max time network

120s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\az.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\az.js

Network

N/A

Files

N/A

Analysis: behavioral24

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win10v2004-20240226-en

Max time kernel

151s

Max time network

160s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\bn.js

Signatures

N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\languages\bn.js

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3928 --field-trial-handle=3088,i,14310325015283915034,7660943942870463106,262144 --variations-seed-version /prefetch:8

Network

Country Destination Domain Proto
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 79.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 75.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 13.107.253.67:443 tcp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 104.219.191.52.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 183.142.211.20.in-addr.arpa udp
US 8.8.8.8:53 77.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 11.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 214.143.182.52.in-addr.arpa udp
US 8.8.8.8:53 chromewebstore.googleapis.com udp
US 8.8.8.8:53 chromewebstore.googleapis.com udp
GB 142.250.178.10:443 chromewebstore.googleapis.com tcp

Files

N/A

Analysis: behavioral3

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win7-20231129-en

Max time kernel

118s

Max time network

119s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

Signatures

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2992 -s 220

Network

N/A

Files

N/A

Analysis: behavioral6

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win10v2004-20240419-en

Max time kernel

135s

Max time network

124s

Command Line

C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\Tools\modules\bugreport.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}

Signatures

Enumerates physical storage devices

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\mshta.exe

Processes

C:\Windows\SysWOW64\mshta.exe

C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\Tools\modules\bugreport.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 3708 -ip 3708

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3708 -s 1712

Network

Country Destination Domain Proto
US 8.8.8.8:53 133.211.185.52.in-addr.arpa udp
US 8.8.8.8:53 77.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 69.31.126.40.in-addr.arpa udp
NL 23.62.61.121:443 www.bing.com tcp
US 8.8.8.8:53 121.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 55.36.223.20.in-addr.arpa udp
US 8.8.8.8:53 104.219.191.52.in-addr.arpa udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 164.53.16.96.in-addr.arpa udp
NL 52.142.223.178:80 tcp
US 8.8.8.8:53 34.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 11.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp

Files

N/A

Analysis: behavioral7

Detonation Overview

Submitted

2024-05-02 07:50

Reported

2024-05-02 07:52

Platform

win7-20240221-en

Max time kernel

119s

Max time network

121s

Command Line

C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\Tools\run.hta"

Signatures

Modifies Windows Firewall

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A

Reads user/profile data of web browsers

spyware stealer

Checks installed software on the system

discovery

Enumerates physical storage devices

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SysWOW64\mshta.exe N/A

Runs net.exe

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2248 wrote to memory of 2796 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2248 wrote to memory of 2796 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2248 wrote to memory of 2796 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2248 wrote to memory of 2796 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2796 wrote to memory of 2820 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 2796 wrote to memory of 2820 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 2796 wrote to memory of 2820 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 2796 wrote to memory of 2820 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 2248 wrote to memory of 1528 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2248 wrote to memory of 1528 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2248 wrote to memory of 1528 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 2248 wrote to memory of 1528 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\cmd.exe
PID 1528 wrote to memory of 800 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 1528 wrote to memory of 800 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 1528 wrote to memory of 800 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 1528 wrote to memory of 800 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 2248 wrote to memory of 1508 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\net.exe
PID 2248 wrote to memory of 1508 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\net.exe
PID 2248 wrote to memory of 1508 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\net.exe
PID 2248 wrote to memory of 1508 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\net.exe
PID 1508 wrote to memory of 1000 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 1508 wrote to memory of 1000 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 1508 wrote to memory of 1000 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 1508 wrote to memory of 1000 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2248 wrote to memory of 2312 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\rundll32.exe
PID 2248 wrote to memory of 2312 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\rundll32.exe
PID 2248 wrote to memory of 2312 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\rundll32.exe
PID 2248 wrote to memory of 2312 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\rundll32.exe
PID 2248 wrote to memory of 2312 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\rundll32.exe
PID 2248 wrote to memory of 2312 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\rundll32.exe
PID 2248 wrote to memory of 2312 N/A C:\Windows\SysWOW64\mshta.exe C:\Windows\SysWOW64\rundll32.exe

Processes

C:\Windows\SysWOW64\mshta.exe

C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\Tools\run.hta"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c "netsh advfirewall firewall delete rule name="DriverPack aria2c.exe" || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_4095.txt""

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall delete rule name="DriverPack aria2c.exe"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c "netsh advfirewall firewall add rule name="DriverPack aria2c.exe" dir=in action=allow program="C:\Users\Admin\AppData\Local\Temp\Tools\tools\aria2c.exe" || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_42114.txt""

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="DriverPack aria2c.exe" dir=in action=allow program="C:\Users\Admin\AppData\Local\Temp\Tools\tools\aria2c.exe"

C:\Windows\SysWOW64\net.exe

"C:\Windows\System32\net.exe" start wscsvc

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 start wscsvc

C:\Windows\SysWOW64\rundll32.exe

rundll32 kernel32,Sleep

Network

Country Destination Domain Proto
US 8.8.8.8:53 allfont.ru udp
US 104.21.16.11:80 allfont.ru tcp
US 104.21.16.11:443 allfont.ru tcp
US 8.8.8.8:53 auth.drp.su udp
GB 87.117.235.115:80 auth.drp.su tcp
US 8.8.8.8:53 mc.yandex.ru udp
US 8.8.8.8:53 update.drp.su udp
RU 87.250.251.119:443 mc.yandex.ru tcp
RU 37.9.8.75:80 update.drp.su tcp
RU 37.9.8.75:80 update.drp.su tcp
GB 142.250.180.14:80 www.google-analytics.com tcp
GB 142.250.180.14:80 www.google-analytics.com tcp
US 8.8.8.8:53 crl.microsoft.com udp
US 2.18.190.73:80 crl.microsoft.com tcp
RU 37.9.8.75:80 update.drp.su tcp
US 8.8.8.8:53 mc.yandex.com udp
RU 87.250.251.119:443 mc.yandex.com tcp
RU 87.250.251.119:443 mc.yandex.com tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3NPBB818\allfont[1].htm

MD5 5255b05e221a2ee9e73b8d9ca6eaa4ad
SHA1 28d5fbabcdcc49246e71721c45d49a0dd025cb0b
SHA256 ed2ae741d3478834f11bdecc1f4a8e179bc295a99e489936befac5ee4eaf4cc5
SHA512 59941bf156a18037f99367a8455137ffaad3ca0d2da6b3b604e6d17caa4299789b463908cf812e07477aee07e7a6fd4b7fcbad598ffb48d57a76a018da368e05

C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_4095.txt

MD5 02466847c63e90c5041b8dd7990dce27
SHA1 fdcf71f16e2efcb8815730b4cca5f580b185cf5c
SHA256 195418a93d769a17558aa804568eff487979e62d0731aa8c63d8d0ffc1723321
SHA512 86b11957db369afa71831c72848b897aafd155887467a377484d0346dcaeaac88476cad2331e34a24e7f8ac3a07335dd1e639ae27bfa0d4491dcc6a48a7e6ff3

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5OCCPTL4\collect[1].gif

MD5 28d6814f309ea289f847c69cf91194c6
SHA1 0f4e929dd5bb2564f7ab9c76338e04e292a42ace
SHA256 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
SHA512 1d68b92e8d822fe82dc7563edd7b37f3418a02a89f1a9f0454cca664c2fc2565235e0d85540ff9be0b20175be3f5b7b4eae1175067465d5cca13486aab4c582c