4e839b8267d170c054a00292d0d93440b9709066db6f787132f866dcfa8a9dd4

Resubmissions

23/07/2024, 00:52

240723-a76dzsxhnh 7

23/07/2024, 00:47

240723-a5lxkaxgkd 8

23/07/2024, 00:44

240723-a3t56axfkf 7

Analysis

max time kernel
235s
max time network
238s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
23/07/2024, 00:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

EclipsePlayerLauncher.exe
Size

874KB
MD5

7a1acb733866558632ab929bef57828a
SHA1

3351f2d2648aaeadad4d6e7d212152f6ed7bc615
SHA256

4e839b8267d170c054a00292d0d93440b9709066db6f787132f866dcfa8a9dd4
SHA512

b074123fd9b8e01528ef49c9d46a20c9c33b634e5b367b8f8e575f6b63687319648c822ae4d54b71bcfa8477f087c1cb29bfa72a64a58c3436cd72e11714d91c
SSDEEP

12288:ljh5+ZymNqi1Uc6Tn0aYWBsTKIgCTsjfLxLS+AMDRFJh8H:ljeZjN5t6Tn0a7VI9TifLxm+AMD/Jhe

Score

8^/10

discovery evasion persistence spyware stealer trojan

Malware Config

Signatures

Downloads MZ/PE file

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1705699165-553239100-4129523827-1000\Control Panel\International\Geo\Nation	EclipsePlayerLauncher.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1705699165-553239100-4129523827-1000\Control Panel\International\Geo\Nation	RobloxPlayerLauncher.exe

Executes dropped EXE 4 IoCs

pid	Process
4616	RobloxPlayerLauncher.exe
4808	RobloxPlayerBeta.exe
5296	dxwebsetup.exe
2264	dxwsetup.exe

Loads dropped DLL 8 IoCs

pid	Process
4808	RobloxPlayerBeta.exe
4808	RobloxPlayerBeta.exe
2264	dxwsetup.exe
2264	dxwsetup.exe
2264	dxwsetup.exe
2264	dxwsetup.exe
2264	dxwsetup.exe
2264	dxwsetup.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0 = "rundll32.exe C:\\Windows\\system32\\advpack.dll,DelNodeRunDLL32 \"C:\\Users\\Admin\\AppData\\Local\\Temp\\IXP000.TMP\\\""	dxwebsetup.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 2 IoCs

evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	EclipsePlayerLauncher.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	RobloxPlayerLauncher.exe

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\B:	dxwsetup.exe
File opened (read-only)	\??\N:	dxwsetup.exe
File opened (read-only)	\??\U:	dxwsetup.exe
File opened (read-only)	\??\V:	dxwsetup.exe
File opened (read-only)	\??\G:	dxwsetup.exe
File opened (read-only)	\??\O:	dxwsetup.exe
File opened (read-only)	\??\R:	dxwsetup.exe
File opened (read-only)	\??\S:	dxwsetup.exe
File opened (read-only)	\??\Y:	dxwsetup.exe
File opened (read-only)	\??\Z:	dxwsetup.exe
File opened (read-only)	\??\A:	dxwsetup.exe
File opened (read-only)	\??\E:	dxwsetup.exe
File opened (read-only)	\??\K:	dxwsetup.exe
File opened (read-only)	\??\L:	dxwsetup.exe
File opened (read-only)	\??\P:	dxwsetup.exe
File opened (read-only)	\??\T:	dxwsetup.exe
File opened (read-only)	\??\X:	dxwsetup.exe
File opened (read-only)	\??\H:	dxwsetup.exe
File opened (read-only)	\??\I:	dxwsetup.exe
File opened (read-only)	\??\J:	dxwsetup.exe
File opened (read-only)	\??\M:	dxwsetup.exe
File opened (read-only)	\??\Q:	dxwsetup.exe
File opened (read-only)	\??\W:	dxwsetup.exe

Drops file in System32 directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\DirectX\WebSetup\dxupdate.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Dec2006_d3dx10_00_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Dec2006_d3dx10_00_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Dec2005_d3dx9_28_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Oct2006_d3dx9_31_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Oct2006_xact_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Apr2007_d3dx10_33_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Feb2005_d3dx9_24_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Jun2005_d3dx9_26_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Dec2005_d3dx9_28_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Feb2007_xact_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Nov2007_d3dx10_36_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Feb2010_xact_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Aug2006_xinput_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Feb2010_xaudio_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Apr2007_d3dx9_33_x64.cab	dxwsetup.exe
File opened for modification	C:\Windows\SysWOW64\DirectX\WebSetup\filelist.dat	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Apr2007_d3dx10_33_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Nov2007_d3dx9_36_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Jun2008_d3dx9_38_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Jun2010_d3dx9_43_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Jun2006_xact_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Dec2006_d3dx9_32_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Nov2007_x3daudio_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Mar2008_xaudio_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Mar2009_d3dx10_41_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Feb2005_d3dx9_24_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Jun2008_d3dx10_38_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Nov2008_d3dx10_40_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Nov2007_xact_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\directx\websetup\SETB2AD.tmp	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Aug2008_xact_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Aug2007_d3dx9_35_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Mar2009_xaudio_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Jun2010_xact_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Apr2005_d3dx9_25_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Aug2005_d3dx9_27_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Jun2007_d3dx10_34_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Jun2008_xact_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Aug2008_d3dx10_39_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Mar2009_d3dx9_41_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Apr2006_xinput_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Jun2007_d3dx9_34_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Nov2007_x3daudio_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Aug2009_D3DCompiler_42_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Jun2010_xaudio_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Feb2006_d3dx9_29_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Mar2009_d3dx10_41_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\MDX_1.0.2903.0_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Feb2006_d3dx9_29_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Aug2009_xact_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Feb2010_x3daudio_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Aug2007_d3dx10_35_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Oct2006_xact_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Mar2008_d3dx9_37_x64.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Aug2008_xaudio_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\MDX_1.0.2905.0_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\MDX_1.0.2910.0_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Aug2008_d3dx9_39_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Aug2007_xact_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Nov2008_x3daudio_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Nov2008_xact_x86.cab	dxwsetup.exe
File created	C:\Windows\SysWOW64\directx\websetup\SETB29D.tmp	dxwsetup.exe
File created	C:\Windows\SysWOW64\DirectX\WebSetup\Jun2010_d3dcsx_43_x64.cab	dxwsetup.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\ui\expandPlayerList.png	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\android\textures\aluminum\normal.pvr	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\durango\textures\ui\Shell\Icons\[email protected]	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\durango\textures\ui\Shell\Images\Robux\RobuxSquare06.png	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\ios\textures\water\normal_16.pvr	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\shaders\source\slate.hlsl	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\Roblox-loading-glow.png	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\content\fonts\headJ.mesh	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\content\sounds\Kerplunk.mp3	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\ui\btn_newBlue.png	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\ui\[email protected]	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\ui\PlayerList\BlockedIcon.png	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\ui\PlayerlistFriendIcon.png	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\pc\textures\woodplanks\diffuse.dds	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\content\fonts\CompositTShirt.mesh	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\particles\fire_color.dds	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\ui\GroupMoveButton.png	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\ui\Settings\Help\[email protected]	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\ui\Settings\Radial\[email protected]	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\pc\terrain\materials.json	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\content\sounds\plasticstone3.mp3	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\advClosed-hand-no-weld.png	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\ui\SurfaceButton_dn.png	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\android\textures\plastic\normal.dds	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\durango\textures\ui\Shell\ScreenAdjustment\[email protected]	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\advancedMove.png	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\durango\textures\ui\Shell\Icons\[email protected]	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\durango\textures\ui\Shell\Images\Robux\Robux02.png	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\durango\textures\water\normal_04.dds	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\ui\DeleteButton.png	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\Grass_Texture.jpg	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\ui\PlayerlistFriendIcon.png	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\durango\textures\ui\Shell\Buttons\[email protected]	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\durango\textures\woodplanks\specular.dds	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\FillCursor.png	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\particles\explosion01_core_main.dds	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\ui\Settings\Help\RotateCameraGesture.png	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\android\textures\water\normal_09.pvr	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\android\textures\water\normal_17.pvr	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\durango\textures\brick\diffuse.dds	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\durango\textures\rust\normal.dds	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\pc\textures\marble\diffuse.dds	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\content\scripts\CoreScripts\Topbar.lua	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\content\sounds\action_jump.mp3	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\chatBubble_bot_notify_bang.png	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\durango\scripts\ui\Modules\FriendPresenceItem.lua	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\durango\scripts\ui\Modules\UserData.lua	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\durango\textures\water\normal_12.dds	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\content\fonts\headJ.mesh	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\d3dcompiler_47.dll	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\ios\textures\wood\normaldetail.pvr	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\pc\textures\granite\normaldetail.dds	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\pc\textures\terrain\diffusefar.dds	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\shaders\source\screenspace.hlsl	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\boost.dll	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\content\sounds\woodmetal3.mp3	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\ui\Settings\Help\[email protected]	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\content\textures\ui\Settings\Slider\[email protected]	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\android\textures\water\normal_07.pvr	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\durango\textures\water\normal_17.dds	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\content\fonts\Arial.font	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\durango\textures\pebble\normaldetail.dds	EclipsePlayerLauncher.exe
File created	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\durango\textures\ui\Shell\Background\Home_screen_01.png	EclipsePlayerLauncher.exe
File opened for modification	C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\pc\textures\water\normal_25.dds	EclipsePlayerLauncher.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\msdownld.tmp\AS5A80FF.tmp	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5A965C.tmp	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5ADB15.tmp\Nov2008_x3daudio_x64.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5ADDF4.tmp\Nov2008_d3dx9_40_x64.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AAA13.tmp\Dec2006_xact_x64.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AD7E9.tmp	dxwsetup.exe
File created	C:\Windows\msdownld.tmp\AS5A452E.tmp\Dec2006_d3dx10_00_x86.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5A4A3F.tmp\Apr2005_d3dx9_25_x86.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5A7CAA.tmp	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AFD63.tmp	dxwsetup.exe
File created	C:\Windows\msdownld.tmp\AS5A4609.tmp\Dec2006_d3dx10_00_x64.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5A80FF.tmp\Aug2009_d3dx11_42_x86.cab	dxwsetup.exe
File created	C:\Windows\msdownld.tmp\AS5ACB75.tmp\Mar2008_xaudio_x64.cab	dxwsetup.exe
File created	C:\Windows\msdownld.tmp\AS5AD113.tmp\Jun2008_xact_x86.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5B01A8.tmp	dxwsetup.exe
File created	C:\Windows\msdownld.tmp\AS5A8FE3.tmp\Apr2005_d3dx9_25_x64.cab	dxwsetup.exe
File created	C:\Windows\msdownld.tmp\AS5AA2FE.tmp\Oct2006_d3dx9_31_x64.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AC2EA.tmp	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AD20D.tmp\Jun2008_xaudio_x86.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5A6440.tmp	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AA1C6.tmp\Aug2006_xact_x86.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AD7E9.tmp\Aug2008_xact_x86.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AF90D.tmp\Feb2010_xact_x64.cab	dxwsetup.exe
File created	C:\Windows\msdownld.tmp\AS5A6808.tmp\Nov2007_d3dx10_36_x86.cab	dxwsetup.exe
File created	C:\Windows\msdownld.tmp\AS5A6EEE.tmp\Jun2008_d3dx9_38_x86.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AB02D.tmp	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AD902.tmp\Aug2008_xaudio_x86.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AF3AE.tmp\Aug2009_xact_x64.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AA976.tmp\Dec2006_xact_x86.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AAA13.tmp	dxwsetup.exe
File created	C:\Windows\msdownld.tmp\AS5AF729.tmp\Feb2010_x3daudio_x86.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5A44B1.tmp	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AC74F.tmp	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AFEBA.tmp	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5B0801.tmp\MDX_1.0.2904.0_x86.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5A8DC1.tmp\Feb2005_d3dx9_24_x64.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5A9B7C.tmp	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AC451.tmp	dxwsetup.exe
File created	C:\Windows\msdownld.tmp\AS5AE99C.tmp\Mar2009_xaudio_x64.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AF18B.tmp\Aug2009_D3DCompiler_42_x64.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5A6597.tmp\Nov2007_d3dx9_36_x86.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5A7A58.tmp\Mar2009_d3dx9_41_x86.cab	dxwsetup.exe
File created	C:\Windows\msdownld.tmp\AS5AA5FC.tmp\Oct2006_xact_x64.cab	dxwsetup.exe
File created	C:\Windows\msdownld.tmp\AS5AD885.tmp\Aug2008_xact_x64.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AE288.tmp\Mar2009_d3dx9_41_x64.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5A4FAE.tmp\Dec2005_d3dx9_28_x86.cab	dxwsetup.exe
File created	C:\Windows\msdownld.tmp\AS5A5FEA.tmp\Jun2007_d3dx10_34_x86.cab	dxwsetup.exe
File created	C:\Windows\msdownld.tmp\AS5A6970.tmp\Mar2008_d3dx9_37_x86.cab	dxwsetup.exe
File created	C:\Windows\msdownld.tmp\AS5AA976.tmp\Dec2006_xact_x86.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AD885.tmp	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AED46.tmp\Aug2009_d3dcsx_42_x64.cab	dxwsetup.exe
File created	C:\Windows\msdownld.tmp\AS5AEC0D.tmp\Aug2009_d3dx10_42_x64.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AF43B.tmp\Aug2009_xaudio_x86.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5A5183.tmp\Feb2006_d3dx9_29_x86.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AAACE.tmp\Feb2007_xact_x86.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AE7C7.tmp	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5AEC0D.tmp\Aug2009_d3dx10_42_x64.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5A4E08.tmp	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5A8FE3.tmp	dxwsetup.exe
File created	C:\Windows\msdownld.tmp\AS5A818C.tmp\Aug2009_d3dcsx_42_x86.cab	dxwsetup.exe
File created	C:\Windows\msdownld.tmp\AS5AFBCC.tmp\Jun2010_d3dx9_43_x64.cab	dxwsetup.exe
File created	C:\Windows\msdownld.tmp\AS5B0B4D.tmp\MDX_1.0.2909.0_x86.cab	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5A4A3F.tmp	dxwsetup.exe
File opened for modification	C:\Windows\msdownld.tmp\AS5A9C18.tmp	dxwsetup.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters	vssvc.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies Internet Explorer settings 1 TTPs 10 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F14D814-769C-4A30-916F-9FB696A6C539}\AppPath = "C:\\Program Files (x86)\\Eclipse\\Versions\\version-five\\"	EclipsePlayerLauncher.exe
Key created	\REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32DDADE5-22BF-4D0B-92ED-A22F2B9A6698}	EclipsePlayerLauncher.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32DDADE5-22BF-4D0B-92ED-A22F2B9A6698}\Policy = "3"	EclipsePlayerLauncher.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32DDADE5-22BF-4D0B-92ED-A22F2B9A6698}\AppPath = "C:\\Program Files (x86)\\Eclipse\\Versions\\version-five\\"	EclipsePlayerLauncher.exe
Key created	\REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F14D814-769C-4A30-916F-9FB696A6C539}	EclipsePlayerLauncher.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F14D814-769C-4A30-916F-9FB696A6C539}\AppName = "RobloxPlayerLauncher.exe"	EclipsePlayerLauncher.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F14D814-769C-4A30-916F-9FB696A6C539}\Policy = "3"	EclipsePlayerLauncher.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32DDADE5-22BF-4D0B-92ED-A22F2B9A6698}\AppName = "RobloxPlayerBeta.exe"	EclipsePlayerLauncher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\eclipse-player-eclipse2016	EclipsePlayerLauncher.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\eclipse-player-eclipse2016\WarnOnOpen = "0"	EclipsePlayerLauncher.exe

Modifies registry class 11 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\eclipse-player-eclipse2016\DefaultIcon\ = "C:\\Program Files (x86)\\Eclipse\\Versions\\version-five\\RobloxPlayerLauncher.exe"	EclipsePlayerLauncher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\eclipse-player-eclipse2016\shell	EclipsePlayerLauncher.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\eclipse-player-eclipse2016\shell\open\command\ = "\"C:\\Program Files (x86)\\Eclipse\\Versions\\version-five\\RobloxPlayerLauncher.exe\" %1"	EclipsePlayerLauncher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\eclipse-player-eclipse2016	EclipsePlayerLauncher.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\eclipse-player-eclipse2016\ = "URL: Roblox Protocol"	EclipsePlayerLauncher.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\eclipse-player-eclipse2016\URL Protocol	EclipsePlayerLauncher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\eclipse-player-eclipse2016\DefaultIcon	EclipsePlayerLauncher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\eclipse-player-eclipse2016\shell\open\command	EclipsePlayerLauncher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\eclipse-player-eclipse2016\shell\open	EclipsePlayerLauncher.exe
Key created	\REGISTRY\USER\S-1-5-21-1705699165-553239100-4129523827-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1705699165-553239100-4129523827-1000\{BEBF67BD-C0F4-4071-8D67-D5C3FAF73718}	msedge.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 378644.crdownload:SmartScreen	msedge.exe

Suspicious behavior: EnumeratesProcesses 16 IoCs

pid	Process
116	EclipsePlayerLauncher.exe
116	EclipsePlayerLauncher.exe
3284	msedge.exe
3284	msedge.exe
1216	msedge.exe
1216	msedge.exe
3616	identity_helper.exe
3616	identity_helper.exe
1528	msedge.exe
1528	msedge.exe
5404	msedge.exe
5404	msedge.exe
6132	msedge.exe
6132	msedge.exe
6132	msedge.exe
6132	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 36 IoCs

pid	Process
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeBackupPrivilege	180	vssvc.exe
Token: SeRestorePrivilege	180	vssvc.exe
Token: SeAuditPrivilege	180	vssvc.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 116 wrote to memory of 1216	116	EclipsePlayerLauncher.exe	94
PID 116 wrote to memory of 1216	116	EclipsePlayerLauncher.exe	94
PID 1216 wrote to memory of 3348	1216	msedge.exe	95
PID 1216 wrote to memory of 3348	1216	msedge.exe	95
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3240	1216	msedge.exe	97
PID 1216 wrote to memory of 3284	1216	msedge.exe	98
PID 1216 wrote to memory of 3284	1216	msedge.exe	98
PID 1216 wrote to memory of 3480	1216	msedge.exe	99
PID 1216 wrote to memory of 3480	1216	msedge.exe	99
PID 1216 wrote to memory of 3480	1216	msedge.exe	99
PID 1216 wrote to memory of 3480	1216	msedge.exe	99
PID 1216 wrote to memory of 3480	1216	msedge.exe	99
PID 1216 wrote to memory of 3480	1216	msedge.exe	99
PID 1216 wrote to memory of 3480	1216	msedge.exe	99
PID 1216 wrote to memory of 3480	1216	msedge.exe	99
PID 1216 wrote to memory of 3480	1216	msedge.exe	99
PID 1216 wrote to memory of 3480	1216	msedge.exe	99
PID 1216 wrote to memory of 3480	1216	msedge.exe	99
PID 1216 wrote to memory of 3480	1216	msedge.exe	99
PID 1216 wrote to memory of 3480	1216	msedge.exe	99
PID 1216 wrote to memory of 3480	1216	msedge.exe	99
PID 1216 wrote to memory of 3480	1216	msedge.exe	99
PID 1216 wrote to memory of 3480	1216	msedge.exe	99
PID 1216 wrote to memory of 3480	1216	msedge.exe	99
PID 1216 wrote to memory of 3480	1216	msedge.exe	99

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\EclipsePlayerLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\EclipsePlayerLauncher.exe"
1⤵
- Checks computer location settings
- Checks whether UAC is enabled
- Drops file in Program Files directory
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.eclipse2016.top/download/thankyou
  2⤵
  - Enumerates system info in registry
  - Modifies registry class
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:1216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8976846f8,0x7ff897684708,0x7ff897684718
    3⤵
    PID:3348
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
    3⤵
    PID:3240
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 /prefetch:3
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3284
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2724 /prefetch:8
    3⤵
    PID:3480
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
    3⤵
    PID:1244
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
    3⤵
    PID:892
- - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5124 /prefetch:8
    3⤵
    PID:4408
- - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5124 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3616
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5360 /prefetch:1
    3⤵
    PID:1624
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5256 /prefetch:1
    3⤵
    PID:3320
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3492 /prefetch:1
    3⤵
    PID:1104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3456 /prefetch:1
    3⤵
    PID:744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5740 /prefetch:1
    3⤵
    PID:4928
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3488 /prefetch:1
    3⤵
    PID:532
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3468 /prefetch:1
    3⤵
    PID:1532
- - C:\Program Files (x86)\Eclipse\Versions\version-five\RobloxPlayerLauncher.exe
    "C:\Program Files (x86)\Eclipse\Versions\version-five\RobloxPlayerLauncher.exe" eclipse-player-eclipse2016:1+launchmode:play+gameinfo:eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJzZXNzaW9uSWQiOiJmYjdjODVlYS1hOTI1LTRhMDctYjJhYi0zNjMzNWJmMTA3N2QiLCJjcmVhdGVkQXQiOjE3MjE2OTU3NjV9.s1hOFSInvL9FL5sVLf-K3kKvKi70oWQLYaEo3_aB3K1wZInU4T9vhpigSnJgf241p22Ql3Qpy1wN3kHr1SIIHA+placelauncherurl:http://www.eclipse2016.top/game/PlaceLauncher.ashx?placeId=4+k:l
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Checks whether UAC is enabled
    PID:4616
  - - C:\Program Files (x86)\Eclipse\Versions\version-five\RobloxPlayerBeta.exe
      "C:\Program Files (x86)\Eclipse\Versions\version-five\RobloxPlayerBeta.exe" --play -a https://www.eclipse2016.top/Login/Negotiate.ashx -t eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJzZXNzaW9uSWQiOiJmYjdjODVlYS1hOTI1LTRhMDctYjJhYi0zNjMzNWJmMTA3N2QiLCJjcmVhdGVkQXQiOjE3MjE2OTU3NjV9.s1hOFSInvL9FL5sVLf-K3kKvKi70oWQLYaEo3_aB3K1wZInU4T9vhpigSnJgf241p22Ql3Qpy1wN3kHr1SIIHA -j http://www.eclipse2016.top/game/PlaceLauncher.ashx?placeId=4
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:4808
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3936 /prefetch:1
    3⤵
    PID:1380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3484 /prefetch:1
    3⤵
    PID:532
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6108 /prefetch:8
    3⤵
    PID:1760
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5432 /prefetch:8
    3⤵
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    PID:1528
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1376 /prefetch:1
    3⤵
    PID:1704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2684 /prefetch:1
    3⤵
    PID:704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6292 /prefetch:1
    3⤵
    PID:5012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6224 /prefetch:1
    3⤵
    PID:3640
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6448 /prefetch:1
    3⤵
    PID:408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1
    3⤵
    PID:4928
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6600 /prefetch:1
    3⤵
    PID:4548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6608 /prefetch:1
    3⤵
    PID:2200
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6932 /prefetch:1
    3⤵
    PID:5296
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7364 /prefetch:1
    3⤵
    PID:5468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7532 /prefetch:1
    3⤵
    PID:5580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7840 /prefetch:1
    3⤵
    PID:5832
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6864 /prefetch:1
    3⤵
    PID:6012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6420 /prefetch:1
    3⤵
    PID:5952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6436 /prefetch:1
    3⤵
    PID:3212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8284 /prefetch:1
    3⤵
    PID:6120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7936 /prefetch:1
    3⤵
    PID:668
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8352 /prefetch:1
    3⤵
    PID:5944
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6332 /prefetch:1
    3⤵
    PID:5960
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7716 /prefetch:1
    3⤵
    PID:5424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7892 /prefetch:1
    3⤵
    PID:636
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7232 /prefetch:1
    3⤵
    PID:6024
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3576 /prefetch:1
    3⤵
    PID:5332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6188 /prefetch:1
    3⤵
    PID:2232
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6892 /prefetch:8
    3⤵
    PID:2228
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7048 /prefetch:1
    3⤵
    PID:4028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=8452 /prefetch:8
    3⤵
    PID:2768
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6460 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5404
- - C:\Users\Admin\Downloads\dxwebsetup.exe
    "C:\Users\Admin\Downloads\dxwebsetup.exe"
    3⤵
    - Executes dropped EXE
    - Adds Run key to start application
    PID:5296
  - - C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe
      C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Enumerates connected drives
      Drops file in System32 directory
      Drops file in Windows directory
      PID:2264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,8457102420961968538,3968561859006406090,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6964 /prefetch:2
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:6132

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1688

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2356

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4a0 0x520
1⤵
PID:5608

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:180

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\android\textures\diamondplate\normaldetail.pvr

Filesize
76B

MD5
c95b632eaa85ee45533c92f9072b1b7f

SHA1
940a0f804a6e22fa81abc194f5fabe20fa3bfb06

SHA256
f0f8c09f264a70500007579b065d78dd2cfdccb647ee2c3e386ffd36cbe0937a

SHA512
9f5e1d55c6452a853d7a6564ed3ecfbb009ab5fc94b800b07cdeaa814a6c8cb4fc11abba8285af0659093a0db3c8cabf9b139793263e662d7b6e6c00c70a5980

Download Submit
C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\durango\textures\cobblestone\normaldetail.dds

Filesize
176B

MD5
620e055b9e500e85a131d8be2a65c11e

SHA1
d7fa8af56bfcfd48f38931e3ef8606585664a248

SHA256
2a51ad9239a2102af2c08ee23e18407c3500770a931332a722c643ffca90a60e

SHA512
551a93a5cffbc008f6d6b122f4c45d686faf1ef5a90975b8b2ef906123d7981e40efc644494957544832f5f605dac434714239a17baea97fcb38175d589d8794

Download Submit
C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\ios\textures\diamondplate\normaldetail.pvr

Filesize
148B

MD5
76b5c6a7250cb51ef7e5393dbe7f5668

SHA1
b06bcf998544656116b60e930fe973e220359a0d

SHA256
07d105fd1973fcc0183714e21d509b04f71cfc9891982e9547ca17fd493310d0

SHA512
d5bea6224a3da9c7185b5f94fb0c6c05ab03a71c1b81d81c0f67cfcc717a1a564670cbcd39a54167a09bcb0f8fe124fa296c774985dcdc2375ee5f2f58ac2732

Download Submit
C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\pc\textures\aluminum\diffuse.dds

Filesize
152B

MD5
b79e6464c2a4e060275c1a947d2c46fc

SHA1
cbc5d75c02e4613e9002e39e9ef1d00d63183fd8

SHA256
8552dc6e0cb6d92005d531258fdb0648f943c720eafff55b51659ec80b7c3e3c

SHA512
79f8c6437f1e73b2b130fbdad2e4890bd0510cc47cfa77fa96f44e1ff4dcaf7718a7677df929e423f5623d59a94e1876d72be73c0be411128b29702237c9d0fe

Download Submit
C:\Program Files (x86)\Eclipse\Versions\version-five\PlatformContent\pc\textures\concrete\specular.dds

Filesize
170KB

MD5
a4dcc342dcb963f298003a63d488ab76

SHA1
e5656b38670fae67de13e70f09ed6258aa365289

SHA256
454ee746e774d4a1611cadb2552eacc28167ff3f3306018198a8e203274ccb47

SHA512
6074081ad0cdd4f69d3ded98bd34f7c7ecb91dbb92e3146ec4013156e4ee2c728ca00d3ce5f45d312438df2cbe5a7a09dbab2957489ac4ce2e7af8a9408c19fb

Download Submit
C:\Program Files (x86)\Eclipse\Versions\version-five\RobloxPlayerBeta.exe

Filesize
16.1MB

MD5
7cc51c24d3e4cd9b7055fa10b7bef9d0

SHA1
9e86446b66cc5bef4cd4166a664d3c8b5ae3e4a2

SHA256
d7dc26d81cef6d83a3bd4feae508d3190e3dc32748a9f2735fe04b6523fb31a3

SHA512
15736444e23f1e43e75ed74a5a90dd2b8f8bf636e87a586d013bbda06dd1ee370a723f4dc5f0d90d45b5b3b4b838f94f3f3047a8faf408cf1e944ced0e64bfc5

Download Submit
C:\Program Files (x86)\Eclipse\Versions\version-five\RobloxPlayerLauncher.exe

Filesize
874KB

MD5
7a1acb733866558632ab929bef57828a

SHA1
3351f2d2648aaeadad4d6e7d212152f6ed7bc615

SHA256
4e839b8267d170c054a00292d0d93440b9709066db6f787132f866dcfa8a9dd4

SHA512
b074123fd9b8e01528ef49c9d46a20c9c33b634e5b367b8f8e575f6b63687319648c822ae4d54b71bcfa8477f087c1cb29bfa72a64a58c3436cd72e11714d91c

Download Submit
C:\Program Files (x86)\Eclipse\Versions\version-five\SDL2.dll

Filesize
761KB

MD5
4ee9569751dee0f1ff5a8fdab6203786

SHA1
8a7dc2e613a46b6e64b06dfd7e3b8b6a0f2afc29

SHA256
22232fce2c0a24c91ea623f446748f3fbffda2164e16b7f68d25d362679f8878

SHA512
b5b28b08fac25621d44a6cc2acafefcbb416f0efa750bf23757afcec01dd73b1d27049df6b7ac4076ec35bdcd0ec88bda9981d011717a4522980c856ff67bf74

Download Submit
C:\Program Files (x86)\Eclipse\Versions\version-five\fmod.dll

Filesize
1.4MB

MD5
98d4535809c3f9bc4b84b3ced12dfcdd

SHA1
cda854d6d3a1de43e1476bab68724a361e81ecf7

SHA256
0aa8c47f0764d9f1d961e8e62f8cc9f6b6bfcfffe41baea4b86d74fcd506a5ab

SHA512
afa922ffe82922c44f92c4bd8493c2f044cb71b3fb6b2e81fcad7f9184fe507fee3c5c0c1a8c91f0338d7ccb1521899610e1ee629074cbfd7ab745cba6f859f5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a499254d6b5d91f97eb7a86e5f8ca573

SHA1
03dbfebfec8c94a9c06f9b0cd81ebe0a2b8be3d1

SHA256
fb87b758c2b98989df851380293ff6786cb9a5cf2b3a384cec70d9f3eb064499

SHA512
d7adcc76d0470bcd68d7644de3c8d2b6d61df8485979a4752ceea3df4d85bd1c290f72b3d8d5c8d639d5a10afa48d80e457f76b44dd8107ac97eb80fd98c7b0c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
bafce9e4c53a0cb85310891b6b21791b

SHA1
5d70027cc137a7cbb38f5801b15fd97b05e89ee2

SHA256
71fb546b5d2210a56e90b448ee10120cd92c518c8f79fb960f01b918f89f2b00

SHA512
c0e4d3eccc0135ac92051539a18f64b8b8628cfe74e5b019d4f8e1dcbb51a9b49c486a1523885fe6be53da7118c013852e753c26a5490538c1e721fd0188836c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1ebfc81d-712e-4d77-8bf1-546a87660a15.tmp

Filesize
1KB

MD5
e7cbbc13cb8d6322937305c68dba35ef

SHA1
e1e5a1ff5113deb30ca5a690e634437804e74d44

SHA256
90abbcdc2505305bb2513e266dbea0de33a48e2c45bd2df49135645e03b06942

SHA512
681f6b5b572e98ce8be05dc882e78df0b7d05d9a8640638f36b2fa844eba9bd8114cd421bab66a4d4f160bd25bb8e6a4891a33702c691960d5c273f608c31c0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7fb61628-8d29-4b6d-8c30-5ad88da9a7d9.tmp

Filesize
5KB

MD5
808ce4b90b7657c2666737e90f1b58b5

SHA1
33b9926e47f537e853b598df052c612612389ba9

SHA256
1c39f4ae83b04031439d9c5be41215cfbc11d117bc624c64cd6efd253af3f8f6

SHA512
f1bfafe5b38436e2816acdf3cc702164026b955361593b50c45aec7e896bfcfbb7fd5e3b85ee65f589bdfe784de5e5436d72912b6db9d63acb473723687ecf9b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d

Filesize
67KB

MD5
1d9097f6fd8365c7ed19f621246587eb

SHA1
937676f80fd908adc63adb3deb7d0bf4b64ad30e

SHA256
a9dc0d556e1592de2aeef8eed47d099481cfb7f37ea3bf1736df764704f39ddf

SHA512
251bf8a2baf71cde89873b26ee77fe89586daf2a2a913bd8383b1b4eca391fdd28aea6396de3fdff029c6d188bf9bb5f169954e5445da2933664e70acd79f4e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

Filesize
41KB

MD5
78b45f66500680832e342e6fb8f0c7a0

SHA1
457528aace12ab0b6487a490d7b8a6adb13dc8f0

SHA256
5cb9b5d3fb0be382aa00936369c7589c938a438c3942c9883072dee465458c00

SHA512
6c1aad5408b7c02a828596f5030fdd310b78b79dffdf3b3dd997aa26802b55026bc18d7fff44a0e3fadef8087b43964262a9894fd4fc06de1b229bbc6d3b2b1d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f

Filesize
19KB

MD5
76a3f1e9a452564e0f8dce6c0ee111e8

SHA1
11c3d925cbc1a52d53584fd8606f8f713aa59114

SHA256
381396157ed5e8021dd8e660142b35eb71a63aecd33062a1103ce9c709c7632c

SHA512
a1156a907649d6f2c3f7256405d9d5c62a626b8d4cd717fa2f29d2fbe91092a2b3fdd0716f8f31e59708fe12274bc2dea6c9ae6a413ea290e70ddf921fe7f274

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

Filesize
63KB

MD5
710d7637cc7e21b62fd3efe6aba1fd27

SHA1
8645d6b137064c7b38e10c736724e17787db6cf3

SHA256
c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b

SHA512
19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021

Filesize
64KB

MD5
d6b36c7d4b06f140f860ddc91a4c659c

SHA1
ccf16571637b8d3e4c9423688c5bd06167bfb9e9

SHA256
34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

SHA512
2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000022

Filesize
88KB

MD5
b38fbbd0b5c8e8b4452b33d6f85df7dc

SHA1
386ba241790252df01a6a028b3238de2f995a559

SHA256
b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd

SHA512
546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023

Filesize
1.2MB

MD5
931d16be2adb03f2d5df4d249405d6e6

SHA1
7b7076fb55367b6c0b34667b54540aa722e2f55f

SHA256
b6aa0f7290e59637a70586303507208aca637b63f77b5ce1795dfe9b6a248ff3

SHA512
41d44eafc7ade079fc52553bc792dace0c3ed6ee0c30430b876b159868010b8676c5302790d49bed75fa7daa158d4285e236a4be3d13f51ff244c68ca6a479ad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000047

Filesize
31KB

MD5
c03ff64e7985603de96e7f84ec7dd438

SHA1
dfc067c6cb07b81281561fdfe995aca09c18d0e9

SHA256
0db8e9f0a185bd5dd2ec4259db0a0e89363afa953069f5238a0537671de6f526

SHA512
bb0fd94c5a8944a99f792f336bb8a840f23f6f0f1cb9661b156511a9984f0bb6c96baf05b7c1cf0efb83f43a224ecea52740432e3cfc85e0799428765eefb692

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004a

Filesize
250KB

MD5
472c8d9af4dcb7f09467a5dc6160065f

SHA1
6ba99608be921ba48ee357ac160496f889fab2c1

SHA256
3f6a8271ab6be6c66a9a21bba8fdea108140c22423a10946388bb33df1d8389d

SHA512
9b7bf472d2d0a156e0cf1c85169943c632cf0d75bbbc12077b6a446a2660bf66ebc36188772d5a622fffa2ef9479c5e5c367818bee4219d7d3682114986f594a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
9b459a9d44485805135b882010c1aebc

SHA1
c03aca9570354892eb2fdeddab7556f40d282493

SHA256
9ce7348abac22920f1058cf8b100322df51d9e3a39c227feee99523bdb229868

SHA512
018c874776b7a57b76e90db65cfff67cd2c0a7e5c453cedbd2c883bdc879d8528cf8b0ada426f17dcac3ed6674811a98d383c217f12b15e182811fd8a054e4dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
5KB

MD5
94021106e097b82cec130092858dfc71

SHA1
31e419ecf1fb7a55cb2902d17696278228eb2544

SHA256
e1a991de65904959882719b1ea5881a4b1fb8f9f42a4fb55cb7afa63f5be92f9

SHA512
f87ce0c4ecfa75310085a0e4f09aaab924589ac0a8c884383ad5320ee4fd6b997aa654aad9cd15288fab216463eee5762afd7b2877120250520dc0d290b47022

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
11KB

MD5
c312781da20db3e2d806dca4f7f549a4

SHA1
dc9896d13635151e53aeeed1cf7ec90192aa3384

SHA256
65026da9b1ccb3b32da2dc2cc326b6c6c2d5803ba6245d36a052aae9163bf332

SHA512
850e52c4ffa47351224350c5a52107f9d1eb234afb7a197084055ad6b02968fe2b23750a5d50303d7714a4638d955147b5a0a571f3906ab2f9c32dd5c9f958a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
ade1991ade850d97eeaf6c6e014df8bd

SHA1
c589772a96700d345dd82a033f4d3d647a49374c

SHA256
29e5f0ade4701d84c5204e1b6778de970f2f8d3c816a50fe05330e45b9e84f2a

SHA512
6b5fba418330e165b99395d2252cf34f736b54f1aba1f80d3d94520723c16641419533eeb8250ca7fa7b760a6fe1145b640924dd86e59b3435e33bbcff23b7f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
aad2485f57f35a6c126dd36696e63e82

SHA1
527bff611d4ef47bba7d67a2ec4c1a4acd7bd438

SHA256
8285fd403856f6a28ed648c5a8ab74d431d3701c1bbc966aaa4addb088c58004

SHA512
5fae287a10ffe7c3acfcdd4ecbc17e2e9165cf3b59380653af1be6df09a86824fc0a19d5b41a74533d7ada754163c4eade2eb3a0a4fc8eab114b2f7d13720301

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
13KB

MD5
93936f279d755d7d5c961bd9516d38ba

SHA1
dc7109d83cf9b26040f02c0461d3416058922e84

SHA256
eb973666ac0dd99f8034e8fb2c0c64e8622604e62e3a72411d64bd3ed4c04ea3

SHA512
7ff77dbe6976902bdfc47f1effc87c4d8fe5c5afb9c62a61beb419b1d8467062fdd49400345de2cf6c9fdb575b24ca3b39e1a13e75bb45648c51fdcf5ca8a35e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
7567d516b47d2685bd244a09a1a1298b

SHA1
924aaf71981e0efff54ad4a8b638c72fce763a8c

SHA256
6a69c4110eb92c8e18bb942a4fd290748636e4fe3f4ed0a1e47e28f43c124640

SHA512
eb61b6bf813cbd51fd4fadaae032b1864d57e262e2e36156eddb3cf0e413fbcea2b23b270db8c85469bc75d27202e62ed946cb118e8e8554ef90a56d6369a3d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
14KB

MD5
8c9ca80760929683b6be1cbe6113279e

SHA1
11d551f0d90847bd6094237302c19774c933ea57

SHA256
47edd6c52b838c62abd1ef3613e7273208de82c47e58cbf3ced567540db7b40f

SHA512
1592da7ad3d03350c1147b6cd43ae6a02c9324e2ecd0c70b4ab10d49dc64118d72b6418cf40710dfd9b82f34112b401eafff04cf1720c56df5c20bfe184379f8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
88c949c364b429fba0c7b25652f0fd17

SHA1
60e7b6957d5e39b0f7ed37bc3da2a112577c19ce

SHA256
41c9112df405d3ae49fb2b21dfe6baed26018cb67faaa60894b0a36e8d0b84c8

SHA512
884291a8f6f7b09153c7c480e213e095096d0ee910e465e06d004276dc2f7ce443e493a5ad7e5c827823b8cd58e8252d294e599916ecfdad5c332da60d4d834d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
14KB

MD5
bde38bc73e4f727274a3ff14571e4157

SHA1
eff383c0bfae0cbc859731e8c8930300563e6763

SHA256
f880aea57eb0d32c0eb58f15fd31c18dd2c1fa6ba1be750ba15b3742a03ddd57

SHA512
daa121f048f66ca7020aa95a3cb6fe2a29dfc4200f622169cc063d399983fd09552a39d917ae8542e89ae95bac001a662f1daa4671ced3d397490038e5a0ccbc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
70e9d25ceb059c46c8e9348d4a0e206e

SHA1
b99d70b8d9b3113eae46500644eff792c0258ed1

SHA256
01018815a5ddc936f2f394c732bbd594b02b9398bfae6ae71bfc95a68a334ca6

SHA512
5eeabad128ef208a78a070157a94f4648864749d2a453dbfce97785d1bd9db02c91805d774342a368846a610fb74e18adcc0cccc6c5e1e8a93fcf01b5b8aab47

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
06f05e3ab1b9b35ea3bf6b3d2f351783

SHA1
bc6601b77ae7715795944ea73745eea5c2acca76

SHA256
4182f6de5637a9a617354baef437920a708c2c48c927414ee89dd6903ba35836

SHA512
63e48995b07c68793ebb5bfccb7965e93bc304cd9f34d99a698849e97893665331ee6263aa162047c8e9d55f6d04173131ae12aa2d2a6834ea3b0051768d7eb9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
1419902e99bc7300873a2fa3ef8a292a

SHA1
68e782bf83b4a129c8107d3c85d4fb45e7024e8a

SHA256
fffc5c98a6911696668b61ab86708df3f485acd737b10beaea52225a599f5f39

SHA512
0325b2bc92fe29aa80a24b73a02a80e323e2bedceba0ba7f0efbb881f04285e492b63b64ddd5acba434ac70f5f1f0fa3850a7d19de25cc0419c2bc3cded7dbc0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
266780ebba89ce57d1d095d0a4ae599a

SHA1
3a56fff8ac64869678f15619348926a51ec484fb

SHA256
652ab3f563412db819f2c571f005d6d649fee522949400211fb342b83ce35b14

SHA512
33f8e0dcc325fe2b53f6aeb62d07a6c060a1d6e3b37590e86cd3716888f34c8300074d11e40fc48f6bd059db15ff3676c68c7f274a7c3ff0c334895b828d0435

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
2cb156a530fe56a333edd44561cd51a1

SHA1
cc5a9b4969fa535293eae30a2649be32602fd881

SHA256
e859306134775c99abf5ffa34f9bae565881d747b0b4c04cb12f321569173d5c

SHA512
d3091e02b95dfe3a2cb4c40710564fee9e69defdcf8d1b0cad7028a40244625ccdae1f7a7536cac4a01723abfb8b8156b21f3b2b7291449c1c6fcc8329ee5a91

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
371B

MD5
debe688f7a910091214a88502bf61d98

SHA1
8c0a942b42966eab3f1aceba2c5ccdff2fbed8b3

SHA256
1ca20fe6409d5fff81f59e365c02e1490eb84d1e9c995763c728d5c9787714d0

SHA512
bc1f95aee55bd3b92d2f13844fcf8e9644b9dcff147dbdbd6de4a20e04b9ac24ab22e1beb5349331d390a3f64d55b9b9c9b07c4963f08c956b2bc6675b6c4014

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
ab05c9dd2bfea2c21c9e0f8e296fd926

SHA1
374f794fd300dd31dfb7dc635826316065a146ca

SHA256
af4ff592d15c73c18741486a95ca22460260e2a25aaf87334ffdc8b4929f0af0

SHA512
c495e8ab6b8a1e0fcafe5cea2139ca47a8125152c76dcd7ea2727384355d98acff415f981cbf0cfe497ae77c18b1c21c67bcdbb84abc2293c1e42d315e723684

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
b8aa643d8b0309d8fbf879ef2ee397f1

SHA1
dddf76a803a9a9d8c85fa8b0648cd7e02def6a4c

SHA256
c36761e00a213d9c8ac56e43b43f86f419b6cee02e46a91a84960dce2a1b8edc

SHA512
1119eae1bf32f75a0bc400b0889b6be6171c471f360a9f80578363dd66b5bf995eddcfeae6208a2799c18414f23540e43b5f0275f70ff677f04bdb0ac6df1332

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5898d0.TMP

Filesize
371B

MD5
5749e0914130f869bf151b36b157323f

SHA1
f542dca39a7c03e86b8666304eefb8fd53e0318b

SHA256
30c1cce2f943c8e6cb18f15aaedf041ddb02dee8b35098d74474af3ae9f1d384

SHA512
cbf28b0a0935481336417debafff8273b3855f48f68c336126f26b32c14899ce518e4c115c90269384fdf274a7e65c71f50490fda1312eb485f9a4f5c23f88c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
543ce60c8af455abf9c1cc2747b50a92

SHA1
2ef2a093d7687f59e31079ff668fcd9e8a5c2581

SHA256
1a1851e63a0647c433ffaf1d8880cd0be016fecd4147c1e4929a0eb0df0bd51b

SHA512
3292d28259361ae83a2635dd72c369f6d5114072caa55abc946d0d599404dfeb7da7793ba5a5207bb66aae0a1797367fc0d9565797a7c48f6502c38a88639c61

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
3a2bf7f7cf613e1c13332fd209e748d1

SHA1
8ece9ed85c91ec907ce5015796d8d6ca458f630c

SHA256
17d05d4badfb3443f6b2b43b82756fe23e90287b089fd68995e941329e6a9bc7

SHA512
27b18675213e6a5ac0adf9f6e751ad45a5bc40d7db085064a19f6cc6c063a11a70774d63829a9735c81b87d56aafefbcd01d62d5e3dffe347a89caca6adf18fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
67126eab36e81608cc09293718c3990c

SHA1
58ac59f393667c07a4ebd1ddc23aaf222208cb9b

SHA256
782edbd95b7967b2bc8d6771a722030f906bd6194ee9943c7bd14726596cf2f8

SHA512
852d72ff5e5409e84f820dec2b85d9c318326ce734e285b0950aa7952b30a84b0f0cb364622cc0adccb4fe899c428dc0e5ce23d9a3043d10e48ef9f14c2e9032

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\MDMHN06X\WindowsBootstrapperSettings[1].json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dsetup.dll

Filesize
93KB

MD5
984cad22fa542a08c5d22941b888d8dc

SHA1
3e3522e7f3af329f2235b0f0850d664d5377b3cd

SHA256
57bc22850bb8e0bcc511a9b54cd3da18eec61f3088940c07d63b9b74e7fe2308

SHA512
8ef171218b331f0591a4b2a5e68dcbae98f5891518ce877f1d8d1769c59c0f4ddae43cc43da6606975078f889c832f0666484db9e047782e7a0ae4a2d41f5bef

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dsetup32.dll

Filesize
1.5MB

MD5
a5412a144f63d639b47fcc1ba68cb029

SHA1
81bd5f1c99b22c0266f3f59959dfb4ea023be47e

SHA256
8a011da043a4b81e2b3d41a332e0ff23a65d546bd7636e8bc74885e8746927d6

SHA512
2679a4cb690e8d709cb5e57b59315d22f69f91efa6c4ee841943751c882b0c0457fd4a3376ac3832c757c6dfaffb7d844909c5665b86a95339af586097ee0405

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxupdate.cif

Filesize
65KB

MD5
b36d3f105d18e55534ad605cbf061a92

SHA1
788ef2de1dea6c8fe1d23a2e1007542f7321ed79

SHA256
c6c5e877e92d387e977c135765075b7610df2500e21c16e106a225216e6442ae

SHA512
35ae00da025fd578205337a018b35176095a876cd3c3cf67a3e8a8e69cd750a4ccc34ce240f11fae3418e5e93caf5082c987f0c63f9d953ed7cb8d9271e03b62

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxupdate.dll

Filesize
173KB

MD5
7ed554b08e5b69578f9de012822c39c9

SHA1
036d04513e134786b4758def5aff83d19bf50c6e

SHA256
fb4f297e295c802b1377c6684734b7249d55743dfb7c14807bef59a1b5db63a2

SHA512
7af5f9c4a3ad5c120bcdd681b958808ada4d885d21aeb4a009a36a674ad3ece9b51837212a982db6142a6b5580e5b68d46971b802456701391ce40785ae6ebd9

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.cif

Filesize
56KB

MD5
2c4d9e4773084f33092ced15678a2c46

SHA1
bad603d543470157effd4876a684b9cfd5075524

SHA256
ed710d035ccaab0914810becf2f5db2816dba3a351f3666a38a903c80c16997a

SHA512
d2e34cac195cfede8bc64bdc92721c574963ff522618eda4d7172f664aeb4c8675fd3d4f3658391ee5eaa398bcd2ce5d8f80deecf51af176f5c4bb2d2695e04e

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe

Filesize
515KB

MD5
ac3a5f7be8cd13a863b50ab5fe00b71c

SHA1
eee417cd92e263b84dd3b5dcc2b4b463fe6e84d9

SHA256
8f5e89298e3dc2e22d47515900c37cca4ee121c5ba06a6d962d40ad6e1a595da

SHA512
c8bbe791373dad681f0ac9f5ab538119bde685d4f901f5db085c73163fc2e868972b2de60e72ccd44f745f1fd88fcde2e27f32302d8cbd3c1f43e6e657c79fba

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.inf

Filesize
477B

MD5
ad8982eaa02c7ad4d7cdcbc248caa941

SHA1
4ccd8e038d73a5361d754c7598ed238fc040d16b

SHA256
d63c35e9b43eb0f28ffc28f61c9c9a306da9c9de3386770a7eb19faa44dbfc00

SHA512
5c805d78bafff06c36b5df6286709ddf2d36808280f92e62dc4c285edd9176195a764d5cf0bb000da53ca8bbf66ddd61d852e4259e3113f6529e2d7bdbdd6e28

Download Submit
C:\Users\Admin\Desktop\Eclipse Player.lnk

Filesize
1KB

MD5
599f0c37996756ebc2d81b3c1e7ce055

SHA1
02b35e79cda04ec1ccf9ba45db9bf5dbf45b5c98

SHA256
8a74bd2c9d4164d343702055d2997b107189e5aeb8386eef0a58f4d12e3bf6d9

SHA512
b8595b493276016c7694ca5ea855c5fa1e0dfbe301aa251a79646905c159a37e797a67df1c3059f4c41d895dde802d6fc458fd114746ad6c5353059ccf29240d

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 378644.crdownload

Filesize
288KB

MD5
2cbd6ad183914a0c554f0739069e77d7

SHA1
7bf35f2afca666078db35ca95130beb2e3782212

SHA256
2cf71d098c608c56e07f4655855a886c3102553f648df88458df616b26fd612f

SHA512
ff1af2d2a883865f2412dddcd68006d1907a719fe833319c833f897c93ee750bac494c0991170dc1cf726b3f0406707daa361d06568cd610eeb4ed1d9c0fbb10

Download Submit
C:\Windows\Logs\DirectX.log

Filesize
1KB

MD5
619b4a390c28c5cf43d6b05c3e1b30c8

SHA1
ea7f33d5a6e099cff41d2a08efd27ec1c421a02a

SHA256
90c99503c79a67d777d20968084685f1d8c18d4d41c36bd173190f84bc6245bb

SHA512
49cb974cc8bf3d4d1c2dc60e50ce51b3340f73d3225ac09187e20bf690bb303589022d9b0230463e1cb6ac13922aaf7a10c9a4d8a74b67abb809addfad4f60ff

Download Submit
C:\Windows\Logs\DirectX.log

Filesize
8KB

MD5
d8ac7828b4cc1e2a7589e14fd40c4358

SHA1
e4fb989f0eb078fb8caf62e29b89caea367b07e9

SHA256
8bfe376dfa2d8891e94e4704cfa4dac0bbcc31dd6d688d8966dce8e00c72ed0c

SHA512
d947f11aa120863b2cf1762dda3b26a4b78b739372e11c4d69ca197b29533f115659e0b75ed572697753bdcef8047d609e210bf1579b988932938c13bca3a8cb

Download Submit
C:\Windows\SysWOW64\directx\websetup\Apr2005_d3dx9_25_x64.cab

Filesize
1.3MB

MD5
e961a77647e7fc2597a68ff572f730e1

SHA1
976d1cde1ec28a4992e1cbc345637447115f14c8

SHA256
a239e99d02fbfc9d30d5b705aa743fc070386faea1a66b3d67099ab446568a12

SHA512
cf72ae18e99942d959bce58678f544a10c98802d919adc30737389d6cc0d492f8d7902e0e2cd04501fe6429b96c782649658d2d35c879a202c23e88570a15b94

Download Submit
C:\Windows\SysWOW64\directx\websetup\Apr2005_d3dx9_25_x86.cab

Filesize
1.0MB

MD5
9c5dca423d9d68349d290df291ddbeef

SHA1
d9f1cae586470ea309ce9f115525b0504fffaea4

SHA256
5487ed4e969a822e5c481cefb1d4da3066b1d5ec8c55798b246915ecb58a8665

SHA512
9f50599321f45fb7451b0a1c0f1dcbd6b4a4e60ee27b0ef5aa29168c1bce5b08f34329916ea2ea655cd632d0a19c81953c2a5f1277f6a96fb63afc098236509d

Download Submit
C:\Windows\SysWOW64\directx\websetup\Apr2006_d3dx9_30_x64.cab

Filesize
1.3MB

MD5
5ec6f520f3afcc6494ab0d43b690ebd4

SHA1
2359e14cb6da44aa89a3815e905d6ffd81960d02

SHA256
27d99894e2a68601f46487c9999723dc83bcc9c6f903f2e2622d05668035b015

SHA512
9db4a9581edae2681491d5e13228642737d0d186e0e1672b063482b2e699274acfcb81dfa9631902e93e009adc0bbd9447061830c8ce2fead6743e2d45aaed60

Download Submit
C:\Windows\SysWOW64\directx\websetup\Apr2006_d3dx9_30_x86.cab

Filesize
1.1MB

MD5
b3d644a116c54afda42a61b0058be112

SHA1
9af7ddc29eef98810a1a2f85db0b19b2ec771437

SHA256
ca7b9c6a49e986c350147f00a6c95c5b577847b5667b75681a1ee15e3a189106

SHA512
a2d2f12b7b37bd8f5c8465dd13ad31942df11ee5ed5423deeeb178e6b594587706d2c5116258be1562caa5eca691358af3cb83b77898d1012ff521017d199165

Download Submit
C:\Windows\SysWOW64\directx\websetup\Apr2006_xact_x64.cab

Filesize
178KB

MD5
6ca70cdb3fa575506ba4035e9a50d8e4

SHA1
a2a20f5f95a1ab293a188a55bf593a82ea0dcb7f

SHA256
f82b2043b470bf0e711c3d05d758a379920340212437917b5d98af0c14e7bfe0

SHA512
a453ced526332ace37861a0a862fff3710ef74ed57965f28dd279f526a2f33c390e82fd2c49bee75476e5b4c349c40a71eee49edac720236a16780dfd700fe62

Download Submit
C:\Windows\SysWOW64\directx\websetup\Apr2006_xact_x86.cab

Filesize
133KB

MD5
a2132a62f9ab0bddc3207166dc014581

SHA1
53b19ac3e6c6752011ba641ee3c409ed10c95dd9

SHA256
52c71c89ccc22fed3d7c985a22c464451af34b63b3a26a3799bc25d881221ebc

SHA512
76fabd7f440b6f9b409b0b2635ead4ef332563a9bed738a722a7c6b9a077094154bf735caf02c67191b08ab0a19fc03e05ef3d984f6e34dcf3bd587a05d2f424

Download Submit
C:\Windows\SysWOW64\directx\websetup\Apr2006_xinput_x64.cab

Filesize
88KB

MD5
b0669f7d395078bee0087b089f0b45c5

SHA1
30506fc3dce9532ef0a8cb3973347ec9c3c9875f

SHA256
e63a67783ef7624559f95ab697bf8afbdab7ace31200283ef840e6b94aa16e5a

SHA512
d7efcfd85b3cb6cb9b1936b701a9d7d91a6094aa08d8c933edf8493c6ad57be05a579980a404b35e9721f71b45f4cae28399fca3ff5df20a9a3138b90f86b94c

Download Submit
C:\Windows\SysWOW64\directx\websetup\Apr2006_xinput_x86.cab

Filesize
48KB

MD5
e207fb904e641246f3f7234db74121fc

SHA1
1be8c50c074699bdd9184714e9022b7a2f8bf928

SHA256
3fdf63211b0dd38069a9c1df74d7bc42742de003cef72ad1486aaa92d74546fa

SHA512
ed95d53bc351c98c0322753265b0a21c98df97d0e2fbbc58a6836bff374b7540b0cea21371cd4a7ead654210a42e1f9809cac6e4eae2ecf0ef2b88e220dc37f7

Download Submit
C:\Windows\SysWOW64\directx\websetup\Apr2007_d3dx10_33_x64.cab

Filesize
685KB

MD5
906318e8c444daaaea30550d5024f235

SHA1
3f3dccf0a8a1cbf6f603be1da02e1e2bf89d24fc

SHA256
1a37565c5b868b6a5c67f3e24b8af547506799444cb77c7086e7b0cec852f239

SHA512
0a7aed2f49ea3dcbca1607fc46f166a44bc9d08589db05051b422c8ad84adf322352f71333367c612f9579b4aacb4cd6b82489ddf168ad67fb4d42ab52999c88

Download Submit
C:\Windows\SysWOW64\directx\websetup\Apr2007_d3dx10_33_x86.cab

Filesize
682KB

MD5
f784b8a0fd84c8ac3f218a9842d8da56

SHA1
fb7b4b0f81cd5f1c6a900c71bfd4524af9a79ece

SHA256
949068035ce57bbb3658217ec04f8de7a122c6e7857b6f8b0ca002eb573df553

SHA512
01b818aa5188cde3504e289aedca2d31a6c5aed479b18a2c78271828ae04bebcd4082051b7f4eeca8a31e8ee5adba158420ecdcb21371c735e4781ee5f661dbf

Download Submit
C:\Windows\SysWOW64\directx\websetup\Apr2007_d3dx9_33_x64.cab

Filesize
1.5MB

MD5
f33c12f535dc4121e07938629bc6f5b2

SHA1
6b93fbe3d419670a71813e087d289b77e58e482b

SHA256
3ca2acf6b952d6438b91e540f39abcb93ee12e340ba1302f7406f01568e5cf91

SHA512
df1753ab43d5b7fde2a5eb65a77b37ba28599bc0683a4306f101c75f82b0f1a2c8ddf5741981073cc5df26e9ea38c9a495ed0fb1689d2e7fc7d6f693759c822a

Download Submit
C:\Windows\SysWOW64\directx\websetup\Apr2007_d3dx9_33_x86.cab

Filesize
1.5MB

MD5
a5915ec0be93d7eebe8800ce761ee6dc

SHA1
e8bbc21c2b5f0e5801286f07e3da09dbc67c3961

SHA256
efa2e6de548401376a575e83a79de019aa38f191d63fdef3bd2b07d8cb33e3d7

SHA512
02259ff3c8478cba134a8f8408aa624b7165ced97c0aed8c9626034599dd5439f84d1af9eefc4191898b0a524e5ffafb9875ec00e740cebe97eac4c2dd0e31aa

Download Submit
C:\Windows\SysWOW64\directx\websetup\Apr2007_xact_x64.cab

Filesize
194KB

MD5
fbb6aa140d5d0aa28a7561ea15d69e72

SHA1
26804276edbb1ee23b96690b40a01bb9c723f7da

SHA256
7781f0494648989583d4ac7695b9c5310eea76b6a102e15ea0fc7376250e4584

SHA512
08d6f2ef3346229f71e9fd6904d99bcb69f0a03cbd2d428f0a3ba58836694b801446165814aee120b4c5eb7046184b08fb49248f5e1941579b9caeaf9fba1b1a

Download Submit
C:\Windows\SysWOW64\directx\websetup\Apr2007_xact_x86.cab

Filesize
150KB

MD5
8922189c0a46d26b2c52c65515d87180

SHA1
27830c01afb15158186a045b7224ef33793ad211

SHA256
39f970bf4cc42e9325ada84a603c6c691bf94921385a52325f402f7432ace697

SHA512
53d51caa2cf448681a709f2b9737ef75dea4e9a46e2b29e6588b13e941671643a64d3597649aa2ae0b1fe9e5d591ed00bad9ff3344ca62851e03a68279142cab

Download Submit
C:\Windows\SysWOW64\directx\websetup\Apr2007_xinput_x64.cab

Filesize
97KB

MD5
fae84e0773a74f367124c6d871516b7b

SHA1
caf8b9d7d4af965bf445d052d1e835b680d6bbc3

SHA256
86ee073c199b5080fe4f5be6ac24bb1117fea42e4bbcd828b4f0ec26c669b22c

SHA512
caf1381cae7417b57faef56d0023bf90c90406748f8813ab85c687ddb81e2498d2f1d5f4bc154903fd5a19836e6f245cd6f5d3927a383f1acc3bcc41b58fd09b

Download Submit
C:\Windows\SysWOW64\directx\websetup\Apr2007_xinput_x86.cab

Filesize
55KB

MD5
b362ec93463d8b6381a864d35d38c512

SHA1
7ce47ebceda117d8b9748b5b2d3a6ae99fc239df

SHA256
b6c1166c57d91afeeeaa745238d0d6465ff2084f0606fd29faf1bfa9e008a6c5

SHA512
cc57733912e2a296a11cd078372c3b43f1256a93ec5becd0d1b520eb210fce60938aa1caa6dbbca03292a05495b5ecd212ee5f77e3ebabb11ef31f1975b2d09e

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2005_d3dx9_27_x64.cab

Filesize
1.3MB

MD5
a9f4068650df203cee34e2ca39038618

SHA1
cd8caeceecd01dac35b198b42725cbeb5b7965a7

SHA256
3500c1a7cfb5594521338d1c29946d1e4ffa44d5b6bc6cf347c5bbbde18e94dc

SHA512
c92fb461b53051a22fb480ba5b6bf2706614ae93be055b00280be4dace19c1f2a9327106a71851b0e42f39e4172ea3a027f7ce878bcbcb252b723eea49dbcf1b

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2005_d3dx9_27_x86.cab

Filesize
1.0MB

MD5
3e91448a7481a78318dce123790ee31a

SHA1
ae5fe894790624bad3e59234577e5cb009196fdf

SHA256
8c062b22dc2814d4f426827b4bf8cfd95989fd986fb3aaa23438a485ee748d6d

SHA512
f8318bd7ca4271fc328d19428e4688da898b6d7fb56cc185ad661d4a18c8169392c63515d7dd2d0b65cbd1f23892d7a0a5d3d77a4cda6230ba03b3b917e5c39a

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2006_xact_x64.cab

Filesize
181KB

MD5
4ba26f9dccaebd7be849a076ec82d6ff

SHA1
42fb0d0089d8bc92735820f475968f59af4e4365

SHA256
13e7eb934a7596e7c3b7d8a0962e68da841d9c73d154825dc982ff6d05cff221

SHA512
4e4fd8a31ac3c2f8cc66d434103c0097ab3fbe2c2e8140aae2f95fc4ac1927aae9cdce8730dd7c4dad785d9a653d90b0f914b258bb5695c68ca93f605ac82dd4

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2006_xact_x86.cab

Filesize
137KB

MD5
e16f0875713956a6f9cd8c5acad36e51

SHA1
984b821eaef3b549ce0b12f72a405a93e51a9dfe

SHA256
31b16f93be7f5f9bb78e9ece6da96565d50a0bc1f66b206b7a21c601a308dc53

SHA512
dd626d5552eaf0c1dbd32bc4dd84811bace74c6350eddac692d3c3e8c393f4a19c26e8f2932f54a14648448912e6b87c796c6eeb6da9b2c55ec4565983b76189

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2006_xinput_x64.cab

Filesize
88KB

MD5
a9d582e44e46e36f37edb7cbc761179d

SHA1
ed1bef64385e94ce89afa704d38408e23b31fa79

SHA256
c26633d38e0a91b9be70382e916a83d50e219609f7e05cfb2d27dfafbe480b43

SHA512
20011bfb547dedce8e6fceda22c3a3a83db140e8a20844f3b0e8741b4474c1fea73d84708b801e83eae3cd2d8a2d6c851c3f7cd0154c0382a78bc2c2df6b01e5

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2006_xinput_x86.cab

Filesize
48KB

MD5
16b968ca0c435ee45e77a84c2d0364a9

SHA1
90b17a60a34f6335787a6b2d489cbcd3a4ea98c8

SHA256
6dd7c0abe37d3df7aa6db7bb352260f4a15dc965ff9d30aa32fe9595c1a18300

SHA512
3bbbfdf8b5673641ec066c3fb52e6b0d5ce0bc6ed6bff17ab4ac3fa69a8628b09e5ec8322fc39d2a206974b54d297caaff9410197e26d090fe74f963cd535045

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2007_d3dx10_35_x64.cab

Filesize
835KB

MD5
8f715d741b7401547a263fd4af02e7ba

SHA1
39c031174008a0e7bd603a5670f578c0cc6443dd

SHA256
c97275f60e2f25732b3b264b8bdf9cfdaa39d6e5b189c08fab5cd7a04fae9bf7

SHA512
27cdb534361c1f6205585e1baabd83b03f6715d29afb61351f660bed1ccd1ef035c6541ad7e4c551bfdd2aa8fe77a903d23eb27618ed369c37a369d373467c8c

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2007_d3dx9_35_x64.cab

Filesize
1.7MB

MD5
ddfef236e7d70471aaa1741a8abfb735

SHA1
5f7acde3116a6d4363410d984b9c8919674ec9c9

SHA256
28b6ff092de67717c47649c87e7114c34325edda199ce2943403c4f3f4c3e0b2

SHA512
00990f7e6f266c67385813b0ba399a2a2c970dcfaaeb7fab183e2ec0cc50613cb0ad57200bcdc731900d8f7e609c95e8ff9cddaa52bce2ccedbcf4e9f74008ce

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2007_d3dx9_35_x86.cab

Filesize
1.6MB

MD5
3ed592e6cdae66b1c0671d9ec417a738

SHA1
9f083ffe00a8e5eabf282130cd16044b488b6e0d

SHA256
4914d2b5c3251b00c0cc236f51afe469728d92b50c953c66d213f079ac928eac

SHA512
0144dd9a83f953eabaaff3c41f17a363100c9a2ccd932321a4afe990d8fcb5a430e842de9146c983409b6366cd974e318a535e6475b10839a6679844cb7d23b7

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2007_xact_x64.cab

Filesize
196KB

MD5
527e5861d4999e7b410f5bda36cd6d7f

SHA1
403303e3c349a283c275c673261b600b3589095e

SHA256
e8ef9c88a6b958916c1959d1c6c7f1666d22e0f70ce8a8c83183f49ed71f6287

SHA512
38b1d719a477990eb5033cf870b070103d13fedac7bd99e61d54e7afe27d3a1c73a250981524c9fe9a29722efe01a033531ddc97fd3e550d4ba5df28903c5bf9

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2007_xact_x86.cab

Filesize
152KB

MD5
12fb614027a3f3ca6b510bdbbc3cac81

SHA1
aeb8241e273e12d984f3551b2e9ef978153a6ff8

SHA256
c35652b18c6a2d108812f415ddd435ce0eef5489e37142300ba67d66986ef43c

SHA512
f983f518ac3573a6425ffa0ca049ecbc9d4b857bc473767ce2c67fe4118731ecf902ae739b4d817288bf6cccaf5d9e90ed035bbe23fdf7026d16b80c08c441b8

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2008_d3dx10_39_x64.cab

Filesize
850KB

MD5
dda02cd5814439f8368259285e408845

SHA1
6c9de1bcabcdd5333c24f253f38ddd256e6c6787

SHA256
c6602fb00efe93ea7875e29974c073b4f83991bfc064470de94a95dbacd51712

SHA512
8809577e13859067d9af53c4d6d6da047e9c88d264e7facf102ff34101c530e2691f1b6442ac2694ad3342f83b1f5ed3333d6f12d2523cc1a6af1a29b0aa6c24

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2008_d3dx10_39_x86.cab

Filesize
832KB

MD5
5380053ac4c344bd38604022476b1c1d

SHA1
043dc8f49bca3bf0bd85e858f5c2eedf68565c0d

SHA256
84800c55f773d5d6913e344e41baba58cf07cec2e6c7114ca3bf48e8f355419f

SHA512
f3ce2def6e2e8a1d2c07f627e3c437a1bba0b2e456020a84121346472be3d28e0fc69623bd408f35a2c639c83dd2787f998dedfe42b7625dc71500824b035fec

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2008_d3dx9_39_x64.cab

Filesize
1.7MB

MD5
85ffa26e1821c06035bbb25ca9241c34

SHA1
272016aa12473f9c3ab33be1ae1ca11a2df3eeff

SHA256
03f30dd485a82b6505a881f525e432bb84447e108bf086ef341a39951a1863ed

SHA512
537e708761fdc3b5f1a3908f565e0d2c09a5a7cc4566fc65176e81cffde8702b918377d9aa701032708ef253b91f2a7153995e39fe4ac2cd311d51e791bf1473

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2008_d3dx9_39_x86.cab

Filesize
1.4MB

MD5
4379902c4180a9a6bf40b847372cec5a

SHA1
c7fc8184d5620154b9bfd6fbc8820a78c4eee592

SHA256
61e703e8d231412f135b4aba629122d9cb69ac9ee39fa3cbbe6b95de05097a8b

SHA512
9269f49a5ca90143c50b817e9f5aec0fc4c32ba1b6d3a21cc5448cad21a16a902540c8cfc1825b124ce39e0bdc479ade4354b6be15b2067e3033e04998e0710a

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2008_xact_x64.cab

Filesize
122KB

MD5
1284916b97980a2dd714ee7d9f3bef97

SHA1
80216e9bee9ab8a7a94c11039126533308411034

SHA256
1b640b0022c876f74a41db17672bb0685b74d3759a7818f84c8ffc51a9aa0d51

SHA512
aa367c5eeaa123eb983a188bdf9558deea1052ef0332ae144ffe2681039c374fa80adc0daabe12e91c9505107c2bdbcd4780b58e58738183ea8ca927d14a0bae

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2008_xact_x86.cab

Filesize
93KB

MD5
5e96c7336834510b8af861083d87e8d1

SHA1
1c4065905496690b59b0c7ed25399ce6593a4a29

SHA256
736b3c20aa536c1569465badec5bffda858978b2d9ec1e48ad639ccde301d6f6

SHA512
683cc10a5fb529055bec363dba6b26dfab6f764fbc256ac9c224d70fe7422d4df6e1303cfb707450d1150d79bf8239bb55653e2f0af87c4dc28969ac0db17306

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2008_xaudio_x64.cab

Filesize
268KB

MD5
154c82143b1b0730e7df3459cad48253

SHA1
bad95ba1b8294f8574aa93c6aa3dabc1e2ae95a4

SHA256
42807ba4736a40b7bb9b4b558c0daffd2ca75987dafe47a6571f3c45f178d29e

SHA512
db6d734003542c8891ab86d3cd2fbc96a020da852bc4098c9451035ec40f33ec0de44f770973df932abdd3c1ac35109a12c542278d0c898e54e6f8bd49c20c97

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2008_xaudio_x86.cab

Filesize
267KB

MD5
60aa66cca3684683e233daac694bdf09

SHA1
a14140e7eed90414b10ba0c248ad0cba888c1516

SHA256
a1550abc06e39ca576d24efd2801d139c64c7dce643246a7ddf2de2d03a7ba23

SHA512
ca846a0e0ad82b4c96ba1ef01e6bb0b98852676598c4e3e80877018f6d4ab25a2f4eaa8f80115cc3304aa75169a584560de65f2a63bfb43f26b2e1a2f7edb5d1

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2009_D3DCompiler_42_x64.cab

Filesize
900KB

MD5
2e09221105524389268d24f0b1fd4861

SHA1
6efcdf3e9a018a3af6b1ebeeb3030552905cf44b

SHA256
ac103963d4ab1846c4a6d5bc042ed2fa543f88424e37e05af5165ee62989b503

SHA512
9b4d319c9c575b59c4000adda1d6075efe197179ea0d4442cb06b42569a4e5e3d437dda73cde7b5991ac7b76ad02fcd00dd7d048fef6eb51e93f5012dc67f21a

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2009_D3DCompiler_42_x86.cab

Filesize
882KB

MD5
87bdae64fd47a75f867a290ec7b8a4b7

SHA1
dd9e69e1815e8bc161e8eb89a0f2a296074bb95d

SHA256
6bd32337826f5a5141fc06391919a249e984150905c2546dc8bfc33d41a24e82

SHA512
c8f7a490722741df4e03823880c6d623ff16ab648a40c1b1c8f7bf26c92499eb34c4596bf239337cd23a57974757958ad9a30d42a4141dc0e7522f998ed3893a

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dcsx_42_x64.cab

Filesize
3.0MB

MD5
8182931eb4eae0ed69b183c49f7fbbbc

SHA1
91630f1e8e48883c4398b85451f1b0e6a8445d6e

SHA256
23d902f8b95dbd5ac925e7d1bd4952eeac762e11e209be973fd438396a1e6e50

SHA512
1bbd9da1aa2e3d956a79cff74ed8b6ce958b1f40103824328157ba87ff6c7c375c4d1c790c8c079658fb67ab01e1349ae29395480ea8e6308cfe714a742b56c6

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dcsx_42_x86.cab

Filesize
3.2MB

MD5
73ba11ce0e936726fc9fcb882f8b91ea

SHA1
4a4babe3ac751e60ae6b5b0d69c93fa53d7fcd21

SHA256
a9a704b73531d6bf59a421ab5c046c19a16d2b0b07f09816dbe9da4550a24b17

SHA512
9a198eb93d5623651d2981a277eab4c345c08161254d0127d90c97344450ac1a7fd5c8ac840048a43a347e3296b286b646ea0fba88f0c7bce1ceed1484112d56

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx10_42_x64.cab

Filesize
230KB

MD5
55fd3e53e8b2bfb1de4143b5f2b7c829

SHA1
c3711ebcfddb1d52e9417bd02509b768e683fc40

SHA256
98ca8f4d1c6cd13fa721a35a23992d9edd14cc7465d3752e5978d89c9bc91960

SHA512
eda2cf25132359899806296aefd0af98ab406ede587a582d701a5f8584e0e0dbddd60ef0225a59b0669965afec97709c38e20e8a3470c26b4dee35205c1eb01e

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx10_42_x86.cab

Filesize
190KB

MD5
f264af5a36b889b4f17eb4d4f9680b4f

SHA1
1df087ea99d321ec96d0d2f1c66bee94883d6f08

SHA256
bb46189eb8cb7769eb7be00cfbc35902072fa9408313ef53f423e5ae5c728f61

SHA512
73ae1cf3cafba148f4e5b4d8ac12a7aa41f6ecac86c139c6a7714f90f3dc61c444dc152a3ad3c2ca800c1a1f4955a2b508735f8490666b57d1420fb7a7bfc269

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx11_42_x64.cab

Filesize
136KB

MD5
4196833920bc3bf77ffb56e3693e4160

SHA1
fcfa14f51cd79582c64f7956a5781622b682b1b7

SHA256
f2f4753e201d6e7f40f4011cc4b4fa95f4519da0481d98cb24dbb6679518ca93

SHA512
242b19b6f8132577e9a7c7247dc714a95c7a4b81416b79dbcaabcfe14c03405b965d0ac751193947af64356f34bbbb25acc021b0bc7e452e35340058f169989d

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx11_42_x86.cab

Filesize
105KB

MD5
dd47f1e6dc19405f467dd41924267ad0

SHA1
85636ee0c4af61c44d0b4634d8a25476cf203ae9

SHA256
39ff69ba9161d376c035d31023d2fdeecb9148a2439abe3afd8f608f7e05e09b

SHA512
f77c4cef5cb7e927948f75c23a190e73d6c75b4f55915859046533a10aa3c5abac77d8bef71a79368c499c85009213e542094b85b94b69e62aa66b60616777c3

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx9_42_x64.cab

Filesize
911KB

MD5
e3a8689d2876c6d3baac0b36b5c4bf1e

SHA1
22746af0bc59f5ba90a1f48a9cebdb87f40e56c9

SHA256
54a61b655ca36f76a489b46c6174dd601a831210f16ecb9d839cdb7e19d47904

SHA512
76fdb7b7cf64751e1d59e70968a14547e889d2645468e5125c280d8d585a3dcecfbd83cc1a08d552db7ee91be78d769372dfd9e4c0e86a5b80ea32ec7a78073b

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx9_42_x86.cab

Filesize
714KB

MD5
9bc8213933598d050827d20a4573486c

SHA1
e6f9ba62756a00c53746419dea221881aeb336cf

SHA256
9c96b6fc4df5c0efca9f0d653976772b2b964243214f99066e4ca4aa6df791dd

SHA512
a1920d042963cdda41df44044de5b94b4cee6efa102f633214e384918d93d2d6a31eb388bdbd00c7e9c199281e3b71caa5242e9a42e7f0be27edf90a3cf6890c

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2009_xact_x64.cab

Filesize
122KB

MD5
503d5dcdc151739cce29b6bc144413bc

SHA1
2fe0261a0e81da501448861d710bae9627ff658d

SHA256
34d922a89d6b354572c17b890b0efc21bea237b94859010278fc1a4435ae7724

SHA512
fc7d8896ce2710a6189a812bb57b80b74489a9311610eece7db32ec0f830525e9c73e10755031ac3bbe8649344f02c44df2450e5b6e98b17c706e4755fbce0ff

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2009_xact_x86.cab

Filesize
94KB

MD5
234963b689c5fd79cf71a3f555b2b418

SHA1
e9a4a8118da844571beee04a8e79675729396c15

SHA256
1520e988f112dde8ea11794e4b6dc9bc6ccb2ae7e0be7342d4696b719e5a86d0

SHA512
dd00fb9da7f14daaf3ff535e4ef31c1eb35757836242b8b1f491e4061128781b59c117aee0ad7789d90852babc459ea5614ed5fe4263a8d7219e045b0a5a80bb

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2009_xaudio_x64.cab

Filesize
269KB

MD5
3f50dca229c21b19c6ff1da50f9b7022

SHA1
c9db30c33c27923da5303cfb6fdffc0642af7315

SHA256
348bcd596d4b3f1e10059a0ce3c4383d383c4964c00a77ae7281e3472f6b8b25

SHA512
c7d322d0f8d14a3fb65578dcf84c31f6f57d674e315d0f5bd9c4c2b9f05c006febca671d486cc6da5ffee5af46a45ca967446820860609d62ac9414f633e36b3

Download Submit
C:\Windows\SysWOW64\directx\websetup\Aug2009_xaudio_x86.cab

Filesize
269KB

MD5
2136cdc81fb2badbabb1ca9da463034a

SHA1
7a2d39f51d390fa28d627ab349523eda6bb9304d

SHA256
68785e0781b43c34cb184ae167363c23d5b9d18ddaf8474a5f1d6b90a939e8b7

SHA512
82a600478e77ee623552ec7be8cd63f85a0028d552cb3764b0e36400020746e2503c505aa31f9b3569c65ca56e34a900913f712a4a9f60471ca4126e3e582de6

Download Submit
C:\Windows\SysWOW64\directx\websetup\Dec2005_d3dx9_28_x64.cab

Filesize
1.3MB

MD5
d964ed45ff274da2c8f48e2cbd00aa9f

SHA1
5c2e5607065238fb24a0b65ddfc904406615e2a9

SHA256
daf10a54089755f9a8aceff0c7695f1aa42d35e3179da5b9bb91e409036ae547

SHA512
a74e2dd4bfb037e5f5a1deaa86f9c4a354f023b62e1f2075509fb707eee1725b1136441d1059bd3929af1a44f6372dabef9cd15d386a77b2b22a532b74cf16aa

Download Submit
C:\Windows\SysWOW64\directx\websetup\Dec2005_d3dx9_28_x86.cab

Filesize
1.0MB

MD5
b1ccaaff46fe022439f7de5eb9ec226f

SHA1
8bb7225df13e6b449d318e2649aeb45a5f24daf7

SHA256
645f8d90b07c69330a8c7c8912d70538411c9a6b2813048da8ad3c3119487f93

SHA512
2b59c07584d45705273a975a0223e4443db190675558ab89d92e1572de4843be3d0d1267818b19185e4e438a8bcfa2af5fb5ef2a119da270be4540576fd78c77

Download Submit
C:\Windows\SysWOW64\directx\websetup\Dec2006_d3dx10_00_x64.cab

Filesize
210KB

MD5
681407075e9b19e5ef2218832f6fad71

SHA1
e4f4d292a36cd9a3034007ef9d2005694307eb52

SHA256
f9bd5bb083bd55d1d2a690bc66d6d9da0b1a8b49f09e811e788c030669121118

SHA512
e983e7dd3f40510816ff3ae836600a186dba827b484b0c346c20e43e229189a86d4cb5cf219c1fc35b77ab0668866446f6e9206b279931c927d4ed66ad3625f1

Download Submit
C:\Windows\SysWOW64\directx\websetup\Dec2006_d3dx10_00_x86.cab

Filesize
190KB

MD5
75c33157d8a1b123d01b2eac91573c98

SHA1
e3e65896ce0520413979c0143c3aa9bd3a6a27d3

SHA256
02daa8b5ac3752f76c3bfd9a505ebf22b1b4b41e44eb92ce2799033b2330d186

SHA512
f0f1f1dea5938e1c7ff2adf7c8d421c2e68e6d3a8cdf18d0f2f3fe1c6837a4f37b367d2d974c35832d1d85a619948dd0f250c7d6dc4ae39f618f5a2893eac7dd

Download Submit
C:\Windows\SysWOW64\directx\websetup\Dec2006_d3dx9_32_x64.cab

Filesize
1.5MB

MD5
2290064562f2d6d197765f4edebc5bf0

SHA1
70c2e3c3eb521ba4c46c428d57166631f86512c8

SHA256
da1ce01be39f41f967282849715e8310dc1887bfeb92c4e0166d2c31f00647f7

SHA512
b25a517de79668e3abd88acde835df4a0d69e70ce0e001db31d5debcd812bce46f4ada5e07c036c7bbe88d6dfc9f6531b2198f03fc27fa46070c790b45955dec

Download Submit
C:\Windows\SysWOW64\directx\websetup\Dec2006_d3dx9_32_x86.cab

Filesize
1.5MB

MD5
a5bead938afdc63adfecc1daf5049d7f

SHA1
b3d5bf56f6b9bf87c33009a088ba7785b6363b4e

SHA256
a1cc7603302ee53d54f4353c223d95e223706924d99b864220b13814ef93eefb

SHA512
c9244bbcfe60f347ec8785b1a41b6e243153624ea73b16db4d624239a69fa76d2df2e54039d8f4d2c495890ac17b676e390f796118b4e16d9f03683247190362

Download Submit
C:\Windows\SysWOW64\directx\websetup\Dec2006_xact_x64.cab

Filesize
191KB

MD5
f34ffbdb67dcf84092c9d321e3343d3f

SHA1
52fafa930c3464e070e1e4692d4600b12678e9d7

SHA256
bdaf9c41f83e65de2b73aaca2002541d48c65f551cfa0578b3259d3bfca54ead

SHA512
a78d32ee71f5b4214e9b8b95fb8bdd4b629d34529fad7a494219175ce5cc129a3f5c500d426afe0de6a680977fb86abf0b77be353d8d19d6ed1a11c421c6e757

Download Submit
C:\Windows\SysWOW64\directx\websetup\Dec2006_xact_x86.cab

Filesize
145KB

MD5
082b7d69f96799aa2ab1a8ea1fa2ab88

SHA1
75c7032b749259977c947a5103f9a4b92c2025de

SHA256
b98e55c654b9ee6f6d040665d932bea7a1299c56cc9996eea900ac4f5649c7d3

SHA512
57c96a4c99ab9a7d33a8cc81a3b4e2ab58fe3a2fbc7f79ad688c7d0257d281c662d4ce0737f68c00d15f715bc6177d2ff9cc32a69cfb77216265fa56ff79dd8a

Download Submit
C:\Windows\SysWOW64\directx\websetup\Feb2005_d3dx9_24_x64.cab

Filesize
1.2MB

MD5
dca673a8f9f834f9370862d1c97fd9e7

SHA1
1a0cf0fdda2c9e8abdf5cc19fcdbeaf1bc1639e7

SHA256
be3de63f136a2b41d3229e477ce2cd7f67ded031b4b370e640c39b80368238cf

SHA512
255270bdbc1dcd6a3213d8f0da2e48c6445b0141c5148edd1dabc9ca4643667651694b68013412a4f2ec90ccd60a757f64a9a76e2576c4fcb056dde726a6f67b

Download Submit
C:\Windows\SysWOW64\directx\websetup\Feb2005_d3dx9_24_x86.cab

Filesize
992KB

MD5
7029866ba46ec477449510beee74f473

SHA1
d2f2c21eab1c277c930a0d2839903ecc55a9b3e8

SHA256
3d4e48874bddcd739cf79bf2b3fd195d7c3e861f738dc2eab19f347545f83068

SHA512
b8d709775c8d7ca246d0e52ff33017ee9a718b6c97c008181cd0c43db7e60023d30d2f99a4930eba124af2f80452cbf27836d5b87e2968fb0f594eca1ebf78dd

Download Submit
C:\Windows\SysWOW64\directx\websetup\Feb2006_d3dx9_29_x64.cab

Filesize
1.3MB

MD5
33618039dac4e97c813e5bc1a499e6c6

SHA1
c792b9d0134df698476c2fa4179de6bce8aa583b

SHA256
a5ffaf9d58da5d79402c4dc93e79960f971d2701d4651bb33d18925af641f11d

SHA512
35b490903721ca5faef73815d4f9c6f52efab1fe82a4fdbd7566a1b028525afd29a72dc68d4b7d219cfa5cb33fec241d6b2784f15f9795d368dc356b3df30b5d

Download Submit
C:\Windows\SysWOW64\directx\websetup\Feb2006_d3dx9_29_x86.cab

Filesize
1.0MB

MD5
f6cc1c08d0f569b5f59108d39ce3508b

SHA1
e9cf7edc8c9c4b57a9badd8386a2117ec5785aab

SHA256
4114e76799af3da9db3dae51305dad70a05b757e506e4a327092d536cca7ee75

SHA512
86df72d5b15396acb504c1ac9de7ff5c0cc9c95a90fdd82daedc55baad490cc47a71cb511571d37e25dd9bc1ee9652b9723e33879bc1756a7881a8e61ebc59ed

Download Submit
C:\Windows\SysWOW64\directx\websetup\Feb2006_xact_x64.cab

Filesize
177KB

MD5
582102046d298e7b439c819895f6061d

SHA1
09900f44668350118589f18c693b131d7c1f9238

SHA256
c91a6380c65853e41e2f9593b954f3b5af49bcc894476d8eb78cd9f8b6dd7da4

SHA512
8aabbcbc88489ff8828d532be5c1bc0d33d7960f41c7b38348aae73ba4777999f4358466d061ddd8291dbd434e7741ee2c3215a10f8287be36209e0842c4eb2d

Download Submit
C:\Windows\SysWOW64\directx\websetup\Feb2006_xact_x86.cab

Filesize
132KB

MD5
fec720c0c15c43569ea9fab7ceafea95

SHA1
c65235b40865725a00675f1bc013ba8b77307669

SHA256
6456fc26622f3a72b9449ed0e61874cf1adba23cccbfcda1324f033fe0788fda

SHA512
8edee940930e3c610e709e2c6348abab479628bfac71a0c507f46af8d80f1f0c6e31c7c44af5f884668ce472b281ff18cb44a97ab68232d455b7bc8f89a75268

Download Submit
C:\Windows\SysWOW64\directx\websetup\Feb2007_xact_x64.cab

Filesize
193KB

MD5
cc622a75240ca96fa8f28bd984bed5bc

SHA1
424f216c5c0e02ae654612eaeb04900c9dafbc61

SHA256
3454d5101716a5c17bcdee8632668d981f99e8558d8d05e20a33ed718ed8c2ac

SHA512
eab36cd6bc3ae6f67d89996785f9c7d51e140bfb839a866b4e4ffa7809846df861d30d1fce2e1a498e8403deca5ccbc50b8f37f4c1b4ad3cd3a63b150c49ecef

Download Submit
C:\Windows\SysWOW64\directx\websetup\Feb2007_xact_x86.cab

Filesize
147KB

MD5
a09f7eab35816d682e7432dbb36b047d

SHA1
db67b9434abaa8e7f166956a1c8d01f536162c21

SHA256
0e3655490667ddf17150aec089889268bdd7f1e8367d2bed6f3eb68a5ff28288

SHA512
fb1cdbfb3cdd60783d1c8696ea6efb746331880c79aa74052808ca09092cf1a2336bf784104d16203740998129b718dc0ad4a632e4031e85ccf340c593f05e57

Download Submit
C:\Windows\SysWOW64\directx\websetup\Feb2010_x3daudio_x64.cab

Filesize
56KB

MD5
f0ed6ef41acf1e74ff9bdfc16aa8cd02

SHA1
8f888a9ef499ef705a512352ea976eb7168d6860

SHA256
a46a4b55659921966428301c02409c32a642ff7699419f71ce8775944117ec41

SHA512
577373645ac7c617d6cd98e92fa52379d1b098232c0d563d31bb0171379d04d5f43aa8142a95943c8ae702b82e94a1f46f8516f1cddf53d8d63a2474f8643421

Download Submit
C:\Windows\SysWOW64\directx\websetup\Feb2010_x3daudio_x86.cab

Filesize
23KB

MD5
c0f5452d6ca76e8cc63ed7e6b6fe75fb

SHA1
05a175375eae4953bc2aa5b6777fbad268d7b7fe

SHA256
3cdd51afca42c61a7fcf0e7348ee4f2095d1bb9deba31f7c09f5694a028b0d35

SHA512
bf75bd537f253c2a989416bbb0cf68e530c8e9acee0de0cabb245a4ba06d827b7eb35e940472a6c9096112be58fd96c50ad398ea14acad0739c154cfbe405aca

Download Submit
C:\Windows\SysWOW64\directx\websetup\Feb2010_xact_x64.cab

Filesize
122KB

MD5
16384557c085f2268ee68a6f200060a0

SHA1
68493582ea6e17342227f326a2aebe3830b7d0db

SHA256
dc678bde00cc64b91d29c5d98be82b19de00518d1706643e8eb8ddd4ec577327

SHA512
d0ee2f2836fa5804f8c5d817f2c51dfb2b63d1f2c14516f467b757445e08f346596a9861e86873fb9c78556390a3c60862dc8bffeca0b1cba92a8df061f206a1

Download Submit
C:\Windows\SysWOW64\directx\websetup\Feb2010_xact_x86.cab

Filesize
94KB

MD5
022f58555cb11343e2bf69562eeaaac1

SHA1
1cef7f8e152b72c3d8892702e9c6cdef6bf7d8ad

SHA256
d5a7cb9a858e3dc2fa875c8aa915b6999137b616327aa79d382379a1ce3974b5

SHA512
7308bb60c33bf063ca1e13fdae7aee032d4725e967149ad8db8bf3935b1c5cee8937dd8772702413e0d4b440110ea2af4bf58ff0bae89b9b6eecbba9702665b7

Download Submit
C:\Windows\SysWOW64\directx\websetup\Feb2010_xaudio_x64.cab

Filesize
273KB

MD5
c501686b2ae5f884c3cfcf67c300fdac

SHA1
1817a5dde8fda83dcc6075836146eb17621e229b

SHA256
b99380971dccf9500604a39bcdf5db6f5d96b14519ec0bd575587638a0238099

SHA512
e41b18c0c1b69d89d5f64e1cc4dc815faa7234e13fc63f46ee0913e1eb99fa0ce585cfe94d5bf124246692e04c580716f334700f4aec3eee7aef77d8c2b53cce

Download Submit
C:\Windows\SysWOW64\directx\websetup\Feb2010_xaudio_x86.cab

Filesize
273KB

MD5
1a65ed07a006532b97beca96bfaeda85

SHA1
66bafce1212a29513f26d7bf8d1b80c96238facd

SHA256
738f0ca04f3f568eb5c1a4d8f1af30e4930e4f7950e96776a5b8adea16efc8f1

SHA512
a8082022c5a7b2cc0a3f8bacd3bc85d1788ddd3f4abdafe2b83497d4e1fcc9bf574ad86592d850ffdae85f45d445d0f11e89c219107ac7ec6e7ecfdfb69ed9c7

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2005_d3dx9_26_x64.cab

Filesize
1.3MB

MD5
05103e47f259fa22d27c871e4cdee7d9

SHA1
502fa5d15fe56dcf64431bb7437e723137284899

SHA256
794e23d8b08f88bb0d339825b3628c24cd0297195657f9871ee6324786fada36

SHA512
180e0abbd97b6781c6639c6ab2a2355400b8e32784a8469c3cbedea23b121cac5ba17f6aa509610d0a1e5830735455690f574054d6224a6a5d2ae70edb601835

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2005_d3dx9_26_x86.cab

Filesize
1.0MB

MD5
029359ebca4ba5945282e0c021b26102

SHA1
6107919f51e1b952ca600f832a6f86cbbed064b5

SHA256
c44eabf5be3b87cd845950670c27f6a1e5d92b7758ba7c39c7849b1ee1c649c0

SHA512
fa007f257f5267119b247ec4ed368e51fd73e6aea3097e2fc4e78078c063af34d161fd1bdcaf3097bb575d2614dba226a624d060009ee4f7beda697efcf42bb7

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2006_xact_x64.cab

Filesize
179KB

MD5
d404cced69740a65a3051766a37d0885

SHA1
288818f41da8ab694c846961294ee03d52aea90d

SHA256
5163afa067fe2f076ab428dd368ba0a2cf6470457ba528a35e97be40737a03c0

SHA512
87998e67b359c2a0d4f05dc102f6c4db4f260903385b7558a2c1a71436001d5b18f42b984e6b279a8197243593c385d41f51de630fa31c5ca5140f6970f87657

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2006_xact_x86.cab

Filesize
133KB

MD5
cfcca19d60ec3d822ed5ec8bbadec941

SHA1
ab0e87182877991810af48f1478906c1e671829e

SHA256
23495764aba10ff35cf9d23aeeffdf38716219d8a155ae29162f01f7fe6a30cf

SHA512
2acaea2de2d77bbe8206e8309d48a4cba432d72fb9bde2576bce7a31ee29fdcb0d44c2b996e8dc21a31bcdb03c806e11ad53b74d9c4c972436d5202825900c01

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2007_d3dx10_34_x64.cab

Filesize
685KB

MD5
1ab35d11274d1adbd316b19c44b9ae41

SHA1
14165ec367ce179588c8a5806fc968fdb49b4aca

SHA256
02ed1b5a850edb52ec174de177e91842edc7c5f4c06ceda5b16f3427dbcd4c99

SHA512
71c8fac7c95211d323c4fb6a02916e7d43ee399bbe0f1d983b5ac210f5039b23355f40b36f023f3c36e19787e2871a60cc389e51d6327652cd84d9e3b93d5a4d

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2007_d3dx10_34_x86.cab

Filesize
685KB

MD5
19383cbada5df3662303271cc9882314

SHA1
123c97c33f7ef2ba345b220450f181d440412e6b

SHA256
8ec971c91040618338ac2369188f3e5d7c85a5b1e3b9fc8e752dd845d295cdba

SHA512
a4c6acc9ff656e05d75ae0081c65c200b584209c99fd001494c4d206f2ce8a78d2dd3644e51018574928f3b9e9373bf7ec8c5147a3590b54d1c6d50e61342853

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2007_d3dx9_34_x64.cab

Filesize
1.5MB

MD5
8dbaa3047397ee4cfca2efffcc2dfbd1

SHA1
d88fad72d7eaf38b8469b2b8492311c39c42be04

SHA256
fe4b15931e048c97cbbc26f753093e7d41eccf174402542631284f8bdb9ee692

SHA512
1ce01bf0bd4c0d832d95b13e958da6cb69c0d3949b128fcf40ec59ecc0ad8989b27c91eac28cd98777d57dfeb811cc1077fdb87348a11b6370d806771d7e742d

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2007_d3dx9_34_x86.cab

Filesize
1.5MB

MD5
fe8feb215fae59866dcd68c1604d97aa

SHA1
cedaca678d15e78aa458b965abb467e8964a1fab

SHA256
1c1e1c6f68ba556a0af09a38c32eb421c543a4848c4b42d25867c98dab3b3a50

SHA512
9955336b561e4fd3ba3da7fc086643e811048a25a7e68344d2cc5cab091980baae1c04ce41328b59c896662e2875886b78ec869852b2d1daaa46af38c894a3f2

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2007_xact_x64.cab

Filesize
195KB

MD5
b9648d12df695290be0479c1e78894c7

SHA1
932627d40a83411f9f4006792adeeb4c3a74cf37

SHA256
3f2ca0accef2594fb014296f4111b7fbb59729c5d928b22f7283c392494fee7c

SHA512
240b622b02c5fa3d036043ecbe5bf29fee447147af36e795bfae83fafa35934fc22a3e9cc2d846bd880d7808897355e16696c555146ee69864472d4600ad25b6

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2007_xact_x86.cab

Filesize
152KB

MD5
001cff513a31ee082133e7ba3b0d71a2

SHA1
4517610a25239a16c26ca9890e1f0e52dda3781a

SHA256
245b0c554cbe2677939a70e5c4c6666b1b43d10d47980223f8cdeadb2d0eb76b

SHA512
7119f6ca16fe6d968310f34828f30d8144531b89583cfd529056d2e31d5164fc65136fa9015b69849f724ec641a9291ac644c91cc3fa8ebdd4daf9cf5a665a7f

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2008_d3dx10_38_x64.cab

Filesize
850KB

MD5
ae0baabeaa94d668f9f1948442fe9b79

SHA1
34dd1c1ef542cceaf8202f41761c0c76cd9611f0

SHA256
a75a8109e3b4ce2a805555577d45853bc2e67451ba287b45aa3ce4ca14ce87b7

SHA512
da4fbcad45a08d8c691324aed44c227e6b6a22b2578804806f492bb7c1644a8f9a8aa7540d6f35c0fbd243448a79e56bec2e7e2b26bda40f637242f1207c789f

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2008_d3dx10_38_x86.cab

Filesize
833KB

MD5
b0e2b612daf28b145b197a4db0a9b721

SHA1
f69266e4af3d2de31a2a2e416f10b0f44737739a

SHA256
e8dc1063c9434eed8d633741b19cdfa1889581041e2214b87b5159e3ea087f3c

SHA512
6e31f18cb75ce69d291d0abd15edadf02c0693033351dfb2f435312a47540aa223c8176209725c14a05fa6494153a3e191b2fb7cb8c5cee11fb42371ce67392b

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2008_d3dx9_38_x64.cab

Filesize
1.7MB

MD5
93e07225a9cdcd077af0d83b232da2a3

SHA1
8ebc7e6376203c68a2e3cc82dda75b2e7b285aa9

SHA256
f33a6b6ef55bd4e75a2e67d269b917fa6113f2b1c9b745b19d3ce6a6365d1cfc

SHA512
6cc39c9eaee38a9ae8755ebe6091bd60ce780332a8cf70934f8b08bc920a148fe8ba78967f2290609f07ab992880ffd64c55b6243fe3b0d46dac56a12aff5367

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2008_d3dx9_38_x86.cab

Filesize
1.4MB

MD5
e2fb2e37c342983493c776bd81943978

SHA1
2a8f3c45cf979966d4d4d42a4d34f05c72c7e29e

SHA256
57e57a6348e55aaaca6bed5e27bbdd0a4bd0dde69c77f4d26c805be6384be927

SHA512
2d297f607c5a098a3d2b19e7f88aa12f720af3c23fe6ddce7d4659a9184d1cf8f8a76f35b8acb639b48cdad8998c919215a03b89207e2bb1829ea3d8a9efb95a

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2008_x3daudio_x64.cab

Filesize
56KB

MD5
8f47579336d3e8bdffa6ec7efe59ba29

SHA1
4379c4f9c5425668abbbdc965f8bd9df0b7b0855

SHA256
7363590b33717a0c2e07f3b2dceb3689a526b255f29c84092022a37bf6e9b9c1

SHA512
257e5b70b727b44bacc49fe30d73d4cfe0637bde62ebae58218bcd24f4d97a3f9d30a938b9a8a6e0479b3f6b0410bf8093e7d74752bb1df73c1906dac809ccce

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2008_x3daudio_x86.cab

Filesize
24KB

MD5
dbc81af3e6112058cb652136fc9e99b4

SHA1
ccdf0a69cbf4ceb933dbbbc15fd96df52931f4f6

SHA256
75f048bc8261c1877126a82d3e7983f22f830596eefeaffb799947d9a13afd51

SHA512
879f04a0c66b76aceece022397f87e52f15be73bbe479fe03f01163746e21f6b5178091f30a5118b32f116a4ed27a99c1baee5ea5da9d2e277b6f534daa4b841

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2008_xact_x64.cab

Filesize
121KB

MD5
a3ecdff8018bd0ad0d1a34860e4cda6e

SHA1
36db6dd7d33e4ead7fb2629205b8c6717a62dbce

SHA256
09e15921b2a8204235c7128b804f26e72599f05f55005bd29fdb05da8c812460

SHA512
01da2b3ee535dfb0648fe340f3fb34fe98dfa7d5e0b87d5041ee8032581bf5bc0cb03678dd19b9faed3e0b9dacc36819cedc705fa5f093f8244e422ebf30d9c4

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2008_xact_x86.cab

Filesize
94KB

MD5
54640e3a5216776937ee5f026ebd22f4

SHA1
bcf0ea32672f6ddc01bc4e4e23fc67301769f42a

SHA256
fa86c9d133cc5ca499b1f57d52a6024cae3f5605ff0e5bc466f07e3f7bac121c

SHA512
6b4fb153aec1f860fa57462a70937de3a94d61164c263850ef883e72569871913df5390bbd92a6b2574ffed5e8f39e434e435f16a0ef232121eeff3e71db0049

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2008_xaudio_x64.cab

Filesize
266KB

MD5
be0eeff1ac4f42be998940f6564e89b5

SHA1
62f054a4ecd6aa187c3d1704378c458786de5337

SHA256
7679e7b1e03399a5d0d7b802308ee1503a9c5c59935d16c330db760876bfb37c

SHA512
c3ff516aa3730e908ca626349f037311f5521849ad970c64dd44e63344b29dec6a40454cdf436732302514b976ad7d8913d7416468241ebe4d2f043056510192

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2008_xaudio_x86.cab

Filesize
265KB

MD5
50de676bbab28205c1d045c35eadc944

SHA1
ff963262b0d5d73e27a827116eed38ee1e182258

SHA256
6d128830655e6cc400c1677ad91341e7b69f3d3f5acf32bc44ed2a32b5e776eb

SHA512
5f544aa2c671a5ce3b6431059ba042b00e973920b1e77a57b42b387db493d03e2a8ef1bde824d7752646eda20e7ac3e17b5729e391a2e3e20ef953c65b7542e5

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2010_D3DCompiler_43_x64.cab

Filesize
925KB

MD5
b6c9433b3ae42a99b0ca86700b265d9d

SHA1
595ef071c6798b31be6db2c721ca8a1fc51c8210

SHA256
9b56aba20f49739cde64f07ec317b6e20b0713fb9ae697318d811a0f103a6dbb

SHA512
04dbf5a877ae71f0b96680b34946f64a5477d1a23669eb89f4b2746084784efc0bd78db548671cb2eb8d3701570478a07485874b2d293351ae2bc1c6c2845630

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2010_D3DCompiler_43_x86.cab

Filesize
912KB

MD5
e7dfa140cb0ae502048ecdf1e42360e6

SHA1
4db08318f78f076fcc6ff29737b3d6d676f59c54

SHA256
293ced557ad732abd2737333df39b08216f31601d7ab65b743fe51b4efb8b6f0

SHA512
39b69a5cc4a50de72d031c41879ed7644b577a9e3e3b44bfecc61d5312c7c32c964dc2cd37db711f7e486f444ca77fe732c642f3e494e6da1bc1cf774d9ef75c

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dcsx_43_x64.cab

Filesize
738KB

MD5
89111c646b93b8ebcb306f0f743b2d7e

SHA1
f9e83beac4d9665eaf54c6578147a6ad539d463f

SHA256
ca1b0022af12f048586761439e152d1157eddb7153c031e075ab8d946173d31e

SHA512
3e79235d4c73d26506c3d537491987c06c184f0bb2eb7f40babdc70682215393f6e9ef49deb57c83d7d29ff15740b472a59a7320b5d006a0f094614396b06be0

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dcsx_43_x86.cab

Filesize
747KB

MD5
e34c0cf1bd5a68c80bdc709a452eb322

SHA1
4dd4553ec7e2e42d51a716b1f4cb58588bcaa164

SHA256
799b517227812252481c9c9b22cf16ff185ffc20b9273612c8a37153b53aad93

SHA512
3488a52f6fd3681b10624546b923368245f969330d4909e91c5b58f159cd24b258a8a2274d62243ca5ca9f1fb40f9f248b3bd92283f775dd24baf68ecc5fd03d

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx10_43_x64.cab

Filesize
233KB

MD5
15e92aada1119117964d28291f8adba9

SHA1
a4bcfd73e2d1adeacda9046cbf44c9fd21b3e075

SHA256
c689eea749f1ad76a162d1c6dff31dd92d0ebf85f5b539c4c953d55bbb921b57

SHA512
d0653f6aa90f9389a3ffec1bfca92b3ef22e0a2c7892dec2d156da3e2d757a26cd39a00ca47e3a4e153460599e48657f5dc96c8aa9f7c2509db0ba1ab0ae5ec5

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx10_43_x86.cab

Filesize
195KB

MD5
591a61bd06c73c70f93dac5af2d8e924

SHA1
c9d36ac5e2acac31a7413d22ed1c09c71cc96ffb

SHA256
f0bc06ceb484d97cf01526f9223df7b4357d166c4391869f2e7d514dc1fe769b

SHA512
3e2e3318a700a6ed82a21018403ca99728c8a56b7df81f99a5d705b586cee1141586dbf19a01ef1f1a72ddc8f45ddb51ba5769ae4634b02233ef1ac4e0fba5d4

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx11_43_x64.cab

Filesize
138KB

MD5
1c119486920ae4e41cd2c328777509e3

SHA1
a89e8cb197576d78c6d1d2e45d671d7e187efc74

SHA256
37ae82574cbbfe2cae6019a168a6d1bde38f88f8e51f13335001943980a665e1

SHA512
d81c623005db87ed057aba3fa807ef3b4534ecb8473e9a3283457543590d6d73b9a9deca333e312a2616f74f1bd407de9ada7bd1c52126e04c56fdea78119bec

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx11_43_x86.cab

Filesize
110KB

MD5
061bba3836b3ffcbb01b150467bbe951

SHA1
00d8fbcd4068b3199d3d393bb4b86bf82985480d

SHA256
b80db68cd82caf8bedaee62808171b20c546a76499c3ad53014e3bd2fbd2918d

SHA512
aec8327e1ccc0b33b3e32d66a5ee25c4b70a227b708d10f61ebad2d998f3be68145fa85c50baa16a21ee766b336b1432fbec02c75d698793092015c832b6fc26

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx9_43_x64.cab

Filesize
918KB

MD5
4ebfa56903a486e4ff5c0ed4c57ff8bb

SHA1
ea0edf56084d4a7011953fc34ef4ae5e0004f753

SHA256
810a07865b7fcaf0d7abebc86682479a05bccba71c69aa2d4ecbec3c88c8270e

SHA512
be06091faff54db09aff6c034addbb1a143de17d05f4ee9239509a108dce5f479cec2789fd27c2ea3fb66ae47de12631dd4f4599cce80368020e620c1a6a0a35

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx9_43_x86.cab

Filesize
753KB

MD5
bf124b64fc3774f61d30de0a405f0c6c

SHA1
2f8a8babfa4e51555fcf125e8373d9c5f7f7434a

SHA256
457c5ce48eaa0fe551b46dffc1e4dca985d261686d8d4e6bced533ee1f682fce

SHA512
935922ce74bd399e8358693562f86c9b4b6308a6e33586a5dd61924f8b6b2cfd6cb2e472fd082b9ea32c0abb9a799a0ba9103b4c316342f8072a7a3782c2116c

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2010_xact_x64.cab

Filesize
124KB

MD5
79ed229e336b3c13524d5769e95fa97d

SHA1
1407132b85923d199509c700806c705af3a67727

SHA256
3e8fcc374e84e1170067a057acfa3b5464220d6bf5324566a05242e8208799b2

SHA512
676472162b9d54e9cbf23c853236f10009e5646be45f97be5d08dae7e5f87a947dbcc9d63cfff5b7d739ab9131ea6e3b9a499cfd813c678c9a4c5dd6eb338907

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2010_xact_x86.cab

Filesize
94KB

MD5
3188814f4f1b69543688a55af1ffe23b

SHA1
57108fe718c3fbc3ab17b849d72dcb03315a1068

SHA256
fb320286968952ae93c7cdb4078bd99e689a0946157574760b844f7bf39c7ea0

SHA512
dcad3777a739bfeddef3bf7c87db289c88b9a5dc0d9e196acd2ab0d3c685cf14d361cd539ff07b0f23ad36b2bd4163c9c8475e014e22da272de78bcba8ca7793

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2010_xaudio_x64.cab

Filesize
273KB

MD5
461c07c13afd70954f34d55986a0515d

SHA1
d74a8f99e72d182c21a30e4cdcf9f7ca39dcea54

SHA256
7cce405577fae04e58fe31a099febba96d3ea7cb94ed2184b6bfba32d9f20acc

SHA512
aef4b8bdd17af066f5680485cc45266859f802f2a79178472f5c00b9146ab52f8e04d36a973ef8ff45eee29940fe072180d4e7e0e89366fa2e8aba8bcdb890f6

Download Submit
C:\Windows\SysWOW64\directx\websetup\Jun2010_xaudio_x86.cab

Filesize
274KB

MD5
11e2b64c1e1c07f5843adde7e247c8ed

SHA1
ead54df66fbf52fc503b2d364da64a7de4f19fc7

SHA256
c364833271396d78811a9a3388341cb9e1cf5e6e0fe2d7986cb4dd2f931a0dae

SHA512
e3a988dd221599678a7b691f2b0b5eae5e8fdcb5352c7e9c38868c2cfc0fe9417a5954d3e8240157c5d9753d55f540c25ee1944c9ff3f2ff14df5d7051a79991

Download Submit
C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2902.0_x86.cab

Filesize
1.2MB

MD5
74a550d8ca43f210e526bb000af42303

SHA1
ca3dc6136846ad196939cf71ccc04be6b108bff7

SHA256
afa44ed18e3217892499062db4337b94025726df991a0bd4dcc3a9f8c27c41b9

SHA512
58757d831931daba43ceffd512d47e29bdb91cb7b1505d69079a14f911e149d718e1566323b9bb1d0292333c76603e7634da5798307b6dd6c97f885ce25c87fa

Download Submit
C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2903.0_x86.cab

Filesize
1.2MB

MD5
6df41acd290de624df34e57569225f7b

SHA1
b33a256ceec451e467dc2aa2339a3736915ade25

SHA256
84e240f8813bacb2fe0f20081ca20cd0fed4b9e10c96aded8516b25375c407aa

SHA512
0b2647e0f6ddd936023d70f4a6c3f69275ef65433dd45cb47293a933f2d7b2d0d0385f80c8cb8be8538c4d4420d2da17484dfa056fc7dfddf1ca974b4698954e

Download Submit
C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2904.0_x86.cab

Filesize
242KB

MD5
0ee4994d37940795f01cd2be93b7d847

SHA1
082f6aa6d9d92cc23ac1ca858244a101dd8f5dbe

SHA256
cadffad57691af14fdc0f41250e644257a3068da134a5922f343f2e69b1b5441

SHA512
ee23312d54c0d0140f80317fd0cea299a362d8cd1463cfd79a9062eff2305ea188cae4f83f3cf2c301e6d82d29820fec726844971e286ddf729df9a17afaa167

Download Submit
C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2905.0_x86.cab

Filesize
244KB

MD5
70a647ca8587b3be1d2209c998b86b50

SHA1
5850552af0aad715c2406a3f50d7c6af1595444b

SHA256
f10aee00b78b734acb3bfdd81ce0ac22648376486d0c308f9975b05181ecbe13

SHA512
470c027ed3113af38c5f3c4fd3348d3cc8affac081dfe3b7fdbd1787da3bf78489e5379d8f306d917586ef8810b31a7f303125c94739f6dba15e3ac4745d996d

Download Submit
C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2906.0_x86.cab

Filesize
248KB

MD5
d7bf6789f6c6dce7ec335f842e91c9c8

SHA1
c0297ea86238a166da27b9428dc891256b52b364

SHA256
bcfd420ecb20116a78b54678cbb04204e76368809aee1e1bb36810a4d433de2f

SHA512
b07bf7444afebd52a11f64c57d76cab8976a222d8f9fa0e78e1dcd7bd2c126dc28d7df7b778f10bb8f69dd7b7163c76e5f7edb260e31ef66c458f4fd72899b36

Download Submit
C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2907.0_x86.cab

Filesize
248KB

MD5
d82fa9747fd442d8cca1cc35b97440b2

SHA1
a3e2ab8588a1bdf435e786c000c38144adbca457

SHA256
b185fce1d25a4411c1a2f53ec1e4232de9a3078d7db7aa469d53c5fb041f792e

SHA512
234e7a4dad6e9f83ffec2c769e775b18783b6a03e50d7e8186fb7fe01747fbb5ac46cff6f8437ca932f037da6c565f4faca694da4580f2876e31c252fafb55f7

Download Submit
C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2908.0_x86.cab

Filesize
248KB

MD5
3bb868c2953151575cb8833fcda21fc3

SHA1
403c8a2123f59d2a3abeef22630cd6f62cfc1d92

SHA256
fd1c15037800a0a689126b09f29a6329452cbaf42508242d9cc185f557f04954

SHA512
33021b90441bea79525dcbad841164d1b8568907edc5c27c0374c7cbe93bc381d93081f8f7b20f14aefec3b59153dcc9b2fa44c80b1ef7fcda0f8a6038ac24cc

Download Submit
C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2909.0_x86.cab

Filesize
248KB

MD5
3f8bf012bf573f071e98df62843ece92

SHA1
b6004908bb160643899b04b6edac9fdc7e3d86fa

SHA256
1e9c063428322da24df17c5d49c63a53e0f0751d26f741d90216b9c4ff1a9136

SHA512
dcea9b2fd7379f8a0d7eafeea4340f3ab7d71069ff843550e2c7a2ea21e1fba7a779a5352bd5758bc88eb8dbde0ec1d1f3e8164b1766e1a47f676a44c36c30ce

Download Submit
C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2910.0_x86.cab

Filesize
248KB

MD5
4ef2b868739e09e4020f2f0b0ded4a46

SHA1
39d201d0666cabadc0dbb81ee2bc691b9be10191

SHA256
1829a24a8ed3a2496ce92aa0c5142d8f512b11cdf23eda5e579edb5b11e2b589

SHA512
3a2f894854f9932840c7c7341f2e1882102e4f12dfd45f36deecff520da6d3237d9ea3867041f53037c808789e6bc57e7ba067d9c8f621350396126032c5223e

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2008_d3dx10_37_x64.cab

Filesize
828KB

MD5
756fe364f6a8bd2e70ecbbe895e134d0

SHA1
eaf82f86086510c0522b5dca8199110874b11b37

SHA256
6aff708a5bc25b4ecee972f930293324f86bc45dc97d687dab782108606c5902

SHA512
3d1c0a3ca8da93a85a459b252ca9ecd9177a450dc1a8f73add303a601ec64285fedd2dd97ae0a2c72661dc579e03fdd63ae6df900f645975885ab7a178e47352

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2008_d3dx10_37_x86.cab

Filesize
802KB

MD5
8234b9b90bcbb5077e1b5faa0b66d1a9

SHA1
e9207c572fdec592b7c17a7f9c6f875c8a55b1f0

SHA256
6a2727269e6cac7c4d2e316333d29bac0dc1cd7f51c36c0c08b0388203dedad2

SHA512
74c94a6e092d7c828fc1e3faee4b21917afc3cacec04f260754190d0533f93a58289763ac620e5a577f7865902023b30548cda4d9e968c90ee13050ad6d1e8c5

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2008_d3dx9_37_x64.cab

Filesize
1.7MB

MD5
600b24bef0749c2fbf406e0173478843

SHA1
d373147cc4ff0cf42d084edd75af18f1d0a347aa

SHA256
7ef2e2a5d4843f58b3eaca34f5a9c63e9abfa726a3244b762a6de70bb9a95123

SHA512
e156ee9e70a1b2be4b2d4b538b6f6ad4f4d877bb0d31297464840e3eabdb9239d73e54a9ede97c4eda688d7afa8483e271e31fdf9c658b240aa9510f161ab19a

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2008_d3dx9_37_x86.cab

Filesize
1.4MB

MD5
8ed75e3205c2b989ff2b5a7d2f0ba2df

SHA1
88846203588464c0ba19907c126c72f7d683b793

SHA256
91a50d9efcdfbcdf22a91d6fbb0f50d3c2aa75f926d05cc166020bf7aaf30e28

SHA512
d0cf0e3aad9c8c43a927d1bbbd253b9fe4c97b638ad9a56f671ebeda68fc9bc17cc980d93095fbb248dd61dc11b7e46c22d72cee848b150f7a13ead9e08a7891

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2008_x3daudio_x64.cab

Filesize
56KB

MD5
bdc5ed445942d7384d946acaf03363c0

SHA1
b7e021195bc4574a5676ad57eeeade1835299dfd

SHA256
312c2dfd80126d25a1cfab0fadf5c99bf1f81b404e121afec908f5b5d04529a2

SHA512
e6f792d767f5f4d3fbb08ba555d6aac3a8a873c11711eaf8936c738a9205fbe6ef7e64a9b56c58fd3f858bb7c20e595afc2f3c9d9010e101c2eca737d1676895

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2008_x3daudio_x86.cab

Filesize
24KB

MD5
5262e69c5834aa27a833c1e589cc2574

SHA1
757bb50815568a7aac35c1d85adce68466fa39b0

SHA256
1ababdfd6ca26f1c56f618f8c9f90dbc063d964bfa31caa787b0a8a1bee519be

SHA512
82f75f1fe7524e32514eff95ff7013ee1a095085937c1d31c7209c6403b6de9bf5ff0391fdb4bd3ef3d2cfbd941924732ea2b9d30055d90e04405abc426dde95

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2008_xact_x64.cab

Filesize
122KB

MD5
3fc4683385ca18bb91a64aabd6287ca5

SHA1
1dd91f7af09a1d6ed2d205bc385b526d3400336f

SHA256
b6f81e365b7fc224f66bd6560e5040dabc9370b3f21f9bd85728349200dd7632

SHA512
4c6be51c33444d62967ac4dcd3b0ae127963ec831f4c618cab2989726130fd5a50d3928e1e66111d000f14b8fd3882aca1b0725ec6025359b30017cbc5380afa

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2008_xact_x86.cab

Filesize
94KB

MD5
486b18945e3f5ef496727202eb8e1473

SHA1
d1741959717a62b3981542b3a9d75f58d5aee637

SHA256
d2140d9b4420b022d6e6135a67029033b5b0ec083893eceadd1007eee41ef4cd

SHA512
e262c6b5bea9c60e07985eaa5f84fd7d8191a17739dab8985fbe60116352cffc06f05f309c6aff00a596d8a0b61982e86ebe26097554f1a46b337d155ee437d7

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2008_xaudio_x64.cab

Filesize
248KB

MD5
3b2c203ed13d8901ab7c27616da80b6e

SHA1
f4c659eccd07abd1429ccb0a403c6fa80e821631

SHA256
e9a2e00f9c96bd5c91c4ae069c1c2ef6451e0207e8c18074f14d0d0ac08301fa

SHA512
967125b6ee2e3c4ca7c80037ca0a9d4d766ebb333ed68832ba1c7e321cb6ccdaa6ccc6242b01f61c779515e34185c63d71e99a7a2cd267f289967413c3606aad

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2008_xaudio_x86.cab

Filesize
224KB

MD5
dc71ac34a07bad6d68fc0520a5b0fb2d

SHA1
fc74844b5bc6c504568fff83ff629e802b859f39

SHA256
bce9c695d24972eacef357da0f83ab9d9cce2ee9a46176ffffad3a0abd64f48f

SHA512
15b9e540e0b194e2b6a66a41a143184c4ec26c8124b6d7827cea43d7bd1f0bceb33c5617522fa5787ad28423a48f4e735c4e782b12abad53defd1f9ef0ef9c11

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2009_d3dx10_41_x64.cab

Filesize
1.0MB

MD5
70456abbb34272f7a6c2a48223c08f23

SHA1
3d4ae2460131b32293a2f0b0c3c3b4f8b4dc484f

SHA256
25ef5135a88061ede0c4fde037be62e3a11701748ff83eda1aa9cc496687265d

SHA512
e660fa94c8d579aac1a6c8f8bbe55e2488b744a8acb59631eb82231a5c3363b3b923d43e6fa044afa5190060c8da67c0800c0255d8ee666d44f45e177a8241bf

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2009_d3dx10_41_x86.cab

Filesize
1019KB

MD5
45e83cba5710a1de7d3990a288122e85

SHA1
23c4bfbddcfb11acb7c47c409825f039af7eb908

SHA256
b7da29103cdf374de0c09713cb985035eac45fb8b394d3b8157d8a7562a89899

SHA512
8c56d376d349aa00948e1f3c6168dade76ac9a26ade1aac5a385dcf0253602f5a2973483d083425195db6ad7717494fd3cf674f5549774ac608cefa2a88bf0a7

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2009_d3dx9_41_x64.cab

Filesize
1.9MB

MD5
212bb7229cd29cacf1a5ec4e1c6e52e5

SHA1
c79ff23f737b991e8a7f38b9e674677482405f20

SHA256
53da650f9aad168fe8034da45abbabc950729780ecc4f645f1470e851fd67ac3

SHA512
6e1396e665f7b7d6cfda0591ec4c4082f8e3cf0eb2e64b7eb771cbb16f73af2a1c35ed2499062cd51d2c7c438425e235fa21bc48cda6ac3fc60d6518bf609fdb

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2009_d3dx9_41_x86.cab

Filesize
1.5MB

MD5
901567428d8c82756d7bf5a406441bd7

SHA1
6e3c22147f3da77ac8f20d615ca32b5ef2a0ed28

SHA256
32356344aeddf709c9d5302d8f3fcc1ff1be2e82d8d17833a2086400af248794

SHA512
6fd4c429e32480bdff4e58ba8bc0d28fe97c9ff5ef1fabbb856230efa669246a354f99b723e7483d548b74c121ac8ba9cba2b5bc3c18f35ee828302d392cf6ed

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2009_x3daudio_x64.cab

Filesize
56KB

MD5
e28e921c4c92007597e71d499edc77bd

SHA1
d8c0e4ad125b21a32f14d967b7f1f9dcace4a86e

SHA256
53a41f2989a2f68e4e927c89b2e38bbfcee7a2182ec588db233f26292f9d7911

SHA512
da023cdf89845bc7c7d2541348455c17730d4890df5b8be00e807d7c453d8d1da1cf12600a600f22580f9805233f96dd3394ef95c511e267f33746701b6f1d64

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2009_x3daudio_x86.cab

Filesize
23KB

MD5
fa5256647c0eccc35c2b1c581a846f91

SHA1
0d5a854808650098afb36c25cea9f67d2c9ca7a3

SHA256
2984d216a782ca017243f4685ba592801b1ac3ccac2bf20a8a134fecaff03510

SHA512
0ee38e439e202e4a06a1e9965112a663dfd4f7bfa5a6f34694f8429786ab0eda3a6ab13469d0e750d9efc8834cb482fb8894e76673aeaaddd9fb814bd6b13204

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2009_xact_x64.cab

Filesize
121KB

MD5
a9d30e5a134b5d7c5381e4dd018ab673

SHA1
2fa0a0050281d98c2b00e1a0ae0b99d0b6a594a2

SHA256
19890202eaec445617d364ffbde498e8eff48ebe5112a42fb4b99b4258aa0757

SHA512
5257241c6d2638439e6274c084a096fa753536c0d5f7ffb1f4242676a9a27ed4691cac7ca614df039278b87ab628a8e75fdc6e223413abd82b26b970869abe1e

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2009_xact_x86.cab

Filesize
93KB

MD5
c1ff75f8ceaca8bb6194efc53563a3f3

SHA1
789890284ad15df5acaa580dc47ddcae1f0d0c41

SHA256
250c430741fc09d74ef6f43559a365ee908f52d96cfdacc7b6d8bf5e1bd3e5e1

SHA512
5e51ec6d2a6c71ccc070a48539170dc9738c7b500d6bb3bdf9fa15a85e435b4418399524d278babf0b79ca91880206d7c57a7a27104093dceb1ee1f9aecba1f2

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2009_xaudio_x64.cab

Filesize
271KB

MD5
04850620fc179a2812ca31b9ed375ffc

SHA1
cc04b25b10b16166e36499256a4693297a7023f1

SHA256
2c1610997f383e55d5e264b3cc52d9bc5262ea72bad6116a0d84e623f61b0361

SHA512
d27ae04e183771bee6ce15f611f563657c0fc4914d5857b018e7fe374122ec9ce56ebb2c5f990f46689255a84ab3d3e8d9746b41b0559b506df55aa7cd7b0d03

Download Submit
C:\Windows\SysWOW64\directx\websetup\Mar2009_xaudio_x86.cab

Filesize
269KB

MD5
528d1c8ba95c79a237ee6f83403b919a

SHA1
cf2270f9d664e90e6481ee37c319ebc0dba1efb6

SHA256
e7aacd3af1c4e2031e4e4365d47e8af1023272c795f823b41f1728d48d127b67

SHA512
f7fb7c5cdea9dd4a58c597019cf50c50a568bedbce2fe86c9c9aa459f16c66a23ddb89e45970de251de49d0b2f92c250a836ee1f727c43bd3b062ab716aa6bb8

Download Submit
C:\Windows\SysWOW64\directx\websetup\Nov2007_d3dx10_36_x64.cab

Filesize
847KB

MD5
9ad15681fa177c198ed2c1780f92262d

SHA1
5391c59fc75cdb5426f71e09b67384b2b9fea98f

SHA256
bee9bec21771bc5365847be692e785ea619d625df629981a167429df6f0cc9cc

SHA512
eca7104fa4e306326a92c1967d339d32b9e9ba1e42965fca820847f9f9b085d1ed30867db10129766f9dcc9b6320d4bd43f05103317e53b79f1355d1f1d69f05

Download Submit
C:\Windows\SysWOW64\directx\websetup\Nov2007_d3dx10_36_x86.cab

Filesize
788KB

MD5
3d9a0c59156d03da0f19c2440e695637

SHA1
55b050991cb17410c75adc3913066baedb482ed0

SHA256
bdf7fb01c02783a4f8c9f5e7911f5cae3e2a7cbc425b90b36f9ea6eef2c27de3

SHA512
e9a662498c43865e917f0778b772d6964517e41289cbf5a0b8a4e44d8c4b4e9a5049c76f2ecbe4acc7e9cfcc3f1d87a75c3f8703e66804ce758969814ba14fda

Download Submit
C:\Windows\SysWOW64\directx\websetup\Nov2007_d3dx9_36_x64.cab

Filesize
1.7MB

MD5
a24b26f20ffd17ff3725a6dac823749d

SHA1
e0a9f241a083a58bd62046b0fe50afe73561c901

SHA256
23ad953d03c9da720002834eddabe71bd649dc9cd31abc7a09a8e77a948414c5

SHA512
5fdc1571574ae2ba50bcaa90e2cfe2dfb30a66574b6dad682c5b1b68c0ce1c8378ca8a766485968ad20432672b42a030a6edf6275b3f78daef055c45f37d0d3b

Download Submit
C:\Windows\SysWOW64\directx\websetup\Nov2007_d3dx9_36_x86.cab

Filesize
1.6MB

MD5
c5e127067ee6cacdd2f8962e6005542e

SHA1
22c571e4da75a6e5dfe02e3e3587f40c2939c745

SHA256
f52cc1304b533083b3fc5553c49433c0e4e46d66d567b9de0b558ca518db1544

SHA512
e70df11af8cb5d51c3111b8327371ea40292580f06d7d265f2449b89a4941c4740bde904367fbcb4158512939bbd7c7a3dc20d3642475789fc075a2ae8e27860

Download Submit
C:\Windows\SysWOW64\directx\websetup\Nov2007_x3daudio_x64.cab

Filesize
48KB

MD5
523deb17de80955969d860376fc0768b

SHA1
8964d237c360208e42d1a879e541dc710f1aab05

SHA256
122e09bbf46b3c3edae6c28ad060482dac24d4331c682fe0231cc5b6fb53c5e8

SHA512
c46522b916bd840478c06256305c187f950e525f7780a1763589c3ead8cb425a245944549accd58cb626769d368b03a047cc3b1fb38cd2ec4c4bcfc5668a2b7e

Download Submit
C:\Windows\SysWOW64\directx\websetup\Nov2007_x3daudio_x86.cab

Filesize
21KB

MD5
bb6131295182fe609e802e39f7b3af9f

SHA1
925dc4dbd64492f4d013063ed6562427269668dd

SHA256
90f472ed8b0beeea5db1b462da44577160337c767b27ce70ed58d68d0a03e7a8

SHA512
0b61e722b2ccbcf8de5d56244d9bcadf5d97c43da0ef01363f1f0d79f686b70c74d3ea5d6482ee28d2620c647cd690f5fd807e2f5b4328044aea5bdb6372d04d

Download Submit
C:\Windows\SysWOW64\directx\websetup\Nov2007_xact_x64.cab

Filesize
195KB

MD5
3d098aef8ad101782fb2187d7666ec64

SHA1
e6565c1c8cc68a0013490be6b3d6819dfdad94b6

SHA256
9fa6f4116a4eb1e72f75cbdcb2e34198a243d169276d4f493ecb8a9dff3722d4

SHA512
eed7ad526c5dba959e5d5b963154ccd87c4177a286e2f59a59ccbc7226e7a738ec89ee9d859113b72eb5c15caad444929c456beafbe125853976cc9e1f4936f0

Download Submit
C:\Windows\SysWOW64\directx\websetup\Nov2007_xact_x86.cab

Filesize
147KB

MD5
b3eb2dbd7a3a366ef2a2e1efe54a4e4e

SHA1
7edfde36ce6f8904b86610ead23aecffa0a21c63

SHA256
6dcb9461eab4aceb999784ecd74d985b3543899542ffd66203929f409c70c8d8

SHA512
b69cdcc7a2519a48dc13f60bde5dd0dd84af63386b1d98a507103492ad8a9ae5bbfda78761ce15db9abe5f201d509fda8013f3489aaf21db85cdd25dbcc29cb9

Download Submit
C:\Windows\SysWOW64\directx\websetup\Nov2008_d3dx10_40_x64.cab

Filesize
973KB

MD5
9bdcd6514ca65c183866b1988ca23d43

SHA1
6678a610be410bca5fafa0761afc10eefcf1bd7b

SHA256
86f96aed9c4e381623a6476bdeb375c3f49eb0f252301ad4db2f7974362790b1

SHA512
e4a9d9087633d7e6302ed58de60ae7d35bbc1257d209b082cc67f36bf85572912a703f990254e15abd8e3d0e5510f4f9db8e2efd1d567f647a2da2608e49bd7c

Download Submit
C:\Windows\SysWOW64\directx\websetup\Nov2008_d3dx10_40_x86.cab

Filesize
945KB

MD5
5dfeb46e60795266da03f2d0a67e7acd

SHA1
a77758873e5544e8ad22acf469c4a0fd0c944a88

SHA256
ec52b075a3e9c7fe468b317e0ff977964b1003d560065128741f4392bf47c49a

SHA512
6ec058811ac017be3cd3a46559cd73126666f41b0fa58d92c1168cf2a2e0e2357b19f65531c786ec81a438975dbece440c5e7b6c653afa5428ce6c444179af6c

Download Submit
C:\Windows\SysWOW64\directx\websetup\Nov2008_d3dx9_40_x64.cab

Filesize
1.8MB

MD5
2d7ffccf9db1906fa49be695354e5290

SHA1
8d0a8a4b7241e31bf931cc3cbc2dd50cb48896e5

SHA256
9499871ec59f7f115f51399f21730734fa1037eb0c1ef9f1bd12c0479b216a6c

SHA512
5df399c1b62652a91fd3250fe696aaf283f028910f0e25762576bc7c74588822dfb4010ea33c05d222bc60fbfd6d3fcd757bacf4773d7d2fff734eeea078beb8

Download Submit
C:\Windows\SysWOW64\directx\websetup\Nov2008_d3dx9_40_x86.cab

Filesize
1.5MB

MD5
75556d89fdd442967a23993c9111d997

SHA1
003de53653c0cc84f8c3d617d1f76fb475f1a7cb

SHA256
863ac3438f57158d4f53900c6924bfdc132ab43a5af57d4658e65842836b4fa1

SHA512
6086114500dbbf4db9d0a9c3f72732995bb9a3ab5c135ead53143749b95651b37b64be7a52ca09388de90216fd00486fdfcfbc87d42d77fac469f82b5290e06d

Download Submit
C:\Windows\SysWOW64\directx\websetup\Nov2008_x3daudio_x64.cab

Filesize
56KB

MD5
c931e5b595c62925df29ee9040a0bc12

SHA1
2a06d78f47160cadcd0f9ec634818c9b79b7f61a

SHA256
4da03f7a174d276dbbbe469c12670fa85fe247428fd5033e93ccc3ae4d5f84da

SHA512
5d9ec84116df04b955e026860ff7b2750cb87261d2a91088936e7b5ee500548686f4a7a4884b1c54081701f3982c8991613c0c77c93fa32df70084e63717112b

Download Submit
C:\Windows\SysWOW64\directx\websetup\Nov2008_x3daudio_x86.cab

Filesize
24KB

MD5
7b59a5d0824ab10eb4dcf0295d2c0a09

SHA1
0c084c3e1a3da5aff22aa924a5209c57d44435d8

SHA256
8fbe56582e93b3277caf8660f689cc9e9fa6a33056d40a88d48f669a005430cb

SHA512
db4a91267afd98205e98716e0080f18d8efac9b2043962e8b909910619d04ad3f99692b1a9b0b612c8a5fa32b31150805e375b67ac6b897dc1c70bffc9f24f81

Download Submit
C:\Windows\SysWOW64\directx\websetup\Nov2008_xact_x64.cab

Filesize
122KB

MD5
45eb89f9552c6536092dbb848dfca448

SHA1
40c7f5144e80614870bfe1ff1d0eb400deb8fdb6

SHA256
636f4829ebbf2e9a1ebe572a0f0b7f8289089339cc38c7075f48fe4930134cc2

SHA512
e4e771a0b6b93db895620c23a32ae4bf3a455a687480c7c1363e53e9b8d9206cad53989bf27b326e1583c4a993c59d68ce6d3f054698c405c8cf62e3cb256e6d

Download Submit
C:\Windows\SysWOW64\directx\websetup\Nov2008_xact_x86.cab

Filesize
93KB

MD5
6323491029405204cfb35e995062b79d

SHA1
b281a0781b01d2d5f55723f5674df508873e35bb

SHA256
3e804174d83cf4908cce7aac97756541a58c16372368904a253d10d64fb4d2a2

SHA512
c0b39e2c1912d04d39ee46f8e30e554fbfcb8d011c05a133774ef78ec761abb7d619aacd68a8dca48b6515ad003006a500386bcaecb9356c0cbb41684bf797f1

Download Submit
C:\Windows\SysWOW64\directx\websetup\Nov2008_xaudio_x64.cab

Filesize
270KB

MD5
97ab92ee81ab716560b9c51ba6e644a3

SHA1
681cedd9212cab09139585a69bb55898fe7c4a40

SHA256
63229aa8bd8e675b292c263fcad6b7868394ad29987d3f4db55f618359cb0681

SHA512
ca783306876f76b59e5c0ce4f6a49461bf5fa4c2206f289fc40c0f0f050687fcd798dd1b07e2229aeb0a0b736dc5123d4acffc0e737fa70f51ea7abb6d410372

Download Submit
C:\Windows\SysWOW64\directx\websetup\Nov2008_xaudio_x86.cab

Filesize
269KB

MD5
350f4eecb4407263a2417a284d355186

SHA1
ec76503b1f170010d778eefb6c3ff1d4aabd309b

SHA256
cad128dc2e64a47f65bb44f43a5a0650b045a5dae34ce13f34817642c56e4721

SHA512
c6a1c97bd08a02135062b5294e895e60e6c4361626bc15c0693b2a3aecf610b5e9604c1d71aafb1a62a9154cb2fd8067d77894698585286fe2900683982c1c29

Download Submit
C:\Windows\SysWOW64\directx\websetup\Oct2006_d3dx9_31_x64.cab

Filesize
1.4MB

MD5
edba7bc2a22f3186420c271b7291dca3

SHA1
65483db4269be348528fd205239b811d775421ca

SHA256
4f5cffa56fd44f7775f12fc511a1e3f030c05ac78484f6866b12b82979067c22

SHA512
90a9fdad3d7f933da8c3731e42d262034907d8088b85d7100be46c57def02b436c31eb9ff144b9d67fd931f92a1677ec0cd762d9aaf066bb026f139499ba3a66

Download Submit
C:\Windows\SysWOW64\directx\websetup\Oct2006_d3dx9_31_x86.cab

Filesize
1.1MB

MD5
f778928c9eb950ef493857f76a5811ad

SHA1
ea82d97077534751297ae0848fb1672e8f21e51e

SHA256
4891e2dea9d1798f6a89308e58c61a38e612f8433301ea2376ae14c3dfcb3021

SHA512
1f382a287fc6763b8e8d66825e8256dfb7d0dead6b6a6b51dd7c4a5c86d536cc7ef4128be0ce495fe17c859018750072dc7b43e3476d1ba435f209cc4eb6d43f

Download Submit
C:\Windows\SysWOW64\directx\websetup\Oct2006_xact_x64.cab

Filesize
181KB

MD5
cc568d26b5b4cda021d528cf75b21699

SHA1
dd47a33950c9e3a88defcaa7ea331fb1f1bbab97

SHA256
662d4e5d005cdba02fabb0d7a68a7b48ecafdebe21718d892833d5c482e5add7

SHA512
24b53bbd82dec594d9909352d1f2afe69b6f082db99aab3385826c4e8d22f5c075f3c5a24c8104dbeef2d894980319af141c65d768a51936c75092a846f3c8aa

Download Submit
C:\Windows\SysWOW64\directx\websetup\Oct2006_xact_x86.cab

Filesize
137KB

MD5
4fd2b859952c008de0542053b15bf0d1

SHA1
0800cec84b51fc6362c871fab87a09db5c4ad6d4

SHA256
f6b6ebc9c239c5263aafaa63fd691da5aa715e9c794d5fd663e86559d5c6ae56

SHA512
d656c3bfe4593ea9084a5d09f0173c8f6b7d6229fc7e3f6757ac03089cfa94a7337bbef0456785b79d777b976f5a8259056d2ddcfe0f74d78c304a02bcee0ad8

Download Submit
C:\Windows\SysWOW64\directx\websetup\dxupdate.cab

Filesize
98KB

MD5
4afd7f5c0574a0efd163740ecb142011

SHA1
3ebca5343804fe94d50026da91647442da084302

SHA256
6e39b3fdb6722ea8aa0dc8f46ae0d8bd6496dd0f5f56bac618a0a7dd22d6cfb2

SHA512
6f974acec7d6c1b6a423b28810b0840e77a9f9c1f9632c5cba875bd895e076c7e03112285635cf633c2fa9a4d4e2f4a57437ae8df88a7882184ff6685ee15f3f

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
243B

MD5
135f36c496de6829050cc982ad175858

SHA1
8ff30ef9fe31963f07fa256d83ee13252238da18

SHA256
c9ebd0c038382084726724ee5203e547bb79c34a99e95bb4e1e9b4bfd8def35d

SHA512
357d286aff5b36796ef3f22148e334ae48cf473541954c8b25730ec8853a839b82419876bb53b2bb6455aab8b270bb83153bd4f8689fa9f89d865d7697f6b085

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
384B

MD5
72c4b844b58739d4beea0cfe989aac93

SHA1
ea101cfec6a65a8214c93693ed9927555fdb785f

SHA256
df533eb9e0dbc2d1822963a5de20a7fecf8539e7308eb542653e6dcae9c82bb9

SHA512
52697de937dcef3ff261c4b32c840263221af51939b95094ab3996dd0d9b3a55eac3449ca23b78116086c50e0e0f58bc07c291a12cd8762e0033d735f5d66983

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
525B

MD5
a2f81d61adb271cf23e42c94e7aad855

SHA1
c5565b10b6292a73905902caf2d6b4e1e2f77569

SHA256
97d97b1c7f27857c71ad255d8127d6aee07ac9d9ff89cf26122d2b67725245dd

SHA512
017d88238780208ad5b449dd33410fcf00786e9c36190cbdb411f2859937dadb7739071a3f5a11787a18a20076f43bdc407586f39714ba902c6fb438e22fa811

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
666B

MD5
4d508ab9e761666446ed75d10a9952c4

SHA1
447b9463666058890903a712e48080bcccd3cf92

SHA256
f62e34af76dd829b4fa111ec5fd14ccf7223e8d8be149ba08c9fbdccd822af91

SHA512
750ac58f0c42f37fcde4a931f350a1f0a7606165b8904cb475aebe2a3079cdc848a21d686bdd1be9f77ea5b6c84be05758cad2f0b20a2843105412c0c7c72637

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
701B

MD5
452a2a41dca75a2993494a82995193b5

SHA1
9efbbf3210012cedbaee4b4ddf4af842750622d8

SHA256
feb3c1ea7c6485de137868ae7c3959dc88a16982d3c7ae59c1e0cb654d68db5a

SHA512
c0752d0555510c56d8b459c266cf4e09f04d52ade4f2415b6ba6f822eab59ba50956a9a34019eed8623a80aa32a0f8f86445bee80d0a3205d9d0f30809185695

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
846B

MD5
3109026ab67d6498a40ee6b9476e3dbd

SHA1
c3001686c01c5f3faa0217496a281e958507d7ec

SHA256
f3b914fc3e918ae6f11f166cc1b4f9612d92d4dfc92603e617204b0a7feafc63

SHA512
faa693d6c1a92e3eb7f19b93b1a06d36aa6128a5001cb79cc961bd624751bd6d079b17a7f9ed3e2083a95f6af265e140e182221c5c70ae08ebc0fd1c736a2671

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
1KB

MD5
408cca21957bb22716b5d605a9c51bd5

SHA1
a5dbe2a7163afb41f1f615cc0c0d098c60fdfcb5

SHA256
6b38ba9035194a880c460dfd5d48569d6bfedfa099a9931332e79626abf042ee

SHA512
b36c8940e6f3a3d92361d6825da8fa685350b891188c0d3d0a783dd3d461423f1e1bd80d861d2d76300aaf7ea77e17a0fe22b6bcc2f11ab6126cfce34072c9bc

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
1KB

MD5
57fb131645b8289383e2e621f4c28104

SHA1
71abb1cc810974e75ff084595e16f46bd88da653

SHA256
39b61c1336e7bb95487dccaad47d33cff953589c17f51496a95342fcb17f148e

SHA512
0178f994bce78ef5adbcea90c994a6c7d99813e256f3f86e9559e306f3b795f6f506bd4b78a13a117b4afed36c4b6889b36ffc3c09fab69f94aa0f2404593390

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
1KB

MD5
5799df5b88730847dd657787d59d6878

SHA1
a1bdcbd884c81e29b7e5bc256ecfa0055d8bdefb

SHA256
f064b65618e11a6fef9253c955c36c8af441113aa7609822f2a02bf48c0ee3ff

SHA512
5e0c140dae074b27c81e652cb676855e78f32f6d9a5379654d9106a65f874dda7cb80e5dd8752a25f0c5ddaeae35bbdd43a967af182c79dd5de3636b64d1eba4

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
1KB

MD5
e486b073c53f34619c1ac37085c2b87c

SHA1
541ce1e969c78f7961328dc71c245a15dc093e55

SHA256
82cc97bae6609440ac13a3ea1d322213e157994e34ae69b007a84415f05500f7

SHA512
fad33678ce3918f295d97efd47983e1f727e704951eab97d64d20bd157fb85de4120ef80a6fdff328c291c73a2f59963a4d91f5f00331e77fb02a0b3ee1e8a31

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
1KB

MD5
4e4d61433c4a9738d0eba44631c0fe45

SHA1
ae7b7b6b8d0fd4be884cf4c3d0c6a734c6700042

SHA256
95717606d873b60d96be315921e2dc8e0d33d7e520e544cb68ccfa9d01b77afd

SHA512
dfd088f2cab087e1c8e3bd7c5fd41e98a9ed22c89d7d690c0ea1f65444cd5dda6c8337299afeb1b0ea691a52e1f269a6a023a86c7a7f7d76145b12ea3d1c8a7f

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
1KB

MD5
75c298fffffead333977b3de3a1aca0f

SHA1
a4bf7d4983156e237ff32378e17134d10b7776a5

SHA256
9b4cedff757ea37208b0f4758b71f07f8f00e8b7d56ee2123e2d196ba2e3302f

SHA512
f6185feff44f4db3b7097a800e3b68ee0f4dc73b253f99f5cdb88435840dd0c4ff64774a7b0c54eb11f085c08767d106c57c46e8cf1d6604330f915e80051ce2

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
2KB

MD5
6a0ffec5520dd9526d53fb206e92a225

SHA1
3935892003d2c3f6e87c24309515d1668e07dda0

SHA256
13f74a30aba7102226de97797839832b44d9987ce7d23c2c711903a5709b25d4

SHA512
63267ddca50a97491d91cdced635dbbdcbb335cd92c831e32c3e1710c71ef8558d332da0496276c2630ce5f4d840f7eec99788a433a768ab543a6c0affa0d6fc

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
2KB

MD5
f11b4f2d172ec7cfc259e0de1fc5c69a

SHA1
63d37b5927bf9dea71b31fd58d2c1f31628af88b

SHA256
a8d4f0c54e8af1e6e537f0510983cd2cf477a698c84e270b1a778aa5093be456

SHA512
fe86bb3d3c66f2214b902bad4fc262505074dd7a6e212d18dd754e0f7f5f1856614afa57d037245ae861adb9dca2bbb937d3d5ce6e20c3477f716a417458471c

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
2KB

MD5
eb7ec90198bca9379dfe61238e3ee3ef

SHA1
f1306037f93e46233fea7fc931b50ead1109b974

SHA256
830f7d089d575cbfc227a0db375196a7d8d5078af42884e4582660bb2a4bb767

SHA512
1400655e709aaed964be9824fee4b6c4802c107295b377e92f8fa383ab35dba4251927672d35c0c8eeaff1bd595aa41c2157de604531a2603e485bf86866f498

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
2KB

MD5
1867f3d1b1ecc40fd4dfb919e6886171

SHA1
8986290180ab8b0591ded70c8d9fd7f517418281

SHA256
6086fba7481b45b503e2d892ff5dad13f5fb347374919a2764371b1efef49099

SHA512
c0fd728362abe97fca294e43988a64d51fc22ab216814c34a626946a4b69ca2f40f5f6431b3e35509cc0dd9b0e219524209eff2f01907ade98289aa19ac21ef8

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
2KB

MD5
5344f87c9930997120805a9d0291edfa

SHA1
0f2d31aacb69ee9d1cefebac09a9ae7cafda77b7

SHA256
69ff2b62fc11ad9039c0e5f01b918f022bb624d29a4766f448f71d71a33dfb86

SHA512
c881280c51e4220061ca3a2c21ad5021794e47641c00e0eec25c818f5d71e42ab5bf1798ce2d178c61be67c594af31ae32b0bedd0938323c72d65cba66eff68b

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
2KB

MD5
37ccc8c20252722143b2e0fc1111d185

SHA1
200fb044220709686b3f86b165a5e9a8df2bd018

SHA256
95c5c1cd8a611b120d9679dee736734d5577f16b55b41de8bff677b5f9bc671a

SHA512
6c11320e6676daac19db7bf182b7e82ac0cb9340629d52772a8b4007e635c6f6a811d68f7c87ca29be6d40358ffb1e90aa0c11638bd0ef9a8d91d6b57486c378

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
2KB

MD5
fde094f7a3483e5f43b8c775f6bb18ec

SHA1
000d48cf8547bc7371fc0cc854156840c391f615

SHA256
3f6c60f017ac9e5f8019e41e11367843a5bbb1c80c32c5e9cf16b8a0fab67d5d

SHA512
8c510e0be0e9bbfd49186ccc6f2b142aaca448905f5ddb6bbbafa315f98793ed79b589934d6c1defb8106250ffc1988fafaf1fb166be3b950cc4385a01d15aa4

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
3KB

MD5
470705fd47fb6cc7fccd65e4cb8382f6

SHA1
d2966f90572a01b49ab314aea0beebd2395c5765

SHA256
35b2248915becaea7f1fea2fdde13aa5d71d6e762a7eed1d275f88f8b34449b5

SHA512
76486623db3452fa6ca37f1f5e8cfb718c58e15c9a93fa21f34730d49f021fc818d08fe363a5e0e546cd55ed1e6d7cf488d91fe7d97b040fa3769a8c24ab6adb

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
3KB

MD5
2b821c74d2e062c62994d7c95b079ddd

SHA1
63187467c9079b80cc4a052ef2d163e6884642d7

SHA256
8e781f69d16f7836dfadd36f83c68c601580bec6de797d4ee64a48737d31e5ae

SHA512
f8cc702053f37298302fe5829e55ac9186de318a873451cb80a5455c1eaa98798bb8a76b43fb2a5740addfd51957f25e87f33386b364dc5125cc36c43df01083

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
3KB

MD5
ca0f547f93a1ecf1d4649534ed5066c0

SHA1
cfe67c10e709ab816b75d9542a687744957683d8

SHA256
d3a15b921d27ceb8d84477506f951082fbbd796e0fde794aedf2211628cfa955

SHA512
061605059d113145b39cf72dc810f42de9b28dd28c4f3e904937a43b8d584e570501563973a37ed5137c9ad810c30d162de2850b15a61bbc3127854c4347e13d

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
3KB

MD5
c94a1fbaf4aeaf2754915404b5e95132

SHA1
9f00b3f29324b4954431a80664fa62fd4b977e58

SHA256
bc44383f783cede34268bb60584f5bbe3be0d2fbb6ba578f439a698690521af8

SHA512
6c797bed4897c693efdd57fe9e716c28bd89d88ef7be1f8167051d4bcfce4cc2a86279851d977a14fdee13a8a0c609f5ad032bc2f8aa642d3c21b87473a95502

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
3KB

MD5
b84daaaa7bdb4612d3e2e4ca709d5c9b

SHA1
72c359a135b7d2fb4c0ff615f6be62fc413f15e0

SHA256
76b8c4e67162b29ba60b10eda0678f30508ab4a4a9580cf65ba139fcad1205b0

SHA512
845628e1504a56f3a1183ff9da99a911fc071fc4066f2a8d5fd62575a1c4df2db888e25512aae1938b8415d0f82a81ddc9a3bb13714ef92c6a4b0798975851d7

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
3KB

MD5
1eed8e201bb4daee24328f2166ef217d

SHA1
d292bf2c78ca085a51e5278a216af4baa71ab712

SHA256
696b358cad689b95026aedf733f462fdf565e21bb41b23652fba21216ed78d43

SHA512
a1a5a8a0a484c5f80a9b1c5ec6ffe7fc3218c84a66915ee4efd4c06018dbf17f1f4ce1b8c36336c95df20259387be3f5a1f0c3ef6efae1062728b09f877a8288

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
3KB

MD5
4d51275c98cd0919a5dc0c6c2bf87f24

SHA1
f25979d34dd00dab6a8702e68234823de685e56f

SHA256
cb58110c6d731f63ec93d03536358ad0b4ad2d65a8cab2e9f7a62266cb5a1ddc

SHA512
0e78f62e800e62081c922f5d2c786bd02f7f0875a08a26b86e4810c116eb411909dc271ad0732b44f6acc0bd06b56b745e635a32bf1c4d1266a97133d557b4e0

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
4KB

MD5
6460e2c4de84713242c3154059b4e12c

SHA1
bf58b021238b18f37dc6d18384db94534f9edf6a

SHA256
57bc21b86044daf245e01b6e546994ae1ae05a5d7f9c4bf4f82f6f3435935514

SHA512
073b7cf4c06c2d7b54cfd6f6b43d32370f58d60aed48a2fad4a611540187702c3eac88a865f8afc0cda8cf3dccee4156fc38075145fbd4ccc7997e3685a941c9

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
111B

MD5
d6f81567baaf05b557d9bc6c348cb5f1

SHA1
0c840165fcd34d996c85b6b44b00c7206bf772b6

SHA256
e60413bec64775bf1933ef4f9673c8bcfbe0ce71e950fd589bbd14c0f9a00359

SHA512
09b84cc9199592821d7de38cbe24332097b276bb25b6d09f7dcdc3a6b17369ee944a6f8120f13ea6a5c15eb759a90d7ce29cc845a5c0680ff2fa53e2623171e2

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
137B

MD5
cec960807fa5bec11ad4a31c3512da4d

SHA1
a3ac60a3518747d3bbead5edfd17e155cf7ce9f7

SHA256
f960075a7b1c2590e18700f3230f7baea9aced3e6ba5dc93dac193027b5cec48

SHA512
2da2d935f9b96bd36536f3a7a494775c8ed9bfef6538ffe66307b73cd5c82210fc43bbe6706d74d99dd5b924fb78a0d1beceee8c0e22d91e17b1346dd85690ec

Download Submit
C:\Windows\msdownld.tmp\AS5A6440.tmp\Aug2007_d3dx10_35_x86.cab

Filesize
781KB

MD5
ddc4af0d53b477e5af77942e7118b66e

SHA1
81ad8201dcf653a6e977c4506a274d0bac12643c

SHA256
9536166ee7cc1100cfe24e01532e8e4deed6baa838b4c025581f2ca046a25915

SHA512
1e082d7e7855bc0af6ec09d4a69fd4a1b0a3a31e4de8faa52fa0bdcd601c501ada6216dddb83058f37ab4a371068e0f344bdf42f2551943be19bd719d99ba93c

Download Submit
C:\Windows\msdownld.tmp\AS5B0C95.tmp\Apr2006_MDX1_x86.cab

Filesize
898KB

MD5
c0fb3fbba00268b9992fd0bf2e2d2efd

SHA1
fa6ba1c5e193353f01b816fe782ed296ae7814dc

SHA256
90e08fc3b98267756c6017f4d37b157eba3586c262474d1556b21d9c35d84da2

SHA512
00d23eb3c3312170e4a6a2992721255e307085f6f128cd3203d6e9b16eec7f0ec54b8a3fc09a5be51da2225b55fd89b13c278e25853771e414d0a5a93e3a3b0f

Download Submit
memory/4808-3116-0x0000000000400000-0x000000000179D000-memory.dmp

Filesize
19.6MB

Download
memory/4808-3001-0x0000000000400000-0x000000000179D000-memory.dmp

Filesize
19.6MB

Download