hxxps://drive[.]google[.]com/file/d/14KxixzUCc1IisKStNtUM20xZWmZj6O2-/view?usp=drive_link

Resubmissions

12-08-2024 12:29

240812-pn3lba1dlq 7

12-08-2024 12:26

240812-pmbq7s1cqn 6

Analysis

max time kernel
348s
max time network
354s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
12-08-2024 12:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://drive.google.com/file/d/14KxixzUCc1IisKStNtUM20xZWmZj6O2-/view?usp=drive_link

Score

7^/10

discovery persistence privilege_escalation

Malware Config

Signatures

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 55 IoCs

pid	Process
4840	NFR4_setup_pl.tmp
3384	dxsetup.exe
3588	infinst.exe
2400	infinst.exe
3392	infinst.exe
4472	infinst.exe
744	infinst.exe
3272	infinst.exe
2572	infinst.exe
3872	infinst.exe
2088	infinst.exe
4216	infinst.exe
3048	infinst.exe
3588	infinst.exe
4216	infinst.exe
256	infinst.exe
2964	infinst.exe
4548	infinst.exe
5108	infinst.exe
3008	infinst.exe
2692	infinst.exe
1964	infinst.exe
660	infinst.exe
3580	infinst.exe
4404	infinst.exe
3444	infinst.exe
852	infinst.exe
4660	infinst.exe
660	infinst.exe
3624	infinst.exe
2776	infinst.exe
4388	infinst.exe
1888	infinst.exe
4684	infinst.exe
3100	infinst.exe
1540	infinst.exe
3272	infinst.exe
4640	infinst.exe
1672	infinst.exe
4860	infinst.exe
2288	infinst.exe
5040	infinst.exe
1588	infinst.exe
2508	infinst.exe
2864	infinst.exe
3252	infinst.exe
4280	infinst.exe
2440	infinst.exe
4012	infinst.exe
3244	infinst.exe
4024	infinst.exe
3728	infinst.exe
4392	infinst.exe
2800	infinst.exe
1824	nfr4.exe

Loads dropped DLL 64 IoCs

pid	Process
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3256	regsvr32.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
3384	dxsetup.exe
2648	regsvr32.exe
3384	dxsetup.exe
2804	regsvr32.exe
2804	regsvr32.exe
3384	dxsetup.exe
2732	regsvr32.exe
3384	dxsetup.exe
2832	regsvr32.exe
2832	regsvr32.exe
3384	dxsetup.exe
1264	regsvr32.exe
3384	dxsetup.exe
3764	regsvr32.exe
3384	dxsetup.exe
2732	regsvr32.exe
3384	dxsetup.exe
3028	regsvr32.exe
3028	regsvr32.exe
3384	dxsetup.exe
5000	regsvr32.exe
3384	dxsetup.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops desktop.ini file(s) 2 IoCs

description	ioc	Process
File created	C:\Windows\assembly\Desktop.ini	dxsetup.exe
File opened for modification	C:\Windows\assembly\Desktop.ini	dxsetup.exe

Enumerates connected drives 3 TTPs 1 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\E:	start.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
1	drive.google.com
5	drive.google.com

Drops file in System32 directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\XAPOFX1_2.dll	dxsetup.exe
File created	C:\Windows\system32\SET187C.tmp	infinst.exe
File opened for modification	C:\Windows\system32\SETF3BD.tmp	infinst.exe
File opened for modification	C:\Windows\system32\x3daudio1_0.dll	infinst.exe
File created	C:\Windows\SysWOW64\SET541.tmp	dxsetup.exe
File opened for modification	C:\Windows\SysWOW64\SET11E9.tmp	dxsetup.exe
File opened for modification	C:\Windows\system32\XAPOFX1_2.dll	infinst.exe
File created	C:\Windows\SysWOW64\SETFFF6.tmp	dxsetup.exe
File opened for modification	C:\Windows\SysWOW64\SET6AB.tmp	dxsetup.exe
File opened for modification	C:\Windows\SysWOW64\d3dx10_36.dll	dxsetup.exe
File opened for modification	C:\Windows\SysWOW64\D3DX9_37.dll	dxsetup.exe
File created	C:\Windows\SysWOW64\SET112C.tmp	dxsetup.exe
File opened for modification	C:\Windows\SysWOW64\SET12F5.tmp	dxsetup.exe
File opened for modification	C:\Windows\SysWOW64\d3dx9_36.dll	dxsetup.exe
File opened for modification	C:\Windows\SysWOW64\SET1559.tmp	dxsetup.exe
File created	C:\Windows\SysWOW64\SET17A2.tmp	dxsetup.exe
File created	C:\Windows\SysWOW64\SET892.tmp	dxsetup.exe
File created	C:\Windows\system32\SET16D6.tmp	infinst.exe
File opened for modification	C:\Windows\system32\SETF10D.tmp	infinst.exe
File opened for modification	C:\Windows\system32\SET31E.tmp	infinst.exe
File opened for modification	C:\Windows\SysWOW64\SETA3C.tmp	dxsetup.exe
File opened for modification	C:\Windows\SysWOW64\D3DCompiler_34.dll	dxsetup.exe
File opened for modification	C:\Windows\SysWOW64\SET98E.tmp	dxsetup.exe
File created	C:\Windows\SysWOW64\SETEE4E.tmp	dxsetup.exe
File created	C:\Windows\SysWOW64\SET540.tmp	dxsetup.exe
File created	C:\Windows\system32\SET8BD.tmp	infinst.exe
File opened for modification	C:\Windows\SysWOW64\SETD9D.tmp	dxsetup.exe
File opened for modification	C:\Windows\SysWOW64\SETEE4E.tmp	dxsetup.exe
File created	C:\Windows\system32\SETF1F7.tmp	infinst.exe
File opened for modification	C:\Windows\SysWOW64\SETC3.tmp	dxsetup.exe
File opened for modification	C:\Windows\SysWOW64\SETF13F.tmp	dxsetup.exe
File opened for modification	C:\Windows\system32\SET1231.tmp	infinst.exe
File created	C:\Windows\SysWOW64\SETF13F.tmp	dxsetup.exe
File created	C:\Windows\SysWOW64\SETF259.tmp	dxsetup.exe
File opened for modification	C:\Windows\system32\X3DAudio1_3.dll	infinst.exe
File created	C:\Windows\system32\SETFCD5.tmp	infinst.exe
File opened for modification	C:\Windows\SysWOW64\x3daudio1_1.dll	dxsetup.exe
File opened for modification	C:\Windows\system32\D3DCompiler_36.dll	infinst.exe
File created	C:\Windows\system32\SETAB0.tmp	infinst.exe
File opened for modification	C:\Windows\SysWOW64\SETF025.tmp	dxsetup.exe
File opened for modification	C:\Windows\system32\d3dx9_28.dll	infinst.exe
File opened for modification	C:\Windows\SysWOW64\SETFF67.tmp	dxsetup.exe
File opened for modification	C:\Windows\SysWOW64\d3dx10.dll	dxsetup.exe
File created	C:\Windows\SysWOW64\SETD8C.tmp	dxsetup.exe
File opened for modification	C:\Windows\SysWOW64\d3dx9_26.dll	dxsetup.exe
File opened for modification	C:\Windows\SysWOW64\SETFCA3.tmp	dxsetup.exe
File opened for modification	C:\Windows\system32\SET9D5.tmp	infinst.exe
File opened for modification	C:\Windows\system32\xactengine2_1.dll	infinst.exe
File created	C:\Windows\SysWOW64\SET2BB.tmp	dxsetup.exe
File opened for modification	C:\Windows\SysWOW64\SET7B7.tmp	dxsetup.exe
File opened for modification	C:\Windows\system32\X3DAudio1_2.dll	infinst.exe
File created	C:\Windows\system32\SET109B.tmp	infinst.exe
File opened for modification	C:\Windows\system32\XAudio2_2.dll	infinst.exe
File opened for modification	C:\Windows\system32\d3dx9_26.dll	infinst.exe
File opened for modification	C:\Windows\system32\d3dx9_27.dll	infinst.exe
File created	C:\Windows\SysWOW64\SETFE0E.tmp	dxsetup.exe
File opened for modification	C:\Windows\SysWOW64\xactengine3_0.dll	dxsetup.exe
File created	C:\Windows\system32\SET17CF.tmp	infinst.exe
File opened for modification	C:\Windows\SysWOW64\SETF259.tmp	dxsetup.exe
File created	C:\Windows\system32\SETF60E.tmp	infinst.exe
File opened for modification	C:\Windows\system32\D3DX9_39.dll	infinst.exe
File created	C:\Windows\system32\SET186B.tmp	infinst.exe
File opened for modification	C:\Windows\SysWOW64\xactengine2_8.dll	dxsetup.exe
File created	C:\Windows\system32\SETE0B.tmp	infinst.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-6LF2L.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\redist\is-DOM1T.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\sfx\is-JCDB7.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\rims\is-52JB6.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa2\is-FE0FG.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa3\is-PASRI.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa3\is-D0J3H.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-PU3VH.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\data\tire\mod\is-8OJ4G.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\garaz\is-IM46M.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\rims\is-H6PAV.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\redist\is-C4AHP.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\redist\is-JEHT7.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa1\is-OHK6O.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa1\is-J5QKE.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-EF9QF.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\sfx\is-3327O.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\rims\is-NLSGL.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa1\is-L725E.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\sfx\is-7E124.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\susp\is-QNJDR.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa1\is-7ECME.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-A6IDQ.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\redist\is-H4RF9.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\sfx\is-7L4PH.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\data\engine\is-CB8CR.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\data\rim\is-SJJMJ.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\data\tire\mod\is-779QN.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\sfx\is-TI711.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-1CGRA.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\sfx\is-AFVGQ.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Textures\2d\gears\auto\is-4V9GS.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\cars\is-H3T8B.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\menu\is-DO2I8.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-2KRRG.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\data\global\is-A0CQR.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\data\tire\mod\is-25B3M.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\obj\is-SHMLG.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\rims\is-HLV4H.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\rims\is-LLKR3.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\ai\is-CPFDM.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\data\diff\is-E5QUK.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\data\diff\is-4U2P0.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Textures\2d\gears\5\is-O0N7D.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-RJ59E.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-2UHRI.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-2SO6R.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa1\is-CK0R4.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa1\is-0TCSJ.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa3\is-VS8ST.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa2\is-2SK0E.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\redist\is-I2L7N.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\sfx\is-D7N72.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Textures\gui\is-57TMQ.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\data\body\mod\is-571AM.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\cars\is-0K3MG.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa2\is-D7VAA.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\rims\is-N2HUM.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Textures\is-4DQLP.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\redist\is-CG0I7.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\data\susp\is-OBA0Q.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\obj\is-S1KH0.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\redist\is-EF445.tmp	NFR4_setup_pl.tmp
File created	C:\Program Files (x86)\Play\Need for Russia 4\Models\garaz\is-KOF4F.tmp	NFR4_setup_pl.tmp

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2909.0\Microsoft.DirectX.Direct3DX.xml	dxsetup.exe
File created	C:\Windows\assembly\GACLock.dat	dxsetup.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2910.0\Microsoft.DirectX.Direct3DX.xml	dxsetup.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File created	C:\Windows\Fonts\is-K2UO5.tmp	NFR4_setup_pl.tmp
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File created	C:\Windows\assembly\tmp\ZJ7UBF2L\Microsoft.DirectX.Direct3DX.dll	dxsetup.exe
File opened for modification	C:\Windows\assembly\tmp\TUHHWS6X\__AssemblyInfo__.ini	dxsetup.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2910.0\Microsoft.DirectX.Direct3DX.dll	dxsetup.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2903.0\Microsoft.DirectX.Direct3DX.xml	dxsetup.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2904.0\Microsoft.DirectX.Direct3DX.dll	dxsetup.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File created	C:\Windows\assembly\tmp\EXYEUXLK\Microsoft.DirectX.Direct3DX.dll	dxsetup.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2907.0\Microsoft.DirectX.Direct3DX.dll	dxsetup.exe
File opened for modification	C:\Windows\assembly\tmp\5HP2TCEY\__AssemblyInfo__.ini	dxsetup.exe
File created	C:\Windows\assembly\tmp\83O2AQBT\Microsoft.DirectX.DirectDraw.dll	dxsetup.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\assembly\tmp\ZJ7UBF2L\__AssemblyInfo__.ini	dxsetup.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2911.0\Microsoft.DirectX.Direct3DX.dll	dxsetup.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2904.0\Microsoft.DirectX.Direct3DX.xml	dxsetup.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File created	C:\Windows\assembly\Desktop.ini	dxsetup.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2905.0\Microsoft.DirectX.Direct3DX.dll	dxsetup.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2906.0\Microsoft.DirectX.Direct3DX.xml	dxsetup.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\assembly\Desktop.ini	dxsetup.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3DX.xml	dxsetup.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\assembly\tmp\R1XFV3AZ\__AssemblyInfo__.ini	dxsetup.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectDraw.xml	dxsetup.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2907.0\Microsoft.DirectX.Direct3DX.xml	dxsetup.exe
File opened for modification	C:\Windows\assembly\tmp\T0SHZK8Q\__AssemblyInfo__.ini	dxsetup.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectInput.xml	dxsetup.exe
File opened for modification	C:\Windows\assembly\tmp\EPP8DOA9\__AssemblyInfo__.ini	dxsetup.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\assembly\tmp\5ZY4HSUI\__AssemblyInfo__.ini	dxsetup.exe
File opened for modification	C:\Windows\assembly\tmp\QPGYXX48\__AssemblyInfo__.ini	dxsetup.exe
File opened for modification	C:\Windows\assembly\tmp\L7BLPM4B\__AssemblyInfo__.ini	dxsetup.exe
File created	C:\Windows\assembly\tmp\TUHHWS6X\Microsoft.DirectX.Direct3DX.dll	dxsetup.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File created	C:\Windows\Fonts\is-N2R9I.tmp	NFR4_setup_pl.tmp
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Diagnostics.xml	dxsetup.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File created	C:\Windows\Fonts\is-ID5Q5.tmp	NFR4_setup_pl.tmp
File created	C:\Windows\assembly\tmp\3MZSQYLG\Microsoft.DirectX.Direct3DX.dll	dxsetup.exe
File created	C:\Windows\assembly\tmp\R1XFV3AZ\Microsoft.DirectX.Direct3D.dll	dxsetup.exe
File created	C:\Windows\assembly\tmp\EPP8DOA9\Microsoft.DirectX.DirectSound.dll	dxsetup.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2906.0\Microsoft.DirectX.Direct3DX.dll	dxsetup.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 6 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	start.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	NFR4_setup_pl.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	NFR4_setup_pl.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	dxsetup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	nfr4.exe

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{e180344b-ac83-4483-959e-18a5c56a5e19}\InProcServer32\ThreadingModel = "Both"	dxsetup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TV3D65.TVAtmosphere\CLSID\ = "{D69BEE79-1B38-4AE5-BF20-98CB5835E845}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TV3D65.TVMiniMesh.1\ = "TVMiniMesh Class"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TV3D65.TVScreen2DImmediate.1\CLSID\ = "{59560338-904E-4422-AFB0-4E52A4DCEE2F}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FE3A9B55-FF4A-4331-9930-EC5259F5E758}\ = "ITVAtmosphere"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C343515B-13AB-4A32-9310-15E3851074BF}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{69E72BA1-6F7B-4430-9D40-985834623B37}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77c56bf4-18a1-42b0-88af-5072ce814949}	dxsetup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1A2233C5-3091-458D-BC7C-FE5A14AE0985}\VersionIndependentProgID	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E0A7B778-335C-40D2-B346-AA957FB02E23}\ = "TVCollisionResult Class"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TV3D65.TVMiniMesh\ = "TVMiniMesh Class"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{37CF7CDA-660E-4309-86E7-B50E59877458}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3C5A317E-AD5E-4DF2-A50A-24325F360D0E}\TypeLib\Version = "1.0"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{D4B74B2B-81D5-476A-8C1D-15D78F665460}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{51B0147B-25B8-4C5B-86C0-E383575EDF8D}\TypeLib\Version = "1.0"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8CC9117D-DCF6-4BB3-9D4E-4F28C52EA6DB}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{b802058a-464a-42db-bc10-b650d6f2586a}\InProcServer32	dxsetup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4c5e637a-16c7-4de3-9c46-5ed22181962d}\InProcServer32\ThreadingModel = "Both"	dxsetup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TV3D65.TVMesh.1\CLSID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TV3D65.TVMiniMesh.1	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3b80ee2a-b0f5-4780-9e30-90cb39685b03}\InProcServer32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3D1E0DD3-44C9-4988-9437-D0FBE5CD5E02}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TV3D65.TVShader\CLSID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1138472b-d187-44e9-81f2-ae1b0e7785f1}\InProcServer32	dxsetup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E0A7B778-335C-40D2-B346-AA957FB02E23}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{731BA6E8-147C-45F0-D0D4-74BF56ADB756}\Programmable	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TV3D65.TVScreen2DText\CurVer\ = "TV3D65.TVScreen2DText.1"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3D1E1975-8999-471D-95B9-F555521B23BB}\TypeLib\Version = "1.0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TV3D65.TVCamera.1\CLSID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TV3D65.TVPackage\CurVer	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3CE3AAEE-2003-46D6-85E9-0753DC25C0E7}\InprocServer32\ = "C:\\Windows\\SysWow64\\tv3d65.dll"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{77c56bf4-18a1-42b0-88af-5072ce814949}\InProcServer32\ThreadingModel = "Both"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{e21a7345-eb21-468e-be50-804db97cf708}\ = "XAudio2"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{94c1affa-66e7-4961-9521-cfdef3128d4f}\ = "XACT Engine"	dxsetup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{131AB6E8-147C-45C0-A0D4-75BC56ABB758}\ = "TVActor Class"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{9A8C824F-587F-4191-8049-1E31BC539408}\1.0	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5BE1F497-35E4-4EE1-AD3B-96731DEC0573}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3FEEF5FA-1B44-44AE-AB70-D5BCE5361556}\ = "ITVDeviceInfo"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{0E3D4125-6CD6-4067-82AC-386D8A308D85}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TV3D65.TVAI\CurVer	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A6527B11-AA59-4945-9653-DA85FC056579}\ProgID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{003243E4-4D83-41FB-9781-B5A97A218FF8}\VersionIndependentProgID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{475BB49B-C090-4BC2-8093-3B7188A511AD}\ProgID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A3F9FE29-1555-4E04-865B-867BAC9251E6}\Programmable	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{533BA3E8-827C-73C0-D0D2-74BF46ABB753}\InprocServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{59560338-904E-4422-AFB0-4E52A4DCEE2F}\TypeLib\ = "{9A8C824F-587F-4191-8049-1E31BC539408}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TV3D65.TVScreen2DImmediate\CurVer	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TV3D65.TVCamera.1\ = "TVCamera Class"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{DFC351C9-BBD3-43ED-924B-24FC9E598BEB}\ProgID\ = "TV3D65.TVInputEngine.1"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{85AB0909-7928-46FD-B42C-4444D3F500F7}\InprocServer32\ = "C:\\Windows\\SysWow64\\tv3d65.dll"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{533BA3E8-827C-73C0-D0D2-74BF46ABB753}\ProgID\ = "TV3D65.TVPackage.1"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TV3D65.TVParticleSystem\CurVer\ = "TV3D65.TVParticleSystem.1"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TV3D65.TVPhysics.1\ = "TVPhysics Class"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TV3D65.TVRenderSurface\CLSID\ = "{FAD251C4-885D-41F7-86BD-5503056BAE00}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{560B698D-1DBA-4999-945F-F7505D1D01DB}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{65d822a4-4799-42c6-9b18-d26cf66dd320}	dxsetup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{e180344b-ac83-4483-959e-18a5c56a5e19}\InProcServer32\ = "C:\\Windows\\SysWow64\\XAudio2_3.dll"	dxsetup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TV3D65.TVLandscape.1\CLSID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{bc3e0fc6-2e0d-4c45-bc61-d9c328319bd8}\InProcServer32	dxsetup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{77c56bf4-18a1-42b0-88af-5072ce814949}\InProcServer32\ = "C:\\Windows\\system32\\xactengine2_8.dll"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TV3D65.TVAtmosphere\CLSID	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{003243E4-4D83-41FB-9781-B5A97A218FF8}\VersionIndependentProgID\ = "TV3D65.TVGameControllers"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3FA1C006-1E69-4C9F-B776-742B35660B61}\ = "TVParticleSystem Class"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TV3D65.TVPhysics.1\CLSID	regsvr32.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\NFR4.ISO:Zone.Identifier	msedge.exe

Suspicious behavior: EnumeratesProcesses 16 IoCs

pid	Process
3572	msedge.exe
3572	msedge.exe
2664	msedge.exe
2664	msedge.exe
2764	identity_helper.exe
2764	identity_helper.exe
5096	msedge.exe
5096	msedge.exe
5084	msedge.exe
5084	msedge.exe
4628	msedge.exe
4628	msedge.exe
392	msedge.exe
392	msedge.exe
1856	msedge.exe
1856	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1824	nfr4.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
392	msedge.exe
392	msedge.exe

Suspicious use of AdjustPrivilegeToken 13 IoCs

description	pid	Process
Token: SeBackupPrivilege	4364	vssvc.exe
Token: SeRestorePrivilege	4364	vssvc.exe
Token: SeAuditPrivilege	4364	vssvc.exe
Token: SeBackupPrivilege	4280	srtasks.exe
Token: SeRestorePrivilege	4280	srtasks.exe
Token: SeSecurityPrivilege	4280	srtasks.exe
Token: SeTakeOwnershipPrivilege	4280	srtasks.exe
Token: SeBackupPrivilege	4280	srtasks.exe
Token: SeRestorePrivilege	4280	srtasks.exe
Token: SeSecurityPrivilege	4280	srtasks.exe
Token: SeTakeOwnershipPrivilege	4280	srtasks.exe
Token: 33	1260	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1260	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe
392	msedge.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1084	regsvr32.exe
1824	nfr4.exe
1824	nfr4.exe
536	MiniSearchHost.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2664 wrote to memory of 3336	2664	msedge.exe	81
PID 2664 wrote to memory of 3336	2664	msedge.exe	81
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3244	2664	msedge.exe	82
PID 2664 wrote to memory of 3572	2664	msedge.exe	83
PID 2664 wrote to memory of 3572	2664	msedge.exe	83
PID 2664 wrote to memory of 2780	2664	msedge.exe	84
PID 2664 wrote to memory of 2780	2664	msedge.exe	84
PID 2664 wrote to memory of 2780	2664	msedge.exe	84
PID 2664 wrote to memory of 2780	2664	msedge.exe	84
PID 2664 wrote to memory of 2780	2664	msedge.exe	84
PID 2664 wrote to memory of 2780	2664	msedge.exe	84
PID 2664 wrote to memory of 2780	2664	msedge.exe	84
PID 2664 wrote to memory of 2780	2664	msedge.exe	84
PID 2664 wrote to memory of 2780	2664	msedge.exe	84
PID 2664 wrote to memory of 2780	2664	msedge.exe	84
PID 2664 wrote to memory of 2780	2664	msedge.exe	84
PID 2664 wrote to memory of 2780	2664	msedge.exe	84
PID 2664 wrote to memory of 2780	2664	msedge.exe	84
PID 2664 wrote to memory of 2780	2664	msedge.exe	84
PID 2664 wrote to memory of 2780	2664	msedge.exe	84
PID 2664 wrote to memory of 2780	2664	msedge.exe	84
PID 2664 wrote to memory of 2780	2664	msedge.exe	84
PID 2664 wrote to memory of 2780	2664	msedge.exe	84
PID 2664 wrote to memory of 2780	2664	msedge.exe	84
PID 2664 wrote to memory of 2780	2664	msedge.exe	84

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://drive.google.com/file/d/14KxixzUCc1IisKStNtUM20xZWmZj6O2-/view?usp=drive_link
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7fffbb0f3cb8,0x7fffbb0f3cc8,0x7fffbb0f3cd8
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1924,7194824045557504851,17184269406709469893,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1920 /prefetch:2
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1924,7194824045557504851,17184269406709469893,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2368 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1924,7194824045557504851,17184269406709469893,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2776 /prefetch:8
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,7194824045557504851,17184269406709469893,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,7194824045557504851,17184269406709469893,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,7194824045557504851,17184269406709469893,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:1640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,7194824045557504851,17184269406709469893,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,7194824045557504851,17184269406709469893,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5716 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1924,7194824045557504851,17184269406709469893,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1924,7194824045557504851,17184269406709469893,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,7194824045557504851,17184269406709469893,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5524 /prefetch:1
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,7194824045557504851,17184269406709469893,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3900 /prefetch:1
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,7194824045557504851,17184269406709469893,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4652 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,7194824045557504851,17184269406709469893,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5308 /prefetch:1
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1924,7194824045557504851,17184269406709469893,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:5084

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4928

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5096

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4452

\??\E:\start.exe
"E:\start.exe"
1⤵
- Enumerates connected drives
- System Location Discovery: System Language Discovery
PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument E:\APLIKACJE\P\MANUAL\manual.html
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of SendNotifyMessage
  PID:392
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7fffbb0f3cb8,0x7fffbb0f3cc8,0x7fffbb0f3cd8
    3⤵
    PID:1880
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1828,2871757165254466838,13691321082280194490,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1840 /prefetch:2
    3⤵
    PID:484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1828,2871757165254466838,13691321082280194490,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 /prefetch:3
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4628
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1828,2871757165254466838,13691321082280194490,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2560 /prefetch:8
    3⤵
    PID:2240
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,2871757165254466838,13691321082280194490,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
    3⤵
    PID:4556
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,2871757165254466838,13691321082280194490,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
    3⤵
    PID:1176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1828,2871757165254466838,13691321082280194490,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4936 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1856
- \??\E:\Aplikacje\P\NFR4_setup_pl.exe
  Aplikacje\P\NFR4_setup_pl.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:1292
- - C:\Users\Admin\AppData\Local\Temp\is-BR771.tmp\NFR4_setup_pl.tmp
    "C:\Users\Admin\AppData\Local\Temp\is-BR771.tmp\NFR4_setup_pl.tmp" /SL5="$3031C,361972707,151552,E:\Aplikacje\P\NFR4_setup_pl.exe"
    3⤵
    - Executes dropped EXE
    - Drops file in Program Files directory
    - Drops file in Windows directory
    - System Location Discovery: System Language Discovery
    PID:4840
  - - C:\Program Files (x86)\Play\Need for Russia 4\redist\dxsetup.exe
      "C:\Program Files (x86)\Play\Need for Russia 4\redist\dxsetup.exe" /silent
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Drops desktop.ini file(s)
      Drops file in System32 directory
      Drops file in Windows directory
      System Location Discovery: System Language Discovery
      Modifies registry class
      PID:3384
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx9_24_x64.inf
        5⤵
        Executes dropped EXE
        
        PID:3588
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx9_25_x64.inf
        5⤵
        Executes dropped EXE
        
        PID:2400
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx9_26_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        Drops file in Windows directory
        
        PID:3392
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx9_27_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:4472
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx9_28_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        Drops file in Windows directory
        
        PID:744
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx9_29_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        Drops file in Windows directory
        
        PID:3272
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe XACT_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:2572
    - - C:\Windows\system32\regsvr32.exe
        
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_0.dll
        5⤵
        Loads dropped DLL
        
        PID:3256
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx9_30_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:3872
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe XACT2_1_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        Drops file in Windows directory
        
        PID:2088
    - - C:\Windows\system32\regsvr32.exe
        
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_1.dll
        5⤵
        Loads dropped DLL
        
        PID:2648
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe xinput1_1_x64.inf, Install_Driver
        5⤵
        Executes dropped EXE
        Drops file in Windows directory
        
        PID:4216
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe XACT2_2_x64.inf
        5⤵
        Executes dropped EXE
        
        PID:3048
    - - C:\Windows\system32\regsvr32.exe
        
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_2.dll
        5⤵
        Loads dropped DLL
        
        PID:2804
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe xinput1_2_x64.inf, Install_Driver
        5⤵
        Executes dropped EXE
        Drops file in Windows directory
        
        PID:3588
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe XACT2_3_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        Drops file in Windows directory
        
        PID:4216
    - - C:\Windows\system32\regsvr32.exe
        
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_3.dll
        5⤵
        Loads dropped DLL
        
        PID:2732
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx9_31_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in Windows directory
        
        PID:256
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe XACT2_4_x64.inf
        5⤵
        Executes dropped EXE
        
        PID:2964
    - - C:\Windows\system32\regsvr32.exe
        
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_4.dll
        5⤵
        Loads dropped DLL
        
        PID:2832
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx9_32_x64.inf
        5⤵
        Executes dropped EXE
        
        PID:4548
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx10_00_x64.inf
        5⤵
        Executes dropped EXE
        
        PID:5108
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe XACT2_5_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in Windows directory
        
        PID:3008
    - - C:\Windows\system32\regsvr32.exe
        
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_5.dll
        5⤵
        Loads dropped DLL
        
        PID:1264
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe XACT2_6_x64.inf
        5⤵
        Executes dropped EXE
        
        PID:2692
    - - C:\Windows\system32\regsvr32.exe
        
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_6.dll
        5⤵
        Loads dropped DLL
        
        PID:3764
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx9_33_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in Windows directory
        
        PID:1964
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx10_33_x64.inf
        5⤵
        Executes dropped EXE
        
        PID:660
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe XACT2_7_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        Drops file in Windows directory
        
        PID:3580
    - - C:\Windows\system32\regsvr32.exe
        
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_7.dll
        5⤵
        Loads dropped DLL
        
        PID:2732
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe xinput1_3_x64.inf, Install_Driver
        5⤵
        Executes dropped EXE
        
        PID:4404
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx9_34_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in Windows directory
        
        PID:3444
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx10_34_x64.inf
        5⤵
        Executes dropped EXE
        
        PID:852
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe XACT2_8_x64.inf
        5⤵
        Executes dropped EXE
        
        PID:4660
    - - C:\Windows\system32\regsvr32.exe
        
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_8.dll
        5⤵
        Loads dropped DLL
        Modifies registry class
        
        PID:3028
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx9_35_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in Windows directory
        
        PID:660
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx10_35_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in Windows directory
        
        PID:3624
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe XACT2_9_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        Drops file in Windows directory
        
        PID:2776
    - - C:\Windows\system32\regsvr32.exe
        
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_9.dll
        5⤵
        Loads dropped DLL
        
        PID:5000
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx9_36_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:4388
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx10_36_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:1888
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe X3DAudio1_2_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:4684
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe XACT2_10_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in Windows directory
        
        PID:3100
    - - C:\Windows\system32\regsvr32.exe
        
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_10.dll
        5⤵
        
        PID:2184
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe D3DX9_37_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in Windows directory
        
        PID:1540
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx10_37_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in Windows directory
        
        PID:3272
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe X3DAudio1_3_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        Drops file in Windows directory
        
        PID:4640
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe XACT3_0_x64.inf
        5⤵
        Executes dropped EXE
        
        PID:1672
    - - C:\Windows\system32\regsvr32.exe
        
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_0.dll
        5⤵
        Modifies registry class
        
        PID:464
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe XAudio2_0_x64.inf
        5⤵
        Executes dropped EXE
        
        PID:4860
    - - C:\Windows\system32\regsvr32.exe
        
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_0.dll
        5⤵
        
        PID:700
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe D3DX9_38_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:2288
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx10_38_x64.inf
        5⤵
        Executes dropped EXE
        
        PID:5040
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe X3DAudio1_4_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in Windows directory
        
        PID:1588
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe XACT3_1_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        Drops file in Windows directory
        
        PID:2508
    - - C:\Windows\system32\regsvr32.exe
        
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_1.dll
        5⤵
        
        PID:3708
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe XAudio2_1_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in Windows directory
        
        PID:2864
    - - C:\Windows\system32\regsvr32.exe
        
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_1.dll
        5⤵
        Modifies registry class
        
        PID:2728
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe D3DX9_39_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:3252
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx10_39_x64.inf
        5⤵
        Executes dropped EXE
        
        PID:4280
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe XACT3_2_x64.inf
        5⤵
        Executes dropped EXE
        
        PID:2440
    - - C:\Windows\system32\regsvr32.exe
        
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_2.dll
        5⤵
        
        PID:2276
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe XAudio2_2_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        Drops file in Windows directory
        
        PID:4012
    - - C:\Windows\system32\regsvr32.exe
        
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_2.dll
        5⤵
        
        PID:2084
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe X3DAudio1_5_x64.inf
        5⤵
        Executes dropped EXE
        
        PID:3244
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe XACT3_3_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        Drops file in Windows directory
        
        PID:4024
    - - C:\Windows\system32\regsvr32.exe
        
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_3.dll
        5⤵
        
        PID:2436
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe XAudio2_3_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:3728
    - - C:\Windows\system32\regsvr32.exe
        
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_3.dll
        5⤵
        
        PID:1820
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe D3DX9_40_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in Windows directory
        
        PID:4392
    - - C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe
        
        C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe d3dx10_40_x64.inf
        5⤵
        Executes dropped EXE
        Drops file in Windows directory
        
        PID:2800
  - - C:\Windows\SysWOW64\regsvr32.exe
      "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\tv3d65.dll"
      4⤵
      System Location Discovery: System Language Discovery
      Modifies registry class
      Suspicious use of SetWindowsHookEx
      PID:1084
  - - C:\Program Files (x86)\Play\Need for Russia 4\nfr4.exe
      "C:\Program Files (x86)\Play\Need for Russia 4\nfr4.exe"
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      Suspicious behavior: GetForegroundWindowSpam
      Suspicious use of SetWindowsHookEx
      PID:1824

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2084

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3764

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:4364

C:\Windows\system32\srtasks.exe
C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4280

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004B8 0x00000000000004D4
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1260

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
1⤵
- Suspicious use of SetWindowsHookEx
PID:536

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Play\Need for Russia 4\Models\exhaust\is-KE98D.tmp

Filesize
21KB

MD5
fa8cd7796dcc96305624d5b1462ce841

SHA1
57100e1293bdc805b402f03f9fd1cc09a85993e4

SHA256
70197e17354f5634217a9ec6d43e710dfeab5dee60c28976f2af34127a91da0a

SHA512
2ec29cdc41b6991e98d25ab32cca5a0afdddd00b19a939a2ee851f07c4b95cc946fd02c6eeee8547671fcfe9cfb7831a754b99a63b1c230babad06b0936d321d

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\garaz\is-JNDVR.tmp

Filesize
512KB

MD5
379580d3e4e6db26af76c484be942125

SHA1
2fbfae6fcee152369d3fbdae39684a65fe11aedb

SHA256
162665deee84fa8541d97a2a40efa9214f414661608766123b55ea128332e150

SHA512
29fa45562d0e7bac6ccbd3a18768df4aefe876410bf19c4a091aa81942f6322de392aef906d8b6e84c2c681a2fc8dbedb101bc9a362865f0efaff96436b7644f

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\garaz\is-KOF4F.tmp

Filesize
256KB

MD5
5e57b3234965bee66eab55f6090b270f

SHA1
3116b56f29bc5be2983ad7f5f81da66fb22a2a8b

SHA256
b748599b450946e3bdb7f8fa6edd61b438512370c612e4efe795da0afb421bf8

SHA512
49da74b9ab82f8f1702cab741b177d77b3f4065f2d80720a62f3d4891651c92adb74e806573a1891b6fc8bab04f2425c09cdb86495802ed919d17451f22408d8

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\rims\is-2CBD0.tmp

Filesize
36B

MD5
8ec7b02809f28bc425c2d48275a36b32

SHA1
ce0995e5ba419ad68922c02a73faceffa7ca26aa

SHA256
589c3e789caaed18c8363200dbf79f9f7dc2f468782f8351400b914c0bcb5d31

SHA512
03389ba3c03b37209912e597e7b162c39fee54c8cea43802febe575b7efc6a155211a76d7bd22a2d7977105f326e0c9d302dc02e0217c12b1ab4520dcf70ddff

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\rims\is-4OJ4P.tmp

Filesize
69B

MD5
5ec3c40729528b13814de1ecadbbb6f3

SHA1
437de7c904349fd6028388a7bd587f70ae57499e

SHA256
6c7eecf863714058850d434ae4975dadcb211c022f49ed16c30421ee5b1d7726

SHA512
3f57967611a0b0d166ad09d020a4365760e2c6f3c1eba306c23989fbec8285486fc82d5230941cd8c0657e95a87943075ec681bc561e5641c0169b67e5506a2a

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\rims\is-NF1PF.tmp

Filesize
158KB

MD5
1798d45bdefbc009a2f431a08cccba12

SHA1
b15876dc208abc34bfc2831f173d48567508334b

SHA256
677131732dc9fb126fb42408b3f299c55807f4061554a7274ce30e5a1dbbbfa9

SHA512
821d76b8dd8eea0c691f14c0e6a34b202fca730268db6237e595cddf2111cc65ca4cb3e494560d777cc22b8b54c0500deabda226e275df4b2684530b2493aff5

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\rims\is-UT8S5.tmp

Filesize
61B

MD5
1ea460640cec6c5310ae4e38763b9f80

SHA1
25da33619fe8494ad3fb87c3a448fc34a46848c9

SHA256
e813947332cfd804ccc4f89f6313d216322a86a8c277814704de96b3d9666346

SHA512
1f4f979ae50266b8d98f1c319106085cce1a20b0d41cd6a0a76776cb406650e5d6649dc4ef7632ad4f9841844d600b060766ed40e756910295371b921f5560b3

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa1\is-2EIOB.tmp

Filesize
170KB

MD5
b83b4bb3aae3d790262089695cae9b2d

SHA1
449414bbf17cbed1faf9feaec6f3bf7095d253aa

SHA256
b0e610ad1239db7b5c6d32957f008019283c574488e39f233127ec30f5ae4055

SHA512
888697f8b6310dcdd18bc40a997ad523963d921d1cc6cf4738c77f172c1d5107f5e77743825f4a3faa969135591f318b7e23195956c3d320b4950019ad637f82

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa1\road_4.dds

Filesize
340KB

MD5
b0358c1baecf1e50f8fe69e2a434a3a2

SHA1
0a5ca77c7b6f49a882db029b7f0e27387f479d54

SHA256
39a545591e67246cced83bf22119a431c6f0da5a47b7ab2c3d599ed8579e8dd4

SHA512
d0136397c903249e1a2d9bd8fceb8d03541e29d1f8691a45031fa3f7abd500a0cfc345083823d505d97d39d91d5102b38c13a5d47cb1c5a00bbf9e4948454120

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa2\is-0BTHE.tmp

Filesize
42KB

MD5
960dab12ae019ccb0be494a8785b5e81

SHA1
2e1a0f8276b87d711b3c6eadaa15734dad4eb7dd

SHA256
d40f965cc61a365f4f487b77b6b31b03bacb916196ada2ec6066476332d9bffe

SHA512
62fa3135d28c0e236ca75cb62c788ca3e3b6eee1cfe7a8bb72a44b7bb1354718ef9db0266be53eaf6fe1e44c93705a5db3d3893c649ffe7f392c4c2c61acce9d

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa2\is-ECEM8.tmp

Filesize
512KB

MD5
6bcef2833ff441e194c55bf977c7fb8c

SHA1
ef150acdcccbe412206af02e77e9ce49149613c1

SHA256
9e52c35fb931e4f88f780f895b44e10114af4d7359bc24f4523813ac73a104cc

SHA512
b0c2e9a62d7eb1cc409a684c9897a4ee21b7018de3eaca22c134fc0d4abea669f5415a1eda79345e7c00ef2da6dfda7c25d71ddcf590433ad3e4d9fe484f6215

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa2\is-ERS8U.tmp

Filesize
42KB

MD5
ccb06ed49bbda2f3a65999d1792feab9

SHA1
e356fab9512a5c7cab152cd020ebb7074cb91897

SHA256
8cf6718e7c4d9aff0003fa61088915443d0e2c2dec79bb70385a2ab5489bb370

SHA512
e67511a978cfedf0843b28d3d115972ce1b2a23686c2445efc3b7d5a0eab5f6ef8ee4a8557755b7f68591a7a60299af04a07f195a7be49dcce86feeff53b1deb

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa2\is-MLGLE.tmp

Filesize
256KB

MD5
91d8ecf02adcde3ed986f25b68a6d241

SHA1
84bcdcdab7e5499558a3913a14be7951f7b412a7

SHA256
77cf4ca89bdebeced0a8aabbbcb5f06e0b440ef1169aed75465ef62e01dc850b

SHA512
91c88046c020efc914de6cc16da3f2eb7cf39c31ba3464f44cd6997dc4dec4a24d490666a77507e9fef43a242ef686c1703819bd4ff6e4b969e2498f3677cfae

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa2\is-MO9MM.tmp

Filesize
64KB

MD5
8b7b888c9cbd0a1da9a16d8edfe4d638

SHA1
af7fe7f6f46cd2fcc0b5d6a68b23fda9160ae32a

SHA256
9ff8bdfac0e6fdcd223feb1fdc2df88c955fd1776041a99942a62d82406e7102

SHA512
5e0b2f92204ac320b2f045df90ca590668b3d592716170f526a925a208fa6c8c6dde6a9fc3140ce4da8d179decf1c6961cd6eda71c09e8322fdb7c8cf932c024

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa2\is-T9SC3.tmp

Filesize
128KB

MD5
f3cd6313fa19c1479891aa0a919e07f1

SHA1
b7a918352275db26e0793cb282d89104a867021e

SHA256
ab1660fcb5f66cfa510435ef2f14fa426d5917f13b605165a6eeece9866878fc

SHA512
1d7b10b0c1393b8a99164d48d3322889aa2a0f689e36a148f84090be6f0d947af69d0bc8ae7d52cc2cf251fc419ff174487f895304b27b8d448da768ff014638

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa3\is-COM45.tmp

Filesize
512KB

MD5
0e530f929f8461b92325ebf8679fdd6e

SHA1
27f6f93e566b6a1b2337a8b16482b40539933fc9

SHA256
379c31a6c0b96a8cd4fb9cc4ea9b8a613eafa751525c99d45ce445b178fcef34

SHA512
b030f99ebfb928c4347ddbe3791c14920c95d5b41d08c22827770e732d7563c476922f5439faccd15b22509e4ebbe251d9c983d0885a4b2f173a7c0c6810d291

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa3\is-CUNDA.tmp

Filesize
128KB

MD5
cb55fe53e85875102a1dae4b80e99b5b

SHA1
2a5ab894ec032012ef236796aac9b79b3cbd6e68

SHA256
da9512e7ea7568f8e1251efb146047c8793838129170e0a9de3fb1e9ec04f5b2

SHA512
b076ab61dc9c0943a55b920315a794950bf9825f18eecb602a5b9c872fb408673385fcac4abb835cb2640415e8f30b4f4ee0302c400cddfc8f902a9a60082d90

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa3\is-EEFP8.tmp

Filesize
5.3MB

MD5
480b0192e68729ddf02d0d47ddc216ef

SHA1
766ed23359f5f9094dfb2741e8ee82b12d40896b

SHA256
73ee52cd752dc97ea8c6b488e34a257908e0cdd2466b85b25655726ea745e764

SHA512
4fe4beddec73f55b79f828038ae59cc8b1a82e706870d18f52f8b87635d16f5ea0b4f90a6bebb071a04d75b990c64a27bdc7ec2d7f518c22dda812c45d768ed2

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa3\is-K8LEL.tmp

Filesize
2KB

MD5
80c36d5ae8ae627f2509afea73b9a907

SHA1
5355361e04f9db3437514486310bbff9e61da31c

SHA256
8ed9cf7474283531521049fd3623583789866676bcdb48ec85c9120b92727cb8

SHA512
d09da943955c36aa245c19afeb56587f08fc4cda856102a85961b02c51bf4b624eafc91bb92461ebce7b8ffa2ba579a453bf6cf896e2b77235c6428984d8dcee

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa3\is-LLL25.tmp

Filesize
64KB

MD5
9313f28e0d8853565f711f985e7596f1

SHA1
35e3c62106f5c9b54aeb77ed192b10c5d4a90a90

SHA256
221c286151038cb23afbd733eb475bb13268efbd780aacead5bbd12b1a7234cf

SHA512
2e6cee198e56eccb57b391f2b48912448092225c0ac697ab097058ca33787a533055650f138394907f76f9a056c2c91a120357e2948e59a84d3f7a30baf566c7

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa3\is-PASRI.tmp

Filesize
256KB

MD5
58e6f614fc92be40dffff13d1250a8ce

SHA1
b5e1c15ad1fabcb7f91d1e60bad44a43dbe658fd

SHA256
82a948b15ac11ec05140058b3ffc6ca30b75ed2185d0e19cfd1eed05c67b73cd

SHA512
f52a0f03391f7a8b307dde5aa49addd1a04417b41526f69d992d321d176260f9f82c36e02b1bdff8592aab3ad32aa11e536dc26e109cab542fb7b5a1363ef286

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa3\is-RE7NR.tmp

Filesize
64KB

MD5
0bcdf5fac36dd9f32f5cb0bbc3c3a61b

SHA1
dda2c05407d41d9a3a14fcc0ae7216e261e1ee5b

SHA256
3f1ce27001ac1172d8e9da582c99c875dd3b1a04695120e4dda02f75b775ba86

SHA512
a2a81dbd349333fabbe55c37d6d3dbfb9d5539a2090fb5587d77b2b40e2082480e333e68f25d4cf1d9825918e86461da3d7e90fe7e5292ee9bfbc1d33999ce87

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa3\is-VJQK6.tmp

Filesize
512KB

MD5
aff3bc20c9fece22c03f051eed03bd50

SHA1
c6e1e1291315d3e22bac6aecd79df3aefc5fa9af

SHA256
c95fd7068cce2169e4f8e5cb397bffcf5fc6afbd41df4b946fed3860afedbbc5

SHA512
d7deb1dcc5c8b0ca90a8a194fcf5029a003a475d599c1b9ad2d8aa43ec0ca3da5b1ca33c817f1143290f910f9c38758e6e0a6567005590127663e123241a3a9a

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa3\is-VL4HU.tmp

Filesize
32KB

MD5
ab898644904a68f58606e28e935bb1ed

SHA1
8863f358793d677215d54ea3c058aaafcf11a6f1

SHA256
9560cb563d5fcd80c679453f91b9d9056fa89238b107420eb566325b9cbb1e7c

SHA512
64a329b253ed486ae8ff434e37b22de7fd80fd9b006273d1ce65ecf3eccd502b049745b51916d0e2459cc3a0b6d213aa949de48a4c0cf0a8c4f0ec224b2da04b

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa3\is-VS8ST.tmp

Filesize
256B

MD5
fbaef4cabf23832abf7dc3b0a782791a

SHA1
58295d85df7fbdea25e7c724d77ff63375d7c19f

SHA256
65e977344bc6186730632289a2ff71baafbcc9fe89b528198e24e568d958cbdd

SHA512
0cd1e16e1cba3ecc17bf12c5895fa29e1ec16f0a07d21d97840b4e2f4531803849a27215b4587f5aa53667397b40c6766f51ee92ba3f4321cdb9df64ab6a8757

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa3\sky\is-EOCQA.tmp

Filesize
64KB

MD5
c3177daa2c8020a1c27042cebcda91ef

SHA1
db7a9a65e95aaa5368cf7e09c8d55d65706c845b

SHA256
707e7ec3dfa0a87b17aa09f7e0f867b94854311fef78c0356df9cc1dcd954bb6

SHA512
74109df1fa8185debf2f0e9fa978f0081412df0f8f1481a9114922a07cabd0a4fd43123d049549bc418c9a4241c3d8c7efc35357dc50d5e094cd026374af41ae

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-2FPAT.tmp

Filesize
42KB

MD5
fdece0eaba2994c69326da1d566c57aa

SHA1
0e6e3269b8c03f339b7cf957025bc41cd725b191

SHA256
28a0f60cc463bd223ce880a674dbcdb9239f615bfff5c61655cc8cc6580d3683

SHA512
9744cfeb7e030ae75e0c24c13e7ae121b5e6c45845497f46572344e770f70a3d601c611404bdb366eb0bafbf95f0c0c270f87fa7aa547bf828d9a0a6200960e7

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-63H89.tmp

Filesize
42KB

MD5
a36cb824031ceb65695aca3e2ab2849d

SHA1
5b7f9e8108100e0bb57268be16ffbbf46e281f22

SHA256
07153d5882ce900e3ecc68fd5dd5c73459aec3d2f7ded53df113ff63afa6bed4

SHA512
3f16f5b6e10eb26c5773eb185cc00f6c20ab5f458e9cf3c29a6554dc0c32e1c53b38750ce4eae1f637756f7a46aa493e09bde4ecedf6b2855b50845d046b6d1e

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-63N4D.tmp

Filesize
256KB

MD5
49bbbc22417068300df7c2abea3a2df4

SHA1
b07be0b5a7f85bd5699a63ab40af58af27da9bfc

SHA256
baaff07225b817fd27ed730e7557f3bd23652abaedd5e6c174fedcadb9769e48

SHA512
a7180fa091e4c15fa3d07c919c341d1a7089ad1efa9f475e37cdd7a30b44769855aadb132f94e4742bbbbc219cc277a7e68d920e3c301d0ac5b7a8fc9503dfce

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-BF7L6.tmp

Filesize
42KB

MD5
503b6e6a1f4e358d95d400cdac16d058

SHA1
41d2e8c0f0994bccfc81d7f6fefcce1e0d361797

SHA256
9a486fb49b634633b76310cdac7ee2563e782599db61a817ccb4b5d87039735d

SHA512
08af0ede2cdf07ac1043aeb0d3158ddd46d924c9f32398ab5431d4fd78f83b5b378df37fa8fadbe798d8eddc34b840ffa537afa37522d72860d5c31680eefaf9

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-DV6G7.tmp

Filesize
16KB

MD5
982b7c6a318561900033b3ffd0b5ebfa

SHA1
6ba8faef9c3a523c961e9f49c7ba46de4459284a

SHA256
0d349cae04d758c0473cc6cd6bf46d3115d1d24fb849fd3f79364fc6be66811a

SHA512
6160ec218b4c9098afda1d4bbb820266c2ac34bf62b4548138f71752d54803932b3c06c16bc8893c3eecfd5f66bf65b154ecc4e9fd751e4e9d49476f137e8add

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-MP8J6.tmp

Filesize
4.0MB

MD5
e7bc24c84bd6f1cc640be305e2d201e7

SHA1
440e7ee811662c4f5681ff64b7abd845073196a1

SHA256
9e4719417b8cb20fe692e85bb785a48a56d154dd71eb5768d26c9e3dede7cea7

SHA512
67164140561dd7ad12e33b5936e2fa5e67b117460c3d1d6e32c10720506e5bea99e8c509cb3fbb7fbbbae5f87abb435a2f45deab0c88228e31cb615d1b95ad12

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-NA8G0.tmp

Filesize
384B

MD5
d96738b8ae11414cf65cbfb64fffdfd0

SHA1
2b9c80642b4b7379dc1a44399c133891e6236095

SHA256
ddcd63f260cd0b86b9221959db803e9f93c6000dbf8a853227560eafbccebc05

SHA512
224757e5dafcf80a10044ddcfb9e4fcf66e1095c8c667c0a05568b27f6172e0c905af5547b0778e6a16e171750f96e3ac63a72ac1ad7e3d995e40dc1d197817f

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-QE3R3.tmp

Filesize
64KB

MD5
a00171b8464e71706b478cfa7319ff03

SHA1
432a481e68b0c16fe8d63491961dfcf4f67ed2db

SHA256
192b0347fff83d1673e9875776fd76edbbcce861551e9fc75ada68c3bd02c1f2

SHA512
cfd88cd0634e094385d5d7f27ef116418f81fea05ef8ce69d73bc56f887eac8094cb4ec0548e970c76429191af62657706fe85be6b8bd7aa06ce5a4ac00391ce

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-QKJ9G.tmp

Filesize
42KB

MD5
52955b5e29b377a16d9c9ecd4124aa0d

SHA1
c29277d7e73fcfa01aa1ba2e43f3d99e160a1b7d

SHA256
bd0cbcfce74aa2922936cb7f8f10082a800dc8ca7366f8568ab61f1123f6e0e2

SHA512
a68df2ce0c278d2ff652bffd6dd8ade35eddc5ed896c573c8d43a5ee52127c53331662e4ff2685e2ceb69e3979aaa74ee9cdafee875918ed935394ad27229039

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-U46RU.tmp

Filesize
256KB

MD5
f7b74b101928229c51806dbdff6571ee

SHA1
ac23231d306392bbdb41aac652f28e35efc3de1b

SHA256
9ac9b73c92ca198df50d8a0a760d9ea2a0eb0923278273c37e351173639b84f0

SHA512
590ba92f11306275641de9fd206b44c7e4b1376aede657dee2e478b48ebce06ad2996c9d97917d7705867756bf2d337d35284e1593f412d0788909ff5e27fcbd

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-UL762.tmp

Filesize
42KB

MD5
106eb7312da0637eed064f77611ede68

SHA1
1f08f249354bea61c1b80031bc0192094485430e

SHA256
25400682268e0f94214498c0dfc56614d13bbb27c6048cd45fb2ea9ba9ef53af

SHA512
e77b05bddd6758d1abf65c0f62c10f67554b6f1afe6c1a253e2552ed18128ad95a5b4e84914f20e16e8e133d0b478cfa98e49c1c9d58b8f2d893f00a12a6cd53

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\is-V2DBB.tmp

Filesize
256KB

MD5
edf102af9d432b6fd4199288d415c5d6

SHA1
b0b2ab0d209a3a4365a8ad8761699cba513aecef

SHA256
3d063cee0e590fe24277bbecdb2606d8e4d709634ef80737cf584c0162a020d3

SHA512
e22008373fe3717059c6bee8d2bf6c9d0a2f058472a05b37b575d4e94e8d68f615ce6eac6c322c2cbf7d840a247a4fdc5f5c1c6127c5a5e35ce9c9417bb89191

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\shop_18.dds

Filesize
170KB

MD5
f7c24bf4fe5a80ad97ce6743a0e06bb3

SHA1
0183ee7418515ac8a68b33f3574c040f4c4b1a35

SHA256
cf9bf9d1bba3b214fe649338e40d5a4210c0c95a0c23238cd6b0b37fc4e5f855

SHA512
015fedd064f68dd8a841f2cd5b27904ee907c9e0014d1eafa5c038b9a5213cf9612cf51218d630d7f1152b2c9f5e7493845f79e2e8329f104e59bdc50f154cc6

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\sky\is-IQ60S.tmp

Filesize
512KB

MD5
f7b75a55dec7cd3ddeb33cbd28f71941

SHA1
2339353ff245421799285ae0047cdc5f4b1c7885

SHA256
8a85fcf338f6d8f097dc0a86b44ad30f3214caed0aa1797cd33880c31f91ca3c

SHA512
d9f38976d1723950b65905f33f6329b6a2fb367747cb25026c3f27239588a5c01070786cfde9a7baede8579b34fac1a59e11c3108696a238f77ef12fec944d35

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Models\trasa4\sky\is-S1P7C.tmp

Filesize
64KB

MD5
cef7794b3501f5edc3fb8c065101936c

SHA1
39d503cbe402aa6d6e59834626211eb676338a11

SHA256
63ead5f77ec7209c687ccfebec8599e3ac42a4e596419097b6078a330d613d55

SHA512
56bbe16ce20b6762f03054d5f90004c3b12cecd370ed609834a1095fd24c0e7f3e396a55793678a985039a4570cccbcfeb0b6bd30068ec1d91af50f988acfc40

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\NFR4.exe

Filesize
776KB

MD5
c0827d1034ffa4242ef75c305c5b9702

SHA1
d037a97350f2c3180ab34e03f3854a58e3d5927c

SHA256
a40717cb2d371fa758c8097d38181f77453a7b73779d8c117eeb98be6038028a

SHA512
6ac144f94306669b9df7a1f482ef407606f6382ac9afa86e28b6846bf5bfeb6b61c1c6feadcb224b2790884e4ae9f9c6b26765438efdb0a46e6c58c1a7fceb7d

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Textures\2d\gears\auto\is-75STR.tmp

Filesize
10KB

MD5
85f694e5412c70878ce27c937071bf88

SHA1
78353d25312d285730e0b85089e7ed6c9d668c6e

SHA256
dfc2aed2b869dab8a447e762ae27060d56d1272875dd02949957e52029db06fe

SHA512
6e9c35aedc2d544889a8f06595efeab3da58fdded801e9489d7937e69e3320bf02d4655c12a7007947efa4f2b4e4ad36fc182dde276ae11b13e745ef8f796a34

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\Textures\gui\is-V78LT.tmp

Filesize
1.0MB

MD5
3519f62edc6cda1d895960a08bd4b771

SHA1
bff1c06f22ee7033e4d25f19eeaabff90e6ac1f4

SHA256
c66acbc1e6c13ef5ad044250d83dae5105da7bc6e5a6d2ef5bb35b0681c0e032

SHA512
32cdc2ab650ab2005235e48d7f1c66f3156bf8e39f13187f77942d1697673c0d2c0ce1c8d2f5da5687d73a9c21415809f1e7d246383417014f22089e1b811da4

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\data\body\mod\is-FAS06.tmp

Filesize
24B

MD5
458f7c097f9a45f541c72b07f5f3062e

SHA1
722463731c66d93f983880bbbe658d184d2a5d53

SHA256
fdf1effe59e0f35381fc49d91b7624d2a0b10691dd2234b516b142a324434d07

SHA512
223d2e19f0e3038ce81b76b72ab2b7e82078eaed58b1510101704733c11885f8353b40ba91726fc1817bc06b4b1a0b229340a9ad1a6a0ca604d85d1f63abf69c

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\data\diff\is-E5QUK.tmp

Filesize
53B

MD5
38619d666b831c0797f3046aa7899449

SHA1
5738d41bf6e1d9b805b7da2313182d51e1840f8f

SHA256
d4e8c10b33b1a4e177d37616a04e6f18a91234590023812df0941bad9010a19c

SHA512
017030c283894e78352e5a07cd388b4e296b254c4a569eb9723865e0a24c8a80ce6b34a41106d684cf3c642e14ef01bf97f7b997b68e66a253bca8d627680722

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\data\gearbox\is-U3LNM.tmp

Filesize
104B

MD5
5e22405399232ff0599931e9dc356a2b

SHA1
782fa24b41a39c16a5be1148fff43b128d084a3b

SHA256
cc420cf94d6cf16a6fc667af802d7947830fb65e97bcd8486f8686920393a4cc

SHA512
365a2588d9311015a3360fb9284b4654ac3cd03b71561ceb039a860da82295a00491aec115437ccc8174c60f9ae257e1c664eb5ea906d9f920e58f3e8bc9c61b

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\data\susp\is-380MK.tmp

Filesize
123B

MD5
b6a3310c60bc3bb4e9c71f100ed08e6b

SHA1
b8d792b4f42a2fcf728c6cbbecec63549ce74023

SHA256
7e28a4672169e1e109dcac23e7c8ac79b288d8761e6c9e258214d96d337eca68

SHA512
53b47bc7706423cb4f611c111aa8f820180bd63c809ef435a05f29026274e194ab34988cbac49c8ffb37b5492ab780425058b5189319a3ce42aea348d02ed1c6

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\data\susp\is-3C2A6.tmp

Filesize
85B

MD5
e0eadb449a90150162ec8e1fa0003213

SHA1
23345c0d1f7ff028f23ab27dd0af07f85c04faeb

SHA256
ed5d45db155e2aa45a0d7cf090a5d2d442d321d870b66886cc93ece1636fdc8a

SHA512
3c2414e90255c731e4ec323f0e44e663628e46cec6fe1ffecd22457259dc4706ea39cc4f571b14b643370ef64f9db0137f98f90752303b082c8ab0a43e61dcc2

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\data\susp\is-5QJKF.tmp

Filesize
85B

MD5
387b5a9db9f662a99d6d8f8f09754e40

SHA1
967bf00b628815fb3fe4c9a46f8059fc7c5203da

SHA256
61ab339dd39253135646c9e3e2544defa0a8a2996872be97524c33aa91483afc

SHA512
8df73b15b04c63f9caa6abba38a13ad188193c89c149d7df69b6396cd3019ddb2d7d458e82e9aad6bbc827394240e6ce4e40a0d33491f86223b9f7a9c4082b36

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\data\tire\is-O5T6K.tmp

Filesize
133B

MD5
78d3fd29c40f175cf911ceffe1823896

SHA1
e21484dc894535d8e28c9caa8dbe30a9416e5ff8

SHA256
f9bfca0ddd68d0d62399a9c1cfd213a672a6ed62864a1cce93f9868c42fb9541

SHA512
638fd619444ac449cc35a63fd0336cb67b52fa617b6710ff7bb171937e177bf49ec73111fcf8f1d4ca5f2b6e9037ef37ee737673a2ce38cdf3d9df70cbad3942

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\debugfile.txt

Filesize
582B

MD5
2ff5d3f482958d7b875d827cf268c8ac

SHA1
650f05f76ed41ec8147a17be234336fc87692a98

SHA256
eb147d4a37b7833792ac2f9fc0c20918f9d71c171d8bf7b36e63d1cd70df4944

SHA512
2e8a58ea97bfd18f5522937213424090b6bd9f483ee65fae1637127383fe768addf5e28f6c7794f82730aed835d1df8bc5b4ce5a03ec538b461e3b26fa9f6341

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\debugfile.txt

Filesize
2KB

MD5
d59d96f88cc79ea98e0f4f9cddb2e6bc

SHA1
6566fa3865ed5300de552a2d40841b04edb60f67

SHA256
5c3c9ac5d9f1d606438e55fe5339c845e76872353b532ce70cf768631d18ec67

SHA512
f32faf672afd2277ef6cd28dfe380ebab0e2cc51b051afa1c797b967984430e47a3fb08318ac85d3b3e1b8f2d6881ee7fa7f9edca617d85899ff8f15113896e7

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\redist\DXSETUP.exe

Filesize
513KB

MD5
9ee7a81b687eba1061107d1281e59f24

SHA1
9356cec9ae27e6a41e63466f18847a7bbc24eaa8

SHA256
ea13ab4b4f9ae747d7dc8c96e0be8d58568bed87c478bf3dffcaba9e95de1166

SHA512
a53a41d6cb96ef6b2fa21ff3db4f23c79b4f6d2dcefbf29cba6dd753537a82dd08208a8e826222a3fc73409f7f8ff53f429b4effe38174b25a4ff70088562f64

Download Submit
C:\Program Files (x86)\Play\Need for Russia 4\redist\dsetup.dll

Filesize
92KB

MD5
53455a3f3fb1a24fe464e9c1f3f4139d

SHA1
43b484c90c452d72f343b3abe5862dfe7325f060

SHA256
1b0c28af457a6e020c2c9724bfedccfd24dc7f8bab4c4e22ca2672478595c3d8

SHA512
f8dfc12ea452fc83a88cdf7c639443de369d91be13a4f7de317252d730456d17d65ad62f48d99c74a67435d5f229ac73dbb58e37f348dabe6085a084c050ef5c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9af507866fb23dace6259791c377531f

SHA1
5a5914fc48341ac112bfcd71b946fc0b2619f933

SHA256
5fb3ec65ce1e6f47694e56a07c63e3b8af9876d80387a71f1917deae690d069f

SHA512
c58c963ecd2c53f0c427f91dc41d9b2a9b766f2e04d7dae5236cb3c769d1f048e4a342ea75e4a690f3a207baa1d3add672160c1f317abfe703fd1d2216b1baf7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8c07d04784dede3012f48e943b399228

SHA1
f8e62f8a5ae98f536024559b9b537e0224745273

SHA256
be1126c4c6087e98d71d94f92998814fae1c5360d5ecfa13362666a4f9bcdfb0

SHA512
7a89eadc7018a52c7e643a1c33d12913b2b3713baf77356b29af0d7001ae237ec2b3163a7ff8218c48f0154a55ef65d59891850d923450bb7565b8780a671c6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d8469ff1d3e0e434f33a1c8550900335

SHA1
c738b3f5762b739e36999d080c3fac734318e21d

SHA256
b2b9f6ad2c8760dad312347531652ae864d3a9ee6e3872f267568ffb17f7bef2

SHA512
b407e04ec6ce1b2d231df394eab0cb9abc0e7deb58ebbdf0ccb89e273b097e396f42fa545eacf07c7c796f4b67976d9779bd686a0c65e28de338db5d0873c449

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b0177afa818e013394b36a04cb111278

SHA1
dbc5c47e7a7df24259d67edf5fbbfa1b1fae3fe5

SHA256
ffc2c53bfd37576b435309c750a5b81580a076c83019d34172f6635ff20c2a9d

SHA512
d3b9e3a0a99f191edcf33f3658abd3c88afbb12d7b14d3b421b72b74d551b64d2a13d07db94c90b85606198ee6c9e52072e1017f8c8c6144c03acf509793a9db

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\528632ca-98fc-4866-add5-ff8610f08c4a.tmp

Filesize
6KB

MD5
672312f10c7654238bd7e763aeb52866

SHA1
20725aa796dfe0360bd545f6358ad4379da054d3

SHA256
e46a6c888e4a5d5fcb5d0770bf8e94b6c0f2b2ffbd03f5d98f26b1413e282634

SHA512
7306a9f2133818bb9af24606ca39560328d5bfd677285340e62c017e85f100e58709ac8d4f7c6afd08f89a43b88e39eacf2128927c7ed74e583db4a3118bb1c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
384B

MD5
a6dd2d1a89f780ed415758b865fd07d1

SHA1
43ac0da787d4b4940bfc07a8ba4170cd2ec8ff83

SHA256
0eb12c2c35e059870691367d26f15599c25d7e328866a4d358180489bcc14387

SHA512
822ced0cbf5736e0578fd22d2a76bfcb86193ef04daf71bdcf49fef61e24c227db186208507fa32bc8a77251612eb6634d72da6b8ac1954e2b2ec2b1803fd91a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG

Filesize
319B

MD5
063b09008404a1c41f565604ed0a8e6b

SHA1
9d9689577aa966280f5094444882f10998db480b

SHA256
f23008734cb79b05dc9f415e2a5e5e1d5ab1b7cf6b55d387c6f6267b7fd02a05

SHA512
4b11a9172e1cb501b5eb367f5a1c2369ea1041aca29c701d60f04b12af6e62506d65efa3a447fcf8256e26e40531c447d128fa799610d3248ef4e78b4588558b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons

Filesize
28KB

MD5
3a6becb41f23d09d4b846d6911d1c292

SHA1
400374d9a1e2398a3a614cc15e167b1173329c65

SHA256
080cb12b17482ae1c375bce4e4bb8e2389b676240eec94c69b753e581fe2b5fd

SHA512
e028131a7572961756f140b58a4934bf096e9d0c699085bf07f9760f896279af46cc3702633efbaf50915e864d6753713dc3c01060d60d3e383f7f2d91e652d0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
bd8842516986269bf4023cca9733b594

SHA1
56e20ae95b663eded93e2c561bcf6c214817b8e5

SHA256
2fc4e862a63e1028b0d5bcb086bc7dc2b2b69a6cdc046259e06edb2b2b5634c9

SHA512
bc8df6168eaa0ef19bed8201adadab87f8398d693e9a969d04cb383dbdfa571b5ba146881f3ac358213d156f4d8095cb0169b4a272d6cbab7dd0c4071886b097

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History

Filesize
116KB

MD5
29b7affc1f9bc72ebcce3d75b5cb7240

SHA1
a5dee3e5e48a74f685b41ca2d559479e65f57795

SHA256
4b0c72e850b97d5d08be01c21e4650cd43bdab4e9696f6a53b3835d25903a8cb

SHA512
f0684488f0ae7345cafae87520a027b73f8afe0ad7e55985da5717e9b5cd5b960e80e14cfdf5c24cd032e1bc384d54cdfd230fb0bcedee5ffc1c6c9472d9f775

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History Provider Cache

Filesize
1KB

MD5
414d6a7d7207c5d19dd8341fa33ea1ce

SHA1
5b1a21a08b87d3dd73e858d95f9c21d687180c2c

SHA256
f7d0ed8b436c8327cdcddb3d1d4dcc7ae5212344764e87e21ac2818e9bba940d

SHA512
926584695cb23c6d572b3794eed3dc18f50387e1a39e689c06b5625de623f88425f9aea5ad3352926914ec551819296b8b772ade693d9057b7f5d10cbb70271f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History-journal

Filesize
28KB

MD5
59eb5c932ebb58ace27b6c9451fad004

SHA1
38091fec205f0075a321b6acb34a313990a3e62d

SHA256
29ac4d4034cb441096e828731226476908ec146696fc38d5c6c155744a82cc01

SHA512
d851495f656b8babd37c8c5475dcffbb326bfd81100fdfeb36e80962091b7f9614261b6f2c33ac881dc57a3d72b040fa4490d20c1c82a4d2ff2f117f35137ef1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

Filesize
334B

MD5
9565b8d769f9d59df53fef9dbbbb565f

SHA1
1f1dfb89c356a28b7c6ae664011d8d1d358bd0ad

SHA256
9dbb47a87f843867b19b2907b3a1b4e26f964f191f85e83a3415321591dd7f5d

SHA512
22d6b808e003f8a4a3930fac9383c31841c4642b48e8e56a788bfb5fe6dd7592a9d164f1fb6957a5311887b9cb8345c4131183d69207350e91eff3cab886b0db

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
24cbc11f2731a1245d9eb06d7a7fa6c8

SHA1
c4e57a5051858d1b239c14863caf788c78270042

SHA256
80e74bcb5008075d3a0729c7a324923614d6733374023fdcc45e4146018cadcf

SHA512
1d80e8c222eac829c904dcea8196496e1665893c6ab188fe599da84e5a2141862ff6fe73b9b5bdd49779b6854f7602304952c013993e599301968975a812e6d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
9cbaed6cbb4a0f84ef89beb59eceb369

SHA1
7cf674607852485d8acfdbc9900761efc0163c84

SHA256
2c88cc6e21651dbc7f2526b11da7499d7a97496efa8519882b0311c8cc331d6f

SHA512
737bb64a2415224af6b4443409c5893a976cc298935ad7006c5fa7084407fe83ae1cfae76d76f5acc992a6b0d7110d2d394a2418733b37eadc29a61cac3e88aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
d10b430a125364dc0adfbe44d5ceb118

SHA1
dd901350e02cf261fc950429602f582b4d0a8978

SHA256
54e4fb5727dc84903382de6f0c77a1e5d8d390d35f3bb6c36b277f29d5d018a5

SHA512
b3ced752d1f1ebf20666d89e74126d4f42947761d21e8e25596158bcc243fef511d1243708671db36c23b29e0bea8a192d30515c02be7b2d250ce1f8234aaff1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
40d65cb8f0da76a135c40cdaf27176ab

SHA1
62b289b045fb8df9ca83a12bd2256b72dec7ceb7

SHA256
321a18a92bdedd858ecf47048be667cbec7c7570cb136e87083e38b9df9b1c03

SHA512
ca4165f0f3468db71a48246e04dee436b9835d89bae033fae333914be775def33851ab3d836f9d0c70be7ac1a46ef767cec7d2ba37350c092344e44823ae2a40

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ec19c81b927aab5fdfb88811a0670da9

SHA1
48eb4ecfce6305feb83c7642963d73ee4181f7e3

SHA256
fbfd52c63ce18178e06b142198bd09618a9fe54ba9e3c5f9b9218ecda554b98e

SHA512
80e298b86c8dfaaee1ddd2b59f3d14592f8542d5cd1682ff0327d58a9a56ac0e4df40380c2fd202f52a207277c3523ebe938455357364ed1d56349d7539ee8e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
2038c252dbaca167d1460bdb06ad07fc

SHA1
7d9986a7723a3403a020316041058d2493ae1408

SHA256
670b3c8eef204279d280edd40ef74c29b58b5f0694c0c3349798e6660ff439e2

SHA512
c7a23bae6041bb9016bb6933a5d39c074d07610ee13fcc499ca4109f693970022446063ad72b35bd42b59f8d02d44dcc6085716b98f33a3e74b22b5851eb9b46

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
1f87fa4eded35b071b0da8afc7aaa02c

SHA1
fca1c770d4134d1bcdefc0a3523c91495f74b97a

SHA256
29a98daebf67287df5b415a5acd96c9bf803ff31056d53eef8e8ffc7c2260c93

SHA512
1cfa5379abc16830df3592c77086fbbc006877e288754ce3cbfd1b75f9c9ecfc26b52296b82c5fdebc8b580aefb59590792158f4d30848650c43371e463ae369

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log

Filesize
597B

MD5
2a953592436624b9f97c031e4ef14e18

SHA1
539d1751c2d1db21f6e1ce05fb9c04fdfcdf5503

SHA256
df361d78391eb77ccf9c07bb4588e725edd2d948f18bc308f8e49ce6dc7af9ab

SHA512
34318d43a3d6d09a1530b2a35f34918fdcc6917113bac9f8d2d283be406bf10de257d45b51436e06d46973bef27f116ac8ef6282baf19f533383cde90a6adaae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG

Filesize
322B

MD5
65a018c82bcfb48d32d3d589578897cc

SHA1
a43c1a6fee813bc96bd32c9b4a0872e04b4d9f1b

SHA256
2fec6509a3134564c25f19e929500dcde3de4e784c3f36e415f6dddbf49bbfcb

SHA512
2218c8d9fcada82b6347720d93d622aad04c709ce85dbb837ebd253aaa235c505db65ba7585e16d5bc394491f224613145a3cd7f1c1520d9f5e301c683bd0377

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13367939377034980

Filesize
12KB

MD5
f43a3b56bee3c2fce32bffc584f38c67

SHA1
51c4640e72d8f2ead7125967ce9183e19a258d8f

SHA256
2a396202e45fe94059ca1d281016cb82814d023b3e361b77e57fd7699a59b82c

SHA512
3eb18d17268d333ecac975c7b3301fd2f52f143546c611209b922117b234020dbb88d77d47ec81a520e937d86fe22c024e5c6fc3c7278d1bef6704787bec79d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13367939377237980

Filesize
7KB

MD5
fae2d12dfd9808db5e2b8a5c56d83a62

SHA1
d50b99d47822da5f4511be919363a2164ae23f06

SHA256
a8b7db7e1649c61204e79b7d4e5ebbf682c339a9cbf90303cc0db37552033a3c

SHA512
545d8f9f3006809c6576491834b2f715e0c7ff7f9975cd40520e10133117c4fd806acc523883fea1b5537cd20ffa572fc268ba842b5c7bfb86cce69a02e31fbe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log

Filesize
184B

MD5
ee894a3c05b943b5c427948366695d08

SHA1
cf53172c8246e69c7d9ac649de0b98ea4a42a368

SHA256
ebab9d3e6a402079f7d0307a5cb0881edab1e0bc2322bc6520f9499fd8ba661f

SHA512
ea24375319ae06c30126e3ed6c72155b00d458750b7648bfd15bd41d20c8c9ff9955a7546ec601837e0eab22654130e72fd24419422ea719e27399312cc1a5b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

Filesize
347B

MD5
5f073e5867eb4608e8ef4e195b190fbd

SHA1
3dc7e2b75ac162a2aa03c1be08fbd6921f64432e

SHA256
34072f273f52c3b3d7c113724b09fb21bade8701172fafbe8df7090327bd4519

SHA512
5571f58f331e20a5bd8fc3f584b05fc150f7bf65599c4aa4c2e6d0e46efaf3bfa1752ce394e2a987c481153684ce6cfcc0c061c7d1bb548ff3b62b53e729ee47

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Filesize
323B

MD5
66d97a8e574aa88c35279fbf3a465dd6

SHA1
0df337dfb5765200140072ecc9606ced8f0cb1e3

SHA256
c469d3556104949b1356ea492423c9c31fd33002bb249bd15b4e7081ea816193

SHA512
60b03a7c67b4b3ae2c09e40d0426a58a50f482102959f809e350a4a9eddf9d8f8e8699fe1d37442c56e1733c727fa7603d39140bbe0fc7353cce0ba81af069c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
872B

MD5
5640ae89d17f95f2203820448f703581

SHA1
aace98958d7666a73a51ed6095cf5ceafc2e3ffc

SHA256
269ca5a28641232a86795c980e3969cf5e8ce64592184b5d96de4bd1dbbcd149

SHA512
e8942a9bb93e8b83e9b9257868f71ea2485d74f2b07a98e954d34d7b7bd0aad84861225c87a895d8ce6dd71c8a036b9596ecd01c84126edf3d2169d986ff03cc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links

Filesize
128KB

MD5
7faad365c49234f8f6a8f12b1d52219e

SHA1
4beecb7a0857cf971765c1cae14fdd6e0435d5b7

SHA256
0722937b3d14c9a65a6d2d03d30d3b471f8a94f7b6e459c417e835da52ee86be

SHA512
bedcd199222bf0fc34516fa5d740bb8649e782901f4fbb60eeefe56f071fc77a8d5dd75470fe1b06c9ffa72c9d2cbcf316a5cee928c67440035f07ef384f5354

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db

Filesize
44KB

MD5
86e40ff0be6c8d317223886197104a1d

SHA1
92ae8057c2261209120c5eb427d312e3ef5ef6a8

SHA256
1def9665961dc7879611aa86e196d555bb702497375e8c01673461a9b54324da

SHA512
8006d4a459b562dd6e791d50fb4f312b01e96dc9177b2d4932aa2aa538823507634adcb3b695f578b22c00e0579d5abc10137fa1b76abba7514a1889e24698d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log

Filesize
89KB

MD5
79a45ab8d5e342091ad190bc18c38312

SHA1
98abc5d74ea5a0c8d96092b590ae6896bf725f58

SHA256
51e26e15da0f3efc380f54bb2164545142b5d2b259a9abacf39c31e64b7f18db

SHA512
363e90f44f9c2f6c02f8b2ec80458fb02563ab452429fbc56615ec7d3d865e9183d40b6b34ab138ba4439bc7e9f35ff15af814d70b43dc2819b4787f4fd5acee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG

Filesize
319B

MD5
da71293c34e1301af9824b67e6194dd9

SHA1
a5f6f6a816074d34cc99043b32f9253f6464f550

SHA256
1faf8c37514da29fa0fbdda5d166865f01920fba877538436972290ee17d1978

SHA512
ca735d48de1e96f6a2c6a2d27fceb2b841388cd55c3f024752f846b79eecca789a87f71d29b5297e5e1831cfe320850009e2295e6309c67678e94dabf31d0254

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG

Filesize
337B

MD5
ff41648313b098a592b42921d45aa7aa

SHA1
b99476af4fc5828feff84c9e0e8289442781e340

SHA256
88949648d29dc7723f4a953fe6dd60df060c5e24b69881497ae1441495f94897

SHA512
691f53b3efe36fa1805b6cacf038302cfd414e67597e20589d18375a04897e7dafb73208c40561399f3aba864faddeca3cb218de50f8f471b50eb71c52f75b16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_0

Filesize
44KB

MD5
ae09655e204ce8c7d461847ae1127259

SHA1
ff96a58ec330a3285572676f96a2c449b116c892

SHA256
9166983fdd116cf18e5250a60b9150207974dfea4fdbe1fddc102f5c40dc0b38

SHA512
dfc371947c86bc9f010ec59fc8d1dba9b527f367c01e78d64117781dc3ed0f0ad7b3a2f3f9a7cc7310c163c33a13953a9e71646de8fb62bd0a113ebe7a5658aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_1

Filesize
264KB

MD5
ce399812cb4da2b9f23fc16eb5f2744a

SHA1
332637a770e49136dd06589fe24e3425bc48bf86

SHA256
f3e9194857aa260a6b48311e86909037891d6d731c22d1e9554e5ade4607bdf5

SHA512
55334c35b2c5014711c9ffb210531a992fb65212f415f4e7385dfa45820e1e2763e3ef3932ee84a3389df83be1e23fde19d626d68fe4d684e039d0a8d606a617

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_3

Filesize
4.0MB

MD5
606680c74a45ffaa99449166f9d7cefa

SHA1
8284dfa0875bd7abea7a0f8364f82d0c728f0e54

SHA256
9b79f6537a04f4d9d6784c9de6f7197223eec455c05070c52d15addba62b4e69

SHA512
b5224098c3fc317616ab11606103fd255c79ec748eae6097cad94d2ea282bac533605f6e2c36f7951dee0da38ecdbcd9770360efb7968ad723f3e97e7be7230c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000001

Filesize
20KB

MD5
7e86d5c1bf2ff36b15bfbd8fcf748b16

SHA1
59a1515ddff8caec85c4f27ffb17b69a42ec6226

SHA256
82f03e141e82546b261c1a24cd9ae3cfd4b19a7b4f343a296428deeda88cf856

SHA512
943fdf966d2ca4bfb35e01431e7bae1611e86d4bbf9c27524ba4502a9a93b8c0bb39e7760a8ee76993c4099da1ff49febe0b48468f134d4121f22a0ffb41bf2f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000002

Filesize
20KB

MD5
2a029687e73114ebcb4fad10c0114e8a

SHA1
f09cbbed46b9f8c731568bdcee13024e89bda397

SHA256
fe6e92a5b020858bbdd8089533c6f22703bc5927e22f689c384164096705b11b

SHA512
211dc45e2bb5739bcf863c44ca8132f92e895b3c95d074929aa4338698d53c6ccb3a8e2f23180260d9226073f4f5cd21a200010a7a224de7c8ac2e1cc853730d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000003

Filesize
17KB

MD5
ca765b8e7dba1f1d87e3759809ba37d2

SHA1
9b72c329e11bbbe5d3b32ce94fde87e94ff0bcd1

SHA256
aa9be59895aa68a436dcbf217cb626eddf9b2d0fb11e31c7943f846bc1df6c76

SHA512
c14ce917fd59a600e57454b61c419dddfe3d0b7adb43cb07f9cb7b1c2b5f59a0cd1596006874b9bb53c2f092cbcf332e3ef0bda9b6c2616c9bfac80b8f0c7a32

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000004

Filesize
17KB

MD5
01c531b6bbd06a2f0b438670f84804de

SHA1
a5095fbdd8112d83cff24536d6c769ba85300587

SHA256
28c2640e996c514e89ed0638447c3f58bd7a829290bf16d27d7960d2c1121efd

SHA512
61656b632ab006e389d8493ac008d3c670fb2f3a21cea44975c12a62f265f1c0de2ab4f516b302e298bba13dc9c5fc9841adb66f154c335416ce9b0cef89e118

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version

Filesize
11B

MD5
b29bcf9cd0e55f93000b4bb265a9810b

SHA1
e662b8c98bd5eced29495dbe2a8f1930e3f714b8

SHA256
f53ab2877a33ef4dbde62f23f0cbfb572924a80a3921f47fc080d680107064b4

SHA512
e15f515e4177d38d6bb83a939a0a8f901ce64dffe45e635063161497d527fbddaf2b1261195fde90b72b4c3e64ac0a0500003faceffcc749471733c9e83eb011

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
dde93c799137579d3faa0d883faf1eea

SHA1
9becae5aaa3eee9b22dec126e1fc95cce2ff9986

SHA256
e3d67962fcd31a2da03951f6678626f8cce809dfcf26154b8e9cfff1d55d438f

SHA512
85afd0c48876b65a6202669850af9fb429b22792b477e7d75979c870f37848b75db031dd0d144439eba78016d0a84940ae9166b02bf28b7b6e387dca9f6e2209

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
98c0c6fb6c1f066f6abad43139cc50c0

SHA1
5da813ae5b238c8ac7cf769e677cdbc8c6140696

SHA256
f3b3fc3f9f486ca2f0df569574865d3c617900923feb6af7cfbe6795640603ef

SHA512
5356d57079c7f0ce370432f1f7adf6c9f7bd28374a2cc8f3e9e34358026be411a457cd101793aa236e5205039dc6d4a90e4a35af7f5d2f854e34b71d84f61a12

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
d0684321dc0ec9484c124980a5ff9801

SHA1
0c05795b004a32fa51f0acf07bf5acb12e1c5e04

SHA256
0599410ea2bb355e720cb1559d3bd7a792d5cc29deeaf4e8c71bffaf4c53ab47

SHA512
e7c50cb4db8aefc9a37e759e69162e2c69068d29921144170c5c39f86e2bd311a2e5dd8da82dee07dfd4329949d620d071c8e37c3686ff382eb5275c5e994072

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\data_1

Filesize
264KB

MD5
da87ccac5ee7c46307d2da895de9858f

SHA1
834de8c6aa58fedf2a1430d63211dfb3fb43d8af

SHA256
a15632b75bdc3643457d04dd80ab3ce36f3ad9e7d9ec8425f08fcac1620cd90e

SHA512
8b8b36de7cb57384c07c09bca2749bce78919233e4a37bf84fa71be3dd37cb25fe143ab677a8c2964f5d33701a142770a8ffe37f06aa4ffcb5ac6bbf1987960e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\edge_shutdown_ms.txt

Filesize
3B

MD5
cabc739fc7e27394662dbc053502d89a

SHA1
6b710f1e7244eed3b1909e31c1e54b6ca925f3f6

SHA256
035f788fc541b00eea3f8717fe7d9787447e93a086178b1f97738e9cae61e387

SHA512
2ac48ec5ceab6de57f651f40a994daf9ff6e08c9bc24c71c4588d30c6f7a22bd642ec12d09a8736f7654a37605fa30d777272968840629218cb05e68aeb132e0

Download Submit
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

Filesize
11KB

MD5
54aac82933d6068feb6ece3285f180e8

SHA1
1dd629f36d5c94be4c6dd4aaf0e3acf3dad8fc8f

SHA256
d5e9d5e34d726df34b829dd6b6fef58ca298ef583d455d6a42b9c7c74cab214e

SHA512
a848378921c99f7a29d5d1c6a61f11295bb94b0eb738f06f7f84e04c6f7e4ba5e5a274a5f8b8c234757197f7f1391182874a26b1acbd69020917f5a95034bc00

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Aug2008_XACT_x64.inf

Filesize
920B

MD5
f616331f6e6916d1d27fbcf357cf1478

SHA1
e5530aa845bca9b1c89abbbc189f65584008cedb

SHA256
cf09d632a4b2cc670d435f356f309dc58359735834baed10343fdfbf37eddaa1

SHA512
c39fd664f43c4cfad8e65d5d6b3ca845abc0b341cb663acc7e274a00c3218394d3d04cca850312074a294bcee4e5a0796a3c90d6263de63f8f83078d9c44c8ec

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Aug2008_XACT_x86.inf

Filesize
1KB

MD5
d2aedfbc8bd56092d658bd60b464dfa5

SHA1
54f8e1cd59f43cbe02767face39fa42f50ddd229

SHA256
f1daaa8d96108a4a338f62a4a1339143ddc566e194ca00dde5427136bfccb0af

SHA512
41d74bf9899e8d904bb0bfeed5e053ac3c453e0d591526aaf5305ba33128abfe29cea09bdc23e2131f91626a66f0ff58f6cc02fda9692e58fb2c476795e2b6d4

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Aug2008_XAudio_x64.inf

Filesize
923B

MD5
fe4812a5425f1b6d9562b9609db16ba8

SHA1
01a206feff15ead479848ddf056a560701960fc2

SHA256
311bd58ed7437a1cc79692ae360a02efbc8ec51194abcb80bad78b2208a94d58

SHA512
2a98b997af381504ec8e2c5b182c73717ab81a455ae77c57036aa904f87dc8fdfd16a7835cc1e631e9435257da8bc631946b32d8f3bb72d260d1114c4c3c4390

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Aug2008_XAudio_x86.inf

Filesize
1KB

MD5
e0947065f559b93eb93a7ceeaa8bfd44

SHA1
39bb647363b00924c7c0b3792f8017d7c7d9e3b4

SHA256
f211a7d99b3ffa0180bd91f68b2c285564227e075d499e950e76fde04e7707e3

SHA512
620810dcd56857b2d3d5f1271c5d4979cc90977acebfea81edb472d02da8e6104e89984816a91ab57a2469253a391bcc378093f1adaeea7c0d35f7f1b794969d

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Aug2008_d3dx10_39_x64.inf

Filesize
815B

MD5
b01ca47b1cffd13ec5d8a6a592ae8449

SHA1
e1b615488ba42c44922522dd47b2e99f1b5394e7

SHA256
a5eab981c313538afcd7abc7742854d251c736835ffc1f549a4768fdf49c3e71

SHA512
2609474f1ce19473ff8f5f4550f9eca077bcf063bff8ea7fe890493e1119e80e6b233141a8e9dbe7d9f1e167c4941fead6cafe506f98053e623728b7edcf4ea2

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Aug2008_d3dx10_39_x86.inf

Filesize
1KB

MD5
baa493c7a361f1ac0c5efc94f1568f97

SHA1
16dd101673b96b54bc5a38c20ec3ed785c6bf7bb

SHA256
e83f8d48323887af89648c5bd7af713b42d20ccb757be34675f1fa527e6cc33f

SHA512
2e8db3d1ce2830caa9a0f698bc31e2b907e39a233fb056fae44062b3ff732b3b62f12fcb2eb948c1728df9b64c4d8ee873c0f95e56c2ad1727140236ecc71095

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Aug2008_d3dx9_39_x64.inf

Filesize
812B

MD5
9411bf36f2075b7e42468277e8020e40

SHA1
c38bb84e7381baf0d2720e5f1822781a639c04bc

SHA256
4cbb1c6804b9c76bba4e41f0d2a45f1daba7350af9da4ae6966651f7f4da041a

SHA512
c860da71a89c41e81c1c89b3e1f4e93e747d7dca1152a4ba063f53f899fc701fe24f14abecfe883571af518df4c2d766432ddbae2ccb2c52bd87d85f6ad015b3

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Aug2008_d3dx9_39_x86.inf

Filesize
1KB

MD5
b28ef6e3eebceb622d1431fedd9f545a

SHA1
c6ae73cbbdff4632911dc1759a9ccdd73056ac8b

SHA256
8a23d386626328f9519076f33d5c3b71c639f2347741442c3374974e6f61bd53

SHA512
4f2bfced9eedabd6ca807a1b88cc063d15a31ab0bd8e2b60c65d6daddac9a111c434a0fa7d7641813d9880612464351ea30368bf6f0ed9ffc69bfb4d51882d12

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\D3DCompiler_37.dll

Filesize
1.4MB

MD5
ea752dbce35045d3c830dc16578cc8ab

SHA1
0a9bdf391ccdd113fde4d10f0afc80d54df01259

SHA256
715876d15b590936e4d32602a764d810650eec134922b32eea742e2fa71791c1

SHA512
3cf5e79062203d39fdb74e789e22405b93de126deda3d698963682d51f264cafe9a91d433312bb7976fa9b50a4798060fcb97b6de7f0dd422eecac2a922e31dd

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\D3DCompiler_38.dll

Filesize
1.4MB

MD5
103cbfc5591008ad33046e20e8e1eebe

SHA1
4a8bd29d7cbe5652ba58cd6754318a03497d841a

SHA256
ddcaadbdd47bcba02c8d1880d456acc20732d21554977338ae507987ed04046e

SHA512
ddab1a2ab33b224ac3f9ed396415bbbdf96bd59bc6794fe26796ee87691154d5e1ca2abf8bb85e7a9fb6793446bf17f6f6f53b74e69443270f50ce0b85e06b6f

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\D3DCompiler_39.dll

Filesize
1.4MB

MD5
c4f1972497fe2ceb7d900938c97fcf91

SHA1
27c1886e7823813ac61c35ea0cd5b72ea0ea7dbc

SHA256
b99b655abc4ec45851cc2acdb7a348e739687200a4fe3be9c35d6738dd61112f

SHA512
8d35dd4000e1d632d0924b594d6ef13454159f8c3b85636f180486ff794b76f8a84d7977e340ef08217f0f68747b593eae0b44824a20c12494007f4a40cc3d00

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\D3DCompiler_40.dll

Filesize
1.9MB

MD5
3384134eeb8f223178c2eb8323003ec0

SHA1
c8eaef8cbc91f4386e42904dee70abb6ab7304f2

SHA256
f0a6f156d13150de6ebb094233e5ff78581fbdb77bd0ff8d083698c42bc8e13b

SHA512
dafcf4c116d994c17d47d36b1dbc2ba8ca61cadeefa5d770adc391713d2c13ed2b6eb8d2464f4811cb472c8e1eef384ba21d7ad8203ba4e9ef07f33781feaaf9

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Jun2008_X3DAudio_x64.inf

Filesize
815B

MD5
0225e16dbd17754f202f34cc1fdaa60e

SHA1
d8d7e02849d9594b346023e9e69a5b2a4fffc45a

SHA256
f4526ad18f081b84a139e6d98923569fc8ffc7644e20499e2f68abfb3e87753e

SHA512
2b308f4c4592a80d4215781ba7ace57f93a7449b2ce36a7c78203e1f16f1b7321dff6c32272180c9cbaee5d31afbdcd11f3d474004fe13c63752d3c0201d2033

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Jun2008_X3DAudio_x86.inf

Filesize
1KB

MD5
7949a4d37b517c39295f0d656cbde501

SHA1
27313949fe172d687e9faaaf91044ef56b7c973e

SHA256
0064b7db5bfe52b6f40f61d962901c7baa116abbc72328f50586b6fa65f894bd

SHA512
93d947c95b7ae357bd47a5a050437cb05192eb6c84e9222a46d70ecc7c54bc2a5cb1d3f65cb2a4db5fe18106ed9be5a7aefef08f9634b28cd5cf128bd00352fe

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Jun2008_XACT_x64.inf

Filesize
920B

MD5
9b2753cd7967a014a6391b44900ce258

SHA1
d6d227999ad32de75e05ae7d7fc43640e8893ec4

SHA256
90577c4c3d5d0de80c805caf0cc713582698ef7224fecf4ff911ba6309c5c920

SHA512
31136e55f01d382cb20f7109d0369a3ab7c8997dde1b65e9214e410ab686add4ef6950241c0aa9fc93ea0cfe3134d98ae1f3f48b44e92a620715bf159d6f5914

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Jun2008_XACT_x86.inf

Filesize
1KB

MD5
59c4f83a7fa2a8dee4970d37a96c2b55

SHA1
75b42f58c61d8c8ae185cd8560dbfedb7c4d6d9c

SHA256
79cb10222e466d54908d30ee433830e9673d5a538fabc5f4568521c2aff66eb1

SHA512
9a9b7ea3b354cbb29d88797533332abd4d1ad195b28ee6af05a0c6f83343b1e2ae0ce172e9941eb5f0d7ed3fb0382c1319fe4808ea2bf8988a1dc63b78c8c095

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Jun2008_XAudio_x64.inf

Filesize
923B

MD5
c564c4dd81be3fe65783bca776be371e

SHA1
b60e1e1e34b8c56fac53dd7af79e1e05e04866bb

SHA256
9ce21064f2feed9bc9426a6e92e9c850aae31abeb80c7906ff917fbf4cc03913

SHA512
5b790aa1a6215ce8687cf3503267e31d1d7b41b5e4675bc634be957fbe14c53556989278017f2c97336df13d16eeaf975e0602a4cf9c8356598c392977df4dcc

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Jun2008_XAudio_x86.inf

Filesize
1KB

MD5
e82ee7f4d71ae8bf90378bb6dc107d57

SHA1
6fc8e3437dc9d87213064e69bf0769d20fa7a739

SHA256
e5e435c4536f987e1087218b025e6dc66c24c3e300e839391891f1b3bfd360dd

SHA512
baea9f4d6c744f26b55426c9666f135c07f3e8af15fee04cdf34c0af83567815dadd5a4ac8a6547a49d58e0c837a28fb18c4fe1f50fbed8da9991bd2aed8ab7e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Jun2008_d3dx10_38_x64.inf

Filesize
815B

MD5
e2b760696e2300b1c9b6c2531b39d029

SHA1
1c576840cf04b73de362b28b943bd69b09b3883e

SHA256
0de0ada970774620c0905227666fc30910e64f3cfa4b99e4c5481685d12e3ded

SHA512
94e4bd9834c21acc7709fd28dc557455929f940be0a4a794105188dceed7e023f87a489a1de44a9f93f3780f6f9088ab3d4e829a0089bec74a25ba4297a0dd73

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Jun2008_d3dx10_38_x86.inf

Filesize
1KB

MD5
d12a6b9889eeb330b4a4e86e9bd175ae

SHA1
62a4a7cb8fcc0edc240caea13b2b487cd012fb00

SHA256
f5f54664ec67f6333a9f0607d891bd0dc2acfee8cce09ac4ee0372b5d0aa12fd

SHA512
86274606e76b98b71dc4eec5180b3a52cb6627ac5ecc8b008512b7bad404e03b834b7129ce326a3c9c1cfa8b19bd5e97467a9390bc8a0e749771ca06d9f73491

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Jun2008_d3dx9_38_x64.inf

Filesize
812B

MD5
df5538bc9e0494845a8e2d607e06e561

SHA1
a056a64230f03835dcf9bbc5d84edc2eb0c09484

SHA256
ddad68974990a21a8d4a91c47ef1034ddf0475551586f04e86b8cd2f0c990d6f

SHA512
4f19379034eb47e01de81a611facc2c8300c7b10306ebbabd232a249debb4acdcd3de42b71d851011be5b3abcae1ca232ae6891be79adfd754369dc0f16b249f

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Jun2008_d3dx9_38_x86.inf

Filesize
1KB

MD5
c7fc0a82355bafed08a5597930b80263

SHA1
037419fc93581e053b4cd31c57222c8b8761e242

SHA256
06faf7f7ea5503dcece13d6537e57cd2581d5188a5d839fe7f118298a721b51a

SHA512
51829843dd7e2e501d6054f500fa523bf63f19382890880cac0e3f207a00dbc544195489de67c7dcf876d9061f2af12bd346513e1c98047b0c185669be5d8cc9

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Mar2008_X3DAudio_x64.inf

Filesize
815B

MD5
2f7b3369825c6b74f4b645ebf52c8e98

SHA1
105972c77223b943df6533d517c698241ddee9b1

SHA256
b7dba312a71ed109c9c54cc5cc096096eb8cf0962396e8dc996f8fa28307547c

SHA512
88a47bc3520f9fbc082f1ddca7e083cff9bdbe5c4a0a851925ea14d8e0f327f2a9982e5b4ac457e4950acdcf6788299c4e13a15ff38bb76c8d212f1466cfcec2

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Mar2008_X3DAudio_x86.inf

Filesize
1KB

MD5
9ab8a749708995453ee8a995a877af2b

SHA1
eb8a0ad7f7b38aa190e2fb8a4a2d11cc9fa9b493

SHA256
0b6e28f00364a9ff436c3d99f0d4e80bf615f1450f420122324853cc0b88b16c

SHA512
9b0ed586fed0ffe25d4076b202afcc7ad580dbb05593e392a12d64b639098f8b7687463f213e53dfbb85616c5a3781adaef8f1ffd293c082a84291472266480b

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Mar2008_XACT_x64.inf

Filesize
920B

MD5
d5debb90aee2d6a73bb448aaa99f985d

SHA1
950ff1a768bdabf14ca2cc6809431c3be8b19d9a

SHA256
1038a41e63ee8abbc8be85a86fafb2ac1d03defa6b88deb270f96a6ed1a97122

SHA512
dca65e91d4eb619fb34615a3c8683e04af84e843346b88bf4d52cae0c27e52b5a7a417c531eaf50cf45932e3fd6f5fff1bcfeeea4fe65efffbe791c8ac1a8101

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Mar2008_XACT_x86.inf

Filesize
1KB

MD5
e3ad8befca2528572d6c51a15e072c94

SHA1
9718337261b8b93b546a5c20bee8b44d26707053

SHA256
6b0cc0dc993e172855864fa078c4e5c8f2f46bfc3200bf2ccdf3292931ee3cb2

SHA512
de4915424d8a53ede76394fac14c4de46838f21afc8bf30f560d2d00df4f366dc9ab48bb343be3580087a7d5862a14c08f83b5d9cc8e78aa4cce4e6b71b70c59

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Mar2008_XAudio_x64.inf

Filesize
923B

MD5
8eab978252843c5c47a913e4eee460b5

SHA1
b5ac7e6a36157c41d56e1113d7768e67530640c0

SHA256
10a2db49dd3bea59133bbd82b3fc0f8a959b65b0c250c11a9a6f3123b961e6e9

SHA512
d1b7be4eaba7126f3f64d625cb9c9d16dd40dd1dec96b4d647f9a5e24d6b945faebb65f25348d9ffbe092b03b1a54414cea9a2e4d1eb1deb102ab5abdb34d810

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Mar2008_XAudio_x86.inf

Filesize
1KB

MD5
35c6f6f109257f242cfb2ad2062d50c4

SHA1
222406bf52449ff0d5a7ca8ace6cbd3dd5f41708

SHA256
472bcfb54b5d63377da128596dfb30c8f200f79edaaf6d29de1afcdb71a3413d

SHA512
71180d47d8c177d84e68bcd6b9f948dc8c946f7a6c4091e20e04f1c8098b9ba92bde976194b06595834ba4b159a702c091d04ec823ac377b7ba7713f057f99ee

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Mar2008_d3dx10_37_x64.inf

Filesize
815B

MD5
b21f653f707315be4c85ff4630af305b

SHA1
32b0d69a786a2cd37d2fdf541931d90ae8656944

SHA256
f37681f4d49f71d48b1960c3efac74f28af9fa764b29ed3a40b5f424fc8f60c9

SHA512
e68348c9413f77749218fa34e55e416c7bac95f234522bb6eccbed1185a3f3af2a393511d3b83dbfc64580e1725f9f53e7e586570d696a3fee76761e8b0902f4

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Mar2008_d3dx10_37_x86.inf

Filesize
1KB

MD5
1242da12c637d5976af936f60f387c26

SHA1
a6890fa9d41f6785d54a7d3e1b229b64010089ab

SHA256
bae3bc2b7071d2d1c657a87a8c8af6c0fb5373f11c9aa5f61b406924717d0792

SHA512
7fcaf6ac1a8166e8c68d650dfea40bf329565d4ef92316ed0188a252736c9e288cc8f7d017b0de4af05245d1bf94a85b2dc72a93c618a1f2caeda45fd84a6a09

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Mar2008_d3dx9_37_x64.inf

Filesize
812B

MD5
ec75fe979fd2c2372ea75c72a905c832

SHA1
954642c9087489285c8f0786b63aee108ec08d04

SHA256
a4fda3373241c2748a969ddeeb6ef41b3cc1bca6608362ba87db75f69023fe9c

SHA512
dcaa772d21d1be7fe59f1ad32d10e7cb454ed2a4d98b3add201f8bef03718c29f9915fb4cb779111a954a9d93d898393ac2ba593c2d4d378b88bd492b7b5381b

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Mar2008_d3dx9_37_x86.inf

Filesize
1KB

MD5
020d1260794d5780937f0f7a919cd62d

SHA1
511ecd1186deaf129a5532b79fc776a9ab8fa9be

SHA256
d55858e166a2fe00d4acc30da756f0ab2c4dd5a79a9874eab3100722c74a1b75

SHA512
201e24e51dd859c35fa9d0a403993cb0b2eba67effbc598ca4491f05bff4f0805731b1e7cf6026b7dff9fbc3167c16b43887f080fa40ac11c6ffe09297401f9f

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Nov2008_X3DAudio_x64.inf

Filesize
815B

MD5
fe8f918218c40fcc007bf16e9cf0b76f

SHA1
2b66a5a714bc7a0ebdccb0029e179bb3f32009e5

SHA256
d04d052fa3065cdf00e96bcdd7dabf3583ef10b6d80fd67cb03c32f09f2e602d

SHA512
9845d8d2c0c0c618594e692abb382e4244d95f5a06c48d7ae694dd09ada670ff23bab07fbfd09310f60f6684267ed0709a1d146da6fbbecef4790b9373840b2b

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Nov2008_X3DAudio_x86.inf

Filesize
1KB

MD5
e8adbd1e68258d5657a34ea722f3bd32

SHA1
ae4e88d17663889e841992436b524a35506ee534

SHA256
d0361ffe046b7a7a374a4938d419e4121365892e4f2138899f670619ab34ac6a

SHA512
62b132cbde7afebaf20a437b810ea42b7c782eff4fa1f83e2e586b2fd9303829ac90c54704e28f53010a8487e04bf92b791c85fff4c949a12cdff2132c2b09de

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Nov2008_XACT_x64.inf

Filesize
920B

MD5
d28248a55a7747733c0e4356c1a15d70

SHA1
befab66a5faf1889c6eb2208698874b00024b78c

SHA256
2d8a68e726728e4f4be05e35fca812b855046ce4bf697f0dea14094dbd7e1d79

SHA512
f7b89d96e287ddf8200462c4eb0415f2fec81b7a69e5fd4bd5bd33cfc805287d287dc403060b01639cdb67b14ebe65e42f75c3a1fabbcaf8692d315cd5bf45a7

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Nov2008_XACT_x86.inf

Filesize
1KB

MD5
87c8d16c6db20854f9610bd5be6e5ae5

SHA1
c17d78456637cc2a67b35d48f9cb3c730526425a

SHA256
31680e7a90d24eda04c910e1f3e6c02774cfc5c36ae08e7ac043665264702f83

SHA512
061d80816e2e5a7a2df68cd91a95e5f17aae8610a18b254abb7d5929826b14da5755eb01912eb369d1fb5725f2a4c144ce92e0d08b61799903d83fc91f35413e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Nov2008_XAudio_x64.inf

Filesize
923B

MD5
318d70544da7620126540b0712200e7b

SHA1
707c4a04f02e10b08a16528b0da8b284cfa315c9

SHA256
ed20b160dd26a5ed3c220a1fd9b5fc880b3280ebf56c2f73e76b6d4da5ef82bd

SHA512
4acbf6b35043ffe9c740e3e48fd9320e10f5dbe317dd89dcb97b68495b60cc2cb2cd98e57fad030ed053636b710d344b96667b69bec4b7727ba2508f35f23aeb

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Nov2008_XAudio_x86.inf

Filesize
1KB

MD5
052b3294a9345385406ac2056e724804

SHA1
79372406f5cf40deefd8ada18ba238e80360ac70

SHA256
950b5aef596fc5048732f6cf263dfca5bcc25df7dc17df91efcbc3551751a3b3

SHA512
9b0cff2968acd2552609169a138d40fcc25ff2c35b70ba61cabf769f4e5b54774f32392508867b6ed9198b3da5a858b3a7079d7c4a4ddb31f63e4d4985efd2bd

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Nov2008_d3dx10_40_x64.inf

Filesize
815B

MD5
f0769f57bd08036d669104f9bc942228

SHA1
18fd51cbdb46f1ffd47103dc026f1cabf4e4868c

SHA256
7f902d9ce6f6d71be1d16997ffc9661be2540522c73cc185516415a52dced2a5

SHA512
427acfacf52759a1ebd749022c375767fc283a625b6773e06f8965926e0b96a969a27a440bd661015b56eeffa6decce7322e43974172966520c9ea5f6164914e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Nov2008_d3dx10_40_x86.inf

Filesize
1KB

MD5
7a3a4c3b7c9c979261ab1fe477809731

SHA1
545004e59315dea0bcee6bde61bde3c45f79d107

SHA256
a4eed39cf36adccac4317e5822b30aa37ac5b001bcf4a24f7b5ccac6b8b71e9d

SHA512
556cf8ff26de695e39aa42fbbfe0bb986fca9ecdc08209c28404aa1b285cba8bc4ba62659fd0d929d138c781446fdcf2a30c0e1aa1487f6f1d75c9f15145c7bd

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Nov2008_d3dx9_40_x64.inf

Filesize
812B

MD5
4f4a9d3074a4ce8fa141a17b0c2e97c5

SHA1
e77b4e76ef70fb08befd69a03b9f5dcf02c81428

SHA256
d071b30f56763506da0c939b8d35b0540bef3ef0d51a5cfbc45816ca91f891a3

SHA512
7b961d3b9ed247e75047a5bac6d65ed741fb3c210fadfb23d4b77653af7001fd557fecbc2bfacac00188894374ec7ef3b0a5c1b1f6ddb0c9ad3ee3dcd1f32027

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\Nov2008_d3dx9_40_x86.inf

Filesize
1KB

MD5
d9f6cb1edf9f92a045f4b2b8ec17cdb9

SHA1
fb362c8de21847523211fa512cdbf73e5b49aa60

SHA256
955637638635025f01f82febab4a4977252a765439d90ce940fba752723b9db6

SHA512
e22fa0520dd3f905b5170e3ede4d9b9e40b0522c9b39308d150c01e5bc381949d70ce04818efa9eb2a08bcc3b26f2179db9a5aa1a5d14d757ee2dd2c5c3cfae5

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\X3DAudio1_3.dll

Filesize
25KB

MD5
c593fd0a96ee4b6390b653c4c641313f

SHA1
60d71ca2eed9ff8afa5561cf1dccca03607134b0

SHA256
74ec3e6b253af1b68252e62a5c08479453b3341d49c606adcf36913fe9ed9717

SHA512
1bb328d1a68dd7b7657d033bc2bcb8e2c096bc591e435b5691a4ad4f0f49cfad70d4e48af48d10eaf4ad13d479a3f4fef66b09a0852f8c61ff33937c7ea22190

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\X3DAudio1_4.dll

Filesize
25KB

MD5
e3832514bd21236067b7227f6165ef95

SHA1
bdde126bfa7e3133f33e3d3e7b4618422c61acac

SHA256
799b38139523a3b30d26e21798ee705375c61eed8ae2434fddb52fde51f4bb78

SHA512
e60bb2b8cea5864f3311dbc0ad8f7813764bd55153bc0554e2842b6973fe24a1ce9e4381fc6fb05792d97799fb247d591e15b7dc41eec2bf563bd4f7ca797d85

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\X3DAudio1_5.dll

Filesize
22KB

MD5
350fefe18b86bd4d9ab2a96d00215a49

SHA1
be4ddfa0edc3a463471fc170e9706abac0a672fc

SHA256
315944bb2a1959c8a4bd2677ed415363e1611c7351ce55319dc98fd2aac83f87

SHA512
490bdd66920e36aaba2a4d12bfe4aacbead7403b1a623bead0d9ab5f68d80f46fa530c5f7de9e747eb8acbfbec8c635aea32655dddcb6a9d8e006339e1e8857f

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\XAPOFX1_0.dll

Filesize
63KB

MD5
dd165760f1b95200a3da2d9dfdb84234

SHA1
0724300a1cbaa32e03a234cf6080a67967c335d3

SHA256
8b396d275de2550af8ada6a1ff71f0f4870b51c8407e44044c2dde7ad6b754cc

SHA512
eb130afda1481dd0e27a19330a8be8045b3172e46edcc5a0cb089e191fe415c41cfbdf3af8f084a6ff58f89cf8d7d4d0879a3bae8f93a52ffc84da2d4fec5ccc

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\XAPOFX1_1.dll

Filesize
67KB

MD5
8d26339113f53c9b1b8bc7fbd134284a

SHA1
0f84f7baf4f1530c72e9242af0793b9eaaa2753f

SHA256
c0bb92fa0ca1d81a2fcb6df16f08afe212ea9a4a74744e7ef9ff3edd4c280ad1

SHA512
3a31468adac6a7b2d342cf8394433a339897700c04d399ed3f370cb5ac73869d9a46425b8eb8bcb9b9062aca6a205b3b6334a45a513e80ff5bf3adb501f035af

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\XAPOFX1_2.dll

Filesize
69KB

MD5
295e47a75f278580f9441041eaaea3d2

SHA1
0716ca729ca3d84e9dfb4bd97c1e12466cc68625

SHA256
d1a55061bcb42f69b7cf35e2985d48e30c7a90f0bc668e90390f465b36bd0161

SHA512
a3cee1d45759fe3323fe8c3c49600856a86b61b3174c4d9c71e58a95db4848683c71605f5bd8c04bec591da02d96b79c68c1135410930ca63d17f7a929f2dc4c

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\XAudio2_0.dll

Filesize
468KB

MD5
418cdc57e55ee79c3f86c13a19b3d5e3

SHA1
cac2b8396b1c82a6f7ee2a3e3ec3d2e4c2f869fe

SHA256
e435b73193bdf651f7ae564eba05266595ac672db45e0e22dce92d0bcb3c6513

SHA512
1ba5a49d9102911d13d86ac4f0e4ecb44069c93a58e2e3225d9464755c14f8d57f230eb32049c2747385f7cbaa9c0da0f6001f27b685eebfcd94f3f5b8fa3250

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\XAudio2_1.dll

Filesize
495KB

MD5
e34ff0115b1ee3b4e03d22ae9840ee03

SHA1
746e6e84ff7f630643ff9381b9dff1f40a49ca16

SHA256
32a7c6a4edef46f025a4a5c64b892e29baaae948e86d9ed49e82014eec1441de

SHA512
7448bb3ebb8815e13e14514c8580dfb7f6de1a96c90f6611f6766dfb48ae7bc4a06efdc493060c054f222e7d9b308e062e1cabb19a60f50ff9e20f06905df58d

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\XAudio2_2.dll

Filesize
497KB

MD5
85236e555e4f99636e61aaefcd31c645

SHA1
a5f6975b00e45f3e752aa84e95de338b86c32ca1

SHA256
de7093342f9c32524aa4d956e101d6b270bba5c18e83902c24dc7b3139d0527a

SHA512
a6eae570b29f0d3ba3996188d7470b74497b407739b859873c4026f41a583fd09858f5bed06976293d841bb47be06e2001bec3464a93d71973a85058a698a2bd

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\XAudio2_3.dll

Filesize
502KB

MD5
47ed15dc87ae334c13c4dacd1be2cced

SHA1
54f94839c4e4d798a1f4f1fb6ee240957a738cb0

SHA256
04dec9d7c68962e01efec0aac0ef7a3499bc4c16e8a41bd61fe6641da48d7dcc

SHA512
da0707a153172c48036d885404035829ea251b7df5a9246fc05dd164ceae9604cb0cc931b85d77151bc613cd5e7e4d0430a4fd92697c8bbc8faf5fcfd1c140c4

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\apr2005_d3dx9_25_x64.inf

Filesize
806B

MD5
f052926f0715b88b23ad52855b34df46

SHA1
c411b1ddee73a4b317d652bc3ec159ed58efffa8

SHA256
3d97810d00ceb3e7674a2ef81427d4180f77f93f9454837c5933fbc6a1ad5c1d

SHA512
8fad81eeb503d81b96c098190b5c4155f4bfe1cf2f36fdb5834a176c7c78d11b52efb6b3ba6f3168d7a21a1fc5e53fec770d125feaecd7d1cfad9cb1106d0b94

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\apr2005_d3dx9_25_x86.inf

Filesize
1KB

MD5
bae5034d79a545ce120f2c336de0f68a

SHA1
7276af2015696d5041214fa92eff4375b3d8b183

SHA256
f484ef48e0c6e2be8207d8c8c7308dd966d52bea1fde221b927d3e49f1cab0b7

SHA512
be58875949d23732ff63a6f505b242a44811cb9603a9863d6a78a4c9193b6336b89ec9a82666865888590a7b81ad99d466a3847e7c22d0de399d476364280a22

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\apr2006_d3dx9_30_x64.inf

Filesize
806B

MD5
5d684b07779ae5b421e23167e2b9b44a

SHA1
1e3570908b810cc799f047221351cac7a3583787

SHA256
b70b8f62a2459580d22999301f1823bcb8a9bef54bd33b38e0af274a3a12e010

SHA512
6688f5a9952b36a0a83e806c9be99d9ffe9ba4982b76a9c7e8cef5f824c17ffe9e5ad9ef4e4974c6e2a9cb37e8c05584d8d83033182d1c5d00a786bd2b693e23

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\apr2006_d3dx9_30_x86.inf

Filesize
1KB

MD5
a49046c25439fa900b1d1bf826506ce3

SHA1
deb71dad1d55dc5af2f80a1c3010c0d899bec187

SHA256
373cca07c0ceffa72901441219a4457de9ff110aededae5e4818588da39cd344

SHA512
d3e04f2e7b358faaefdd683e7ede8a41c2f65b7c8072754b03b2a5de416651f92712fa7d9bc6027d7326dc5bd8a497161685c04cbb7bb36a384aeee8dd77b086

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\apr2006_mdx1_x86.inf

Filesize
2KB

MD5
2ca62bfeb43facdd1fc06f20fb20397b

SHA1
ffbb8f6a8a11f949ca180a7e73279c4b775bbbb4

SHA256
2546a1875bf868edc621a1cd0ee262151faa08762bcced0117e1304eace0c04d

SHA512
3d16b07bbfd172dfa979dfcf4384baff35538de371dfd0b266e5110772f0751f9e5274fa92b06d1f289f8aaa585ca1fe382f8469561e74e343f37e8a05f85dbb

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\apr2006_mdx1_x86_archive.inf

Filesize
1KB

MD5
b9dda5b7e6323561b289e0be4e4027e1

SHA1
510f83f8d2b50816e33df8684b35fa53dae51a47

SHA256
80d44f16d81ae8bdb1ef8f0efdf53911523280723bab4392285cbd33a0fc633c

SHA512
cfd470d44ca0d76e756f8a72e01ac7d60c498a0012b461c9b371fccdbdc6bf972ed848ad7487dadea7f16aec7f8749630b1aacc7f936e6ced30a6c798a6c139a

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\apr2006_xact_x64.inf

Filesize
908B

MD5
09c9b7346b65f5ba209934f16e711c8a

SHA1
9d6cf0fe295475c438fce214d9d24d5579f2f29e

SHA256
d9c3216ada5dd7791ca852a8ea97765f94a7b56fed27b20916b5067eb82b14d0

SHA512
26b84a457b5bd17a5deba56926af156a2144213a2b75fb015641a7817fd2307cfb439ca22ec0bb584dd21f8f9e4c7b3cc749a350b26cfcd0257f5fbda23fd9c6

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\apr2006_xact_x86.inf

Filesize
1KB

MD5
f67df97463d42bedc122fbedc37096c4

SHA1
42cde962b355cb3c6a7a7a88c8dc315f811a7494

SHA256
037db252501fd0e30303c11706d804d9eabbf319d0b4e88181ef8f297b4fef8e

SHA512
93815abbd6b6666438adb146bff476aa2728aa7475178259fea623dbfdae819bcf1accddddb7695ef23bb2913d234264ad2ec826bda6eae5d99459798b032144

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\apr2006_xinput_x64.inf

Filesize
854B

MD5
019f21ca754cc2e21d97c3a2a97d5ef6

SHA1
54d97b4018e0cd04c63f1221cd8da7a0990a2cb0

SHA256
f9d01e93e547045e1d232242c900530dfdfa54698586c7049281965e3bd01ca2

SHA512
0c0ef6a8bbc05eb81cdba8aa2c3f4a0d39f4859b6de495c79f813894253ad1ddca4851841064cadfb1901ea1f056c68560aae1e68bd12c590a143a6b7f0b16f6

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\apr2006_xinput_x86.inf

Filesize
1KB

MD5
53294b978995caafcb6a9ac8f67b8580

SHA1
c165d2c615261f135f60442ad0a6e589d681a850

SHA256
b604779115d32d439f77b33257c96f928ec4ce564189f7d0d357099c1da140c4

SHA512
a3da7e02ecfadb181ed13855b093908fca0aae2ee75e6bc4f873fe69a34cdc08f3bf504aac2ea98f9573437d2ff000e43ae8450c87036ead48e6c2b80ec523ed

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\apr2007_d3dx10_33_x64.inf

Filesize
844B

MD5
00ad98b94609033c2819745587b0eed5

SHA1
2a07dda60a97dc2b4a7cf3cfc6245e72cea0efb0

SHA256
3e61c4d723d282c36c5493d82644ea96715b7b548e50494d22b4a83d4e2b8237

SHA512
e7fea5f9186c324423c0b129dc3e8594df49dc84c61400f4635ccf688075b256d7923ca8f4483bf7b2fe43862e71aa134cf2c9545a23c622d0cc04dc7d6dac1b

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\apr2007_d3dx10_33_x86.inf

Filesize
1KB

MD5
fda5776cc944ebf6d84fb45c8a1a35f5

SHA1
f3b603dcdcfd6a310c2b0945f1a3b97276041ecf

SHA256
3286ba521fda888b1808f12955a58d7da4df7d2fdb472c7837a1e0e1a6317a06

SHA512
b051b04ce06ad21d08ace3a28d490214556f4b5be060ee05f8a4ff872d1cc72df05624021a9a0cc1efa4e63772f55cc61f11edf03537831a44ddd6ab409e83b1

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\apr2007_d3dx9_33_x64.inf

Filesize
812B

MD5
e40a6f3215c3f1397eb18b3388f95032

SHA1
4845590abf12bb5725d94d7aeb953a5686918537

SHA256
2d87efca75d8b9aeab3262841d52a7c56bad34ac6b9691f4df2d89b14c950f8d

SHA512
942f54a3984a29e1973ec096709de890fe870a9dfc84a8c5597244251cbd69f84543cc5cffe620a076d0a16dea6e393c6790553d6d9e2fea1af1c0f00a12140d

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\apr2007_d3dx9_33_x86.inf

Filesize
1KB

MD5
044cae9c30c88bda73727243f5e5206d

SHA1
de744e349cf4ea458b10657d510966d21ad08d67

SHA256
349a09a2791d697bffffc61410a536cdcf258f0d7c86dda44a297e8aec4bdf00

SHA512
18e501142004afbcd28b41bdd3a9b19e2eebc047d7858ee11a9135f19759cfd8c643ff074a51e937bbcab7162888fd95effc146be21fe63dfc300ef03ed44056

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\apr2007_xact_x64.inf

Filesize
920B

MD5
dcfa000ba60f73c2c02ab590faa1ae10

SHA1
154b9ff40cd92bfaa572b289662d0305fa2fa017

SHA256
bf6ca1165632efccb0292ae8b739ce68d78ebb95dd39b8e4c1717d78a026db10

SHA512
34f6cf1f3fbbdd79d04dd55315b0074abc21b9c26df6e2fc9d66c6d15f36ad35edea741000a84a25ea9a68a94d46f500398a27c8865a30746574741dffaadabf

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\apr2007_xact_x86.inf

Filesize
1KB

MD5
99f23af200574f24c4c5d9ee12fd2cb8

SHA1
f0e50816ed808748f9379733921c9302551cd937

SHA256
008db10780aa8fb6f20b7aa5f5d513ca77efb36c8dddfb9ad89173ecaf700af5

SHA512
5e97d157ed8ad10f9cbb9490a16141fa52b2f32e09edc7e7f5e4b2d9c9bf38bbb85706d76543ca4ffe9b54d5fbc4b763b7df0893f1e7e56ae4c8ac1a720dbaf2

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\apr2007_xinput_x64.inf

Filesize
860B

MD5
94563a3b9affb41d2bfd41a94b81e08d

SHA1
17cad981ef428e132aa1d571e0c77091e750e0dd

SHA256
0d6e1c0e961d878b319ac30d3439056883448dcf26774003b73920f3377ecac8

SHA512
53cac179d7e11c74772e7b9bd7dd94ffbc810cfc25e28326e4d0844f3f59fd10d9089b44a88358ac6dbd09fb8b456a0937778f78ecc442645764f693ccd620b8

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\apr2007_xinput_x86.inf

Filesize
1KB

MD5
e188f534500688cec2e894d3533997b4

SHA1
f073f8515b94cb23b703ab5cdb3a5cfcc10b3333

SHA256
1c798cb80e9e46ce03356ea7316e1eff5d3a88ccdd7cbfbfcdce73cded23b4e5

SHA512
332ccb25c5ed92ae48c5805a330534d985d6b41f9220af0844d407b2019396fcefea7076b409439f5ab8a9ca6819b65c07ada7bd3aa1222429966dc5a440d4f7

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\aug2005_d3dx9_27_x64.inf

Filesize
806B

MD5
7cfa60cdb7e697b40a268eb8814446e5

SHA1
e8e77082361d5a5ebf6163cf880f9700cff5741b

SHA256
0a8ffec8d7ef3a0aa005f604a045dcf80cf5b6473b4f26e30c58eee23e253fae

SHA512
77aaea559ef94d405194351b52643512a71990833dac22a331d5b78d569263db11bf969e26224ba8a362bf538782010ca074286ea605490d40c10f7d2d53d255

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\aug2005_d3dx9_27_x86.inf

Filesize
1KB

MD5
e45a175750a672cbb2553087a8c5cf8a

SHA1
70d487f99e101bf39650594c27674313181a8ff6

SHA256
d02232a6587c460c026601517178318bab2ac29c59d269c6e3d1a3a993a9a1c4

SHA512
199882ada178e41be14af82001829d009379445028d3803d2a86eef899c01600cf2aa86123311b728e888498674379a35d40ed0964c2f88da24758fe3c7093d2

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\aug2006_xact_x64.inf

Filesize
908B

MD5
d40e6c659cb7a757d8e751b050495927

SHA1
a9c515d786bc8f5c739fcf5ac1b6e15365f9e14e

SHA256
6fe310a67227203bbca3389dfe3403fa268cb424f4b525cca2d5407ed26670a5

SHA512
fb58acb95f1914da3c650168ed50fb6f75df68773daa8e8389db9c7c7c4d0e8bf93e46458fb76de676acc65132d781a7624f67289860a19e03520ecdbdb66896

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\aug2006_xact_x86.inf

Filesize
1KB

MD5
ddb0d03b1d4a6ce09da5cbc61f5525c0

SHA1
ba5e1361e394301d5b9d9a4aec68ae21f19c70a5

SHA256
34e7227e03812fce5415b0a4c3d15a9e9b259350ac9873db2a98b2ea76ae2284

SHA512
2160652a7f8adfc346e0af6f822875c34d2d13f168b9895b063925979d4fcf33a7da777ce7d43c9ef2b23186ac00378e8c2d4ee115bb2ff794e863e8b6feec5e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\aug2006_xinput_x64.inf

Filesize
854B

MD5
90d7a7386af9b951f939d869567894d1

SHA1
ef70a6efb5f7b32193bdec6c5ff13a4abeb4f00c

SHA256
35f25b9538e55172cf36729519581444e26b38a9dae5cccc4ad75dfa34ea08e7

SHA512
10920d0116aab01eb1130eb91b26bd91d4b3ff8e09a77db5b79f88c94c463389548c2b3ce494162d4b2c3fda903eae6c2d87492475c56fc901c37fc8306555ce

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\aug2006_xinput_x86.inf

Filesize
1KB

MD5
f87111f61ac57d80199cead8e63ec45a

SHA1
4a525a78a90fa87290f60f0598fe285f9f46c90a

SHA256
cc66d67daa1f4c31ff5e59c2606c3930f72204a5057c29b9d58dde37a47b1cb7

SHA512
ddb1b7259aeec662fa271f6a6d271e9d48c4b8ce4d47d452dc2ab15611421baa13cec0024e668309b7444b31fa5b24f41b032796c81a36e94d7e577d9c516712

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\aug2007_d3dx10_35_x64.inf

Filesize
815B

MD5
703b4ea6a182ee3b48026d01319579c0

SHA1
3184959599dcee4e74b251ff14dd2aac81e2ad68

SHA256
af4bdfeb4283f04e24475279931e042f17052224cf708f0c444fba2f2e221289

SHA512
a6e67befdb1d757bc08f6a726e6d79c4f51324edbd1f48730616e27079bfa60262b88b4c49cca046e3da3832e375dfc29b2ff48b7007443606da94793ef7ed84

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\aug2007_d3dx10_35_x86.inf

Filesize
1KB

MD5
741a5ce76295b86694cd7540870eeec2

SHA1
2c165af0047c98d2864379ea5fec33bb1507bbf9

SHA256
7987e2c475705bf8f049a15af946ec0cb5ccddf27c0b5c8126694421df601770

SHA512
b7d0a0bdcd060ee263860024abe5b054aeb2c8c8c7ccdff9cfa9886188d7177b1bb8799909b3c95aba181292b5bb9f9426ecab0a6a2689970afca5a1739fc4d3

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\aug2007_d3dx9_35_x64.inf

Filesize
812B

MD5
0b3f4e715a43024fd00f769e62cd8b9d

SHA1
ef6de20d95a920e3b69307737976bb243783160a

SHA256
e34ad9e49f31cb9211e0f350405c344d93fc65075e470c8fe09dd78af68f2c80

SHA512
336df101ab341c5f22d516089fd31fd9f0541a01d3ac4ab4e171b73452ba3bab3cad84af50f1e9da17c46bcfbe7a1b52284e2ef2af49c67c6d6cce2969e14ec9

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\aug2007_d3dx9_35_x86.inf

Filesize
1KB

MD5
815d75e4264b1f9c0bbcc529ee7a290a

SHA1
cc956156066c87ce1bd2b7628453f1824a426412

SHA256
c0d87c1b079b54b75b86939199ca5ee1f796ae3de9c4ed0ae074a4fa01823c73

SHA512
bdaaca529cd52df20cf1e35b45e1824fe48d09442666b18faa3e948937026b09d880a27f1d915816bc6e1d98b0b486d590f867aeaa046317b7f48d6a0f949391

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\aug2007_xact_x64.inf

Filesize
920B

MD5
a78f12b4514614db269bf55faf383875

SHA1
0425c3e3ccb15f691d6f5d30b71856138063002b

SHA256
2fcc4bdc6516418d3b4935c301e14f30e3bbd0adfd264bc34067b27b0b266b8e

SHA512
9d1cc2704541b71b246c2cc8e6e1d667cd7e691e42865aa5b0a800cf26386cf00781ae7727b7f90711e987148e98f4253e05b6d3872d3f69b0584bcf97b3fbea

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\aug2007_xact_x86.inf

Filesize
1KB

MD5
8898bbb8acc1b54b3b9b6a2f6b0e2cfb

SHA1
e5ace499d26e573544be76c8e45cc5278d15022e

SHA256
c246c38e41ed71bde4b3cce4fe337826173896a04c26f8b2a00b06bb0cec024d

SHA512
b0633c44541cdaa2d2c3174027d849ecdf5ccf2149da4a2932f59db600cafd8b959aa0382973e23fec7a76ed7555e96065a4d8aa077f50c2a14e5080673aef30

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dcompiler_33.dll

Filesize
1.1MB

MD5
fae7e1d578c42a7c3d9d61a99d178bd5

SHA1
8ac88ff2bc5f616ed284a04ddcbaeb72fb1f304a

SHA256
12e238af4b4edc1f774213709a87a91b77b2c9d2d18fe475b027872923b6fa17

SHA512
75107c64acfb6d84e1b05ba78377dc4699ba83b694b7ace474665c85f3e5843db6d06348fefed539c6c2b233775c7ef81d7bfd81937207e04e637043633cd0b9

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dcompiler_34.dll

Filesize
1.1MB

MD5
75f206c195bbaca6ef28565b1c0cd75c

SHA1
4687454c58f64f2154f0e99bf5a323f73ca1790c

SHA256
5044a5810fd931339933a8d0c56115a5a5c27d8c0d8e348977e2724a032accf0

SHA512
84c0a8fd3e4293d85e919940f6f24d88fc6fd68f39cffefc34014656fee54256ce581ba408eebf5bf9dac3da9de19f2bf8403521c55881d3877dd64a8e50120f

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dcompiler_35.dll

Filesize
1.3MB

MD5
5b441670a4f5f8bcce76741902b8af56

SHA1
b98df0c54483664ecdc92eccdcdee09d082972d8

SHA256
5a866cdf74f981e783624dafb0e72f133ad9f9b293856d7a18c7558fa357beb1

SHA512
0243deac1124425b65cfbc7d6465bfb09a4849e6c5be3645b808cd3fa487c3044c5b45e9943ee31542a7a47803c02f0b92c05c1e4bee18cf6076641e1c0794f6

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dcompiler_36.dll

Filesize
1.3MB

MD5
fb4299688a0d3a37687c015ac2b9922d

SHA1
a4898d246afbb0ed399e77fa5ff29c99caf912a0

SHA256
f15efcab1780fe7d784a3cd3798f147fa249e81b7ef9a494b85dc7fdab084734

SHA512
664b139754d587dc32820354c1333fe6a5528b07b8bbfaf27374a5da7e86a4c3e7904250976ef3cf8620fd0568c34fa75704a8b1585c382b99d4ee46518617ae

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx10.dll

Filesize
429KB

MD5
6f34f7405807dcbf0b9bf6811c94c6d9

SHA1
2de04a49825acf76a6a7aa02108337142d30b6ff

SHA256
fd2caa28493ea76021b93641958238b7a933f4f6db1a2070be03cc81d87d8307

SHA512
df623daace6702d25365697b62a4ab7d03d944306521022c6e65e94cf1970b5057da811f10e675c952d93a37abd1b862b8ce8648429780aeb99a4d55fda6aaad

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx10_33.dll

Filesize
433KB

MD5
37a8171accf46a9c196054066c28827f

SHA1
886264510372602c2ee0193c5a185d719a61316a

SHA256
b04e2b089656eae01a0071359f9d7fb040dea804c1b9d2379431864174259c2d

SHA512
713b843a35dcfc32caa67c52ce0a32af6f54dfc4c11615d32613017aeeb257fb3f9168443a4288c71209e5d40f2e1b281febcbae6da076d2b57cf01aa3cd78b2

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx10_34.dll

Filesize
433KB

MD5
5aa9987f2e62b56d7661b6901901f927

SHA1
2cd4e3e70c3b37da134ecfeeedd377d1726d9759

SHA256
330e120d745e1132252df81800362a7ae0b61a9060afc800165ba8a1d55d3fb3

SHA512
af9e39f368b47b1500e5d68a6f234361fdfc29ea31c32f614c5887f124d6097be0b2d8f37287d0cd0b094d3a12e3f5881ea822542a1c85f10566604fd6228988

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx10_35.dll

Filesize
434KB

MD5
f3764552e45880dc49b82f38699aa87c

SHA1
25e347799bb3f36bdee30aa78cd9e59c7faa5add

SHA256
db775655fd923e29509402556f86002dd9aea062cdcdba7073e1057a67b5ce50

SHA512
7e52bbfb4f309b9f5a9632efd3dc28a0509b7d5edf471267f7e794ce8479dd8cefcb29535327a7384bcc25b5331ff87c223fb70fbb5da22fea3c919ba4c5444a

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx10_36.dll

Filesize
434KB

MD5
d9158e78a368b08d9133043eb3058c12

SHA1
d71d6f103bf7433f442f55c355dc74fd4b8a736c

SHA256
aee0248f18dfef8194451a22c69adda1cca38c03ae9aa776114da9d8851d4c38

SHA512
8bcf2da86f708ae84141089f80131244d957e64c6fed0fc39dc688201659cffa7005bfd4cbbb315ee0a60c61e38ead3b4e4fcb3d2f0ecd0386a6fbe486d82bd9

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx10_37.dll

Filesize
452KB

MD5
4a43e9a2b17e4cafa9cb5fec0b5b686b

SHA1
9e28d3d197958e65ab8dcaac91fa55cd1991c3f5

SHA256
61aaf973712f848b24c3e769e3252248ece96db63f206de0ca7ff43d9ed87a51

SHA512
8411bbd130427b690332d222233465bf79426670f565ac3b01a71929dadcfdd18002c54d60981dc1f202e6625f99ab73451805d64518fad9b5a9793407df2d71

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx10_38.dll

Filesize
457KB

MD5
a2650b27472c21cdd817eeede65648e1

SHA1
c0e5f70386bb229e289a476f2a95965699ba53fd

SHA256
bf463b7ee2235f351309b5fd790f514acf2b55a4a1f90222f7479024cc28fc34

SHA512
85320f262c10d80e889258a8584648dc20283d1af0467924e8745555c94a8fc056ac609b31d36a898829ad418c9df06047ecfcc644693bd136ccb50ecbd6fe91

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx10_39.dll

Filesize
457KB

MD5
e6c2f1d8b667ddc04cb55b9f0159ef97

SHA1
9dc5c2d54397aeb56deafb63ee34b641f7030ee7

SHA256
613afdb8b44bb3bed945279229d9604a3cd553f8c2b9b091235cbab8cd00de61

SHA512
5cc39f19b6de99bad0be00fcbde9d498e23f29303c6ed4ba79c2b2bc63f259f9b617ecf6ac67beee8a71c03a0e80c29412e0159a5014a43a6168c37835bb0e00

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx10_40.dll

Filesize
441KB

MD5
91b4aad4412bb223b466f3dfb43e86da

SHA1
850aeb2b3ca15158be00faa5c161312cf4a876f0

SHA256
c05787cbf3aa4527baae96a425ceac910090ef48809990a450c33f3cda0e4767

SHA512
413f68d1ad36aa51389da62eb2fe89969e4460ab166ce44943e382fd2d1cad0953979eebb20af58dd51def3fefa1100ea9fe95c05714c36d5322e281cea1a1a2

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx9_24.dll

Filesize
2.1MB

MD5
bc831661963763ac4d504c5cabb1fdd9

SHA1
51b323ea377f9dcd52946f5fe77ceb5673d1592c

SHA256
94ec67763f67932dd4273ef5cc12889a5cef090ffea3ee78a80c7b530272b1b5

SHA512
fe97241d5d9ce298f62ae3295eb9f4091430c8c2c53e967b76e0aed76c3579f8bb07338a0de48e4547c63ab381b3b3d0989a183447b8e47496f35493541295e3

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx9_25.dll

Filesize
2.2MB

MD5
5b48fe9d6686f0d54b26a005ace24d1d

SHA1
1c395f6d2aa729a607e69dca73f8205cefd26aa4

SHA256
4c54df27ce84d21b2924e64ff79b13e7876ce85d8e0c9c1d0abd8da73888187a

SHA512
6a4fa549578097ba36495ec210365c27d165065820f0fdad20864a3139949e72da00f9b7c614d07d8950307e596b693ed7a291a5c69cc0f9ba30c5f74d6332f1

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx9_26.dll

Filesize
2.2MB

MD5
523ab607eef81cc4d909e7febd8a788e

SHA1
2fbf1444daab3312da6b34509763656a28252134

SHA256
8ea96fe01c3c86a36fcb3795ae03eb12034003e335ef475571efaeda17c5bc78

SHA512
791f520533f58cbccded4e7c1f64fc14d20942efe57f32a5ee75eca4107543718eb35ecaf52e6eb3d9112867141271b8c097766fcc3562f016bb612bf840528a

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx9_27.dll

Filesize
2.2MB

MD5
852edc778a7a50077694f84d8e601234

SHA1
14705b638e1af81ddda5dc52f68c61ebfce5e9e3

SHA256
a70d571cd675c97c9eeb4a234dba1d667ffb54ec3bb14defb36b3e2f605ae257

SHA512
51c4031d98bfe3251a81ea9f4434ce38f077645a40d0ca413e31b6951c384a1635cb040c24ccf1baeef3d5a47d0d18d8b47fef3bcb28570d6e936fcea6f912c2

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx9_28.dll

Filesize
2.2MB

MD5
be19b603dfbaa829ee5b7749b3ba97db

SHA1
3d42825b3e7fe5744f67ef145ed47bb524496305

SHA256
f3e391b5f1c1f9637cabf2b812b6f5d65e4776c89d779f506f6b643cc563176d

SHA512
095e8357911c1a06000f5df291bc3cbd80aa3a9672f485fd1f2b9bdb1172d1c7235449485948bee26fcec630d6b80fc927454f9b32cb31c823494c780e0e3df6

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx9_29.dll

Filesize
2.2MB

MD5
99f4fc172a5ace36cf00aa7038d23f2c

SHA1
893e05e369c2388daec359ec550fee5b9122ed40

SHA256
c5e21c18f8c79bc517da59e3192c39ea73bdcaf85867628187f6b3cca07dd21f

SHA512
a4b86d84f99c3d0c0825e3581878aaa25207765bcfbf31cb07cd6bf69a9cbbe1c3068719b212e38f741e06a89b9bc6d217077a0dec7f9efb1be75fc3c214dd52

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx9_30.dll

Filesize
2.3MB

MD5
e415862612e65f10d7d888443ecd7594

SHA1
aa8440ec3b5bac6594fd58d97c10c2ab7d419b2d

SHA256
5edeed79f2359527a55b8189cfa8b9b121cd608d44eead905a0f3436938ad532

SHA512
f5de2f9e045c3d579d98b25fbbb7b90aa9ddcada0c6bc4e103e5257394f3cbb7c968d89db61e15b10605561cefdd63456912aa428af5a62cb769ac8c4e5eecba

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx9_31.dll

Filesize
2.3MB

MD5
797e24743937d67d69f28f2cf5052ee8

SHA1
7d39afbf94675487a9ff7e41d2dbb8daedf7ad00

SHA256
e2065619fe6eb0034833b1dc0369deb4a6edc3110e38a1132eeafcf430c578a5

SHA512
8804d0d95688a932c7bf7e1a023179de8df3a5436e356b36d803cb9781f3a378adb9fe69d03b28362755b808cbeb2cc718ab920672270de0b954996996328f5e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx9_32.dll

Filesize
3.3MB

MD5
26af232140c88b42d92a88f2198edf6a

SHA1
b62aed3f71d8963227e5021c2222192873ce753b

SHA256
e96693794daa05a75a83c11df2e7b42f2de61567c6ad0b69e353b50f6c88119f

SHA512
54a6a235af4dc3f3c693fba5ac2d487d96c9d7a2bb7deeab35d5a252e723e597226ec84e953625c8808546f91fbcfc42add85076846a63925fd9eabc09dbf935

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx9_33.dll

Filesize
3.3MB

MD5
cdb1cd22baff21f48606b3c1a18b000b

SHA1
9315b5db975a34dbebdb4dcae652ba1db01c482c

SHA256
c6b7b2ad7742dde5dd8d1a35fdc1c185e586e551ad9c74d3fb21759cd8ca4da8

SHA512
c5fb24de8f1ee6fc1ed6e74580b5d22599ea4eb6c3589645fff0b15dc8dca051c4917e60fbc00ca86542dd63a8f5e40da92ea77e24826c0c6bdba9b58c36d4db

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx9_34.dll

Filesize
3.3MB

MD5
1ca939918ed1b930059b3a882de6f648

SHA1
0c388397620ce0edbb362bb3ab2d4a9f31a56b6d

SHA256
b6f77f06518d35345fb61172b6a13159125ed60c469d28b1a2e07970e9ddf81d

SHA512
d1e09da8551e588b8d5d5837a79da9ae4ddd6a372457d3c341e68e3da07c0c1e84decadea9534cc87ef9ef38c094171004f836e6f74831fd6531ce72aaefeb5e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx9_35.dll

Filesize
3.6MB

MD5
3ef18b78d17c962f2b71ac1cb7757684

SHA1
2380329c17c7a530075c7572d17592bb3a00c4c2

SHA256
2198022938156b790e9cfb0f7997494b66a11a1ad49b395be58251d635b66b26

SHA512
93e9bff79630ee5897bfb3bc496f778aba160312edcff9f0b8cdb8e8af3d5c7b73a8d95d54ab26cc638a2ff7cfa27153629f9fa8a4a687ae3c83e1178471e720

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx9_36.dll

Filesize
3.6MB

MD5
44bfec5c9c82a2ee9871d88fd3b9a0e2

SHA1
e2aeb78330d0815cffedfe88438a71024577d4b6

SHA256
c12f0ab0338eb5031d3d04beaf7208ac848f7e037d21ff963d2af90221cbe935

SHA512
35c42ce3afeeb3710d3d96d2cf9ffa2828fe17f8d749fd149e3797e87e154508c77f637de0e424d38bb3fa56bca959cf9da7787323950ec8261b144c09ae306d

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx9_37.dll

Filesize
3.6MB

MD5
ac3c517fb0fbbe45fe44007bcd3625a7

SHA1
eabe1601d0132882c7226a4ed04fbbdd5e8f0db0

SHA256
c2ccb84c672a9d8966e82a28005a4269886ee304972ac3590c0b8a9c1622a3d8

SHA512
89b44142355c494f2a21276d0629f3536adc0dd7cec101a1f2816031afcc8a96f94663ad46744c772d6b63d172ea62e9b957d6292e4a6184f958576f62b05836

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx9_38.dll

Filesize
3.7MB

MD5
8f3eb548ac4ed90252394f60c77e3196

SHA1
e40bb2e3c99c55f2df9def2765bb014e01389622

SHA256
743e77a228e7d75442263ad70051e44534f7972c6326fd34b505a9c2c245894b

SHA512
bad441c93d37269a9d49edc39ded933e43baf2a563c425ea2db222a9859ecd1f076c2255c077a5afd07922b50adfda2bbb731ff6f292623b353a3dfbde4ce4e5

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx9_39.dll

Filesize
3.7MB

MD5
8cb3defb8887c4f0846db1fc1304d6d2

SHA1
5fbe058848db16117ce7cfdabea1f178ba229a6b

SHA256
5d29988cad858f754ecc62c3d30de555f82cc21b5b26c448b890295e9b7bee82

SHA512
4cb675b179d05ead18d2e42329e0d10cd1d520cf9c8c0681b89aca79ac9c814e82941b0086135bd57721b66b55b6feae00bd29af804f59a486e935fda413fc43

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\d3dx9_40.dll

Filesize
4.2MB

MD5
eea5e428ce63804f9b12d21c97b5968f

SHA1
77a7f48f4bdb7e66ed5e524bb8879e3da0d6cd1d

SHA256
16fd909aeb68d0d1aca8529dc7f78880b97d6649d70ce8d03a2c858bc28e216b

SHA512
545518dabd82441ddfc17fe1c1cbd7d14603bb58130de1307a31f73b93ca42afdf25dfcf481f0383c4e039edfe4a88ae7b84b06a2850c29bbc3550114e499c73

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\dec2005_d3dx9_28_x64.inf

Filesize
806B

MD5
9a3ccc90b71d554e968eca0a812bf0b3

SHA1
0ed1ca28d7f6c8b4e017cd48b8504340cb4d736e

SHA256
510b6d528be3f2997b8bd811486dc3c13eb27a9de22d1bf030e6db0e632cca4d

SHA512
0f10d2ec9f72651927599b69dc3f4e037febfb9c2a18e02eaa49962903c1cf77b63ae6335c06effdfac26b87418ef2c7a2d53dd799a28d275632d8255ffa8be4

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\dec2005_d3dx9_28_x86.inf

Filesize
1KB

MD5
e0b6120a048295ebbc629a9f8fbe53ad

SHA1
3d9cbcbdafc1f9058af74896a5859591e164555c

SHA256
d4d03c4ab3c8486d6331548e967ee17e011fdac90f63c0a9a44a744815a7da7a

SHA512
66c0b9501bb08d41bb708d0a724fe6ac27abaf735ca224074e594cde932ad1f9eb9db5defba8a8a71a0a12904f20324ee4d129a1ac9fcf816fe74d648379908c

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\dec2006_d3dx10_00_x64.inf

Filesize
426B

MD5
eec826f7141bedeeef38c5a3528b5034

SHA1
529081aedecb7b9fbc7d9707eeb6415f98bc128e

SHA256
2a43ac72ab9a6f4771c02b6e10884921b733b86dbd7ebdfc5502d011cd5c8d05

SHA512
62cbe09326cd04c891faa124c65554fd631382a2e078c70ef72a1a07d57239b3ce599b57be3fccc755075174df1d63ac3597dfb3aef9b4ea34ba4597d804d2c4

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\dec2006_d3dx10_00_x86.inf

Filesize
673B

MD5
1b702c5bdf738a8abf4a3108097a6b7c

SHA1
c1d9c9d5e07117f273064bec36ac92b5ed624d38

SHA256
33291a47388edecc059f1825c1979142d7a9cd4a850716f9dce687deba1fa750

SHA512
498483dc823e76316e977dcaf7fbc557c3e60c67129a678701d5168105edc97f97479107330d5eb3989dc179273cc9b74d055827f036f2f3551a0a3d398f04f4

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\dec2006_d3dx9_32_x64.inf

Filesize
806B

MD5
39929631df326b944470256c4f9cbbf3

SHA1
932de27abf59c889c02ed747f0ac04f5e494492a

SHA256
ff00313af4a90f426492d72969f5efc6c56a17f2dd91f20cb5c0a38d9f1f2b6b

SHA512
8dd2755a2b2fb90c6880cbbde65d127f55d12df2bab4560ddf86d6793b2cd4733929d97efef5fd8eeb417731a571888c893188df0361ee57eb4437fab331cb13

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\dec2006_d3dx9_32_x86.inf

Filesize
1KB

MD5
c28f4fd1644e2a20b1c897438e197e1a

SHA1
5178534444ed7dec8c63f02defe7bdb864c47123

SHA256
ef09d783bf5cff2cfba99946e5e71fda577b196a49c88bed1c51b5fd29cecf94

SHA512
7cf93260efb1d794a17ba25b1fa02ba03b0ceeed8131d274b805155072a9a2b92a899471a8b23add8bf46c6a5a3cda63499043eaa754001bb43cafd882c8e708

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\dec2006_xact_x64.inf

Filesize
908B

MD5
ca414f7196d9b2a7a9d4057ca0714fac

SHA1
7eae4a5bfcd42915adeff5377036ecb4bd656999

SHA256
f2f2040b8d13705f00d8e20a53f22093aa0f8c8d6aa6224992ba727ace7b75f6

SHA512
1efb725a49a8ea7125074436bfe988af360b1ac22629d34a754cabaf3c151855d08e826a0e244cdf9b624b531de14d23f32c1c16c82f6832c8604cbf52882e11

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\dec2006_xact_x86.inf

Filesize
1KB

MD5
211700aaa53bda6894be85df3dbdc792

SHA1
4874325e984b4f0d884cc732da474b3bb59d3848

SHA256
4c0a40094228a51f567bec65c2cdf289d268812c1af579e3c6b76cd3adb77e12

SHA512
8f51d965cd1ee20cac11256afc5e422d94d43435729d653b25c5347e108fa50e59c3bba18fbd7fe4e2a1a6bd54da1622b80e029a5914e973f3faf5884a262baa

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\dxdllreg_x86.inf

Filesize
724B

MD5
8272579b6d88f2ee435aeea19ec7603d

SHA1
6d141721b4b3a50612b4068670d9d10c1a08b4ac

SHA256
54e098294ef0ad3b14b9c77642838b5992fe4573099d8397a1ef566d9e36da40

SHA512
9f1311803db1607e079b037f49d8643daa43b59ce6eafb173b18d5a40239a5515091c92b244ffe9cfef2da20530fb15deb6cf5937633b434c3262e765d5a3b21

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\dxupdate.dll

Filesize
169KB

MD5
55e1e88b43d54d008748966ed9872d3f

SHA1
bce54145071142087c15a93c13d306b1fda89fe7

SHA256
9aeab1db2170863657db83dd5de62e11ca57e74af00c10647867111937f5b203

SHA512
9483c8493c7faa8edc1ecb94ea74ff58f5147e598c69a4ec5cbad45f257a84e6a0687ffe7ef4d87510566b1f639ba9a723b4f110eba52ca902e89da3c33127c9

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\dxupdate.inf

Filesize
10KB

MD5
6ba94733222bafa1ec322fe6446316f8

SHA1
4aeac8fba86dc419bbec2d353ea73bb862a9a03a

SHA256
23c0aa4be22ff355b07b5ae27477bcb7d068dec693f45cad9548710d86882396

SHA512
5482717539217ed42c4130cfd34913f4d87b7f7171a4ba8907ec8265583f036194c73b333ca90cbfa6952f745803acfcbee62b96e6f254b671b21fd081ed7dca

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\feb2006_d3dx9_29_x64.inf

Filesize
806B

MD5
0d951a2eda3638d4c976a5ffc1a9f8db

SHA1
fca89fa6bc6d4c25758b7baaff9136c3d73140ff

SHA256
ef36ece1a6bd8af3b0b9247b081d28ed511b7e18c43eb3aff364c9ce8d3a06c3

SHA512
89e960fbf9421a208476f7f65acf8047d231f3d6fd87fb31b01185ce88f5ebb1fa7513224124889082f41f1dcd579cc8bbb638f1af73081b4630fb07934dbb80

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\feb2006_d3dx9_29_x86.inf

Filesize
1KB

MD5
f4c258b663ebf54c55d7d09b05b26ff6

SHA1
85af1252cf3d9ae7afcf8d576cdc17910203ad03

SHA256
f12f4bd86d5cd748b0fcf7106e9dff333c27c0886541339ba1f40c443bdc61cd

SHA512
cbd491fd8e847a4659758bfe0f5a4b56c97e539e3b3aa7ca601c329d858c882cceefb9ee8341d794235b7c2403a090f45a0ba8f2f44de3e3b1685d027d8bd19f

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\feb2006_xact_x64.inf

Filesize
890B

MD5
7d46669082d530935e79c74c4fd83bf2

SHA1
194a05e3b019beb07da96c3bef780e6154a78b9d

SHA256
b7ca1a4942057592c5b83b4425350da41c61779dcae608112141d727091842d4

SHA512
590a9628fb90d4140d6f96238caac46f8ab23a59e3a9d94a28d1638006085efdbfad259b9633e4a56585f6cc10119d67abf3fa873a426a1946af589c17f84fa1

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\feb2006_xact_x86.inf

Filesize
1KB

MD5
9dda266ba05cd917cca889659e3b98c8

SHA1
2a2ba2ccb3c9d87c03198b9ef3b9c6e21d693055

SHA256
45146fd446fc8533dc5f97d88bee9ae220161f24797114d0bf3afc7c479ed69b

SHA512
26fa18c8058397b8b5d89baf1fb9cd689827b48781dbe40ddf884c0a3ff9cf8d8451c6c084a693e4fdf107ad181fcce35a2fcfb371548df948416b5713d8ce38

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\feb2007_xact_x64.inf

Filesize
908B

MD5
42161a1071084cb4f32b0d7d748d9b62

SHA1
e7e29605c21b7a2c370dcf979a40c50b93ceb298

SHA256
184c1684c57de07983edaaa1ae2751b263497673ee8418af023a63fa03553f53

SHA512
2aa8e864dc28ee5d0583d044e3d8a9399d8d49b9fb1c522c1c640eb7b079515ffb0bac5280a220c23e15ea4c7ad45c7f1722e05e9f9baa069f4a2670e4976358

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\feb2007_xact_x86.inf

Filesize
1KB

MD5
5f1df74b0110f56ae0b6556dd2dbc14c

SHA1
c8c7d383f5e37c06015e1304b599568999bd4e09

SHA256
64b6020f43bbab7f7c2368fcfe7224165fef555b2bef813aa13b2d9f6295d46c

SHA512
06572fbaa625c85b05f5f4eaf880083607b6d010a8d4bfdb28cfbb1021b08e533f3491080faecb24055acb897b337d83caf9306fadebc1f1353763e8908850a5

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe

Filesize
74KB

MD5
44442b56a318475a3e7acb055ca79d29

SHA1
9ffe16ecdacd79269344643ca160d940e88e7292

SHA256
4c8befaece0c58eb75c38e2347db04557c1bd2a4a269282c3769d6bcccf50395

SHA512
d64ab17f7e1baaeb5aafa4e7eb100257d7a29b1f5caed394b2d3b656c4c9ae56a0f9b952f60573e3ebffa090740f95b0f173eaf2642d6245eb8c2bc6c619b096

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe

Filesize
65KB

MD5
fd1b55b856bcad2230f4338f72f9cf9f

SHA1
3d1bcaae1f2f2a759486bbf4dd543eadc7efbe91

SHA256
300ed1a4ef37c8d5f13d67a5daabd46bcdd9ad9da4fe6283f20d7d38f72caaf5

SHA512
dc73dab5f5384a01bf66197ebc9b74a24c146e8f17571c98edf1d7d1dbc33b0f4075d46150b782891397d8a4875a8cf375a111855eb689f2a8e6ed0aa3ee0091

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe

Filesize
65KB

MD5
bce73adcf5fcfac42ce15c6691275ea8

SHA1
484355fcbc55357c2f576fbdd64d33c8ec8ffa5b

SHA256
76eed293cdcdf17942acc313366b22b55ad78ee0389989438e63ab7ae145167d

SHA512
5e53f89142918eca969e005d006f0a106862877ee6e5d317ffa1b7c017730fd1d3d98e5e75f603183d0371da39c11022cf62232a2b614a9bc5e055f52d6da65e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe

Filesize
68KB

MD5
45d4dac07aa361bcd77aa815d1724a16

SHA1
3bbdf7da5d51211ae269572961b5ebf508ada28d

SHA256
34ab99536ea59ad60ba6efda3ea6d18291ef096a0bab3664248d6045805da0ec

SHA512
d940002a8e0112a3b56a909008403b447e9cbb80e38b9bbd508f40aa68224f7e5d9681e1039e747ae939e0829a25be2319b9f9d0862cebb042e4c525ccbc20be

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe

Filesize
68KB

MD5
98b1369d38333fe9143259687edfb25d

SHA1
3536573ce844dc1441b91e1124b6689b93add430

SHA256
d4e57566914f1d36f4ebfb6e164ce2170f1d5e6392189d0ad6de3ef3b0a9aad3

SHA512
3544088b8436ae6e48d22a7638d59f3c14fb914caeba17a87d1af469b82f818a1a71c5faacd52f69b5bff190b44fd91f893d07b7e05c2e9a9dd363bd75722057

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe

Filesize
68KB

MD5
ffc75edfaca60d28b6e6c1da8488f0bd

SHA1
358ae6e2680666b994e721db5fac0105a86a9c6f

SHA256
fbe2e9cf7e400537a4871218113df178f70501ffeea59a8f0f721927124d6d46

SHA512
dadf216d9e92b349179b27cf436483dd5a52bfdc1db659f3d99b6d1bcc5f1fdf3b0fa4bc8bd08f89439ca1f07f5dc66625043f8065c0cc75e8b3627e59eb8d0d

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe

Filesize
68KB

MD5
c92c92060d535cc9800b6ce231276852

SHA1
79281861482c717e61fe9bae300e0fba310485fb

SHA256
e0838d8d562ed4683bc06ecdbc46fe19dcddf711a0c7909dabf62da572035dcf

SHA512
7c8893c92c005c7c21f829912da4b9e5a843e842826d5e362a9828710486240aa109f26e38a84cfc03617f4abaeda25f0ce215b8f6a1f9a65c58ef5606814d13

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe

Filesize
73KB

MD5
edbb7730845fe5ed4717b06f84c1cb2b

SHA1
d9bc196e34d69ca0ec91a5a835b444ac3e8aea42

SHA256
de817d92db706f329d50567221c42110ae781d679ef853cc684aec779ab51ccf

SHA512
cb7c5db143087a470d7ca7f5d4200ae62513ffc27b864528d851c310d0f6f68d55b6fa45b7d3e0b81043ada5f7f6468447e9a877b6c6e06099c38690a6c07d10

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe

Filesize
74KB

MD5
6f05a242d0253e19d67978780bc06528

SHA1
ed8c623b0e462e92185d498552a11be01723861f

SHA256
ea31341129f7558d34fc2fcae9e715343aaadfc57f06a33a6da18448bd71b77d

SHA512
2bafde8afa6918956f745b34397a4f6ac479d3696a363184ea75cb9e05c5d83796527ea6cf343004544173e5370bca0258d5636e3cc5cec16701d68d82cd97f3

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\infinst.exe

Filesize
74KB

MD5
093bb40e0a01b36c7797eac30877b189

SHA1
da9b78c7ae98d13974ae55a15df03393b49453fa

SHA256
a4b1a15b9744ef83cefd88fa86fb4f9053d8e32cb08845cd37b0672a54fcab98

SHA512
10b912a3ed84b3e5947a1d56a5ef9d5aac87bd878271f8dc9e32bfe327f2e0afa6ecbb558f6927f361b7f6084be676bb5902c5755de49c182b7fd9973eab079e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\jun2005_d3dx9_26_x64.inf

Filesize
806B

MD5
134624a22aefee1fad4eb11445b8d342

SHA1
3f0f65ab8be678250660ba47f33f229643c118b1

SHA256
addafcf0cfd36587c12eb2692922f0fb134874d11005a0544cc054546a493933

SHA512
24bfc2d96b3078f82ba031045271460295f3a1e6dd3c8c30d8d50c98daa9051aeca93ed8ecae8722b70083d3b0ba41735f81068e7514e81767e1e119e45ad6f3

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\jun2005_d3dx9_26_x86.inf

Filesize
1KB

MD5
62f8ec9c0d3bd54ace90cb15f5caa208

SHA1
e84f4a60c79f862aca0f917d1d30898af4036fad

SHA256
262ed4a65dd45e19f196cb2d9946326693ee31a86b51bf77116dec2727971cb6

SHA512
3de4ad76b207c2a0ecc10835cb787d61faa02e3531f6242a606ac0686cbfa156f59c30695effe5560d9a8481800b356873b7590beb8a739b33c0b1fcccea3fab

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\jun2006_xact_x64.inf

Filesize
908B

MD5
a983924d66305104b4e21a551dc66448

SHA1
23deca69eea790ae7afc30cffa55e87ac8520cdf

SHA256
fe9caa55be17684622fd7339b1b96e1f0d107dc33c065706d24a435d523c6e12

SHA512
83c2117df0fc37979ccca7d861598a8a127d135456f72597366ac65276906435ab99fa353f246f9f61634fe96f8376d38253300f177d5cedac194cc92407f3d9

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\jun2006_xact_x86.inf

Filesize
1KB

MD5
fa59f92f7d32613a12189e75eaa700dd

SHA1
f2c3947427e7eca9fd1ad53427d1dec28a5f0f55

SHA256
6bdce6f6779712e38c6d9e6e5961217e417254089f096c719f25566e952cb257

SHA512
e8dcbd918cdd7d98a94d53413088e2f75e4d1a15d4f69b6927f3cf19760d9f2fc577659fd533b2e4e2997aa29f285b0fbb35830331997549e429dbdcc7ae9853

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\jun2007_d3dx10_34_x64.inf

Filesize
815B

MD5
bf312732fe77f600a36f2a7b98a346dd

SHA1
5e9c70959111dbe60ad86258cb5bb20d0e9caa0b

SHA256
0f75b7ef71e183476ec938705024eb8a10a77d7602a336be876c7f5d17429725

SHA512
10f3d128da5180ecccda522164269e4940b69a7f55af9501de648e572ab5275f02c113be5342969c73e118fb7ec49209883c4a8d6c4648fb898289f77ce7a3d0

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\jun2007_d3dx10_34_x86.inf

Filesize
1KB

MD5
55e30750af2bf57321ad1097a512d725

SHA1
0af3c73afaae0e8a1fdabe25beeb96b32eafb9ad

SHA256
808983dfd3db7c3452589ea4e14ab4af8ef47dbad3b639f9a3c55685c9b73867

SHA512
0ad8b51a550243d3f24ec5934f2b5e53f1d8e0b87997a7cda38840b3160121f1e221e6cb09d3f5b384df74be2ed10d4dd92fb02aff98bd0ededab751ddaa7149

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\jun2007_d3dx9_34_x64.inf

Filesize
812B

MD5
d203c1993f21a870871ebb0c99de313d

SHA1
e69a5bc70fe66f89fddd81330dc148a1e788a56c

SHA256
77f3fa1756181a90d2ee63c26cddfdaba0d720c9a49121db28746cd02b3e071d

SHA512
e03c341f2d8df6e8174447d32bccb56b096073a35a3d8193860bd4628d812d1fa381bd35a55e17b4f27c5c5fffddb25223d932e995736fc608030501954d45ba

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\jun2007_d3dx9_34_x86.inf

Filesize
1KB

MD5
b1d65a13b527d75ecdc30cabf407d103

SHA1
db6df8ce6c28cb4a0275aa134c2d42a0ed957fa2

SHA256
a568b7b8a0360ad94b1ed6388eca6ca9d8770937360a426a0fdadef9a4019bba

SHA512
7d80f772b36c408c258f7db1180bc09996620634e6304761f5c10659d0885bb8d0b19bcad50a13a5d99ee92dc8e15587534d966bd32c5a8910308eab623a7f86

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\jun2007_xact_x64.inf

Filesize
920B

MD5
c8ca749e73883789faf6561a375d9b51

SHA1
fabee2ac65f1d4267da8df07cd3e4cf4eb19148f

SHA256
405d8cbe3c87b16afac2a9254497412a42de4ae2d8fb470a1234dc3260e0b90f

SHA512
56a0fd5b8f065b82f5f9b73dbcbf912045847180a6614dc48ed7b27fea3909839615aab0c8d0a122d9fca952e9591da5152b4c618e84a2d7aa409dea4fa4237f

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\jun2007_xact_x86.inf

Filesize
1KB

MD5
757a5f0cceaf39b5c7c9bd61650fd12e

SHA1
a7b3dda77f0f2334466d324eefeb3e5f6809d880

SHA256
33b980fb973394d9d8cb4645914d4cf6793bf92bd311e0431ce9cacc59fdcbc5

SHA512
f4f969b017c9233bc4a2267118fe921689b3237d28fc2b251ea3b6227e0b17dee84dfb8df6491928791891dfcd265688069b92d8a88cb9dfdbfff07b24a4dfcf

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\mdx_1.0.2904.0_x86.inf

Filesize
1KB

MD5
81700fd8d24ccd5ed83ce202dadcc625

SHA1
380473dc3560cc64fd0beca96674554d87085c28

SHA256
3bd14cf2a96544ece692e1911500f7196370a111017fb6b0e23db0f0d0f40dfa

SHA512
8ee1bd03fcd6125d22d1d35437537f594a84e67573ac72d440d45d419b88f5d3d1f5fcd8804e1a0b873714c1a71c63a488b8068f0c465e94940ea6e2db1c7860

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\microsoft.directx.audiovideoplayback.dll

Filesize
52KB

MD5
75933586afd94ea24c5acd3dbc89a272

SHA1
970fd4b49d1368330c10279798991b901a233c2a

SHA256
406f473429573e9f0084aae125ef8f19f59291aa4c33cf7d40e7d996995a3238

SHA512
c096f0f11fb306c6a84886826306fe9c2862c3c79b14a8991a174224b41c2a68b76e5be506494d23d354384c715c5d82a1cacffff9644de9d6b93e9478087a1d

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\microsoft.directx.direct3dx.dll

Filesize
2.6MB

MD5
a73e7421449cca62b0561bad4c8ef23d

SHA1
cf51ca7d28fcdc79c215450fb759ffe9101b6cfe

SHA256
7986e3fbe05418fe5d8425f2f1b76b7a7b09952f3ec560b286dd744bf7178059

SHA512
63d24647ac5d0beb8f1284973927263cb6e05b4c399cda3912178114b42d541dd516c6d67a453ea997d9d0cd9126a1802678062f0951c2547e1b445ba50dfbe4

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\microsoft.directx.direct3dx.xml

Filesize
1.3MB

MD5
d2ecbcc04f7e087d738df9329d47c30f

SHA1
0f2d7c485020928227b668a148b0a60d99bd6695

SHA256
7b38e6dd8c567d17d94f595c33fb234284abe884a1148025f59c8e426ec30c03

SHA512
5662bbb30d7a601efac49f0e090cf05112565ac40dd998787e40d4ee6988f985ad8513b0d5f80e17f8ec9e7784af1c50a70137c0ec22b0c72107b601503bcbeb

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\microsoft.directx.direct3dx.xml

Filesize
1.4MB

MD5
1c124cc5c3be4a5e8d6619125b1b33eb

SHA1
455365d2ff521d135b75522a4ce6382aa73b7c30

SHA256
c3cc575c93690ddf44fd71fdeaff3d61552e9d4eafbef77840e4208522d81fb7

SHA512
1e9fde35b9c4d4a123a92545f5b15b12657d4652328e8d249ca31338f80b10a9b70811a16c40e82f286ce1b192bc545d29605c2ded4b937cf69088d9aa9943dd

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\nov2007_d3dx10_36_x64.inf

Filesize
815B

MD5
60e353607750ae5e63cb8e56f443321a

SHA1
8f1b07f8cfbd66e9a7e3c15118bddd99b04d6871

SHA256
7a49ae818e199cf9f9bd831f94cb6d03a1e72a141d76546261979b30642757b7

SHA512
038aecc1264f608c6028ec2288f0d8de6c9202bb3d1e96fd247e889afa06f1ce592bc9e224f37e83f29c0984cca6c4e85ab11eb28570aafa20b076f2b2e5b6e8

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\nov2007_d3dx10_36_x86.inf

Filesize
1KB

MD5
582814cd47564fe8e3424cb2eb090501

SHA1
87a2114434564bb0a5cb4ea337577dd405f5e42d

SHA256
96f48bb810055699d37e9e27a65947483a0b4df304870e3b5448d3051b3e4926

SHA512
203d522271aacc0200bdd684934a8478b54a258f55ecca49a178ccabf418a328cd02ebd2a9656bd9dcd40c33de21d33664c5b16c1e7877de424d37b4f9b3e7a8

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\nov2007_d3dx9_36_x64.inf

Filesize
812B

MD5
345ecd585eec22fb33a62e59c2758b6d

SHA1
2d6ed63996903c32b3e7ae24d86c924b11d53e7c

SHA256
d1b544b3912e73e5984cd759096120febe6f17e41a3cf920ef82431b9b569c1d

SHA512
6d88cd48bc32a008989ec4bb71afba0afeeaa12f17833fb4072c38b237bd006f192f4e4e7a65d8aebe5d6dac1d13098eea370b03ced343a5541e0ef23e813364

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\nov2007_d3dx9_36_x86.inf

Filesize
1KB

MD5
08ffe480ee5e54fc19a2feea46adced6

SHA1
c939391c489bb321f70707183b0d3f4b5f13911b

SHA256
843764f70f56d430c0695e263c895a135a631f793213d1005fafcf9c210d1ac9

SHA512
c05aa34b860b5620c982731af15889da5571395fb35faa24d43ccbb1b42dcc756769a0b9153c28112d7347f28d4ba933d8b15fb36a3e511ac99eb148f848ed99

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\nov2007_x3daudio_x64.inf

Filesize
815B

MD5
55402001ac41f0bcd1f457a36d298848

SHA1
a18fbdc9631610f2550f05cc3aed5a665afee7a4

SHA256
1cc72ca78433fbb72ee6b654c908748ea846c87c80424816745f285ed3bc910b

SHA512
96cb7ff1d43a7c1642d8ce9cb3c23ba460f6c083a7927fe0ad7a3ebb85649c384ef0542ee3e7dff6b99413b95a2a333327cd28349665901f466782fe96ee491a

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\nov2007_x3daudio_x86.inf

Filesize
1KB

MD5
4287ed3f6647fcd80ec6b0f7f2606964

SHA1
27b2e4212295478645a017a4df820af6bdb4dd0b

SHA256
f882bdbc8230d24b24e20f9d0db447586e9493801900a8ba381eb493bd41f5d5

SHA512
c816d7127fb7fadb971b757ba76d4b918fe18bb16e5d2249b4bd80b0b6c47208e7ba5e11b521d9cd0a23d464c392f98a3c617b91c0ae799f3aa10401b4e2bcd7

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\nov2007_xact_x64.inf

Filesize
926B

MD5
bebd51d24aa338f6192e291d03684b6d

SHA1
cf2c0efb60f44748b0ef3f95276b0512719f130d

SHA256
841d579573afd51499c7cd8ee986a41db63cedb722e8fac351d3632ff470c161

SHA512
28fdc41091d761faad79c1af33da0372086689113df2f1cb40513d50727e5aefd652a977ad5c92bd62f1c5ef9cfc24c23bc6758ddd6a4d1ac5db0b5e401432ca

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\nov2007_xact_x86.inf

Filesize
1KB

MD5
7e2a5eadf9f1eaf90d5eac15b7a9f558

SHA1
907cf74056bf7ad91e47c98aaad9a092ab42fd02

SHA256
24714f229e479338ed89bdd6143140505fd63f517b7e71170ea6c072a1748b06

SHA512
63c2f438e6feaec2b9fce15617940c97862a54527d549fb6ea149e4d18199c1752e255c6cb167ff20b9cc1f74b87ffc97110b65652bc5c3883cd14894d21f8fc

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\oct2005_xinput_x64.inf

Filesize
618B

MD5
dbe238ed3a0d3805a1a57c23fb28b721

SHA1
076284d2fd60ea7c29acc3233ad41f2bc1e2f73d

SHA256
534d55cae9f43193f49d74c9303fa3d32cc309d0b23597a97c315f207f2a358d

SHA512
af8a605cec38385dc24bea7b4520ac924961bf8b4b7317430394dec3863f52b2a3cc2d86dfada3a9feec9906ca2f0f48c4e22c10a87fed0c9f70cedefd9ab32b

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\oct2005_xinput_x86.inf

Filesize
782B

MD5
be6e213583854cdfd305b207f4aee0d5

SHA1
4ac378fd06aa6dec48171fd1b4045d1bfe4bc04f

SHA256
a14d5947c0ad4a864f95e3f35344e93f4845094d660eb37b77b1fdae9f7995e2

SHA512
e331c30330b87ad1fc57502bca5cef45afc0a0b6ae1f8746fe8dc47fdcd12cc080062142bb01ed0248c2dba144fb7722564fe780a129e43680b1a73d19b507e0

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\oct2006_d3dx9_31_x64.inf

Filesize
806B

MD5
e2a0e651573cffbf81578b864b50cfe7

SHA1
1c739f17f63ce7c5ba00638259628f7fc919cf74

SHA256
c031987e68e476365cd885e41a072f85fdfc9e480c93871d024a5ccf26d17118

SHA512
abfc6452d055bf6a3fadafb9562352bda90ee0edae5a0fec798951ef9d39701835212533a60eaab67c5c0fcf01ccb9115fcea3779b024ee1e11f217cb676e7f0

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\oct2006_d3dx9_31_x86.inf

Filesize
1KB

MD5
8f7aa1f0f2389f3cac574652f5d6672d

SHA1
921f2161cf46c6314a330ff52c83f8a3f1058f0d

SHA256
a1c61096019a6ae1a9f31e3fe67aa2bb7e9e451967959d7088344f3f20ab572e

SHA512
a85c03ccaa27adf3c75287529f18e84f526cf91785e0f4281db0eb86feba78522603e21def19bd2a33e03ceaedd9109b8af1dbda4a3fe93fe6eb95366b6df747

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\oct2006_xact_x64.inf

Filesize
908B

MD5
535ca39d61f752c3f1ba4956871fa27e

SHA1
4941efb676adedb9a46d7cc7415d8af03957b3fc

SHA256
4c388e9eaf3c39e75d003a58020e491b675b3a6054c702062a9c90e86f691d96

SHA512
f203958ca9c7d37daccd342a4deb125b60ef839b5b674a2a0220d7f0d770d5cfcd5c1f691470200bb4d8711f2f6a77d8b968e17020dbcec8c40b127a09f5f9de

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\oct2006_xact_x86.inf

Filesize
1KB

MD5
6181c4b93bad5332b34180ac0bae5077

SHA1
259c8de2dff2a5dd8d4971fa1ab3fb0d193ae90b

SHA256
66998b21cbe6f05b12cdb4bb45549dcb1b4a92f8a1b910334150a8d767fa39e9

SHA512
8508ebc77b667907c5c2f587131f24cb25c5a67ab2f7d8b94216931457f486b37b9701397ed6ef527c9c6786f82a938a52d2b6cb0afddeff4101cb100e3ceca8

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\x3daudio1_0.dll

Filesize
13KB

MD5
4e961525cc7ff0e5d7da19e170b7c14c

SHA1
7e3654ef7f7c9524ff415582f1b066f29b4234c4

SHA256
228dfece2b4555a243a73e7bf461036f1e53951977625651ff5a59deaeaf4b88

SHA512
8785d0b2188f36d53c1a2b99a669d6edff1c0c27905d5bda1615a503f115d5b0762f008481145cb0cb6a2589926543b9c8ed0ecc2e328593682e39b90fca2087

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\x3daudio1_0.dll

Filesize
16KB

MD5
f77d5ab654881e683cff6650916c424e

SHA1
56d8f090755f1ec60b13e748b040069ea8759b5b

SHA256
77cc09cea6de69f12106e6dd9df1c0446a525a54c3953d69d64711b9394cc38f

SHA512
dcd1273673f4088e854057e47484bb363e1e7ce094bc2c98ad7cc9112877892c1d6fd591dd9cfb325d6c451f2d03a4cdcc238af1ffb5382b7153f079cbe13abd

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\x3daudio1_1.dll

Filesize
14KB

MD5
121b131eaa369d8f58dacc5c39a77d80

SHA1
d8fe20cb6f28bc5334ae64a8df3563d1985beb9b

SHA256
ff15f14174a5543f028fa49cca745582fe4cacf3bbe490749cf43444690ab359

SHA512
ffe19ffea137603e5401f133d461b30af6fc25b3affb8a8ce20b98e3270de398b9ecc83a6cd904ff42c5885d3806c7e175957bf4a5827dc2f067756a51bc40db

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\x3daudio1_1.dll

Filesize
17KB

MD5
489e5b8bb1bd1028ff1c798eaaec65e4

SHA1
da9c385c48a6f590347581c5c3dea67502b99837

SHA256
fac23787e7c199c1969806850b5a9652f66f6dcac86f48f6f834abc253848a55

SHA512
33e3c28d60c7063d76c6959ef18dbb0227466766c4be9ce920911e192b75c18d11943a2eb0bef2caa920a6efa29162acf9f6c9c07ed5ddf5858420b240e0c0cc

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\x3daudio1_2.dll

Filesize
17KB

MD5
9e4efe7cc29ece294f3506fe0d8090bd

SHA1
b5d0e9cf45ac3b05fe21aed3ba41dd94b1ad1fa7

SHA256
7c06bb70d12cf78de9c6a12a53c95f9dba41c140a48bccd500483e5b87795a8c

SHA512
998d3034cf21bb9aafe0821a96c64ab0c38f770cf9c6a6820a2292b569510dbcd0e71ce56dae813614d9a148c146e095245e963905e71679c3cfca1ad98f5e16

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\x3daudio1_2.dll

Filesize
17KB

MD5
ac49e8536bf510251611a77e2a6cb8dc

SHA1
8b1f64007fa777fa2aca1e456735ab872cbabeb9

SHA256
1ae37d90d39c36c142a51ab9fef7230788ff95080f2bc47734737bf82d3c2c9b

SHA512
2c33ba362315ab102e4898ae92f7bc71e7c0c7fda8cd79f896cfe76e5a2a4129bf6a1e48d75b82ed7d915c0ced819e81c0f89640677b6bfa388962ce19bde2a7

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\x3daudio1_2.dll

Filesize
17KB

MD5
f6a9fc2ad2f9111372b5ab3bba3707ec

SHA1
bc7afb780d42a332497139b5236b809433d86009

SHA256
4c448c7f77e3b4385d2cd35d0c470589cdf0524e532f9cf7ae084a8f88aa949a

SHA512
6cb44bb174ef28cee3e3a6ac51897b5cceb3f2d06d08c556cf6476a285de3e3b03a624ca92fc11b95f29694629457fa39747e3041736f9b76e84f19a052ecba6

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\xactengine2_0.dll

Filesize
224KB

MD5
2112fe0c46662d429347a7d7b49e3ece

SHA1
8cf607547e9c5a10f129a3a8f8f32bd295c0d5b4

SHA256
cfd1c2d34feb7d94f282e97bf762a99bfa7309dc7353d96dfe4aadc187d26c67

SHA512
77f77add8411d418798d643d783752896d3fcac002f15696caeaf45b5396d2d42fe53bfb409d66ad505cdaac0ef0a20a62aa45b50aebe65237d2c44af36bbc34

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\xactengine2_1.dll

Filesize
224KB

MD5
7c9952111f4c743b9f0d8b68b6ed93c9

SHA1
75dc863ed10e4e4a18fa06dc32789cf16c738c38

SHA256
666cef7d27a38f709063c9c581fd95e6b3fa27167bff4beff484dba2dc922a2b

SHA512
aaa3396fa9081f25b2eff6682ea26afbd297c8a61cee4540f9a947c1a96ad51f114a9985bbc69ea7d0251f6e4b1e835c92daf0f8c5fd66e477e3243ced3c9bef

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\xactengine2_10.dll

Filesize
261KB

MD5
73e055af78a64f9b2779d44407ca2ab6

SHA1
d771ef11d22a79dba7deccb9b3efedcbe74532d9

SHA256
113640ae8cf78caa7cface2f906f9e6b60809906f5c26e08b2e90fc48430f3b7

SHA512
a8d979297ecce24a29459e7ff814e53c649a6c969869279dbf0f29edea4d73883441519a27e5e46bb1e4b5b942cb26907cea9a488de0067e589632687b25b5be

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\xactengine2_2.dll

Filesize
224KB

MD5
5c4d3843b491c047b7a619901fbd2ec1

SHA1
e02dd40f54e7dde0bcbd648e4fc6f723ac438bee

SHA256
4f996edb65022e33ae9c9f7acf7232c8d444f75c50c72894f6d3173b55404ebe

SHA512
474105b213bc067e0822ee22c769f0caa7a02f2d74a0422b676675fc45482db3a8a3dcb2744339a4c7fa029a2f58a2aef5db500c65cf646106d8ed096b17d062

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\xactengine2_3.dll

Filesize
231KB

MD5
69d841744b2bae38fbb2d40a230a549c

SHA1
2a6429b1b1758bffe3366ab72212fb9b02152d77

SHA256
ca20cf8e4034719a46bf67c6009486c2c1cfc2da10ffed3a67dcae677b4f6793

SHA512
d5e26da74fc84da90b0f60451479524f1d03946076d009328aa7f9939456762633006d11970dc4c849101728ca32350c125005eb4e3f75114d4528cb17a35b44

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\xactengine2_4.dll

Filesize
232KB

MD5
6550e1a0a7be611592c31222fcb981fb

SHA1
2197a951ecac85f7144fb925f6daff9ae7811e5e

SHA256
1e0e09fc077bdeee3de065c663b83f6717d39d56778833f030955077d490d000

SHA512
4013fba5e4211e66ebd9f733ff35635cca82875d6af71dcfeb481a436efeab608fe41310bae63d55c7fdd64a5c5f64068ec1eeb997160c8ae27f21f28e2bade9

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\xactengine2_5.dll

Filesize
245KB

MD5
86c93789e9006f1ac47ed9dd47d4c8a1

SHA1
e9de46eb68271018aa31c71ef89d1ddef19edf7b

SHA256
ec68b5163cbb5f15e2fbe37fdf5fcb0d01dffbe53a460cb2cf668f31f0127ad5

SHA512
5a86661171f039946fa0568c6a9c655026c0a74c04a7789fadcb4acfd6a4faa5179d14149321920ceca9a1214910abec3e67e356898d5bdd044ffeefaeb57df3

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\xactengine2_6.dll

Filesize
249KB

MD5
39000e033d39d19ccce21aeafcce2476

SHA1
6e7823e689a9b720a049a260380805a235ddbf75

SHA256
be45aef0889b03e2243282a912f41580e8566db666a782c26a1d4d7988799d03

SHA512
65047afe28308ce69e3b410b3b52b5fa4f615c95802019cb9b78ac69694e9987076af4bddb2ed7e47b0fbe73729c91b94c525e5b7644a42658663ed044b384e6

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\xactengine2_7.dll

Filesize
255KB

MD5
7febb8ce2233cbae738b16d42ed29674

SHA1
fdc5682d6aa0ec57b8f3c742fe736d74b3c649cb

SHA256
a43c92af3fbe91dfe2a1d415342631fe64e18c7dd3e16e93b6c78947b68e7bd6

SHA512
73a3c07b13b31d2df1cece720a0268cfdb7ae2a066b9e613f7c4ff0fc37b94bd4f32207149d56e1bcaa5656fd4501b1d136d94e18e97c07a8e793906dbc7927e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\xactengine2_8.dll

Filesize
259KB

MD5
499210c45afeaadee8cf4dcf7d5e570b

SHA1
de5ca60de47c8f54d531b88ea80d9a24a8e87a98

SHA256
15d82e89bea30bf82de6ba0cfbe97eeaf05d1e06bc0133f0d1ee8d0cc41f51f6

SHA512
f76f69bc3b6cb4f92e675eeedbd10a80f0b970d75ea04392484d477a4d02dec670cdadcb90be9eb215c4ad48a90d28347c9104f0835e93b5a9803fd62670536e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\xactengine2_9.dll

Filesize
260KB

MD5
46ee68f04a75a1ccf40235ea6f1cba05

SHA1
43a30e195b8d894c69bd857ee377ce7fa6170fa0

SHA256
93a0d8fc38e4e9a301d9e721afbeedc5af40becc0b11a6e7e8e38f08f366ff6e

SHA512
16e4c624e4e74d8c1fd7652ae745a87de3698567faf0cf03651ad87f1f730405fc0d2eca68e4b0ff3c5c526c254aac232f9bd359ddb6563313a8f02db3603fa9

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\xactengine3_0.dll

Filesize
232KB

MD5
8a83673f0ab001870583fde2b004fa59

SHA1
be8d312b359a9b8f9f184d78c93c762cbc46e321

SHA256
887329745c479ce8d3023c969adf66780dd7e51ab536f0a08550ba4c77066c20

SHA512
583c73590d4b90576955783e24149125615b135f5bf5a815674e2546b93a8f89f6c3a286df09257e547bcfa8c0bc399abba59fb64158b411a83f28a4a4feabca

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\xactengine3_1.dll

Filesize
232KB

MD5
2e0e25252e1d41752876e9fe12ade175

SHA1
d9de3a83235166a4bbc4bc356419c07aaf3e3f8c

SHA256
088999560171c60129c95f9b541852392602561dce43e4c61a453d48065f52ca

SHA512
a4555cbbde372893c564e1fcd707525c92fbcfb6915354b0062474cc47fe36ef66a3af212c08da117f2f2121698e556633f8c399199344354ce0d4cea4d0a2ca

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\xactengine3_2.dll

Filesize
232KB

MD5
37437ea1b3a6e32355b6054011631eef

SHA1
da5e445c2aa7862ada1a2da0fbda161e3d6726eb

SHA256
0515e832b2d1d26866279b0da2ca8b8d7c88a9e6024792c13ca023baaa16bf03

SHA512
c84fe0384d713f206f250d8d2a5fe8a9a6e4c7405e76cfe38a7af3ec52a7d6edca614cf84580b78f90980d435ef6a7acafd5e42f1409c0043f54dc94dd5281aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\xactengine3_3.dll

Filesize
230KB

MD5
8ba296419af3417d1e9806b83166e472

SHA1
a2a8a64aedcbda68149a2726b094f1710cba71d1

SHA256
ef052bc9b7fde596fff3ea2d9c8fc994f3282953dead1b7f5477e7154af67245

SHA512
877e89553cbfb6afc6dfb22a590a468f035dccffecf842cb26010d5e62e33fe10e477d5cb157d321de3ecc59112ba616b80e767028eedeb4e70a591f1b81b902

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\xinput1_1.dll

Filesize
61KB

MD5
f1726346e583442541fe73429f8e9c10

SHA1
a1b7a4edd7d1164197f734218fb485165c075d0a

SHA256
69cd725c53e0302e75db20e9a3e4b33f58dceaa2e6ea4938b2733df8bc289a71

SHA512
ba17740271ea92c917db85c64d4ef63a8f2036fb1398abdcbedf9d49c09a53e34ea04e8b3f5a2ee41c2b2ecea6196ed7f9866ee48a9f3528c3b4c1f19dc167d8

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\xinput1_2.dll

Filesize
61KB

MD5
33b62be226934e1b01f5043870c70427

SHA1
ad96f837accd277da2933d07aa86ffe3ef803b5c

SHA256
9714d146a785d458f0de8fef387d82c9f8e101c02407a0cbeb06f02a69518eec

SHA512
41f859fa59145ef6cdd6cfc4a14f90bb932d2c6aa339bda1763d8e315e6a78bde561010152460e6f996c9ac9ffe6650ccdf6ded34656081a0ed9ab1270773710

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXE3EE.tmp\xinput1_3.dll

Filesize
79KB

MD5
77f595dee5ffacea72b135b1fce1312e

SHA1
d2a710b332de3ef7a576e0aed27b0ae66892b7e9

SHA256
8d540d484ea41e374fd0107d55d253f87ded4ce780d515d8fd59bbe8c98970a7

SHA512
a8683050d7758c248052c11ac6a46c9a0b3b3773902cca478c1961b6d9d2d57c75a8c925ba5af4499989c0f44b34eaf57abafafa26506c31e5e4769fb3439746

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BR771.tmp\NFR4_setup_pl.tmp

Filesize
1.1MB

MD5
9ad4cf584ee8b8da836f306d167a7f8c

SHA1
a38a72f727bfbfb9fd268577634fe038ea9d2ea7

SHA256
3ca48c541dbb0ced4b4323d97a0614a057b8045c1f55d9c0f1032ce6a100dbbf

SHA512
ab954116b50bbe852eb4b8b44e81c9c89c7bf20a646b6750d83e23efb976f7ef59cf3799efd5cf50ee90648cb3d4304b58a5b12d7ebaa709d7a5cdde71182b56

Download Submit
C:\Users\Admin\Downloads\NFR4.ISO:Zone.Identifier

Filesize
26B

MD5
fbccf14d504b7b2dbcb5a5bda75bd93b

SHA1
d59fc84cdd5217c6cf74785703655f78da6b582b

SHA256
eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913

SHA512
aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

Download Submit
C:\Windows\DirectX.log

Filesize
4KB

MD5
0203eae166ef2b1b77a8d912ca0f070c

SHA1
98c638cd548b116e9d941b858509ae9f8e56d341

SHA256
eb6ca07de099d66034bef753e7085ac7aa2bf3e5bdf59b6cb7fcc036e5c1cf11

SHA512
c62198e49e3db6aeeea6d478417d64eac48db3451fc75c601475db2c83cdf21d34ce2f15e84326df783d58ed93d944c7e843cab0924b249f28eab174f1a0aedc

Download Submit
C:\Windows\Logs\DirectX.log

Filesize
5KB

MD5
50efef942ea6a3303b26b68b83918fdb

SHA1
823d0aa25319b3d319ff17b8dbd616d5fbb898ef

SHA256
8b9c0e17714ef631d6c7bef294b549b7e1a80f03a27fa42252aeb3352028d942

SHA512
4c7d2def7fd235311f2c188d8560b674ec6aa74f2281bf37af14a13f7dc42cf6fef747c857438bbcee3e4259f2cc236e4d6d03b772276e630f984cb8f4a54b5f

Download Submit
C:\Windows\System32\SETB2D.tmp

Filesize
20KB

MD5
bc78d5328541410510dde06b9fa92024

SHA1
f6123294896cc3c3d3cf5a9e0e03319f58da7cf3

SHA256
7a34a7a8af47c6b2cf890ecb56bad2454ba5eb1ef2df6fad9ee53c4770e941cc

SHA512
5284d695216aa4f70abafdea130326d8ee3c6d9a9858dfa3f5b184c6b8b185adebcbc92adb8a7530f9127ae1de30561986bf9c85bfb8b474a9812151a7843c59

Download Submit
C:\Windows\System32\x3daudio1_2.dll

Filesize
20KB

MD5
9355a1169ac104a3670c2a77d060ff60

SHA1
6935990e213c432e4fe3cd667148d95c0a33bd02

SHA256
b822d7de1253c52676f4e20f9c715e92759b43b69978dfef2527b6101e420ee6

SHA512
9897bf3ab16e869b47840b72e0d8166e0f6cfebe0b3254e278d7cb046a5d50fdd2d8624da788b9afbcf58fc95024ccd2e5b9b010de074e8d9500669f349061af

Download Submit
C:\Windows\Temp\OLD8BC.tmp

Filesize
20KB

MD5
87d52a3ce4936f6c93ac092c3cc2780a

SHA1
3be34b222d022cd4dbe28f0668c14af716f1025e

SHA256
9566e346fbf72928e9b48b3408c8336a9e77b331bbc729e8ced9f0670c51c699

SHA512
d7809bf29599e86a5c164d6cdf83e9b8a29ae08972c998bed5bb8a93a11742a5905867d2bc7118498985c4f1f4e6223cb0659e8d9784a2ec05b12bebf339983e

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll

Filesize
12KB

MD5
c0843f0f45edeef233b1e581ae75e3bb

SHA1
04569c78868eaa8927ba64f93312720117152843

SHA256
8c9685959706750091b0094522cec8644de1d1c6309e7a2fe02cef130d3a2b9c

SHA512
8fc293f5c5de65893d92c54f921c84f8a3f44fc733445dda7907ee09d062371ef05c11d014ba2017fd15908b911d0185a14b89d0a311a870fa33650c3176e442

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

Filesize
2.7MB

MD5
5e2b8b8a5ed016468716b9ff82a1806f

SHA1
f1772121149d87745738cd471d0e504301a9ad0d

SHA256
5b70f0ac40a38c903062a12ff7cd71d907e75238a044ded9b34fb51e9a9a2799

SHA512
4620c9bafb7dfaa8d4351d0d99ae3442ceb2220201f16bd9bab4fbeb1f411fd63d4f0e79abf6e762f4d0e62d42608fbeebd13943ce338eca59ad1080ea6c2728

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
308B

MD5
7d9be094320e1efbf50bc4fe2754f70d

SHA1
f0c30d1a78c9c601fdfcd5ab098239a54700a9d9

SHA256
c73f8812fd9a4b483f014230d14af8e40165b765fb1cfe6fa133ac3819c91d7c

SHA512
0c4be7b2d31b0f2a3daafb8975faed1b811d54704b14304898c39147b87d6bb81959354b74500539aeb6d1e0adfe7074aa9ed8a5ba2d558184cbd1f189e768f5

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

Filesize
550KB

MD5
d3f1922325be8e7e1c72bfd8179454ce

SHA1
89134f43ce2af4adfbc4087392aee6fe56be7ff4

SHA256
8418941d8f1d4c84288e0bf54392378dd3d87b602bb693ff4f8a633022681c12

SHA512
d33f513ff6c199acabe86eca6dc06d56c330ccb78be4d13fb6b1906a3cba3c93afe982b05cb057f2b88f6e6637452f4d99d4a4fe6f3f7c473de9e67a40758bed

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
308B

MD5
17f48680d61f88e0b807ccf755ae56e9

SHA1
f26cba6a6080214d296d561db92cbeec7a6ef7b8

SHA256
70c35e382195f6a42388c6c12d1af0df26b9dd40c81df9338a3712734d6c58bd

SHA512
695a4384e7ad83b20d7d9c630af454eb2594e8d785b6020540944f6d950082f6ffabef8fe4207f6f1bd07f9643798ee8610248bfed1162ecbf7c4f369c84de33

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

Filesize
554KB

MD5
fb3bc0754921873a65f5fbdca845e6ee

SHA1
67cde5bc8577cd3040e275d290ac021874da9fe8

SHA256
f500c350dd71df7452b92444e19b4644b04283434a6557123f1e4d9fb078c3f8

SHA512
292b8bda44e6ff6449c4b38da9b8317491c0f0da3d1e5f7947741de27cc51bbc078fbf947c89c4be3a0b54f7066f0480990d1de57919edba3414aace77c47635

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
308B

MD5
4ce2ae38fca74b2f30a9fe3990f21e6e

SHA1
10be6aa0a6e63e2bfd4db149a8a11c946072395d

SHA256
a47c54c99cd7d6e997fb3456031db0038d4c961d86656d21b7060aa22f92d132

SHA512
95bdbea82b96a47d60b275c9f3ece1ef22be04d556f833bb1004553f6822ec61be647c96a8004f47c89803110e3412cb158004ad670e7391533dbca2170e4a4e

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

Filesize
562KB

MD5
afcf5f50c632f3a5598abc28f196d77c

SHA1
294385693592f9d6320f8b0b18f45bc194d01a4d

SHA256
5e90089e69e4f7e2e42ea4a81fb62005c3710d0a4acdf207b97ed03f5641d013

SHA512
29746ffc665051e13386e452c3e41a593b6339e09a228927929be100cddb3e0e0fd3b54abe02eb7d46a3d97466ecb02bac362398b72fd8e804cbb21c8bc856d9

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
308B

MD5
b4ecb0c0bcf4d3e4c8e5adddb7414723

SHA1
e31fe056aa3ab00a0707fb56c87fa2403fb688be

SHA256
8cbce3346da3d2a664274784cfa113ec7688bcd8369cfefb264c299188a18141

SHA512
fe9a9b5b630b4a61fcd52af97383d82343698da26febecb1bee28019bdcf00f80f11f33705487ab37220afa8c63f4c25716373cfde1af38c7475584656bf63b9

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

Filesize
563KB

MD5
ccd53738df4fa27849b6bb05dd67d10d

SHA1
28126653a3d1b4574fcb0c09176f5fa0ff28ef78

SHA256
c29d337bf7639fbf424b34cc0409d2715762e1b4d82881fb524a2508381c9f62

SHA512
aa3a10504fbe49a4c44151beec7d9b543f4b89a51621fa60810f385bdc8a6821e4bfc37cd46f3688013f6f4facd33ab45bd0deb4a1fe16453e1be8f11f2119c3

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
308B

MD5
11ff60d2c9a082021fd4fb4851a5bcc6

SHA1
160144ac3b7a1c73ddaf1b7132e86bbb8d6f868b

SHA256
5d63f2dd742da6ca20821c05e60583613c2d25d28387495a28c5aacbd9237139

SHA512
177a71221fed58993acecaa91dc008da400d8284265362bdc5173a67e68438f149d812e366a906b049c13d3918cc62bd27d0a4814477c6326f587124d30722b1

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

Filesize
564KB

MD5
43c280c3b15ceb2472ab560d09629664

SHA1
e3a897d7608d03c93b5c2b8aef52703452cf6696

SHA256
bebbc40ca25ef22e9d16b0de1123e0cb0444fe7a78b4f0b4395bdfd81618698c

SHA512
5229eef9153b992684b6dcb4a32b231c63322b5e4b49ef262228c0dcca4760f97cda5d15a7fcdf77d813eb24b359101e716f72988374106ace13473f27e731c5

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
308B

MD5
3d5b2b4bfe82e79f25ec7974a5aa80c1

SHA1
2f787e0b61121c867f693238e5dc8e4ebcb2401f

SHA256
05a7bd316502d058b5bcac27dec60ae2fb69a5bac8e2a97a69e659d4674d9d59

SHA512
106dbe7bb5add4445021c92502b0af5101fb78398c3144ced0291e2fe6c8c2b99fcfcca904ba48985eb5408b0bcb8df330bab0a64ba2cfac41daeed76981bbfc

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

Filesize
564KB

MD5
490807c150b7d8be44bde871f4df8c56

SHA1
69b68a5b8cc3f3e75aa2ba284654ca58bb62f23e

SHA256
36a21fc4f4c8f6ba4ad900613ee1b08ff43f2545585a2601c9fc4cf083d68a77

SHA512
9442e26de55009428cc6e747637c2cb64bd2f008541ccbb37fed4e83ff66845c7cf3874d93542e0ba544e2db61f4864b665b7720568eba284beb095489f3ca64

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
308B

MD5
ed5d9669cf298694a359fe67e9ac3da2

SHA1
ab0a8d175b8265e84718402821b7fff71498780f

SHA256
7de74cedce0f10bba7c8fc899ad317b5bf96486a8c6dbfa968339e475d728d8d

SHA512
805306d5ed5aeab09919359ca13d3f0a6545e9274883237cf67838792188f8d07c67a91064c5fb428ee4f45ee65fc56e31093c3a13e6d31dc894747cea756784

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

Filesize
565KB

MD5
933085360527de1b4947289ca468184e

SHA1
d5ee5e1e3c992c7518b5ce510c627c1564131b12

SHA256
78d85f0e2cb7d7bde534222f4ebfea1c9e06d37ecd3bb7ebd59e35f00b94b11d

SHA512
2e22398d7cdcd6a46daf3dd3478d861bc4012ba1b54862311ae031ebcd3f908352157cbeea528f22ef1824f8924c3f217311feaf1804cf675eafc07a8d3962eb

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
308B

MD5
864c0faf36051f920326e1b8835b006a

SHA1
29dbb63b5266c066cfc51b0349eac7436825a1df

SHA256
bdd37dc8a990b42e65aab18c52fc13b5fc0f8f1589d4896721c060902187a655

SHA512
4006ad12e1c33f486800994d0df03a61a4f1980e67f0fcc46d9719c77f6d7257cc4a63f82d28210e0e0b176beb8604c312e0d325ff35a34804c78ecbdaabd21a

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

Filesize
565KB

MD5
25c76c1e29d3e8e7398f0901f558a629

SHA1
2e907c9688a025538f1b2d0cf1860a2ae49fd2e9

SHA256
2ee41d4d591a39d648e90db4d47d0fa0557fd68197756ee2ee94fcde4d820cfa

SHA512
7308fd91859d00debf446bd6b594f3ea196dbe46a3583858c76d2cbb008a8698207f1ce7746afe3de4efb9a27980f5f813c77cc88e273fa82b2695d8f3d15039

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
308B

MD5
5013836f0e7aa658b4d3685dcbf4194d

SHA1
acab3856f93492a8d93ca0edc8d548b9415605f8

SHA256
df5bbfb05a3428c37d7cce561aa16950358f9df9c34417868ee0ea0af62b8fe1

SHA512
4bf66c8d9e682f952273443a1b375b1a37c2417a718b4bd5f60f995fdd62082bb24a769dccd48d68c8a95864cbecadb70e92224cb35805b7c8d15a56f7b8ae59

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll

Filesize
462KB

MD5
7ad4d9fabd109432eed91b359ceae430

SHA1
c1dcddd86f9fc630cc0231acd7b732fd55dc5f63

SHA256
f3359d5e41b1d4fec7230579a593e40fe44f6afdfacd1e2bbe52ee06d84686fb

SHA512
bfeaba581a7aeff86bac0c184da823e4a26516a3c4f39af6b6b1bfced73117f3816c567b182f4da0df1935a6e97b6d0520cf02f518736b52fd27d37750e863fb

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
306B

MD5
880042a9ade73d2a43841159e5c184fb

SHA1
3d2ae66a74c951e5d269122db38a07a5968ea3d7

SHA256
22f43ae48a3c71f2559055a6302b8200166c612ba32379c452d24c5904637ad1

SHA512
143c5dd0def044042e47f26818dc6cb0ccdc0423097d81871c8bf0c750a7235a0f1d253b690812e181e974977a06cd171bcc0deb8e990dd9bffbbdcdde118d57

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll

Filesize
142KB

MD5
d9824a9dd107e598575112b4ff897292

SHA1
adcc54d159f1eeead01dbd2fbc73c808ce519920

SHA256
ff4c03bbeb292317a77c86c1c81ae9564acb984b352fbef36d66e2d8bcbd79a8

SHA512
caa1f0411e0470a315ee8c7a62defa972ff17557bcfcf74016c64ad11b0f6fa46a126131a18e275e59e025814545e1d7ffe145377f6a0bcdb8cc93471e4c9bd4

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
310B

MD5
8241984177ddf7498e416aeae2c0af9f

SHA1
a156e1ec2b120aa2f7e258e6dbe2bc1b7f8ce22d

SHA256
f67ab8ae3d035d64821ccef9cb91b9beaee3c294c2d0191d0ea77e2e3ba5dd30

SHA512
084e514320fc4fbf11b90eb4bd694ef49cad8fb73f4f35cec6d7e40559cc81299aaabc1ecf660e8407af5ce30ee961c6d5cac9ad0c8ca274b9ad926d1687ab49

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll

Filesize
155KB

MD5
cebd995ddeab2c525a5c4e95789bc961

SHA1
1c98da39d7eea36d73b361ddb24054038c2b8331

SHA256
0ee2a2c371a918cabc85143202864d0c3a4abf1b93a5029081a622e0acf17ab7

SHA512
158b3fe6e6605eb56a99b2135df529226f9af4b001ed0c2e1fd201a60054e2201dc22245ee5a02c6e7778337f1974ee21fa088e94b13a7402e61f64658de49a1

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
312B

MD5
4b691a5db54a307dec1e5f14f485e06b

SHA1
e6d5ed9c2ddb263b979236655c31e04cc85e3543

SHA256
120bf99b0f8ff8368147a8aa3b25cbd9beab11fc0d263efa4b4f72a31483f8b2

SHA512
be60417e379324fe7ea8c8de55fefd3c234128be718cdaa300e2ac3769a131bda4180613a0357e6a7bd21e0f9c8aaff38234f18c6aefec649566511096fb17d8

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll

Filesize
356KB

MD5
46f26e2bafd44960e7f13b2ef80aa0bc

SHA1
2277bc8980e0f6c3672c2348b0494f0cc0ad611a

SHA256
489f65e1e00534835486e9255eec92b83edae4dade6dff867a380859ae53006a

SHA512
5b5147940803bccd0184b46e60560f967831541e707b5ef19781103e31235f1ba05d00e44a6f2ed061ebf5dd7013d9c696131a3edaa77d3aabb85b3255ba5489

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
310B

MD5
19bae52bf8ee69ac00dd9951d2bbccf8

SHA1
4518beef01f956c9172d2947d0493893070edef9

SHA256
a622933a31ea054494df50f50f60da29cfadb286d24ffa7e2bf4a8f9efdf50db

SHA512
8c9bbe87c777dde6a865bcbe9c2e6e1aff668a2a400a44d077f57f2789f5371eee116b267314a163fa9646c0c17cc3fe2b1b91bf8de93961317c44645226206f

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll

Filesize
174KB

MD5
d035348ec8968861af585b7132fe4c7b

SHA1
877ffdf77b9cdc1be14135cff0b756a231401617

SHA256
2e28c8fb8b87b5ffd1e0ea27710a2e785ef4741a89e4b3c3af726ec63d15a1fa

SHA512
94358b581510c68049ac92990674a6cb495cb8ff005f7fc03696c57ba8b4cb384c5035d9332d0ea39093ba5fa5c8082143896cd2fc7ac24a192520789c707458

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
312B

MD5
fa42cf3fd8e017456d06dbd0d61071ed

SHA1
1167a7e68261110845c9b07aa5f3956dbf2cb8d2

SHA256
89853c4c5d14da39f0a78a36f57ae013b098eb5915b7c172e27e50abef661b40

SHA512
8ecd1c16b5f6d84603a377487fd6b58a8e6beb08c91771ab0ca55520650204b84c2479956894fcd80199f36ad44393c4289eddfe179d8fbc725f26c6d3cfc8cf

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll

Filesize
218KB

MD5
0c453970e89db1c1eb9de087e6eab5ba

SHA1
c4c7e034773a240909332814f499730575a1cd71

SHA256
942e98f142373547493f13b14e1603b2420851aff013d3085bada7b6b2214d9c

SHA512
ef3b2cc2598b4ea58f00f93155319674450c8c35b706108ce3bbb5c2502efa179046d9d50e12725e6dc7a555f4880404ed03de15a0753606f20a1654799886fb

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
288B

MD5
f6c3cb55973d1ea6eb0f71ea46041a54

SHA1
561d98c4f5591ddc1b227b9805cce1d70e3f0f8c

SHA256
839173df1767c3af408cd38a5140a82949a7f1c9a4c98836ddbd7888d2ee6a5c

SHA512
85c0b266a4dff05d2bac26d475a6f1f9e9146f9e105b1a874951c0b605b8e22d9adb076024dc8e05a11df2ec8f932d46878a4b653355740a32050669ecb87d31

Download Submit
memory/1292-10731-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/1292-405-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/1292-415-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/1824-10759-0x0000000000400000-0x0000000000581000-memory.dmp

Filesize
1.5MB

Download
memory/1824-10772-0x0000000000400000-0x0000000000581000-memory.dmp

Filesize
1.5MB

Download
memory/1824-10767-0x0000000010000000-0x000000001006E000-memory.dmp

Filesize
440KB

Download
memory/1824-10764-0x0000000000400000-0x0000000000581000-memory.dmp

Filesize
1.5MB

Download
memory/1824-10715-0x0000000010000000-0x000000001006E000-memory.dmp

Filesize
440KB

Download
memory/1824-10717-0x0000000002CB0000-0x000000000303E000-memory.dmp

Filesize
3.6MB

Download
memory/1824-10761-0x0000000000400000-0x0000000000581000-memory.dmp

Filesize
1.5MB

Download
memory/1824-10766-0x0000000000400000-0x0000000000581000-memory.dmp

Filesize
1.5MB

Download
memory/1824-10774-0x0000000010000000-0x000000001006E000-memory.dmp

Filesize
440KB

Download
memory/1824-10770-0x0000000000400000-0x0000000000581000-memory.dmp

Filesize
1.5MB

Download
memory/1824-10760-0x0000000010000000-0x000000001006E000-memory.dmp

Filesize
440KB

Download
memory/1824-10768-0x0000000000400000-0x0000000000581000-memory.dmp

Filesize
1.5MB

Download
memory/2804-6685-0x0000000000B30000-0x0000000000B8A000-memory.dmp

Filesize
360KB

Download
memory/2832-7028-0x00000000022F0000-0x000000000234E000-memory.dmp

Filesize
376KB

Download
memory/3028-8056-0x0000000000830000-0x0000000000899000-memory.dmp

Filesize
420KB

Download
memory/4840-2999-0x0000000000400000-0x0000000000528000-memory.dmp

Filesize
1.2MB

Download
memory/4840-416-0x0000000000400000-0x0000000000528000-memory.dmp

Filesize
1.2MB

Download
memory/4840-2563-0x0000000000400000-0x0000000000528000-memory.dmp

Filesize
1.2MB

Download
memory/4840-3318-0x0000000000400000-0x0000000000528000-memory.dmp

Filesize
1.2MB

Download
memory/4840-10730-0x0000000000400000-0x0000000000528000-memory.dmp

Filesize
1.2MB

Download
memory/4840-10711-0x0000000000400000-0x0000000000528000-memory.dmp

Filesize
1.2MB

Download