hxxps://gofile[.]io/d/QVxFiM

Analysis

max time kernel
1689s
max time network
1689s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
21-11-2024 15:04

Sharing

Copy URL

Twitter E-mail

Reason

Machine shutdown

Report Analysis Logs

General

Target

https://gofile.io/d/QVxFiM

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Signatures

Sets service image path in registry 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\mlx4_bus.sys\ImagePath = "\\??\\C:\\Windows\\System32\\drivers\\mlx4_bus.sys"	sinmapper.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 64 IoCs

pid	Process
3132	sinmapper.exe
388	sinmapper.exe
2968	Kainite Free Cheet.exe
4884	directx_Jun2010_redist.exe
2896	directx_Jun2010_redist.exe
4020	DXSETUP.exe
4980	infinst.exe
1408	infinst.exe
1708	infinst.exe
3180	infinst.exe
2120	infinst.exe
1516	infinst.exe
3532	infinst.exe
4936	infinst.exe
4060	infinst.exe
3068	infinst.exe
628	infinst.exe
3412	infinst.exe
4468	infinst.exe
4724	infinst.exe
640	infinst.exe
4736	infinst.exe
768	infinst.exe
3484	infinst.exe
4136	infinst.exe
4128	infinst.exe
2964	infinst.exe
1996	infinst.exe
2884	infinst.exe
3520	infinst.exe
4708	infinst.exe
5072	infinst.exe
1348	infinst.exe
2396	infinst.exe
1524	infinst.exe
4652	infinst.exe
1820	infinst.exe
2352	infinst.exe
3612	infinst.exe
4736	infinst.exe
1628	infinst.exe
5040	infinst.exe
4316	infinst.exe
3608	infinst.exe
4712	infinst.exe
964	infinst.exe
4160	infinst.exe
1748	infinst.exe
3328	infinst.exe
3520	infinst.exe
2584	infinst.exe
2396	infinst.exe
1776	infinst.exe
4676	infinst.exe
4780	infinst.exe
5008	infinst.exe
2884	infinst.exe
4516	infinst.exe
2312	infinst.exe
688	infinst.exe
4176	infinst.exe
4264	infinst.exe
4160	infinst.exe
2948	infinst.exe

Loads dropped DLL 64 IoCs

pid	Process
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4476	regsvr32.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
3112	regsvr32.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
4444	regsvr32.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
1516	regsvr32.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
2660	regsvr32.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
216	regsvr32.exe
4020	DXSETUP.exe
4020	DXSETUP.exe
3612	regsvr32.exe

Drops desktop.ini file(s) 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\assembly\Desktop.ini	DXSETUP.exe
File created	C:\Windows\assembly\Desktop.ini	DXSETUP.exe

Drops file in System32 directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\SETEFF4.tmp	DXSETUP.exe
File opened for modification	C:\Windows\SysWOW64\SETF9B3.tmp	DXSETUP.exe
File opened for modification	C:\Windows\SysWOW64\d3dx10_34.dll	DXSETUP.exe
File opened for modification	C:\Windows\SysWOW64\SET20FF.tmp	DXSETUP.exe
File opened for modification	C:\Windows\system32\XAudio2_3.dll	infinst.exe
File opened for modification	C:\Windows\system32\XAPOFX1_4.dll	infinst.exe
File opened for modification	C:\Windows\SysWOW64\x3daudio1_0.dll	DXSETUP.exe
File opened for modification	C:\Windows\SysWOW64\d3dx10_36.dll	DXSETUP.exe
File created	C:\Windows\system32\SET2C41.tmp	infinst.exe
File created	C:\Windows\system32\SET38B5.tmp	infinst.exe
File created	C:\Windows\SysWOW64\SET3BF7.tmp	DXSETUP.exe
File opened for modification	C:\Windows\system32\SET1B7.tmp	infinst.exe
File created	C:\Windows\SysWOW64\SET3ADD.tmp	DXSETUP.exe
File opened for modification	C:\Windows\SysWOW64\SETF578.tmp	DXSETUP.exe
File opened for modification	C:\Windows\SysWOW64\D3DCompiler_42.dll	DXSETUP.exe
File created	C:\Windows\system32\SET1F61.tmp	infinst.exe
File opened for modification	C:\Windows\system32\d3dx10_33.dll	infinst.exe
File opened for modification	C:\Windows\SysWOW64\SET11FA.tmp	DXSETUP.exe
File created	C:\Windows\SysWOW64\SET185A.tmp	DXSETUP.exe
File created	C:\Windows\system32\SET2491.tmp	infinst.exe
File opened for modification	C:\Windows\SysWOW64\D3DCompiler_41.dll	DXSETUP.exe
File opened for modification	C:\Windows\SysWOW64\xactengine2_6.dll	DXSETUP.exe
File opened for modification	C:\Windows\SysWOW64\d3dx9_35.dll	DXSETUP.exe
File opened for modification	C:\Windows\system32\SET735.tmp	infinst.exe
File opened for modification	C:\Windows\SysWOW64\SET2693.tmp	DXSETUP.exe
File created	C:\Windows\system32\SET2C42.tmp	infinst.exe
File opened for modification	C:\Windows\system32\SET3A3C.tmp	infinst.exe
File opened for modification	C:\Windows\SysWOW64\x3daudio1_2.dll	DXSETUP.exe
File created	C:\Windows\SysWOW64\SETE556.tmp	DXSETUP.exe
File opened for modification	C:\Windows\SysWOW64\SET3C0.tmp	DXSETUP.exe
File opened for modification	C:\Windows\SysWOW64\SETE536.tmp	DXSETUP.exe
File opened for modification	C:\Windows\SysWOW64\SET3BF7.tmp	DXSETUP.exe
File opened for modification	C:\Windows\system32\xactengine2_7.dll	infinst.exe
File opened for modification	C:\Windows\SysWOW64\XAudio2_3.dll	DXSETUP.exe
File opened for modification	C:\Windows\SysWOW64\SET3529.tmp	DXSETUP.exe
File opened for modification	C:\Windows\system32\X3DAudio1_7.dll	infinst.exe
File opened for modification	C:\Windows\SysWOW64\SETF334.tmp	DXSETUP.exe
File opened for modification	C:\Windows\system32\SETFA45.tmp	infinst.exe
File created	C:\Windows\system32\SET1772.tmp	infinst.exe
File opened for modification	C:\Windows\system32\xactengine3_3.dll	infinst.exe
File opened for modification	C:\Windows\system32\X3DAudio1_6.dll	infinst.exe
File opened for modification	C:\Windows\system32\XAPOFX1_5.dll	infinst.exe
File opened for modification	C:\Windows\system32\d3dx9_31.dll	infinst.exe
File created	C:\Windows\system32\SETFBCB.tmp	infinst.exe
File opened for modification	C:\Windows\SysWOW64\SETC07.tmp	DXSETUP.exe
File opened for modification	C:\Windows\system32\SETE69.tmp	infinst.exe
File created	C:\Windows\system32\SET3C9D.tmp	infinst.exe
File created	C:\Windows\system32\SETE4F7.tmp	infinst.exe
File opened for modification	C:\Windows\system32\SET1222.tmp	infinst.exe
File created	C:\Windows\system32\SET1454.tmp	infinst.exe
File opened for modification	C:\Windows\SysWOW64\XAPOFX1_5.dll	DXSETUP.exe
File opened for modification	C:\Windows\system32\SET8F.tmp	infinst.exe
File opened for modification	C:\Windows\SysWOW64\D3DX9_40.dll	DXSETUP.exe
File opened for modification	C:\Windows\system32\XAudio2_4.dll	infinst.exe
File created	C:\Windows\SysWOW64\SET3E0C.tmp	DXSETUP.exe
File opened for modification	C:\Windows\system32\SETF67D.tmp	infinst.exe
File created	C:\Windows\SysWOW64\SET11FA.tmp	DXSETUP.exe
File opened for modification	C:\Windows\SysWOW64\xinput1_3.dll	DXSETUP.exe
File created	C:\Windows\SysWOW64\SET33DE.tmp	DXSETUP.exe
File opened for modification	C:\Windows\SysWOW64\d3dx9_32.dll	DXSETUP.exe
File opened for modification	C:\Windows\system32\X3DAudio1_2.dll	infinst.exe
File opened for modification	C:\Windows\SysWOW64\D3DX9_38.dll	DXSETUP.exe
File opened for modification	C:\Windows\SysWOW64\X3DAudio1_4.dll	DXSETUP.exe
File opened for modification	C:\Windows\SysWOW64\SET281B.tmp	DXSETUP.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2907.0\Microsoft.DirectX.Direct3DX.dll	DXSETUP.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File created	C:\Windows\assembly\tmp\T0SHZK8Q\Microsoft.DirectX.DirectInput.dll	DXSETUP.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	DXSETUP.exe
File opened for modification	C:\Windows\assembly\tmp\5ZY4HSUI\__AssemblyInfo__.ini	DXSETUP.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectDraw.xml	DXSETUP.exe
File opened for modification	C:\Windows\assembly\tmp\QPGYXX48\__AssemblyInfo__.ini	DXSETUP.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File opened for modification	C:\Windows\assembly	DXSETUP.exe
File created	C:\Windows\assembly\tmp\O32JTAQU\Microsoft.DirectX.Direct3DX.dll	DXSETUP.exe
File created	C:\Windows\assembly\tmp\83O2AQBT\Microsoft.DirectX.DirectDraw.dll	DXSETUP.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File created	C:\Windows\assembly\tmp\L7BLPM4B\Microsoft.DirectX.Direct3DX.dll	DXSETUP.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2906.0\Microsoft.DirectX.Direct3DX.dll	DXSETUP.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.AudioVideoPlayback.dll	DXSETUP.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\assembly\tmp\30ROE94Y\__AssemblyInfo__.ini	DXSETUP.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2910.0\Microsoft.DirectX.Direct3DX.xml	DXSETUP.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File created	C:\Windows\assembly\tmp\30ROE94Y\Microsoft.DirectX.Direct3DX.dll	DXSETUP.exe
File created	C:\Windows\assembly\tmp\1IHJU2O8\Microsoft.DirectX.AudioVideoPlayback.dll	DXSETUP.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2903.0\Microsoft.DirectX.Direct3DX.dll	DXSETUP.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File created	C:\Windows\assembly\tmp\5ZY4HSUI\Microsoft.DirectX.Direct3DX.dll	DXSETUP.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Diagnostics.xml	DXSETUP.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3D.dll	DXSETUP.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File created	C:\Windows\assembly\tmp\5HP2TCEY\Microsoft.DirectX.Direct3DX.dll	DXSETUP.exe
File created	C:\Windows\assembly\tmp\PAHKZR8T\Microsoft.DirectX.Diagnostics.dll	DXSETUP.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2908.0\Microsoft.DirectX.Direct3DX.xml	DXSETUP.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2909.0\Microsoft.DirectX.Direct3DX.dll	DXSETUP.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\DirectX.log	infinst.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe
File created	C:\Windows\assembly\tmp\TUHHWS6X\Microsoft.DirectX.Direct3DX.dll	DXSETUP.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3D.xml	DXSETUP.exe
File created	C:\Windows\assembly\GACLock.dat	DXSETUP.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2904.0\Microsoft.DirectX.Direct3DX.dll	DXSETUP.exe
File created	C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2907.0\Microsoft.DirectX.Direct3DX.xml	DXSETUP.exe
File opened for modification	C:\Windows\Logs\DirectX.log	infinst.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	directx_Jun2010_redist.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	directx_Jun2010_redist.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	DXSETUP.exe

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 15 IoCs

description	ioc	Process
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = a6d8ff0076b9ed00429ce3000078d700005a9e000042750000264200f7630c00	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColorBalance = "89"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\EnableWindowColorization = "218"	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColor = "3288365271"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationBlurBalance = "1"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationGlassAttribute = "1"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\AccentColor = "4292311040"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglow = "3288365271"	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\StartColorMenu = "4288567808"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentColorMenu = "4292311040"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglowBalance = "10"	LogonUI.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4c9b6dde-6809-46e6-a278-9b6a97588670}\InProcServer32	DXSETUP.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{b802058a-464a-42db-bc10-b650d6f2586a}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{cac1105f-619b-4d04-831a-44e1cbf12d57}\InProcServer32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{65d822a4-4799-42c6-9b18-d26cf66dd320}\InProcServer32	DXSETUP.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{d3332f02-3dd0-4de9-9aec-20d85c4111b6}	DXSETUP.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8bb7778b-645b-4475-9a73-1de3170bd3af}\InProcServer32\ThreadingModel = "Both"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9cab402c-1d37-44b4-886d-fa4f36170a4c}\InProcServer32\ThreadingModel = "Both"	DXSETUP.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{03219e78-5bc3-44d1-b92e-f63d89cc6526}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_4.dll"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3a2495ce-31d0-435b-8ccf-e9f0843fd960}\InProcServer32\ = "C:\\Windows\\SysWow64\\xactengine2_6.dll"	DXSETUP.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3b80ee2a-b0f5-4780-9e30-90cb39685b03}\InProcServer32\ = "C:\\Windows\\system32\\xactengine3_0.dll"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{e180344b-ac83-4483-959e-18a5c56a5e19}\InProcServer32	DXSETUP.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9cab402c-1d37-44b4-886d-fa4f36170a4c}\InProcServer32	DXSETUP.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3a2495ce-31d0-435b-8ccf-e9f0843fd960}\InProcServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{cd0d66ec-8057-43f5-acbd-66dfb36fd78c}\InProcServer32\ = "C:\\Windows\\system32\\xactengine2_7.dll"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{e21a7345-eb21-468e-be50-804db97cf708}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_1.dll"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{e21a7345-eb21-468e-be50-804db97cf708}	DXSETUP.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{94c1affa-66e7-4961-9521-cfdef3128d4f}\InProcServer32\ThreadingModel = "Both"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{e180344b-ac83-4483-959e-18a5c56a5e19}\InProcServer32\ThreadingModel = "Both"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6f6ea3a9-2cf5-41cf-91c1-2170b1540063}\InProcServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{c1e3f122-a2ea-442c-854f-20d98f8357a1}\InProcServer32\ThreadingModel = "Both"	DXSETUP.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{f5ca7b34-8055-42c0-b836-216129eb7e30}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_2.dll"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1138472b-d187-44e9-81f2-ae1b0e7785f1}\InProcServer32\ = "C:\\Windows\\system32\\xactengine2_3.dll"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{d06df0d0-8518-441e-822f-5451d5c595b8}	DXSETUP.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6a93130e-1d53-41d1-a9cf-e758800bb179}\InProcServer32	DXSETUP.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3a2495ce-31d0-435b-8ccf-e9f0843fd960}\ = "XACT Engine"	DXSETUP.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{65d822a4-4799-42c6-9b18-d26cf66dd320}\ = "XACT Engine"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{248d8a3b-6256-44d3-a018-2ac96c459f47}\ = "XACT Engine"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f1b577e-5e5a-4e8a-ba73-c657ea8e8598}\ = "XACT Engine"	DXSETUP.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{bcc782bc-6492-4c22-8c35-f5d72fe73c6e}\InProcServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{bc3e0fc6-2e0d-4c45-bc61-d9c328319bd8}\ = "XACT Engine"	DXSETUP.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{e180344b-ac83-4483-959e-18a5c56a5e19}\ = "AudioVolumeMeter"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{074b110f-7f58-4743-aea5-12f15b5074ed}\ = "XACT Engine"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{c60fae90-4183-4a3f-b2f7-ac1dc49b0e5c}\InProcServer32\ThreadingModel = "Both"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{629cf0de-3ecc-41e7-9926-f7e43eebec51}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_2.dll"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{bcc782bc-6492-4c22-8c35-f5d72fe73c6e}	DXSETUP.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3eda9b49-2085-498b-9bb2-39a6778493de}	DXSETUP.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{cecec95a-d894-491a-bee3-5e106fb59f2d}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_6.dll"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{5a508685-a254-4fba-9b82-9a24b00306af}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{94c1affa-66e7-4961-9521-cfdef3128d4f}\InProcServer32	DXSETUP.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9cab402c-1d37-44b4-886d-fa4f36170a4c}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_3.dll"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{d06df0d0-8518-441e-822f-5451d5c595b8}\InProcServer32\ = "C:\\Windows\\SysWow64\\XAudio2_5.dll"	DXSETUP.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4c5e637a-16c7-4de3-9c46-5ed22181962d}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_3.dll"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{074b110f-7f58-4743-aea5-12f15b5074ed}\InProcServer32\ = "C:\\Windows\\SysWow64\\xactengine3_5.dll"	DXSETUP.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{bcc782bc-6492-4c22-8c35-f5d72fe73c6e}\InProcServer32\ = "C:\\Windows\\system32\\xactengine3_7.dll"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{54b68bc7-3a45-416b-a8c9-19bf19ec1df5}\InProcServer32\ThreadingModel = "Both"	DXSETUP.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{fac23f48-31f5-45a8-b49b-5225d61401aa}	DXSETUP.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9cab402c-1d37-44b4-886d-fa4f36170a4c}\ = "AudioReverb"	DXSETUP.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{cecec95a-d894-491a-bee3-5e106fb59f2d}	DXSETUP.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{c60fae90-4183-4a3f-b2f7-ac1dc49b0e5c}\InProcServer32\ = "C:\\Windows\\SysWow64\\xactengine2_2.dll"	DXSETUP.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248d8a3b-6256-44d3-a018-2ac96c459f47}\ = "XACT Engine"	DXSETUP.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{e48c5a3f-93ef-43bb-a092-2c7ceb946f27}	DXSETUP.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{54b68bc7-3a45-416b-a8c9-19bf19ec1df5}\InProcServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2139e6da-c341-4774-9ac3-b4e026347f64}\InProcServer32\ThreadingModel = "Both"	DXSETUP.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{d06df0d0-8518-441e-822f-5451d5c595b8}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{b802058a-464a-42db-bc10-b650d6f2586a}\InProcServer32\ThreadingModel = "Both"	DXSETUP.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{629cf0de-3ecc-41e7-9926-f7e43eebec51}\InProcServer32\ThreadingModel = "Both"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{343e68e6-8f82-4a8d-a2da-6e9a944b378c}\InProcServer32\ThreadingModel = "Both"	DXSETUP.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{f5ca7b34-8055-42c0-b836-216129eb7e30}\InProcServer32	DXSETUP.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0977d092-2d95-4e43-8d42-9ddcc2545ed5}\ = "XACT Engine"	DXSETUP.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{cac1105f-619b-4d04-831a-44e1cbf12d57}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_7.dll"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{343e68e6-8f82-4a8d-a2da-6e9a944b378c}\InProcServer32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{e21a7345-eb21-468e-be50-804db97cf708}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{b802058a-464a-42db-bc10-b650d6f2586a}\InProcServer32	DXSETUP.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6a93130e-1d53-41d1-a9cf-e758800bb179}	regsvr32.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 353211.crdownload:SmartScreen	msedge.exe

Suspicious behavior: EnumeratesProcesses 16 IoCs

pid	Process
3176	msedge.exe
3176	msedge.exe
3388	msedge.exe
3388	msedge.exe
3848	identity_helper.exe
3848	identity_helper.exe
1348	msedge.exe
1348	msedge.exe
1348	msedge.exe
1348	msedge.exe
216	msedge.exe
216	msedge.exe
2384	msedge.exe
2384	msedge.exe
4932	msedge.exe
4932	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
388	sinmapper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 40 IoCs

pid	Process
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe

Suspicious use of AdjustPrivilegeToken 21 IoCs

description	pid	Process
Token: SeRestorePrivilege	4608	7zG.exe
Token: 35	4608	7zG.exe
Token: SeSecurityPrivilege	4608	7zG.exe
Token: SeSecurityPrivilege	4608	7zG.exe
Token: SeLoadDriverPrivilege	388	sinmapper.exe
Token: SeRestorePrivilege	4604	7zG.exe
Token: 35	4604	7zG.exe
Token: SeSecurityPrivilege	4604	7zG.exe
Token: SeSecurityPrivilege	4604	7zG.exe
Token: SeBackupPrivilege	4836	vssvc.exe
Token: SeRestorePrivilege	4836	vssvc.exe
Token: SeAuditPrivilege	4836	vssvc.exe
Token: SeBackupPrivilege	2948	srtasks.exe
Token: SeRestorePrivilege	2948	srtasks.exe
Token: SeSecurityPrivilege	2948	srtasks.exe
Token: SeTakeOwnershipPrivilege	2948	srtasks.exe
Token: SeBackupPrivilege	2948	srtasks.exe
Token: SeRestorePrivilege	2948	srtasks.exe
Token: SeSecurityPrivilege	2948	srtasks.exe
Token: SeTakeOwnershipPrivilege	2948	srtasks.exe
Token: SeShutdownPrivilege	4020	DXSETUP.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
4608	7zG.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
4604	7zG.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe

Suspicious use of SetWindowsHookEx 64 IoCs

pid	Process
4020	DXSETUP.exe
4980	infinst.exe
1408	infinst.exe
1708	infinst.exe
3180	infinst.exe
2120	infinst.exe
1516	infinst.exe
3532	infinst.exe
4936	infinst.exe
4060	infinst.exe
3068	infinst.exe
628	infinst.exe
3412	infinst.exe
4468	infinst.exe
4724	infinst.exe
640	infinst.exe
4736	infinst.exe
768	infinst.exe
3484	infinst.exe
4136	infinst.exe
4128	infinst.exe
2964	infinst.exe
1996	infinst.exe
2884	infinst.exe
3520	infinst.exe
4708	infinst.exe
5072	infinst.exe
1348	infinst.exe
2396	infinst.exe
1524	infinst.exe
4652	infinst.exe
1820	infinst.exe
2352	infinst.exe
3612	infinst.exe
4736	infinst.exe
1628	infinst.exe
5040	infinst.exe
4316	infinst.exe
3608	infinst.exe
4712	infinst.exe
964	infinst.exe
4160	infinst.exe
1748	infinst.exe
3328	infinst.exe
3520	infinst.exe
2584	infinst.exe
2396	infinst.exe
1776	infinst.exe
4676	infinst.exe
4780	infinst.exe
5008	infinst.exe
2884	infinst.exe
4516	infinst.exe
2312	infinst.exe
688	infinst.exe
4176	infinst.exe
4264	infinst.exe
4160	infinst.exe
2948	infinst.exe
1620	infinst.exe
548	infinst.exe
3624	infinst.exe
680	infinst.exe
1532	infinst.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3388 wrote to memory of 1600	3388	msedge.exe	82
PID 3388 wrote to memory of 1600	3388	msedge.exe	82
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3008	3388	msedge.exe	83
PID 3388 wrote to memory of 3176	3388	msedge.exe	84
PID 3388 wrote to memory of 3176	3388	msedge.exe	84
PID 3388 wrote to memory of 4580	3388	msedge.exe	85
PID 3388 wrote to memory of 4580	3388	msedge.exe	85
PID 3388 wrote to memory of 4580	3388	msedge.exe	85
PID 3388 wrote to memory of 4580	3388	msedge.exe	85
PID 3388 wrote to memory of 4580	3388	msedge.exe	85
PID 3388 wrote to memory of 4580	3388	msedge.exe	85
PID 3388 wrote to memory of 4580	3388	msedge.exe	85
PID 3388 wrote to memory of 4580	3388	msedge.exe	85
PID 3388 wrote to memory of 4580	3388	msedge.exe	85
PID 3388 wrote to memory of 4580	3388	msedge.exe	85
PID 3388 wrote to memory of 4580	3388	msedge.exe	85
PID 3388 wrote to memory of 4580	3388	msedge.exe	85
PID 3388 wrote to memory of 4580	3388	msedge.exe	85
PID 3388 wrote to memory of 4580	3388	msedge.exe	85
PID 3388 wrote to memory of 4580	3388	msedge.exe	85
PID 3388 wrote to memory of 4580	3388	msedge.exe	85
PID 3388 wrote to memory of 4580	3388	msedge.exe	85
PID 3388 wrote to memory of 4580	3388	msedge.exe	85
PID 3388 wrote to memory of 4580	3388	msedge.exe	85
PID 3388 wrote to memory of 4580	3388	msedge.exe	85

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://gofile.io/d/QVxFiM
1⤵
- Enumerates system info in registry
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8885846f8,0x7ff888584708,0x7ff888584718
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2144 /prefetch:2
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2720 /prefetch:8
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4628 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2044 /prefetch:1
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5404 /prefetch:8
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5404 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5468 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5496 /prefetch:1
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3976 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5632 /prefetch:1
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1388 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1220 /prefetch:1
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=4868 /prefetch:8
  2⤵
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6124 /prefetch:1
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1972 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6244 /prefetch:1
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:1
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6288 /prefetch:1
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6044 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1508 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6088 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6452 /prefetch:1
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6368 /prefetch:1
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6536 /prefetch:1
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6868 /prefetch:1
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6940 /prefetch:1
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3060 /prefetch:1
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7120 /prefetch:1
  2⤵
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7112 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6044 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6908 /prefetch:1
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7000 /prefetch:1
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6980 /prefetch:1
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7080 /prefetch:1
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5220 /prefetch:1
  2⤵
  PID:592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6324 /prefetch:1
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4860 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4860 /prefetch:1
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4992 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5748 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6876 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3588 /prefetch:8
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2120,10049186206360382789,8644562763030813954,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7048 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4932
- C:\Users\Admin\Downloads\directx_Jun2010_redist.exe
  "C:\Users\Admin\Downloads\directx_Jun2010_redist.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:4884
- C:\Users\Admin\Downloads\directx_Jun2010_redist.exe
  "C:\Users\Admin\Downloads\directx_Jun2010_redist.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:2896

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4648

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2892

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4616

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\Kainite Free Cheet\" -spe -an -ai#7zMap28356:96:7zEvent21357
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4608

C:\Windows\System32\NOTEPAD.EXE
"C:\Windows\System32\NOTEPAD.EXE" C:\Users\Admin\Downloads\Kainite Free Cheet\map.bat
1⤵
PID:3216

C:\Windows\System32\NOTEPAD.EXE
"C:\Windows\System32\NOTEPAD.EXE" C:\Users\Admin\Downloads\Kainite Free Cheet\map.bat
1⤵
PID:5068

C:\Users\Admin\Downloads\Kainite Free Cheet\sinmapper.exe
"C:\Users\Admin\Downloads\Kainite Free Cheet\sinmapper.exe"
1⤵
- Executes dropped EXE
PID:3132

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\Kainite Free Cheet\map.bat" "
1⤵
PID:4512
- C:\Users\Admin\Downloads\Kainite Free Cheet\sinmapper.exe
  sinmapper.exe driver.sys mlx4_bus.sys .data
  2⤵
  - Sets service image path in registry
  - Executes dropped EXE
  - Suspicious behavior: LoadsDriver
  - Suspicious use of AdjustPrivilegeToken
  PID:388

C:\Users\Admin\Downloads\Kainite Free Cheet\Kainite Free Cheet.exe
"C:\Users\Admin\Downloads\Kainite Free Cheet\Kainite Free Cheet.exe"
1⤵
- Executes dropped EXE
PID:2968

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\DirectX_11_Technology_Update_US\" -spe -an -ai#7zMap13528:124:7zEvent24580
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4604

C:\Users\Admin\Downloads\pula23\DXSETUP.exe
"C:\Users\Admin\Downloads\pula23\DXSETUP.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
- Drops file in System32 directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:4020
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx9_24_x64.inf
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:4980
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx9_25_x64.inf
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:1408
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx9_26_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:1708
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx9_27_x64.inf
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:3180
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx9_28_x64.inf
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:2120
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx9_29_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Suspicious use of SetWindowsHookEx
  PID:1516
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XACT_x64.inf
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:3532
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_0.dll
  2⤵
  - Loads dropped DLL
  PID:4476
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx9_30_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:4936
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XACT2_1_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:4060
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_1.dll
  2⤵
  - Loads dropped DLL
  PID:3112
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe xinput1_1_x64.inf, Install_Driver
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:3068
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XACT2_2_x64.inf
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:628
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_2.dll
  2⤵
  - Loads dropped DLL
  - Modifies registry class
  PID:4444
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe xinput1_2_x64.inf, Install_Driver
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:3412
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XACT2_3_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:4468
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_3.dll
  2⤵
  - Loads dropped DLL
  - Modifies registry class
  PID:1516
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx9_31_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Suspicious use of SetWindowsHookEx
  PID:4724
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XACT2_4_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Suspicious use of SetWindowsHookEx
  PID:640
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_4.dll
  2⤵
  - Loads dropped DLL
  PID:2660
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx9_32_x64.inf
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:4736
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx10_00_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:768
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XACT2_5_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Suspicious use of SetWindowsHookEx
  PID:3484
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_5.dll
  2⤵
  - Loads dropped DLL
  - Modifies registry class
  PID:216
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XACT2_6_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Suspicious use of SetWindowsHookEx
  PID:4136
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_6.dll
  2⤵
  - Loads dropped DLL
  - Modifies registry class
  PID:3612
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx9_33_x64.inf
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:4128
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx10_33_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:2964
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XACT2_7_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:1996
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_7.dll
  2⤵
  - Modifies registry class
  PID:728
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe xinput1_3_x64.inf, Install_Driver
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:2884
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx9_34_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:3520
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx10_34_x64.inf
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:4708
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XACT2_8_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:5072
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_8.dll
  2⤵
  PID:3560
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx9_35_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Suspicious use of SetWindowsHookEx
  PID:1348
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx10_35_x64.inf
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:2396
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XACT2_9_x64.inf
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:1524
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_9.dll
  2⤵
  - Modifies registry class
  PID:3960
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx9_36_x64.inf
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:4652
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx10_36_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:1820
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe X3DAudio1_2_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Suspicious use of SetWindowsHookEx
  PID:2352
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XACT2_10_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Suspicious use of SetWindowsHookEx
  PID:3612
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_10.dll
  2⤵
  - Modifies registry class
  PID:2660
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe D3DX9_37_x64.inf
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:4736
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx10_37_x64.inf
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:1628
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe X3DAudio1_3_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Suspicious use of SetWindowsHookEx
  PID:5040
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XACT3_0_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:4316
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_0.dll
  2⤵
  - Modifies registry class
  PID:2340
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XAudio2_0_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:3608
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_0.dll
  2⤵
  - Modifies registry class
  PID:2500
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe D3DX9_38_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:4712
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx10_38_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Suspicious use of SetWindowsHookEx
  PID:964
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe X3DAudio1_4_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:4160
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XACT3_1_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:1748
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_1.dll
  2⤵
  PID:3112
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XAudio2_1_x64.inf
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:3328
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_1.dll
  2⤵
  - Modifies registry class
  PID:5028
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe D3DX9_39_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:3520
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx10_39_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:2584
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XACT3_2_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:2396
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_2.dll
  2⤵
  PID:60
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XAudio2_2_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:1776
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_2.dll
  2⤵
  - Modifies registry class
  PID:4592
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe X3DAudio1_5_x64.inf
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:4676
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XACT3_3_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:4780
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_3.dll
  2⤵
  - Modifies registry class
  PID:3816
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XAudio2_3_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Suspicious use of SetWindowsHookEx
  PID:5008
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_3.dll
  2⤵
  - Modifies registry class
  PID:4476
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe D3DX9_40_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:2884
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx10_40_x64.inf
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:4516
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe X3DAudio1_6_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:2312
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XACT3_4_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:688
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_4.dll
  2⤵
  PID:2376
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XAudio2_4_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Suspicious use of SetWindowsHookEx
  PID:4176
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_4.dll
  2⤵
  - Modifies registry class
  PID:4088
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe D3DX9_41_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:4264
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx10_41_x64.inf
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Suspicious use of SetWindowsHookEx
  PID:4160
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe D3DX9_42_x64.inf
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:2948
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx10_42_x64.inf
  2⤵
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:1620
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx11_42_x64.inf
  2⤵
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:548
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dcsx_42_x64.inf
  2⤵
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:3624
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe D3DCompiler_42_x64.inf
  2⤵
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:680
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XACT3_5_x64.inf
  2⤵
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:1532
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_5.dll
  2⤵
  - Modifies registry class
  PID:1004
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XAudio2_5_x64.inf
  2⤵
  PID:2448
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_5.dll
  2⤵
  - Modifies registry class
  PID:1220
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe X3DAudio1_7_x64.inf
  2⤵
  - Drops file in System32 directory
  PID:1708
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XACT3_6_x64.inf
  2⤵
  - Drops file in Windows directory
  PID:4980
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_6.dll
  2⤵
  - Modifies registry class
  PID:1168
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XAudio2_6_x64.inf
  2⤵
  - Drops file in System32 directory
  PID:3552
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_6.dll
  2⤵
  - Modifies registry class
  PID:3296
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe D3DX9_43_x64.inf
  2⤵
  - Drops file in System32 directory
  PID:4136
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx10_43_x64.inf
  2⤵
  PID:2408
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dx11_43_x64.inf
  2⤵
  - Drops file in System32 directory
  - Drops file in Windows directory
  PID:408
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe d3dcsx_43_x64.inf
  2⤵
  - Drops file in Windows directory
  PID:3612
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe D3DCompiler_43_x64.inf
  2⤵
  - Drops file in System32 directory
  - Drops file in Windows directory
  PID:1032
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XACT3_7_x64.inf
  2⤵
  PID:2716
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_7.dll
  2⤵
  - Modifies registry class
  PID:4476
- C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe
  C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe XAudio2_7_x64.inf
  2⤵
  - Drops file in System32 directory
  - Drops file in Windows directory
  PID:2396
- C:\Windows\system32\regsvr32.exe
  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_7.dll
  2⤵
  - Modifies registry class
  PID:2388

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:4836

C:\Windows\system32\srtasks.exe
C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2948

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x4 /state0:0xa392a855 /state1:0x41c64e6d
1⤵
- Modifies data under HKEY_USERS
PID:684

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {9BA05972-F6A8-11CF-A442-00A0C90A8F39} -Embedding
1⤵
PID:3000

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
56a4f78e21616a6e19da57228569489b

SHA1
21bfabbfc294d5f2aa1da825c5590d760483bc76

SHA256
d036661e765ee8fd18978a2b5501e8df6b220e4bca531d9860407555294c96fb

SHA512
c2c3cd1152bb486028fe75ab3ce0d0bc9d64c4ca7eb8860ddd934b2f6e0140d2c913af4fa082b88e92a6a6d20fd483a1cb9813209f371a0f56374bc97d7f863b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e443ee4336fcf13c698b8ab5f3c173d0

SHA1
9bf70b16f03820cbe3158e1f1396b07b8ac9d75a

SHA256
79e277da2074f9467e0518f0f26ca2ba74914bee82553f935a0ccf64a0119e8b

SHA512
cbf6f6aa0ea69b47f51592296da2b7be1180e7b483c61b4d17ba9ee1a2d3345cbe0987b96f4e25de1438b553db358f330aad8a26e8522601f055c3d5a8313cdd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0e86c2f1-8eb6-4067-9b6d-0f602d079406.tmp

Filesize
3KB

MD5
859aca5b3abefd0e229a9b87029eef48

SHA1
606606d9d40faf0f8c8782b94dda8be67c9554af

SHA256
656b3e35d9a80ae146de85483997856cc03fc952f768f50a1c3d8430575f1a4f

SHA512
e84c145820958e929d31ed0e4e7bcd3e3eb7a70863a6b896b4336394ad6fe139aa363ff1a6d014e4e46aed935bc9e211bb216e7e869ec757eff790e26b8699ee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

Filesize
22KB

MD5
9196e81f8ed7f223d765423c1f9bc8a7

SHA1
88f9d5c2a6908cf36b8daae803578ca9e1fd2929

SHA256
a4e2bcf7ef3c6c614c2142d3c1fd44caac4eafa86a1779ac31cba164e2d89cbe

SHA512
e7d23866fcac017762d2e2f18597124e9147f458d30038f78ba9f3a2bcbe479fe4792573894370ce2d6f93a00401231d9f01955fde351ff982a82ba87a8241f8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d

Filesize
22KB

MD5
e27cf731937f04054490cb1c7b20a2cc

SHA1
4ae2d10ab2f6acb8c5a132980f6469d14b145748

SHA256
3f19330763e1b7e08d9169e0662652fc76971f83439a3e0d482cfa671112d306

SHA512
fa4592b68462dce2e33ba71e598b5f87900f088b312cb9614886900802dcafe23d1b1e7b2d608aee8abf534040d6ec5e4d51ac83094759ff720900a1d42edc87

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

Filesize
79KB

MD5
e51f388b62281af5b4a9193cce419941

SHA1
364f3d737462b7fd063107fe2c580fdb9781a45a

SHA256
348404a68791474349e35bd7d1980abcbf06db85132286e45ad4f204d10b5f2c

SHA512
1755816c26d013d7b610bab515200b0f1f2bd2be0c4a8a099c3f8aff2d898882fd3bcf1163d0378916f4c5c24222df5dd7b18df0c8e5bf2a0ebef891215f148e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

Filesize
54KB

MD5
e13d61d11b245c56d1d471eba4b8e6f4

SHA1
c0c60be6cf4f8e918b69567319d07f65d9727cc8

SHA256
0652dbf250eff650e8c802a403b474f8ba3898633ff7a012579df999c70ecc95

SHA512
60afbc66454a083c831deab8a5e15463dea0fab598b8e693a4cdb59ab17b4961a20ff7820921ad4cfc3190d7cb1bf545158a93b85c1e71411eeebf7de5619c23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021

Filesize
35KB

MD5
5009982b60a0f93eac4c1728e5ca17e2

SHA1
c0f932d333b91a4b971a52ce88bc96320745064f

SHA256
2ffc0ec332938cbce14008ab246c3d918800189aece932e92bedd8adb8332fe8

SHA512
401dd0a45c177130628787b92a17642783d27b1a977833af4110d81cbf2572a159a371beb473baa07ad38ac8297551aadadd2ebb80401a73acd580fdc03964aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000022

Filesize
35KB

MD5
655020cac6e04d79ef8be9f6c2cbf28f

SHA1
a007cafbd414f48873f702025e981c989a3a59b1

SHA256
f44d3774795df59a7c7bd356bef528b8368e8f8a9e380bba07ee651dd9a8b1c8

SHA512
47c2f1a7e2aae57eda57767184dfa8100ad9495eaa48c78ee03ce65f6b834e7ec33af90bd49ceab8e4cb731592310c9493861b91f0df0f138798e281785b4834

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023

Filesize
63KB

MD5
8f13d83c1dcc73064edc68ddead052e6

SHA1
36146c5fcdd107b832d8a87e372ad3d5493c1f6b

SHA256
bfbe9aa8a61d57d0a61917da25681bcc78fc325d71ec0d51a3002de5c1a693b8

SHA512
bee6397f5afcc435461ddeb9caab125f7f8c8901ef4cd2ec75aabed5b74bbe5b5a932fcd24997031d25f932c4526367a98d70cf23673ac05b3ad8a0d66d14a31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000028

Filesize
40KB

MD5
b786554392ab690a37b2fc6c5af02b05

SHA1
e7347fa27240868174f080d1c5ab177feca6bd84

SHA256
ebe47cc89c62447316148809bda9095bd07bd5392a99ab4b8ac8b9f6764cda51

SHA512
b71cdb76464a775fca909cabd0a7435c34de3ee4e19c40f5bebba6415295f0be2f82532a2ecda043c787ea4e8c23fd4e582a4d4322923fdf603a56e3fcb8b567

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000029

Filesize
52KB

MD5
bda2a0473abd410d22ab7b41a8612201

SHA1
b1bacd1d3a42d5007db5aae1b9e2461b4b8c9aa2

SHA256
ea655b522e0136e3abba4295bb06ff03233dce6fbe9dc2081eabd73c31cbd1cb

SHA512
c209cc890c824a8403dd279ff0564cf4741d1fb42e2a7bd5edfe9014f1586baedf5ec69e2bd7c3163edb785bbef5c6a42b179e665e91d9fbe44e4946e30e167b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
804d0603a2b40e61f78afd95a78e89c4

SHA1
b65b62ec5089be6996985261cb62d06633dc1cfe

SHA256
00feb810c175f920a8df134363e25d4d1358e11c8b3c16c12b46d03081ce0585

SHA512
43cb1fc5b2ec25ecab62ca5deaa7c72a86f32e459658a0b565c8836c293392a2d0db13d51ef444a5321322eee0b87472a2701dd37b01152cfe09374b4683f8cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
2169a7591c6c9b56e9f295bb675b2dc9

SHA1
7764a8c5c18626a9d17ea5ad267aea06f0d7d817

SHA256
dacc57113f9d40573c415671b8ba5ecbf7faa92bf74cc7c3cc48aeba54a6280b

SHA512
084f70c9e54c5d4eb03cff400d845ad06bad6695d07db38a092f3ce75836a46241d5a0dfbd03b4b1b16a5ea0698cb0e1c9d45052b32841f1ec6cef22c1a6ac33

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
32779f962593fa343a05d4179f6aba01

SHA1
f9a14b661b6fc2617255848be09edcfb72e798ca

SHA256
9b8251584042a99026d4d9197effe43af63e71e35b6d2fb887f12e8d0328336c

SHA512
a95d49089abe10307b385a04755d10e6ab60005d01e9ff07b1756aa6438d2dc865e89cd29d62f4d112d9f0009c98f572e021e8f5028c38e2804bc94a7896302b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
4f3b1dc7232906016fa8dc6aa575ede7

SHA1
6f397832d4322abf02ea8b7f19eafef38b550b52

SHA256
c4048710ff7dc83a0cf0c523ec5ac01456bc94da469d3450ad71bd67fefca36e

SHA512
bdf414959193d9799329172f7318f1ee760a8bc82d8e244d52223ab0786823bc8f63c701fcf0cf43a555f4253cb9cc2b1808f51c9b27cc195768d006bab901b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
904B

MD5
6a120cd6ce35376a5fc47410c3e0432c

SHA1
b2994b6397b1def6e38683dd57c8cdcf33ef52bf

SHA256
5b059d88acebdf84d0ebe52946e82b9b91b99c79800c6dfb19e99a6bdd42e6c9

SHA512
c3caefa258ebcec446358a0eabf0d255f3a45859d6667770b0a5dbbf9251e87c9093f20df5b5fa4022e2e253ecefdd4c959ae2c02f1c6c47c9bd99a2b9747a50

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
782B

MD5
1585181295faa7ad676eaabc034f9c51

SHA1
cfd28763ce2a04302737e1db4c755f411bc97477

SHA256
003014f95bea435360b3445a29165a3ac9001e6b62ef0895c3767cd2bb72dfb4

SHA512
cc66a068c12e65903a48a9074eb5be0ee7397ec97cae4f08b4a6541989922cfce1a60b80dfb5ae9dd40488ea5e9490aa275615fb7fd4349050a8df1986712991

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
203da1c5e6a49e5181177561f4431bab

SHA1
bbfa02ed0343819dd9103452cbe8e6cd894b4281

SHA256
a653ce2f75d65dea7054af3de30750c53230ad5fe5ffe4691cfdf5da9c7e2483

SHA512
cdf6bd4428143cda5f2435b24686b62062ce634f3b86f38735b6b56a47b03e87efbb457271ccfe10278afc854b184a726435011f77bcf29a00e34bbd4e2a1f5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
978B

MD5
652cd991efb794532f3037d38c5235b7

SHA1
6bfee5779f45e0626202cb34477c50ef5477bd81

SHA256
3cebb63dbf1db9bad7a75a5100a565124d3eeef2d67c13684c73f21f81408543

SHA512
ef5cd05661fa56d126ff9031d241cdb2eb0886b8004cc4a56ac29149993548b8495678777bf3c256702071dc1b2f88c8e04e864a5a5bd94e3e602bf105855e07

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
978B

MD5
67bfc36fe0c39320dffe919a49e907d2

SHA1
995f79394d60bc5463430547c58ffba2a0e4537b

SHA256
65bf299b0f1aa371806654094570d1b91dc0a29e0fbdd4e7b73f9d64f0aecf9b

SHA512
757ed04000bc938b7deb06b9c07a38d1f3ccf47bb3c8923e11d9c2809cb913400ccb3401cc47b744472ba6f251bc2738bcb487ae15a440a8139c07dfbe9a76cd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
978B

MD5
66feec9bb7bd5749f959b16cc82cff4c

SHA1
05beb50f72bcc4e89642fa7112798c69d03855ec

SHA256
3aa6d76aaf0bc9e0c1bd2df514baba93edf0668f4d5b54e5cb606743af4e0b01

SHA512
34ddab7c5e7eb7624018b240a9099107551e00b1c17962b5d0784501b454844460f0664ca6c00d0f4d118e4f1e34d4280d4b91e46cc6c61904db69f57a606a81

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
978B

MD5
b54cb739d10be995433ea913e15e5376

SHA1
1ae0f1f382ed1357bf1498ac5aecb93c5639faa4

SHA256
2f7efdfd97da9721311a4287ca653ceacfd72ad8a2c2114c41f23ceb045f8ed5

SHA512
1634600a99e1bd627f7376184bc20d25c65cfefeb8876d54b75546ca217531f2107e5eb457114e0de09fc59f904abe92599dd9f76309445a79349fe44df51fef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
978B

MD5
1596ab03e55557051a1c36912e5638bc

SHA1
4bad1836984d4272da0f22d18ba7db07c76d7d6f

SHA256
04f5a36eb2482d0db794005e865999ea17dbcbc79b550fb7dc65937700d8075c

SHA512
94546ec9e72b33f29f15978a8cdf36bc7f1c6db7a1585a3ec4e8da15d5c801f434f3a5340e52c13f038d687d4b5267be975e1f1a9d5780b33705a33d8d04cd4a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
978B

MD5
a3633c32baaa5757a392c3ef48a79acd

SHA1
c70e91a18c7ebedbc29612989a04448485820ccd

SHA256
3fea1568afca7fa3fc5250b8ded7167ac50895333c60dd4d837ba7b732d442c5

SHA512
77fdf89f01c6bf5921ea77c149e5ac7550035cf8953e331ac2f631e550c6f013a8467e2c0c7950e7962f35d942d6eea4136e7e6a0005ad4e7def02c6359c3128

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
39d8f2f34c89fa83dfc2224283892b68

SHA1
224f6b669aab741dcaafadf65551f3e9bec3de6a

SHA256
b875a883a51588c19503708fffb17e83c524e5b0894feec8ac4637e843c31725

SHA512
08c8f22865c651f34a90712ad81495f833ed7fd752c6586bcbe8adc5a8f391f2d4de8a1b8c00d8fa6c7d40b47b68bd13864588777dac390254fdbbfc0500c757

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
da7ad20a1f1bdd60d7f639b37bb888b9

SHA1
51ea9a9d0fe8ce623a33e60205c154dcd551cae4

SHA256
3af43d1425f2b2f0795dcaa2c99eed18866a3ec0889472d14294a02bf3580d0d

SHA512
37d58265e3287abc06546864ab57a9b12ef3c71f1476b87ac0a1354088ee0e7e76510bbc6123fe8b9840cb55eca56fd760346f4e1f68d85a8e63343a8f9118cd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a45a0656d0b2afe5f8028bc4c9b94b83

SHA1
86432f4902a99e7c3bbfe5dc8a889c9b11871d8f

SHA256
61828d3f9ba7d83968fc7dface58b8bb3623458b6881164a441da2ff70e4b2fa

SHA512
81171ae60815c8644d4472d2fb7a155917587b6e79044f818e7d7b4a71fe04cd3603ed535e0e123a03abf7c66d3319425f6b028bca7a4c79925e2c6f1a9a2531

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ffa77666443cbbb9ed23002e7e3f0c7b

SHA1
dce0af0c174b884dd792fa6df09c21911ecd1fbc

SHA256
9c9e451db15d6cf31c80af7337253c673501e774452adb41251aa632c1d918f5

SHA512
77f049f803d7c4f48e19dbb338cbb8b6c4c5b6c8bd2b22606ca2c0c6853a24cd29250dbbad119785c060e6aa5daf8c2fc3ca0d3efe87658e6eb69952398b276c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e4402f2e13608c9f695c9ce7cfe75ea7

SHA1
f5adeef17ee5020cc074e3ad6e7442c932ea17bd

SHA256
8c724a6a3b81dc870eddf0deccb0081f77eaa0b1919421cbae79b741e72900c8

SHA512
709ecd6b949c75959d898e1b12e3f526bcd018ea1833dd83d306772a34f43d677f2ba2fef3bf27cdad0976016b493b78b2f22ea2638f98292ac99c3eb7285047

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
6e4627ce28d9c9fb3833c5325b6be8ad

SHA1
b6a7e0c6026619381f0dbc6e3b027f37ed9a4b7a

SHA256
2bed27a5575cb8fed18fb61e5432ba3052f1411842e86f35a8a39ce3304b9475

SHA512
13612e391c769db277e9ad3374431105c4ed470aa2cdb309b8bd513eac2604f74c099e765222d08c9541b34942d1e3cbd370f32f10251250fcbd009da5d48fe7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
80b7b45d1829e266c8f517022b9b69bd

SHA1
9fe7898891177d1ccabeecb6efe7c69c12151bf2

SHA256
571c2ef245cddb7702c728979562fc27bb3c1ff020b09e0a2d5b1a82f0bf550e

SHA512
ee6df7ad4567a7ef4fd722bd3c34a18c6b9e4adbfa4e1dbbc887745549d036b28064c1a5b5a633fd0c5e56ccc6676fc4a54c511254d795e5e7036a5cda160806

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
cbdd16967f5a9650e09372e3c31c2382

SHA1
3ab4525734ef1b54a1ca0affcc082c1c40348d97

SHA256
d89bbdc2143e7aadd0a355df3ea79979dc047755bd7fd46b3ad4b871a41b64a9

SHA512
1f637211beb2210ee58b23e01abfea4bdf34c1e8cb3c8c68c4c5026200b554fb420edadd4bdf19ca6499b0490f99492a3d1400ac6df5f8285ff1babcf2fcc40f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
89cd5685865a27fcf78bd0db2a3e4a35

SHA1
8972b1a5c71a7e9c838a3806b8d097e7df631f71

SHA256
5c7c153f13d39488a0b59743de3cea0757c012e799f2998bcf33c70fe1632085

SHA512
820eaabc4046d0316e8b3eb505b5a9931dce2a5d86ae5b760088c0f2b6fa15b0f682e8fc12aa4463670167a7e32fcd8b5cb552faab9df028bcc09b1b3cf29273

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
d53c781f527c5fd74ba6466ab9a17f83

SHA1
ba2acaad6e36083c95c7e2af94663e176a70ac92

SHA256
fbbfa44f89ed16337a7d221343142e7f801589f9c077563126410141d2c9d1c3

SHA512
2aaadce123a64244c84b6ec44c8499a4041e6b9db2e974f6e0d10618b18d8378a4358d6f5e2bd77a9f9607d4bce920675a90a65ad60649ab9a9b5b1fc168b963

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
58942545b00324ffe97ea1f9d1ab2353

SHA1
a15c85aaa3b856119a2f522413392b1b8ee23aaf

SHA256
47115da230d5ba5a26c38657c1d5b2de5870dac937ab9382563ebaae3d23adeb

SHA512
54a9d312b7689af3b94040a80304ebb15091fb8a9972d35ff40506ae5a5c9adbe335081ef0666db8b04de83fbc139b1f1658f11b7cb105a8c1201e8b4b6c4544

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
8e633cedbb891c85a57c3472df8f8dd3

SHA1
f044ef634dfd9ce96265e8123e79b5617c81eea4

SHA256
617493271ee8a5fd7ef66bea131983cd52b84b33198d0315d84d337080ed418a

SHA512
8652a09eee3facfc1b8c359b3385a3e176e7585dc7b1f9bdeca2a0f6ef70eb94ea52683e74751cc37327becf3c45c3bc419b8768800def9fdbc50cdc849932e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
873B

MD5
94d406d1463c6caf01a609205bf9566f

SHA1
fc47e9ce63fe5ed0744d1ed65e167e7f90dfc5ec

SHA256
676fb5e6c95d8eaf21916eeed53e0f9fa4ccee2b679c40274166537029759ea5

SHA512
7cf113095776a2715293c628b79acda930112deeaf8c430133b1a95e144d9d79e6591e42409aeba72aef6bc9db32e8f22f841c4565202a78e24ac03a8f5255fc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
ec189c9aee0ed14d002f6e71d450a96a

SHA1
5b5f89c33687769af077697f177288d603ef66da

SHA256
188ac84be1defc289220820b8edbb4ec72dcd66e0a61c288f85d468bb2867cb7

SHA512
3ac6593bf7f03ed2190966417e79e822b652e325e064bfbf8d688af288e7df7adafe845b49843983e115d4b93e594428286a98d4d98a77462c172b4f8a5b72bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
696b7c7b1348733e0bb56c8a75855429

SHA1
d7cd59cbc560b9affe0e26ce7729d6274fa82808

SHA256
a8851730d721b1e46d5eb899b0df91f5ec1cf4ddac9208dcc462150618d5f045

SHA512
3005346787173fedf3cc1b12f708aebf9c6152def9e82c288404aeacdb8a21e6eedb6922364987546a6eb3e611d69d6f7f4bd07bce2025897a8899514b46c7ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
0ec426f5be86137cf5a3bc365ba8f709

SHA1
a2311c154bc01fef592180ee1d02ea8874739fd2

SHA256
9fa1fb53e9769a9884c3e140053df2cbd6263b455363b4695b96f7af78f9bdc5

SHA512
033cb631565b237e89f7259b221823fd5e10681a68a291629e6c0163afc943efc0dd0524528649b25edccaa8895dff14ebad486fff5bd622876bcc445e1bdd43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
2d85a6bc3cae15af2d791830b4f3a2e5

SHA1
0d2ee28c9e46bedbb6e3b42c3084fdc3d0a46129

SHA256
81125d95fc5ee27d3d89c5105005abffcc041b8d265c132033dd6967b0e41f93

SHA512
d2ce46e6bcff90927587800d0a55817ef90bfc4767b8621a7d99b7f582467e31e08e9e084cb110946c1a061858b1be277be90c1d12b77adb862d57309a4af29e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
3682a8898492b429ddb36983dc349fb7

SHA1
eddc491941602ccd5cc03c66f013266fef6e8e83

SHA256
140b8af7ffbe83fff422e499a49f5f9ff88c24886f36ac28f9de1934721f28ad

SHA512
9299dd9a895262bcc426f3227c549a03bb5d1aa28e724884a85d740c0421fe14bc3910b7d0520b26ca6284f3cab9dd48f7645b9ca8e91c6a042371c67bfe5c81

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
0fe06971c676d9c3c43bb3c130ca4a5d

SHA1
9432c6226ed37e62880b4f088637f3714fdd456c

SHA256
3044b3b486f44457f44b131e9a877b731b8e9a5e02d15a086b6c620aa103c611

SHA512
ebc8a44090b8ade7551d60e8a48d572b1f3a353867a25a0cd760a281a4fcfabec5bfc95c8312d491bff8f682085dbb7f4c69edd927c48d4b9f299db42990c53d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
da1b5a88ce53fbfe8f62a656b6ae5aa4

SHA1
e135a5ce365419ce65f7af1028ac2bd30d9cb4f5

SHA256
ddc178d018dcb228d6f9dfbb51125f6bbbcb1095dbec6c099a5c06a2ee003014

SHA512
e2105c2e17bbb110ba894881d00b05dbc2383997ea44e5344dd3f8ce58c11091803db26dc278585f40be418084797d72df4576cd0fc223bbac082b37757e1501

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
8cb5be035011d532d906461b223bf8f7

SHA1
55beb308dd64e30d33f34529e2792825e4cd67d2

SHA256
38314eb3c5915a2e79f4622fb427b782c12436fc123f18b207ddab179276efb2

SHA512
77001ee27cb53d8ddea405da6bb66553451adebd338aa725239a27948dc3d2c3bae1e7e8c91ce40c3166bd784d322d3cd261101d1957cd1520ac6b61a0a165a2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
fc4db3949e949808f5dd04673cc5a3bf

SHA1
7b232732a344fe36b16a0c2717821db4fd46944c

SHA256
7bec2add9d8b376b01bb7ba057e39170465231a71c3806318ec8e289d959e686

SHA512
97f74816f2042e672f916527e3f57f38347b9faf1a752b4801a5f0f64bce985e3c8c28585f2e54b66944ebd066cb23c9281b0f797e013d8884a74ba1b57bd669

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe6e1b39.TMP

Filesize
538B

MD5
f86e4fe95dd0b12274d9b62a2d78458d

SHA1
24d76bc2d6662ac74f3b32f78a3fbd667069b7d1

SHA256
4f8b3f77b9d8850d6b23f7b2ddf54fe739fbea3c1d85ab3dc7e11874b4541189

SHA512
1655fc9106f16b8c2ea407f2c68360b31248bad67ff4e0f4220189eb667d98199e8685b1264e1186cdc7822e697e7b76994d0fe68392153f71bd84259b2cb282

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
ef56a455d42d34d725d2f855f88a3636

SHA1
97a3946b203195f3c3b65bf939ec27e8293c9007

SHA256
217095c0c47442d1afb7754708f78ef6ce185890cce87293060e5096c0563b39

SHA512
c6acae6e616ecaef02159b1eee37495bf6fe1a87dfa398bc17a3c16b1a99b127ef478b3cd5c0a5cd5d551b9b7bf22d74a540d55e6ae1bd5516da1ff9c372cd85

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
ad6dde97786c4c28a772efc5391d8447

SHA1
f8d7ae5830489dabea645e1714c58c534716c5c0

SHA256
05eec8d40c8da0d5024c99799c40f2808834e25d8310ca6923a9febe3bd57fca

SHA512
cca653954d52be8c26bf1406edefb2f5cfdf9e3c9a0e73bfb7d100a2de148c49257794fc4b8b5a2fa51bdebf07cd1a8edad797e4aa01f09867e592ac98a95958

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
966c73445cb10c0859ef95145c0ab69a

SHA1
678d8ac4c74fd283038c2c2fc5fe5a4871bfc608

SHA256
6acc5541076080dad02870db56f8ff8ae5bf711ccb27190689cd7cf373885a96

SHA512
73b4709049d9754b1c60dcb00e5d82dcc9a2d0af37bb1c1e004a7953e0227629d7bb082ec1a7271fea2c84a3df1f7ac5fee64dcb387e792c62ee8f3b88874a18

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\AUG2009_D3DCompiler_42_x64.inf

Filesize
830B

MD5
bf489f4a6f1c8772091caf9d3f96628e

SHA1
c0da8b93f1e17acd81e5664ff7f014cf470d12f8

SHA256
8977772e5392b8e79364b3b8d97300e97ad891f38d5a2dd306549401e46b05ff

SHA512
2e21de522c0be4b797262528399d7ec8604fbf466e8de49cc12b9c2e2daa3a8f0977e952bd36135ed4887516d31ff8c782273325d2afad48f8b3202f35b4ffbd

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\AUG2009_D3DCompiler_42_x86.inf

Filesize
1KB

MD5
e7f9ca8ca804cc404f855be173f6ac61

SHA1
5cbe6a3e7cd65a66bb6ed17930ccfacb8c756fcd

SHA256
bb8834d2366f6899c507bae176a13dadbd44488451a263eac830be95f4bad43f

SHA512
cca663b914f6f6d1b86db83e4f2976b103af041ca171257b9815a689788018434228182bac943fcdc7770d43180d53f887ec987e9639edc26ecabc7d20dbc4e1

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\AUG2009_XACT_x64.inf

Filesize
920B

MD5
e8623d8be34f89b38932adebb2ab2df8

SHA1
f7d844b8c77bbf1bdbaf4c615be7591299185bb1

SHA256
5d57466af1801ff3a92b1540907f0e4b91d90189177d68c6b4c8833e5d57dec3

SHA512
a398b5057707743dc3077f04e3796fc231da56b54d58c826b13ec610bbdadb0513c56183156be2e45b47ae96971a9287097ffdcd709f496e96f8f7233375f1a0

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\AUG2009_XACT_x86.inf

Filesize
1KB

MD5
5b6e899df58c5dd0201934027490278c

SHA1
8379d615b05654bdbdb6512b98abdb93a9179796

SHA256
1eb88b5460824fd32eec9b90e7ef5cb529f51215046e539d39fa27a409709766

SHA512
2326b2b5f046ea663bc8723155098ab58341ace400fed48933575dc55b1cd14ee8f8d67194303783a1d1f412e395eddd8952127eb35d8ec745208a6889dc63cf

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\AUG2009_XAudio_x64.inf

Filesize
923B

MD5
af52205973fa73d4227dd5e105f6a37a

SHA1
2e16e2914fcb65e55a117b24b992d6e8cbec8c55

SHA256
4348663aa7cfe22916fb13d93307e7384376fad9d6fa34c6196f80df42c61a33

SHA512
92b8ce27f01fec9c17c2677eb4e9e3f1dd592a94a3ea12e9580c8e206a8895c99b0498b2fac30323814c8da16a48555bf5a76eb72afcf5b99ee2e05c67cb4ef0

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\AUG2009_XAudio_x86.inf

Filesize
1KB

MD5
6d9bf03bfc9465df08d17b18c431926b

SHA1
184ff4a21ae4756179fd179d1c3d007842a7ec2c

SHA256
842cc52100b5774bcda19e40837bd552b308e74829d5b35a505822c7436892e1

SHA512
35efd74761fce6b8c7371cbfc5c8c50a0142a3fa3492dda3e566b031bb1dfd58633960230985d899348073de38295e25f76d716b153640a9e0e8ce6d59954f5d

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\AUG2009_d3dcsx_42_x64.inf

Filesize
815B

MD5
32b0f585bed3e042371e125ebc7e0f80

SHA1
dc0f6d3a501cceb50a92848f045725f93182f150

SHA256
f7a5a84bb654837193e0f40b579777f5c6cc2c7341cf90503d6a6709d319797f

SHA512
ff7ebc445ead8c5109585ecdc58c7bb20f9cf9debebe587ace38c64f70277ee6a9c9359af0ff55a1d4bdd2d01b958efdce743f30cf5b20bc8656fe4124ec5670

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\AUG2009_d3dcsx_42_x86.inf

Filesize
1KB

MD5
a156f288883f2c1e867896c114509aaa

SHA1
02d7a136da0bc6c8cec933a880c62b90ea8d329c

SHA256
ff9da1b0328fd918cf9558ee57387a4865afe98db1410cc16b1e921c5a744c48

SHA512
632fd6b2940a851bc82c2d57a962dfced3b2cc61010e037ef9065b4a8da5a0f112bc2c66984cf76334556bcde35d49dece1841ffca9c149526a56d3824178b02

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\AUG2009_d3dx10_42_x64.inf

Filesize
815B

MD5
8d272f58bf5ce42962d7d9835e9b489e

SHA1
7e0969289f839b5dfe606f6ce6ed106460f97682

SHA256
2bfdd3d3bf485439013045b3a08942f457385bb89ab76d9479fbdd85f09e9d96

SHA512
0554257a41df07860233f26330020a45e2dab2613a6028f79914aec7552d5c54525b137e450202db1283b602c3d95908acbf9f1eed20dd79c21fda5963fc2b5e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\AUG2009_d3dx10_42_x86.inf

Filesize
1KB

MD5
b3a2e761e5da007cc6036c5703e12eed

SHA1
447e852f9bdc357b00864d4dccc7486f1313918b

SHA256
a80a00464775da82c02f628c5bc13cab0d0643ec2a44b28d2acf7c77d467becf

SHA512
28a106886578fb38f144602d2b29c72a906bb24a50b16ea7d3f71f8bd7f194fc0d7c8451dd1c3e9ecc59be3a866c07a23dd394a17d39eb7b55cde7b347bed3a1

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\AUG2009_d3dx11_42_x64.inf

Filesize
815B

MD5
520790b3b1eb8bb9ff00e4730d17e256

SHA1
51872475e3c31bb749f0bffaa42ab4ae362b2dea

SHA256
f9c13939779d4526107cf7d3554c122efb564cff02228d02b0b6ff211904f5dd

SHA512
da76b41ba262ac7adcb2b48b8e3845b7c57b1c45a664a1f0bc90d420cfeae1ee454c2089ca37ca5df264759f016c781ab1bf17c026d9733df7271e8ee3320dec

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\AUG2009_d3dx11_42_x86.inf

Filesize
1KB

MD5
9deabc0af1186bc22a6feacaddc5839a

SHA1
2a1fbc0737777513390210fe7fa48fa8805b15b0

SHA256
edf6764083b47c04fda52b149f565587c6a07d4455357fe3c27c9e56cc57a94d

SHA512
8a3dc2b4d25a2a4ed94cb70e88b051d9df9985f3c6a8af0725bb521e029015755b415c23a44ae8318aea4a04ec9b9c1ffc895df41d28c384d78a465dbb29ed3f

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\AUG2009_d3dx9_42_x64.inf

Filesize
812B

MD5
ecbefd1db4cb52d5089b1d4b20a08656

SHA1
85134f773bccff3e874d27d7e79dcd1e9485c903

SHA256
4887cbec8545b02152eb16f6296987a43a256b69b408330eaee362184f298d98

SHA512
a50afd834f0d892af5eb33b9c6ffbb330ddebcebd123fc7f706f05efac9491b49dfdcfe6196f3b6a3c9f7ffedf4fa723e0499f03417552404c0fb4f4fa3c046c

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\AUG2009_d3dx9_42_x86.inf

Filesize
1KB

MD5
dff48361a5cb0dea034dc6f16de99477

SHA1
afa417acf7e9da37923255a623ef34c7f6446c80

SHA256
5989dc367a8f84815bcfa1c46ff756527c6250c62973220d1af354b70027eaf2

SHA512
750b69eee07e7d6e7fbdba722e2e1ce377729dca5fe52b4d57d23dd2b80b28b3af8403aa43c469a5042ad35eb09ba4dbefc40a014a137e1b5d87e0f2de203856

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Aug2008_XACT_x64.inf

Filesize
920B

MD5
f616331f6e6916d1d27fbcf357cf1478

SHA1
e5530aa845bca9b1c89abbbc189f65584008cedb

SHA256
cf09d632a4b2cc670d435f356f309dc58359735834baed10343fdfbf37eddaa1

SHA512
c39fd664f43c4cfad8e65d5d6b3ca845abc0b341cb663acc7e274a00c3218394d3d04cca850312074a294bcee4e5a0796a3c90d6263de63f8f83078d9c44c8ec

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Aug2008_XACT_x86.inf

Filesize
1KB

MD5
d2aedfbc8bd56092d658bd60b464dfa5

SHA1
54f8e1cd59f43cbe02767face39fa42f50ddd229

SHA256
f1daaa8d96108a4a338f62a4a1339143ddc566e194ca00dde5427136bfccb0af

SHA512
41d74bf9899e8d904bb0bfeed5e053ac3c453e0d591526aaf5305ba33128abfe29cea09bdc23e2131f91626a66f0ff58f6cc02fda9692e58fb2c476795e2b6d4

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Aug2008_XAudio_x64.inf

Filesize
923B

MD5
fe4812a5425f1b6d9562b9609db16ba8

SHA1
01a206feff15ead479848ddf056a560701960fc2

SHA256
311bd58ed7437a1cc79692ae360a02efbc8ec51194abcb80bad78b2208a94d58

SHA512
2a98b997af381504ec8e2c5b182c73717ab81a455ae77c57036aa904f87dc8fdfd16a7835cc1e631e9435257da8bc631946b32d8f3bb72d260d1114c4c3c4390

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Aug2008_XAudio_x86.inf

Filesize
1KB

MD5
e0947065f559b93eb93a7ceeaa8bfd44

SHA1
39bb647363b00924c7c0b3792f8017d7c7d9e3b4

SHA256
f211a7d99b3ffa0180bd91f68b2c285564227e075d499e950e76fde04e7707e3

SHA512
620810dcd56857b2d3d5f1271c5d4979cc90977acebfea81edb472d02da8e6104e89984816a91ab57a2469253a391bcc378093f1adaeea7c0d35f7f1b794969d

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Aug2008_d3dx10_39_x64.inf

Filesize
815B

MD5
b01ca47b1cffd13ec5d8a6a592ae8449

SHA1
e1b615488ba42c44922522dd47b2e99f1b5394e7

SHA256
a5eab981c313538afcd7abc7742854d251c736835ffc1f549a4768fdf49c3e71

SHA512
2609474f1ce19473ff8f5f4550f9eca077bcf063bff8ea7fe890493e1119e80e6b233141a8e9dbe7d9f1e167c4941fead6cafe506f98053e623728b7edcf4ea2

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Aug2008_d3dx10_39_x86.inf

Filesize
1KB

MD5
baa493c7a361f1ac0c5efc94f1568f97

SHA1
16dd101673b96b54bc5a38c20ec3ed785c6bf7bb

SHA256
e83f8d48323887af89648c5bd7af713b42d20ccb757be34675f1fa527e6cc33f

SHA512
2e8db3d1ce2830caa9a0f698bc31e2b907e39a233fb056fae44062b3ff732b3b62f12fcb2eb948c1728df9b64c4d8ee873c0f95e56c2ad1727140236ecc71095

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Aug2008_d3dx9_39_x64.inf

Filesize
812B

MD5
9411bf36f2075b7e42468277e8020e40

SHA1
c38bb84e7381baf0d2720e5f1822781a639c04bc

SHA256
4cbb1c6804b9c76bba4e41f0d2a45f1daba7350af9da4ae6966651f7f4da041a

SHA512
c860da71a89c41e81c1c89b3e1f4e93e747d7dca1152a4ba063f53f899fc701fe24f14abecfe883571af518df4c2d766432ddbae2ccb2c52bd87d85f6ad015b3

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Aug2008_d3dx9_39_x86.inf

Filesize
1KB

MD5
b28ef6e3eebceb622d1431fedd9f545a

SHA1
c6ae73cbbdff4632911dc1759a9ccdd73056ac8b

SHA256
8a23d386626328f9519076f33d5c3b71c639f2347741442c3374974e6f61bd53

SHA512
4f2bfced9eedabd6ca807a1b88cc063d15a31ab0bd8e2b60c65d6daddac9a111c434a0fa7d7641813d9880612464351ea30368bf6f0ed9ffc69bfb4d51882d12

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\D3DCompiler_37.dll

Filesize
1.4MB

MD5
ea752dbce35045d3c830dc16578cc8ab

SHA1
0a9bdf391ccdd113fde4d10f0afc80d54df01259

SHA256
715876d15b590936e4d32602a764d810650eec134922b32eea742e2fa71791c1

SHA512
3cf5e79062203d39fdb74e789e22405b93de126deda3d698963682d51f264cafe9a91d433312bb7976fa9b50a4798060fcb97b6de7f0dd422eecac2a922e31dd

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\D3DCompiler_38.dll

Filesize
1.4MB

MD5
103cbfc5591008ad33046e20e8e1eebe

SHA1
4a8bd29d7cbe5652ba58cd6754318a03497d841a

SHA256
ddcaadbdd47bcba02c8d1880d456acc20732d21554977338ae507987ed04046e

SHA512
ddab1a2ab33b224ac3f9ed396415bbbdf96bd59bc6794fe26796ee87691154d5e1ca2abf8bb85e7a9fb6793446bf17f6f6f53b74e69443270f50ce0b85e06b6f

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\D3DCompiler_39.dll

Filesize
1.4MB

MD5
c4f1972497fe2ceb7d900938c97fcf91

SHA1
27c1886e7823813ac61c35ea0cd5b72ea0ea7dbc

SHA256
b99b655abc4ec45851cc2acdb7a348e739687200a4fe3be9c35d6738dd61112f

SHA512
8d35dd4000e1d632d0924b594d6ef13454159f8c3b85636f180486ff794b76f8a84d7977e340ef08217f0f68747b593eae0b44824a20c12494007f4a40cc3d00

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\D3DCompiler_40.dll

Filesize
1.9MB

MD5
3384134eeb8f223178c2eb8323003ec0

SHA1
c8eaef8cbc91f4386e42904dee70abb6ab7304f2

SHA256
f0a6f156d13150de6ebb094233e5ff78581fbdb77bd0ff8d083698c42bc8e13b

SHA512
dafcf4c116d994c17d47d36b1dbc2ba8ca61cadeefa5d770adc391713d2c13ed2b6eb8d2464f4811cb472c8e1eef384ba21d7ad8203ba4e9ef07f33781feaaf9

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\D3DCompiler_41.dll

Filesize
1.8MB

MD5
781e8b5b6fdb3c9b4e4a4a9fb019960d

SHA1
292b9f02bc2377c6f89b505554394ace161c68c0

SHA256
69ddadf8f5be24f10382706480b55e2492008d102001779f976608e880c65aab

SHA512
718955c983708f3ce5b6796de28658603bb61270ca6f1b3ee01d73ca9a789db326a7998df38cbd6330e69bfe3d9504b0fd351fb7bb18566be6af03fa36b7573a

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\D3DCompiler_42.dll

Filesize
1.9MB

MD5
b33b21db610116262d906305ce65c354

SHA1
38eef8d8917351ee9bdff2cc4fbfaefaa16b8231

SHA256
6c976311406c23aa71018d274da0ecdef43b6e3a3b0b01e941a5e8e4e974386c

SHA512
7049726ccbba90d06b3a56e1dbde8196935d4681b5548248cd3e6a8e38183c268152ba2b07eb90823bbe327c02ec946c59abe3562b59e29d9bcff8fe90e0adcc

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\D3DCompiler_43.dll

Filesize
2.0MB

MD5
1c9b45e87528b8bb8cfa884ea0099a85

SHA1
98be17e1d324790a5b206e1ea1cc4e64fbe21240

SHA256
2f23182ec6f4889397ac4bf03d62536136c5bdba825c7d2c4ef08c827f3a8a1c

SHA512
b76d780810e8617b80331b4ad56e9c753652af2e55b66795f7a7d67d6afcec5ef00d120d9b2c64126309076d8169239a721ae8b34784b639b3a3e2bf50d6ee34

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\FEB2010_X3DAudio_x64.inf

Filesize
815B

MD5
49460e9297b0faab5a5d73e7aa2caa67

SHA1
a7e211f3d4ae808f67a798924c4d3314183df873

SHA256
68351f03f4ef83e4b8c359e3e130441081690a1866b838a1b35d64674ef3abbf

SHA512
92c4c0751e9123e1eb09da312bc44041d13262e26cefb807dcd1b354c5bd12c0d7197f1d3d457ddef89714b77ffe45db9c717332963c6daa507ae02a6d5fc941

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\FEB2010_X3DAudio_x86.inf

Filesize
1KB

MD5
e84adf38d499ae39090ad60fd76d76e3

SHA1
6af4d58bc04aac2723e8b97649f1b35fb1aca84c

SHA256
d4da3e530982812d1e2a31570b80af541fac1b13c72997d2aad7ea3bfeaf4a4a

SHA512
6714992e7aee7bd0798fbec68f92c97ee502127580e21e1b6693ed6737312b44dbc9fd9ef579fe552590e9e5a4904df94e4116334265a34699a04aa76ab87c24

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\FEB2010_XACT_x64.inf

Filesize
920B

MD5
45f4f5d8439b3a33df8f1d9f39a162c6

SHA1
e09440edc243b072aa589ed139ab9fdeff3193d2

SHA256
c7efd1ec4e4d31644a5054d32cc1e6795464472c05439573ae93e1727a5eea4a

SHA512
f8b7ab66b7fd182efddc2a851c6468a311705267afd5fb81554713b338f24642c5e7b5d5000b85e417154c4285457f9fdcdcf9f42c155c801f7a295e6ae3ea34

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\FEB2010_XACT_x86.inf

Filesize
1KB

MD5
82c10b720e33be099f69e4010d44ecd2

SHA1
e95a2eb23db3fd610d71089500aad523f93c9469

SHA256
e850fdb84bcac0f667927e53fee943efd3f43be6c6a0ae1e17f3fff83ddb2635

SHA512
853261c439b26cdc8991ac289b9f9925976452ed613481b0cf09e75444882805ffa15633eba441d8e1a04641f5f6378b68e2270a6a48d3911d7f9c2c0b1235bd

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\FEB2010_XAudio_x64.inf

Filesize
923B

MD5
1c4dc3c97e96135a784867d68d193bef

SHA1
5019f79ea9b624999fe58420daac619c5695994c

SHA256
da63330fd2a1538b714ee6cf2e09256446a04a55f866b3f70237d8a7165cb3e3

SHA512
d529d68ccdacd41a7bb688bf226a23f4d08639213d96e3e428c16176681c5f7d45ca8527291322b2a6d4dd14fea1cab3cf183006bca3b5a45fbf2e05c2ee1437

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\FEB2010_XAudio_x86.inf

Filesize
1KB

MD5
e6e942a2cfbb587bfcc4203b5bb34fd4

SHA1
2e0172ea1936911a98e11a6e98990703e24172c0

SHA256
74c827ef94881099761e04397ef8f162fd0ccaf4876a5503c4b53a5216d2acca

SHA512
3d70d76e6f459819a1703c5019a2e10fe518ee6e8eb5d3313fe57d3d1b6313b52c4904398a26841c78a9ecf9d715e1201e834ab3df47265e070ec94417a78e4d

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\JUN2010_D3DCompiler_43_x64.inf

Filesize
830B

MD5
6494a3b568760c8248b42d2b6e4df657

SHA1
700f27ee4c74e9b9914f80b067079e09ec7c6a7f

SHA256
3e779533a273e3395109c7efac13ba1c804c01b3ddb16938406fbdf90d851216

SHA512
2bf68b123d7823ad7182e132d9e55f8de7580229e8e1b3b40030da50bb9bdeaf67bb9727ce2171fa83b7f804c24d9728ffabb44cb5017b16b771bb19e62b1b42

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\JUN2010_D3DCompiler_43_x86.inf

Filesize
1KB

MD5
1a86443fc4e07e0945904da7efe2149d

SHA1
37a6627dbf3b43aca104eb55f9f37e14947838ce

SHA256
5dd568919e1b3cbcb23ab21d0f2d6c1a065070848aba5d2a896da39e55c6cbbf

SHA512
c9faa6bb9485b1a0f8356df42c1efe1711a77efa566eee3eb0c8031ece10ffa045d35adb63e5e8b2f79f26bf3596c54c0bd23fea1642faae11baf2e97b73cf5e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\JUN2010_XACT_x64.inf

Filesize
920B

MD5
dc506eaa8bdc02b0918e8ce956b505ce

SHA1
9bfa75f2b2d7ba26a778623c8505e10428a1f6cc

SHA256
f3c288d84db29f7bc4d2c771341f765b5e1940a4827fcb55a65b48eec83c71d3

SHA512
9938b821370919a25e801cc19841e951ef4523fa62eeccade6825e74c43319e9bad2f76e5971ce5d26ec2fe55258f7c9390626bc3b934c84b70f7a2870976b89

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\JUN2010_XACT_x86.inf

Filesize
1KB

MD5
dbef26a0b937dc1859e9582aa88bf928

SHA1
25f85650c6f62e59c11f7234be22d34e890793b3

SHA256
ca604ce9d2ee43a09b39b23a6a2a048b1a79d85c7d78679cc73aacc75cf7a62e

SHA512
4259193cd51168020b3b02ffaae89d7b4a972273b227cc3116c8cac3874b7c329e66c989ad200f93b05d1e4f90657b5391f37d6d128108db66ad7d6a758aa34c

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\JUN2010_XAudio_x64.inf

Filesize
923B

MD5
dd987135dcbe7f21c973077787b1f4f8

SHA1
ed8c2426c46c4516e37b5f9aac30549916360f7e

SHA256
1a0f1b929724f8b71d5ce922f19b9d539d2d804c89af947d5927b049ef0fd3d8

SHA512
f0469c94219b4df99d7b9b693161a736fa8eec88a3f6c7f2cf92fab2ade048dfe61fcde3a4cf4f7a2aaf841d079a46b17259dea22cfb02831983f55bd7f61899

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\JUN2010_XAudio_x86.inf

Filesize
1KB

MD5
31d8732ac2f0a5c053b279adc025619f

SHA1
c8d6d2e88b13581b6638002e6f7f0c3a165fff3c

SHA256
d786d06a709d5dc26067132b9735fc317763fcf8064442d6f77f65012ba179da

SHA512
abc37922307f081a1ffdc956ce59598c19ad1939ecfb6ea3280aa6aa7a99c3eba5462731586ca262f7d7257d7d2a74ff57a45abf6b93521eb6f1c9f22f8eb244

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\JUN2010_d3dcsx_43_x64.inf

Filesize
815B

MD5
e1f150f570b3fc5208f3020c815474c8

SHA1
7c75fc0cf3e3c4fd5045a94b624171d4e0d3b25c

SHA256
5289b5ad22146d7cc0c35cdb2c9662742693550de8f013d1ec40e944288d155a

SHA512
a53618ed6ebcd50ef074b320eb3ebd38af4770a82caa808e47cba6a81982ced46cf954a1c5a383f171006e727d8211b4fce54c9faf27b4c14a770a45a09037b8

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\JUN2010_d3dcsx_43_x86.inf

Filesize
1KB

MD5
cf70b3dd13a8c636db00bd4332996d1a

SHA1
48dd8fc6fa3dae23cb6ca8113bc7ad837b4570d7

SHA256
d5200b332caf4fff25eb3d224527a3944878c5c3849512779a2afcfeae4c3ca1

SHA512
ae31a9e20743a2052deec5d696a555460a03d400720679ed103759241b25d55e2fbc247170da3c0c0891f32b131ab6a6845de56c2d3387ad233aa11db970b313

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\JUN2010_d3dx10_43_x64.inf

Filesize
815B

MD5
13c1907a2cd55e31b7d8fb03f48027ec

SHA1
ca37872b9372543f1dbe09b8aa4e0e211a8e2303

SHA256
a65f370a741d62c2be0ca588758d089dd976092cb910bb6b1b7d008741e18377

SHA512
545aaf268d141e2aae6800e095a1ae4eafe6bfe492d95dfe03789ccb245cc3ef3f50f43b10a41a3b0efdc7f8c63621b437323e133ba881f90a3b940095b80208

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\JUN2010_d3dx10_43_x86.inf

Filesize
1KB

MD5
53a24faee760e18821ef0960c767ab04

SHA1
4548db4234dbacbfb726784b907d08d953496ff9

SHA256
4d4263cbb11858c727824c4a071f992909675719be3076b4a47852bf6affd862

SHA512
8371471624f54db0aca3ea051235937fc28575c0f533b89f7d2204c776814d4cd09ee1a37b41163239885e878fb193133ad397fe3c18232ad3469626af2d2ed1

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\JUN2010_d3dx11_43_x64.inf

Filesize
815B

MD5
590fe1ea1837b4bfb80dc8cb09e7815f

SHA1
792b5b0521c34c6b723a379dd6b3acf82f8afb1f

SHA256
2c4cf75b76203cba6378693668c8c00b564871c8bfd7fbda01e1e841477b2a3b

SHA512
80bee8f1ad5bfaba6b3ac5a39302a1427dbaa5919d76c89b279dc753170ec443924eadf454746ce331a6682ee729ab79bd390a5d3b55db8d08fd6f4869101f53

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\JUN2010_d3dx11_43_x86.inf

Filesize
1KB

MD5
fb5d27c88b52dcbdbc226f66f0537573

SHA1
2cbf1012fbdcbbd17643f7466f986ecd3ce2688a

SHA256
3925c924eb4ec4f5a643b2d14d2eda603341fbbd22118cdd8ae04aaa96f443c0

SHA512
8aa2200f91eca91d7ee3221bc7c8f2a9c8d913a5d633aa00835d5fb243d9cb8afa60fe34a4c3daa0731a21914bc52266d05d6b80bfc30b2a255d7acdf0d18eb5

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\JUN2010_d3dx9_43_x64.inf

Filesize
812B

MD5
ce097963fc345e9baa1c3b42f4bfa449

SHA1
e7624afc3a7718b02533b44edfe4f90d1afda62a

SHA256
272650a2d9b1cfea17021f4bf941b21f2206791e279070d4e906ce0ce56ac16f

SHA512
f3c4f00eebd9d465bc2415d59c417bca0f5a07c8e13880b28704f770763609a653d4b06f53d98325b66c2c7094895190900c47980f81463215e919f00966ee7b

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\JUN2010_d3dx9_43_x86.inf

Filesize
1KB

MD5
a11deb327119b65bacce49735edc4605

SHA1
0be2d7fa6254b138aa53d9146cda8fedbba93764

SHA256
6b33d32da02f664092d44b05237990f825b4062c105a063badcf978648b5e95b

SHA512
b0134a3d6f2d576e5fafb601014ab66fef91d661013acc8a7a9129940369a1d9ed5c0f228bb1666a4e891f09b4b18e83f0cb2080047aa84fa45ab663e5739a31

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Jun2008_X3DAudio_x64.inf

Filesize
815B

MD5
0225e16dbd17754f202f34cc1fdaa60e

SHA1
d8d7e02849d9594b346023e9e69a5b2a4fffc45a

SHA256
f4526ad18f081b84a139e6d98923569fc8ffc7644e20499e2f68abfb3e87753e

SHA512
2b308f4c4592a80d4215781ba7ace57f93a7449b2ce36a7c78203e1f16f1b7321dff6c32272180c9cbaee5d31afbdcd11f3d474004fe13c63752d3c0201d2033

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Jun2008_X3DAudio_x86.inf

Filesize
1KB

MD5
7949a4d37b517c39295f0d656cbde501

SHA1
27313949fe172d687e9faaaf91044ef56b7c973e

SHA256
0064b7db5bfe52b6f40f61d962901c7baa116abbc72328f50586b6fa65f894bd

SHA512
93d947c95b7ae357bd47a5a050437cb05192eb6c84e9222a46d70ecc7c54bc2a5cb1d3f65cb2a4db5fe18106ed9be5a7aefef08f9634b28cd5cf128bd00352fe

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Jun2008_XACT_x64.inf

Filesize
920B

MD5
9b2753cd7967a014a6391b44900ce258

SHA1
d6d227999ad32de75e05ae7d7fc43640e8893ec4

SHA256
90577c4c3d5d0de80c805caf0cc713582698ef7224fecf4ff911ba6309c5c920

SHA512
31136e55f01d382cb20f7109d0369a3ab7c8997dde1b65e9214e410ab686add4ef6950241c0aa9fc93ea0cfe3134d98ae1f3f48b44e92a620715bf159d6f5914

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Jun2008_XACT_x86.inf

Filesize
1KB

MD5
59c4f83a7fa2a8dee4970d37a96c2b55

SHA1
75b42f58c61d8c8ae185cd8560dbfedb7c4d6d9c

SHA256
79cb10222e466d54908d30ee433830e9673d5a538fabc5f4568521c2aff66eb1

SHA512
9a9b7ea3b354cbb29d88797533332abd4d1ad195b28ee6af05a0c6f83343b1e2ae0ce172e9941eb5f0d7ed3fb0382c1319fe4808ea2bf8988a1dc63b78c8c095

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Jun2008_XAudio_x64.inf

Filesize
923B

MD5
c564c4dd81be3fe65783bca776be371e

SHA1
b60e1e1e34b8c56fac53dd7af79e1e05e04866bb

SHA256
9ce21064f2feed9bc9426a6e92e9c850aae31abeb80c7906ff917fbf4cc03913

SHA512
5b790aa1a6215ce8687cf3503267e31d1d7b41b5e4675bc634be957fbe14c53556989278017f2c97336df13d16eeaf975e0602a4cf9c8356598c392977df4dcc

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Jun2008_XAudio_x86.inf

Filesize
1KB

MD5
e82ee7f4d71ae8bf90378bb6dc107d57

SHA1
6fc8e3437dc9d87213064e69bf0769d20fa7a739

SHA256
e5e435c4536f987e1087218b025e6dc66c24c3e300e839391891f1b3bfd360dd

SHA512
baea9f4d6c744f26b55426c9666f135c07f3e8af15fee04cdf34c0af83567815dadd5a4ac8a6547a49d58e0c837a28fb18c4fe1f50fbed8da9991bd2aed8ab7e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Jun2008_d3dx10_38_x64.inf

Filesize
815B

MD5
e2b760696e2300b1c9b6c2531b39d029

SHA1
1c576840cf04b73de362b28b943bd69b09b3883e

SHA256
0de0ada970774620c0905227666fc30910e64f3cfa4b99e4c5481685d12e3ded

SHA512
94e4bd9834c21acc7709fd28dc557455929f940be0a4a794105188dceed7e023f87a489a1de44a9f93f3780f6f9088ab3d4e829a0089bec74a25ba4297a0dd73

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Jun2008_d3dx10_38_x86.inf

Filesize
1KB

MD5
d12a6b9889eeb330b4a4e86e9bd175ae

SHA1
62a4a7cb8fcc0edc240caea13b2b487cd012fb00

SHA256
f5f54664ec67f6333a9f0607d891bd0dc2acfee8cce09ac4ee0372b5d0aa12fd

SHA512
86274606e76b98b71dc4eec5180b3a52cb6627ac5ecc8b008512b7bad404e03b834b7129ce326a3c9c1cfa8b19bd5e97467a9390bc8a0e749771ca06d9f73491

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Jun2008_d3dx9_38_x64.inf

Filesize
812B

MD5
df5538bc9e0494845a8e2d607e06e561

SHA1
a056a64230f03835dcf9bbc5d84edc2eb0c09484

SHA256
ddad68974990a21a8d4a91c47ef1034ddf0475551586f04e86b8cd2f0c990d6f

SHA512
4f19379034eb47e01de81a611facc2c8300c7b10306ebbabd232a249debb4acdcd3de42b71d851011be5b3abcae1ca232ae6891be79adfd754369dc0f16b249f

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Jun2008_d3dx9_38_x86.inf

Filesize
1KB

MD5
c7fc0a82355bafed08a5597930b80263

SHA1
037419fc93581e053b4cd31c57222c8b8761e242

SHA256
06faf7f7ea5503dcece13d6537e57cd2581d5188a5d839fe7f118298a721b51a

SHA512
51829843dd7e2e501d6054f500fa523bf63f19382890880cac0e3f207a00dbc544195489de67c7dcf876d9061f2af12bd346513e1c98047b0c185669be5d8cc9

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2008_X3DAudio_x64.inf

Filesize
815B

MD5
2f7b3369825c6b74f4b645ebf52c8e98

SHA1
105972c77223b943df6533d517c698241ddee9b1

SHA256
b7dba312a71ed109c9c54cc5cc096096eb8cf0962396e8dc996f8fa28307547c

SHA512
88a47bc3520f9fbc082f1ddca7e083cff9bdbe5c4a0a851925ea14d8e0f327f2a9982e5b4ac457e4950acdcf6788299c4e13a15ff38bb76c8d212f1466cfcec2

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2008_X3DAudio_x86.inf

Filesize
1KB

MD5
9ab8a749708995453ee8a995a877af2b

SHA1
eb8a0ad7f7b38aa190e2fb8a4a2d11cc9fa9b493

SHA256
0b6e28f00364a9ff436c3d99f0d4e80bf615f1450f420122324853cc0b88b16c

SHA512
9b0ed586fed0ffe25d4076b202afcc7ad580dbb05593e392a12d64b639098f8b7687463f213e53dfbb85616c5a3781adaef8f1ffd293c082a84291472266480b

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2008_XACT_x64.inf

Filesize
920B

MD5
d5debb90aee2d6a73bb448aaa99f985d

SHA1
950ff1a768bdabf14ca2cc6809431c3be8b19d9a

SHA256
1038a41e63ee8abbc8be85a86fafb2ac1d03defa6b88deb270f96a6ed1a97122

SHA512
dca65e91d4eb619fb34615a3c8683e04af84e843346b88bf4d52cae0c27e52b5a7a417c531eaf50cf45932e3fd6f5fff1bcfeeea4fe65efffbe791c8ac1a8101

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2008_XACT_x86.inf

Filesize
1KB

MD5
e3ad8befca2528572d6c51a15e072c94

SHA1
9718337261b8b93b546a5c20bee8b44d26707053

SHA256
6b0cc0dc993e172855864fa078c4e5c8f2f46bfc3200bf2ccdf3292931ee3cb2

SHA512
de4915424d8a53ede76394fac14c4de46838f21afc8bf30f560d2d00df4f366dc9ab48bb343be3580087a7d5862a14c08f83b5d9cc8e78aa4cce4e6b71b70c59

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2008_XAudio_x64.inf

Filesize
923B

MD5
8eab978252843c5c47a913e4eee460b5

SHA1
b5ac7e6a36157c41d56e1113d7768e67530640c0

SHA256
10a2db49dd3bea59133bbd82b3fc0f8a959b65b0c250c11a9a6f3123b961e6e9

SHA512
d1b7be4eaba7126f3f64d625cb9c9d16dd40dd1dec96b4d647f9a5e24d6b945faebb65f25348d9ffbe092b03b1a54414cea9a2e4d1eb1deb102ab5abdb34d810

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2008_XAudio_x86.inf

Filesize
1KB

MD5
35c6f6f109257f242cfb2ad2062d50c4

SHA1
222406bf52449ff0d5a7ca8ace6cbd3dd5f41708

SHA256
472bcfb54b5d63377da128596dfb30c8f200f79edaaf6d29de1afcdb71a3413d

SHA512
71180d47d8c177d84e68bcd6b9f948dc8c946f7a6c4091e20e04f1c8098b9ba92bde976194b06595834ba4b159a702c091d04ec823ac377b7ba7713f057f99ee

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2008_d3dx10_37_x64.inf

Filesize
815B

MD5
b21f653f707315be4c85ff4630af305b

SHA1
32b0d69a786a2cd37d2fdf541931d90ae8656944

SHA256
f37681f4d49f71d48b1960c3efac74f28af9fa764b29ed3a40b5f424fc8f60c9

SHA512
e68348c9413f77749218fa34e55e416c7bac95f234522bb6eccbed1185a3f3af2a393511d3b83dbfc64580e1725f9f53e7e586570d696a3fee76761e8b0902f4

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2008_d3dx10_37_x86.inf

Filesize
1KB

MD5
1242da12c637d5976af936f60f387c26

SHA1
a6890fa9d41f6785d54a7d3e1b229b64010089ab

SHA256
bae3bc2b7071d2d1c657a87a8c8af6c0fb5373f11c9aa5f61b406924717d0792

SHA512
7fcaf6ac1a8166e8c68d650dfea40bf329565d4ef92316ed0188a252736c9e288cc8f7d017b0de4af05245d1bf94a85b2dc72a93c618a1f2caeda45fd84a6a09

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2008_d3dx9_37_x64.inf

Filesize
812B

MD5
ec75fe979fd2c2372ea75c72a905c832

SHA1
954642c9087489285c8f0786b63aee108ec08d04

SHA256
a4fda3373241c2748a969ddeeb6ef41b3cc1bca6608362ba87db75f69023fe9c

SHA512
dcaa772d21d1be7fe59f1ad32d10e7cb454ed2a4d98b3add201f8bef03718c29f9915fb4cb779111a954a9d93d898393ac2ba593c2d4d378b88bd492b7b5381b

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2008_d3dx9_37_x86.inf

Filesize
1KB

MD5
020d1260794d5780937f0f7a919cd62d

SHA1
511ecd1186deaf129a5532b79fc776a9ab8fa9be

SHA256
d55858e166a2fe00d4acc30da756f0ab2c4dd5a79a9874eab3100722c74a1b75

SHA512
201e24e51dd859c35fa9d0a403993cb0b2eba67effbc598ca4491f05bff4f0805731b1e7cf6026b7dff9fbc3167c16b43887f080fa40ac11c6ffe09297401f9f

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2009_X3DAudio_x64.inf

Filesize
815B

MD5
5e65d9cfe5f15381afe2016508800dca

SHA1
93a44fa2bd9559929c4ed459a336e1cc27738f90

SHA256
4da1a6bbcb7e84073dcd1898f854702ec32f5324478b2fa39c4a9868abeecd3b

SHA512
9ab50d72212f79f949679b7e7c19f698f2b1c6f1d695555d925b7cdcff800a14fc98535476150a15c563eab74d8a98316f44027b0e3ad2834735a6f94aa07646

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2009_X3DAudio_x86.inf

Filesize
1KB

MD5
c1501e224e63e7c7fbdbfb7734a8e4f0

SHA1
c6aff4de1b44499d304649b782346b0a6decdbd8

SHA256
aabd029d75f25244bae4ca17dbf9c4feebec0d5f121fcd388c175c3360be1bac

SHA512
e29f985810029a43a987ba45c905aae84d0615330e6fcedf81806a403f59c8861fdbb31935b0c610378d8131d38ac6798c778f5c6fada9f51838cd8a8cfcaa99

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2009_XACT_x64.inf

Filesize
920B

MD5
eb9c537b01096960889de48d1a13725a

SHA1
205f797be95c576f2b15760a25440f532011332c

SHA256
9369fb0a9d3353627c097fc19780e5e7126af47766ef6a4a95ff3ddcca56691e

SHA512
c82ecd2c952b1df01e6c7f7858341c62b36330945dfd0c6bdc404d14bee5682ca06a19448961e03a2093ea00040fd38ce60c126b9f155607b7435b28f74055f6

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2009_XACT_x86.inf

Filesize
1KB

MD5
25b4458970583bd63b3e21ca5eda19b4

SHA1
a41a7c318342365d64f94da5c2b9d0490895d684

SHA256
764c3caeb1725a11701ca7119fdc49b3219553b79f9a5c1a02b20991391e5a21

SHA512
4239e25d6701e28a58424361d2bbcd27abcd91308ee2b5abde611304b0c2caf3cd807c8aaf3665569a565664b12c53e17aca73703ece809b9f26487d9f9a3778

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2009_XAudio_x64.inf

Filesize
923B

MD5
8d2a8bbe89cd936282ff828c10ae57ad

SHA1
acdedc9919abeead28ef07da56ea33f88c45c3a7

SHA256
4a554d09934581a87a4cc98749b525b6794947b64b8414d380edfd502713f9b6

SHA512
69ee567df6d9edf90a6a2a882b745597fe0720af3eaa0f23ae7241e7519aee5af435566bb1e0cd8b2f6bf6956b21f73d7af9d8e9511afe48a54f68f440aea2c1

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2009_XAudio_x86.inf

Filesize
1KB

MD5
ce1394e17492dac92e0257482272617c

SHA1
f1babf395b608a9966cb5d89d85d131ce8263576

SHA256
1b66e4d80f9843fc73b0a6097fb8ed5f3d2cfd5cfb5c328904d2c370bd87bb3e

SHA512
c5b800c6d519d147e37b459b3c667d2e05b6e344ac38be69aee40dc1e20b232c9a123f0f6ec8fb5909ba8d76fbb24a626ffb2f76b08bb3d3984d6ad6541d6a9c

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2009_d3dx10_41_x64.inf

Filesize
815B

MD5
d9bc0224ff859db21a9f684ff138cbae

SHA1
dd4f2ecdc2a7801588166d92d6e6aaf769bb3627

SHA256
53dc284b87f5787804823977d2fbb528e393829367db5d2ac5dd79c581a27616

SHA512
29d5c1e3b54e79e322a966d954935a31aa7108aa31f04e711e36efbdabdbbd3282ff56df9d640fe48f8707d55a7af435c83b7f281177d4d5bf01364786596ff2

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2009_d3dx10_41_x86.inf

Filesize
1KB

MD5
6f64b88a71edf6070f48277cc7e22125

SHA1
1c77aace8a83ecb9a388bdee2aaf38e78af08ac5

SHA256
0170a4b551b58d92a753e86793bf3af762fe3f8d781512f710a4d661aec8d626

SHA512
4349bed85d5c42f921005ad6915571b680cbf178dc1c9fc8f218dbda7cc34b76647edfa324d3c529dfba18da800bc010623a6ee8b34a5ede0a447d1e7dc93827

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2009_d3dx9_41_x64.inf

Filesize
812B

MD5
d4a1295d35748a262f28c2d3ed7a116f

SHA1
f6794d7a852b3f56e93fcded600077220ebfef74

SHA256
12fe918aeb224a9bd4d2a8142f97c95d58a9a69e591e7e4f95014c155bb03519

SHA512
79a2c575482ebeb4157971c07df42c76b42fca1b00e213f3f311935977bc27c86ecee6b387d93e9dadee06bdbcd6d4edbd72ca0a66925eaee547f1bd195e7f02

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Mar2009_d3dx9_41_x86.inf

Filesize
1KB

MD5
b37a5ff044eb65521a290c79ba1a3e00

SHA1
ed505464894bd3e52654834487f3821ae117edfe

SHA256
bd29711cc2ecd924990167ffa95f48842e24aeed3acef1023717040240b4bbb6

SHA512
eae4408cfa7f9c39b101489688cc570a184b8a57f3d20d3b0452a581fb80c4f485dc2f512a39669a92a5bde81fbf474e1585f566ff482e87610780c23126c21e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Nov2008_X3DAudio_x64.inf

Filesize
815B

MD5
fe8f918218c40fcc007bf16e9cf0b76f

SHA1
2b66a5a714bc7a0ebdccb0029e179bb3f32009e5

SHA256
d04d052fa3065cdf00e96bcdd7dabf3583ef10b6d80fd67cb03c32f09f2e602d

SHA512
9845d8d2c0c0c618594e692abb382e4244d95f5a06c48d7ae694dd09ada670ff23bab07fbfd09310f60f6684267ed0709a1d146da6fbbecef4790b9373840b2b

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Nov2008_X3DAudio_x86.inf

Filesize
1KB

MD5
e8adbd1e68258d5657a34ea722f3bd32

SHA1
ae4e88d17663889e841992436b524a35506ee534

SHA256
d0361ffe046b7a7a374a4938d419e4121365892e4f2138899f670619ab34ac6a

SHA512
62b132cbde7afebaf20a437b810ea42b7c782eff4fa1f83e2e586b2fd9303829ac90c54704e28f53010a8487e04bf92b791c85fff4c949a12cdff2132c2b09de

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Nov2008_XACT_x64.inf

Filesize
920B

MD5
d28248a55a7747733c0e4356c1a15d70

SHA1
befab66a5faf1889c6eb2208698874b00024b78c

SHA256
2d8a68e726728e4f4be05e35fca812b855046ce4bf697f0dea14094dbd7e1d79

SHA512
f7b89d96e287ddf8200462c4eb0415f2fec81b7a69e5fd4bd5bd33cfc805287d287dc403060b01639cdb67b14ebe65e42f75c3a1fabbcaf8692d315cd5bf45a7

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Nov2008_XACT_x86.inf

Filesize
1KB

MD5
87c8d16c6db20854f9610bd5be6e5ae5

SHA1
c17d78456637cc2a67b35d48f9cb3c730526425a

SHA256
31680e7a90d24eda04c910e1f3e6c02774cfc5c36ae08e7ac043665264702f83

SHA512
061d80816e2e5a7a2df68cd91a95e5f17aae8610a18b254abb7d5929826b14da5755eb01912eb369d1fb5725f2a4c144ce92e0d08b61799903d83fc91f35413e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Nov2008_XAudio_x64.inf

Filesize
923B

MD5
318d70544da7620126540b0712200e7b

SHA1
707c4a04f02e10b08a16528b0da8b284cfa315c9

SHA256
ed20b160dd26a5ed3c220a1fd9b5fc880b3280ebf56c2f73e76b6d4da5ef82bd

SHA512
4acbf6b35043ffe9c740e3e48fd9320e10f5dbe317dd89dcb97b68495b60cc2cb2cd98e57fad030ed053636b710d344b96667b69bec4b7727ba2508f35f23aeb

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Nov2008_XAudio_x86.inf

Filesize
1KB

MD5
052b3294a9345385406ac2056e724804

SHA1
79372406f5cf40deefd8ada18ba238e80360ac70

SHA256
950b5aef596fc5048732f6cf263dfca5bcc25df7dc17df91efcbc3551751a3b3

SHA512
9b0cff2968acd2552609169a138d40fcc25ff2c35b70ba61cabf769f4e5b54774f32392508867b6ed9198b3da5a858b3a7079d7c4a4ddb31f63e4d4985efd2bd

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Nov2008_d3dx10_40_x64.inf

Filesize
815B

MD5
f0769f57bd08036d669104f9bc942228

SHA1
18fd51cbdb46f1ffd47103dc026f1cabf4e4868c

SHA256
7f902d9ce6f6d71be1d16997ffc9661be2540522c73cc185516415a52dced2a5

SHA512
427acfacf52759a1ebd749022c375767fc283a625b6773e06f8965926e0b96a969a27a440bd661015b56eeffa6decce7322e43974172966520c9ea5f6164914e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Nov2008_d3dx10_40_x86.inf

Filesize
1KB

MD5
7a3a4c3b7c9c979261ab1fe477809731

SHA1
545004e59315dea0bcee6bde61bde3c45f79d107

SHA256
a4eed39cf36adccac4317e5822b30aa37ac5b001bcf4a24f7b5ccac6b8b71e9d

SHA512
556cf8ff26de695e39aa42fbbfe0bb986fca9ecdc08209c28404aa1b285cba8bc4ba62659fd0d929d138c781446fdcf2a30c0e1aa1487f6f1d75c9f15145c7bd

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Nov2008_d3dx9_40_x64.inf

Filesize
812B

MD5
4f4a9d3074a4ce8fa141a17b0c2e97c5

SHA1
e77b4e76ef70fb08befd69a03b9f5dcf02c81428

SHA256
d071b30f56763506da0c939b8d35b0540bef3ef0d51a5cfbc45816ca91f891a3

SHA512
7b961d3b9ed247e75047a5bac6d65ed741fb3c210fadfb23d4b77653af7001fd557fecbc2bfacac00188894374ec7ef3b0a5c1b1f6ddb0c9ad3ee3dcd1f32027

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\Nov2008_d3dx9_40_x86.inf

Filesize
1KB

MD5
d9f6cb1edf9f92a045f4b2b8ec17cdb9

SHA1
fb362c8de21847523211fa512cdbf73e5b49aa60

SHA256
955637638635025f01f82febab4a4977252a765439d90ce940fba752723b9db6

SHA512
e22fa0520dd3f905b5170e3ede4d9b9e40b0522c9b39308d150c01e5bc381949d70ce04818efa9eb2a08bcc3b26f2179db9a5aa1a5d14d757ee2dd2c5c3cfae5

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\X3DAudio1_3.dll

Filesize
25KB

MD5
c593fd0a96ee4b6390b653c4c641313f

SHA1
60d71ca2eed9ff8afa5561cf1dccca03607134b0

SHA256
74ec3e6b253af1b68252e62a5c08479453b3341d49c606adcf36913fe9ed9717

SHA512
1bb328d1a68dd7b7657d033bc2bcb8e2c096bc591e435b5691a4ad4f0f49cfad70d4e48af48d10eaf4ad13d479a3f4fef66b09a0852f8c61ff33937c7ea22190

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\X3DAudio1_4.dll

Filesize
25KB

MD5
e3832514bd21236067b7227f6165ef95

SHA1
bdde126bfa7e3133f33e3d3e7b4618422c61acac

SHA256
799b38139523a3b30d26e21798ee705375c61eed8ae2434fddb52fde51f4bb78

SHA512
e60bb2b8cea5864f3311dbc0ad8f7813764bd55153bc0554e2842b6973fe24a1ce9e4381fc6fb05792d97799fb247d591e15b7dc41eec2bf563bd4f7ca797d85

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\X3DAudio1_5.dll

Filesize
22KB

MD5
350fefe18b86bd4d9ab2a96d00215a49

SHA1
be4ddfa0edc3a463471fc170e9706abac0a672fc

SHA256
315944bb2a1959c8a4bd2677ed415363e1611c7351ce55319dc98fd2aac83f87

SHA512
490bdd66920e36aaba2a4d12bfe4aacbead7403b1a623bead0d9ab5f68d80f46fa530c5f7de9e747eb8acbfbec8c635aea32655dddcb6a9d8e006339e1e8857f

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\X3DAudio1_6.dll

Filesize
21KB

MD5
e763798cad2a90b6ab61854f50cd47dd

SHA1
419f2c98d2a3f419db1b1e9b5f4f7c3b9b636c1d

SHA256
574d14ab9a641c6cbadd78f2cd6c088b64b59c3646057952e63cad7d2778e1c3

SHA512
b455b0078786b7ff8362f7404095037a5332603383707a6dd493f381eae3e28135696fb4863e1915ea01c0f12ce10d021a18ab91cbab06b4d20142e0b38833fd

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\X3DAudio1_7.dll

Filesize
21KB

MD5
c811e70c8804cfff719038250a43b464

SHA1
ec48da45888ccea388da1425d5322f5ee9285282

SHA256
288c701bdedf1d45c63dd0b7d424a752f8819f90feb5088c582f76bc98970ba3

SHA512
09f2f4d412485ef69aceacc90637c90fad25874f534433811c5ed88225285559db1d981a3ab7bc3a20336e96fb43b4801b4b48a3668c64c21436ee3ea3c32f45

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\XAPOFX1_0.dll

Filesize
63KB

MD5
dd165760f1b95200a3da2d9dfdb84234

SHA1
0724300a1cbaa32e03a234cf6080a67967c335d3

SHA256
8b396d275de2550af8ada6a1ff71f0f4870b51c8407e44044c2dde7ad6b754cc

SHA512
eb130afda1481dd0e27a19330a8be8045b3172e46edcc5a0cb089e191fe415c41cfbdf3af8f084a6ff58f89cf8d7d4d0879a3bae8f93a52ffc84da2d4fec5ccc

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\XAPOFX1_1.dll

Filesize
67KB

MD5
d95eaabf5d277ef91d9ca70151209e56

SHA1
3d47ebbd6236045309d2222a696b7141c0957379

SHA256
5ab63c0f040fdf65e681eba4daa55ed83e89ea10c426dc2fc763da0fc94f3ace

SHA512
6d2e73468485fee2b4007f1fdf16381cdd6c77edbe5530f63cbf8696646b14d06100fdf54a48547f29ea5775f29226b16808a5a1bd4c0778413855f80e5b8259

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\XAPOFX1_2.dll

Filesize
69KB

MD5
295e47a75f278580f9441041eaaea3d2

SHA1
0716ca729ca3d84e9dfb4bd97c1e12466cc68625

SHA256
d1a55061bcb42f69b7cf35e2985d48e30c7a90f0bc668e90390f465b36bd0161

SHA512
a3cee1d45759fe3323fe8c3c49600856a86b61b3174c4d9c71e58a95db4848683c71605f5bd8c04bec591da02d96b79c68c1135410930ca63d17f7a929f2dc4c

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\XAPOFX1_3.dll

Filesize
67KB

MD5
c4479a4547390e3c5ef28d453abde4f5

SHA1
9b3af3d2ffcf52cc6628cb486372be2870771637

SHA256
c6956ac2ee59f71e86784138b5443de6970a1274ac161945b8a44dc1d535db84

SHA512
94a55bbff8a285d6b91ae72b70664b2c1a067890db175e20265be2d57a4b29deec52f08f0aba8ae07ed30dfcf96889ab835b971d2bf567758d3f7b881a7e5324

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\XAPOFX1_3.dll

Filesize
67KB

MD5
30686ece80545e06d78d156eb9f7d463

SHA1
b257ba4ffad8003fb7d12e9babd3cf4e88bd52f9

SHA256
b05ad9417028b9777f69422caa01ae9fd22c7bfe542bc6e7de2649e28a4ea643

SHA512
ca03bb01d8e2608517462597076bfa96f4b2595c33b2635d80e4348ac3926e17c93e5db30d7e43c30277cf8ac07f982a0c729f83a00df8965993d4f0758eca13

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\XAPOFX1_4.dll

Filesize
72KB

MD5
e4ce2af32f501a7f7dddd908704a0ee6

SHA1
9dc2976efb15b6fba08bebdeb98929b6961063a5

SHA256
0aee44b12913a95840ee6431d90518b0d72c54a27392e21ee6995e2151554a06

SHA512
ec14a58414d595a36c6b575cdae690f11481cd3f0b35fd2f4c6a6d162a6272882cfe03da865e09a34972775790529f51c80b69056a2fcb909f25b549ed2f7f01

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\XAPOFX1_5.dll

Filesize
72KB

MD5
8a4cebf34370d689e198e6673c1f2c40

SHA1
b7e3d60f62d8655a68e2faf26c0c04394c214f20

SHA256
becfdcd6b16523573cb52df87aa7d993f1b345ba903d0618c3b36535c3800197

SHA512
d612e2d8a164408ab2d6b962f1b6d3531aed8a0b1aba73291fa5155a6022d078b353512fb3f6fff97ee369918b1802a6103b31316b03db4fa3010b1bf31f35fb

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\XAudio2_0.dll

Filesize
468KB

MD5
418cdc57e55ee79c3f86c13a19b3d5e3

SHA1
cac2b8396b1c82a6f7ee2a3e3ec3d2e4c2f869fe

SHA256
e435b73193bdf651f7ae564eba05266595ac672db45e0e22dce92d0bcb3c6513

SHA512
1ba5a49d9102911d13d86ac4f0e4ecb44069c93a58e2e3225d9464755c14f8d57f230eb32049c2747385f7cbaa9c0da0f6001f27b685eebfcd94f3f5b8fa3250

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\XAudio2_1.dll

Filesize
495KB

MD5
e34ff0115b1ee3b4e03d22ae9840ee03

SHA1
746e6e84ff7f630643ff9381b9dff1f40a49ca16

SHA256
32a7c6a4edef46f025a4a5c64b892e29baaae948e86d9ed49e82014eec1441de

SHA512
7448bb3ebb8815e13e14514c8580dfb7f6de1a96c90f6611f6766dfb48ae7bc4a06efdc493060c054f222e7d9b308e062e1cabb19a60f50ff9e20f06905df58d

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\XAudio2_2.dll

Filesize
497KB

MD5
50f4a0d5e6a0bafefa78f353533b8e06

SHA1
d370434eea3a557ed77b2363dfac720a5ed98666

SHA256
9c7897b4ee1bcd190b1c0b7b77e64ee731d234764683a1e2286af70d86b62753

SHA512
7686b893996b76a25ca7da971ca3a10400dcc682a05e8317a9d159a9317537de0bc20dfdef643e85e6ee548d7893138497fc156f77534124a8eb3e3ce47f0cb0

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\XAudio2_3.dll

Filesize
502KB

MD5
47ed15dc87ae334c13c4dacd1be2cced

SHA1
54f94839c4e4d798a1f4f1fb6ee240957a738cb0

SHA256
04dec9d7c68962e01efec0aac0ef7a3499bc4c16e8a41bd61fe6641da48d7dcc

SHA512
da0707a153172c48036d885404035829ea251b7df5a9246fc05dd164ceae9604cb0cc931b85d77151bc613cd5e7e4d0430a4fd92697c8bbc8faf5fcfd1c140c4

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\XAudio2_4.dll

Filesize
505KB

MD5
e684c5fa18adf9ea14737757413bf727

SHA1
1dd454144e8c0f3aaf24db0b77f03737914d9a72

SHA256
bcde4317debd0052b1436a6fda60e1dcb1e308979498117fa0cb50061f38101c

SHA512
9686f92745a30fd9e442ff6a24dd89410aa483ccd46edbefce0fe378645292255a323e1aae146180e8a4ecd15765a996df959a302d5cdbc6dfa4c5fcb8252e4d

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\XAudio2_5.dll

Filesize
503KB

MD5
8b01fb723f3b30ab3debddbf97cfe577

SHA1
e379c3b7d0a66da06b6a381deea19bc541ee0689

SHA256
c596de2ab8394fb62538fef0b4657317f4ead50a6d798c5d066e25e334576c27

SHA512
ba8c5bf7eb657bce6e2c937e082b97bd6169d1cf3daa5800e5112d62596bdea47e5c1f23146f3f696cd68e8def4df92e3fb24a9aa8b9a08320738b66fa6dfe2e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\XAudio2_6.dll

Filesize
515KB

MD5
4976243bd70fae3d1d24e49739ab2710

SHA1
6ef27b10bcf4e697fe77c3e964b326be11e4444f

SHA256
61b57170f7c6365714396072d22cb98746718c0f44c9f0d5c62fdb1b218639c7

SHA512
af2d6aaad44bed880a1a2ee947618b142c76a5eca42d4608196b74df9108a9649059d8207e84a58b76ad43aefe9b66ffcc519f8126667177011cf4199f163e83

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\XAudio2_7.dll

Filesize
514KB

MD5
81dfddfb401d663ba7e6ad1c80364216

SHA1
c32d682767df128cd8e819cb5571ed89ab734961

SHA256
d1690b602cb317f7f1e1e13e3fc5819ad8b5b38a92d812078afb1b408ccc4b69

SHA512
7267db764f23ad67e9f171cf07ff919c70681f3bf365331ae29d979164392c6bc6723441b04b98ab99c7724274b270557e75b814fb12c421188fb164b8ca837c

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\apr2005_d3dx9_25_x64.inf

Filesize
806B

MD5
f052926f0715b88b23ad52855b34df46

SHA1
c411b1ddee73a4b317d652bc3ec159ed58efffa8

SHA256
3d97810d00ceb3e7674a2ef81427d4180f77f93f9454837c5933fbc6a1ad5c1d

SHA512
8fad81eeb503d81b96c098190b5c4155f4bfe1cf2f36fdb5834a176c7c78d11b52efb6b3ba6f3168d7a21a1fc5e53fec770d125feaecd7d1cfad9cb1106d0b94

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\apr2005_d3dx9_25_x86.inf

Filesize
1KB

MD5
bae5034d79a545ce120f2c336de0f68a

SHA1
7276af2015696d5041214fa92eff4375b3d8b183

SHA256
f484ef48e0c6e2be8207d8c8c7308dd966d52bea1fde221b927d3e49f1cab0b7

SHA512
be58875949d23732ff63a6f505b242a44811cb9603a9863d6a78a4c9193b6336b89ec9a82666865888590a7b81ad99d466a3847e7c22d0de399d476364280a22

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\apr2006_d3dx9_30_x64.inf

Filesize
806B

MD5
5d684b07779ae5b421e23167e2b9b44a

SHA1
1e3570908b810cc799f047221351cac7a3583787

SHA256
b70b8f62a2459580d22999301f1823bcb8a9bef54bd33b38e0af274a3a12e010

SHA512
6688f5a9952b36a0a83e806c9be99d9ffe9ba4982b76a9c7e8cef5f824c17ffe9e5ad9ef4e4974c6e2a9cb37e8c05584d8d83033182d1c5d00a786bd2b693e23

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\apr2006_d3dx9_30_x86.inf

Filesize
1KB

MD5
a49046c25439fa900b1d1bf826506ce3

SHA1
deb71dad1d55dc5af2f80a1c3010c0d899bec187

SHA256
373cca07c0ceffa72901441219a4457de9ff110aededae5e4818588da39cd344

SHA512
d3e04f2e7b358faaefdd683e7ede8a41c2f65b7c8072754b03b2a5de416651f92712fa7d9bc6027d7326dc5bd8a497161685c04cbb7bb36a384aeee8dd77b086

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\apr2006_mdx1_x86.inf

Filesize
2KB

MD5
2ca62bfeb43facdd1fc06f20fb20397b

SHA1
ffbb8f6a8a11f949ca180a7e73279c4b775bbbb4

SHA256
2546a1875bf868edc621a1cd0ee262151faa08762bcced0117e1304eace0c04d

SHA512
3d16b07bbfd172dfa979dfcf4384baff35538de371dfd0b266e5110772f0751f9e5274fa92b06d1f289f8aaa585ca1fe382f8469561e74e343f37e8a05f85dbb

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\apr2006_mdx1_x86_archive.inf

Filesize
1KB

MD5
b9dda5b7e6323561b289e0be4e4027e1

SHA1
510f83f8d2b50816e33df8684b35fa53dae51a47

SHA256
80d44f16d81ae8bdb1ef8f0efdf53911523280723bab4392285cbd33a0fc633c

SHA512
cfd470d44ca0d76e756f8a72e01ac7d60c498a0012b461c9b371fccdbdc6bf972ed848ad7487dadea7f16aec7f8749630b1aacc7f936e6ced30a6c798a6c139a

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\apr2006_xact_x64.inf

Filesize
908B

MD5
09c9b7346b65f5ba209934f16e711c8a

SHA1
9d6cf0fe295475c438fce214d9d24d5579f2f29e

SHA256
d9c3216ada5dd7791ca852a8ea97765f94a7b56fed27b20916b5067eb82b14d0

SHA512
26b84a457b5bd17a5deba56926af156a2144213a2b75fb015641a7817fd2307cfb439ca22ec0bb584dd21f8f9e4c7b3cc749a350b26cfcd0257f5fbda23fd9c6

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\apr2006_xact_x86.inf

Filesize
1KB

MD5
f67df97463d42bedc122fbedc37096c4

SHA1
42cde962b355cb3c6a7a7a88c8dc315f811a7494

SHA256
037db252501fd0e30303c11706d804d9eabbf319d0b4e88181ef8f297b4fef8e

SHA512
93815abbd6b6666438adb146bff476aa2728aa7475178259fea623dbfdae819bcf1accddddb7695ef23bb2913d234264ad2ec826bda6eae5d99459798b032144

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\apr2006_xinput_x64.inf

Filesize
854B

MD5
019f21ca754cc2e21d97c3a2a97d5ef6

SHA1
54d97b4018e0cd04c63f1221cd8da7a0990a2cb0

SHA256
f9d01e93e547045e1d232242c900530dfdfa54698586c7049281965e3bd01ca2

SHA512
0c0ef6a8bbc05eb81cdba8aa2c3f4a0d39f4859b6de495c79f813894253ad1ddca4851841064cadfb1901ea1f056c68560aae1e68bd12c590a143a6b7f0b16f6

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\apr2006_xinput_x86.inf

Filesize
1KB

MD5
53294b978995caafcb6a9ac8f67b8580

SHA1
c165d2c615261f135f60442ad0a6e589d681a850

SHA256
b604779115d32d439f77b33257c96f928ec4ce564189f7d0d357099c1da140c4

SHA512
a3da7e02ecfadb181ed13855b093908fca0aae2ee75e6bc4f873fe69a34cdc08f3bf504aac2ea98f9573437d2ff000e43ae8450c87036ead48e6c2b80ec523ed

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\apr2007_d3dx10_33_x64.inf

Filesize
844B

MD5
00ad98b94609033c2819745587b0eed5

SHA1
2a07dda60a97dc2b4a7cf3cfc6245e72cea0efb0

SHA256
3e61c4d723d282c36c5493d82644ea96715b7b548e50494d22b4a83d4e2b8237

SHA512
e7fea5f9186c324423c0b129dc3e8594df49dc84c61400f4635ccf688075b256d7923ca8f4483bf7b2fe43862e71aa134cf2c9545a23c622d0cc04dc7d6dac1b

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\apr2007_d3dx10_33_x86.inf

Filesize
1KB

MD5
fda5776cc944ebf6d84fb45c8a1a35f5

SHA1
f3b603dcdcfd6a310c2b0945f1a3b97276041ecf

SHA256
3286ba521fda888b1808f12955a58d7da4df7d2fdb472c7837a1e0e1a6317a06

SHA512
b051b04ce06ad21d08ace3a28d490214556f4b5be060ee05f8a4ff872d1cc72df05624021a9a0cc1efa4e63772f55cc61f11edf03537831a44ddd6ab409e83b1

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\apr2007_d3dx9_33_x64.inf

Filesize
812B

MD5
e40a6f3215c3f1397eb18b3388f95032

SHA1
4845590abf12bb5725d94d7aeb953a5686918537

SHA256
2d87efca75d8b9aeab3262841d52a7c56bad34ac6b9691f4df2d89b14c950f8d

SHA512
942f54a3984a29e1973ec096709de890fe870a9dfc84a8c5597244251cbd69f84543cc5cffe620a076d0a16dea6e393c6790553d6d9e2fea1af1c0f00a12140d

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\apr2007_d3dx9_33_x86.inf

Filesize
1KB

MD5
044cae9c30c88bda73727243f5e5206d

SHA1
de744e349cf4ea458b10657d510966d21ad08d67

SHA256
349a09a2791d697bffffc61410a536cdcf258f0d7c86dda44a297e8aec4bdf00

SHA512
18e501142004afbcd28b41bdd3a9b19e2eebc047d7858ee11a9135f19759cfd8c643ff074a51e937bbcab7162888fd95effc146be21fe63dfc300ef03ed44056

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\apr2007_xact_x64.inf

Filesize
920B

MD5
dcfa000ba60f73c2c02ab590faa1ae10

SHA1
154b9ff40cd92bfaa572b289662d0305fa2fa017

SHA256
bf6ca1165632efccb0292ae8b739ce68d78ebb95dd39b8e4c1717d78a026db10

SHA512
34f6cf1f3fbbdd79d04dd55315b0074abc21b9c26df6e2fc9d66c6d15f36ad35edea741000a84a25ea9a68a94d46f500398a27c8865a30746574741dffaadabf

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\apr2007_xact_x86.inf

Filesize
1KB

MD5
99f23af200574f24c4c5d9ee12fd2cb8

SHA1
f0e50816ed808748f9379733921c9302551cd937

SHA256
008db10780aa8fb6f20b7aa5f5d513ca77efb36c8dddfb9ad89173ecaf700af5

SHA512
5e97d157ed8ad10f9cbb9490a16141fa52b2f32e09edc7e7f5e4b2d9c9bf38bbb85706d76543ca4ffe9b54d5fbc4b763b7df0893f1e7e56ae4c8ac1a720dbaf2

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\apr2007_xinput_x64.inf

Filesize
860B

MD5
94563a3b9affb41d2bfd41a94b81e08d

SHA1
17cad981ef428e132aa1d571e0c77091e750e0dd

SHA256
0d6e1c0e961d878b319ac30d3439056883448dcf26774003b73920f3377ecac8

SHA512
53cac179d7e11c74772e7b9bd7dd94ffbc810cfc25e28326e4d0844f3f59fd10d9089b44a88358ac6dbd09fb8b456a0937778f78ecc442645764f693ccd620b8

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\apr2007_xinput_x86.inf

Filesize
1KB

MD5
e188f534500688cec2e894d3533997b4

SHA1
f073f8515b94cb23b703ab5cdb3a5cfcc10b3333

SHA256
1c798cb80e9e46ce03356ea7316e1eff5d3a88ccdd7cbfbfcdce73cded23b4e5

SHA512
332ccb25c5ed92ae48c5805a330534d985d6b41f9220af0844d407b2019396fcefea7076b409439f5ab8a9ca6819b65c07ada7bd3aa1222429966dc5a440d4f7

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\aug2005_d3dx9_27_x64.inf

Filesize
806B

MD5
7cfa60cdb7e697b40a268eb8814446e5

SHA1
e8e77082361d5a5ebf6163cf880f9700cff5741b

SHA256
0a8ffec8d7ef3a0aa005f604a045dcf80cf5b6473b4f26e30c58eee23e253fae

SHA512
77aaea559ef94d405194351b52643512a71990833dac22a331d5b78d569263db11bf969e26224ba8a362bf538782010ca074286ea605490d40c10f7d2d53d255

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\aug2005_d3dx9_27_x86.inf

Filesize
1KB

MD5
e45a175750a672cbb2553087a8c5cf8a

SHA1
70d487f99e101bf39650594c27674313181a8ff6

SHA256
d02232a6587c460c026601517178318bab2ac29c59d269c6e3d1a3a993a9a1c4

SHA512
199882ada178e41be14af82001829d009379445028d3803d2a86eef899c01600cf2aa86123311b728e888498674379a35d40ed0964c2f88da24758fe3c7093d2

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\aug2006_xact_x64.inf

Filesize
908B

MD5
d40e6c659cb7a757d8e751b050495927

SHA1
a9c515d786bc8f5c739fcf5ac1b6e15365f9e14e

SHA256
6fe310a67227203bbca3389dfe3403fa268cb424f4b525cca2d5407ed26670a5

SHA512
fb58acb95f1914da3c650168ed50fb6f75df68773daa8e8389db9c7c7c4d0e8bf93e46458fb76de676acc65132d781a7624f67289860a19e03520ecdbdb66896

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\aug2006_xact_x86.inf

Filesize
1KB

MD5
ddb0d03b1d4a6ce09da5cbc61f5525c0

SHA1
ba5e1361e394301d5b9d9a4aec68ae21f19c70a5

SHA256
34e7227e03812fce5415b0a4c3d15a9e9b259350ac9873db2a98b2ea76ae2284

SHA512
2160652a7f8adfc346e0af6f822875c34d2d13f168b9895b063925979d4fcf33a7da777ce7d43c9ef2b23186ac00378e8c2d4ee115bb2ff794e863e8b6feec5e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\aug2006_xinput_x64.inf

Filesize
854B

MD5
90d7a7386af9b951f939d869567894d1

SHA1
ef70a6efb5f7b32193bdec6c5ff13a4abeb4f00c

SHA256
35f25b9538e55172cf36729519581444e26b38a9dae5cccc4ad75dfa34ea08e7

SHA512
10920d0116aab01eb1130eb91b26bd91d4b3ff8e09a77db5b79f88c94c463389548c2b3ce494162d4b2c3fda903eae6c2d87492475c56fc901c37fc8306555ce

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\aug2006_xinput_x86.inf

Filesize
1KB

MD5
f87111f61ac57d80199cead8e63ec45a

SHA1
4a525a78a90fa87290f60f0598fe285f9f46c90a

SHA256
cc66d67daa1f4c31ff5e59c2606c3930f72204a5057c29b9d58dde37a47b1cb7

SHA512
ddb1b7259aeec662fa271f6a6d271e9d48c4b8ce4d47d452dc2ab15611421baa13cec0024e668309b7444b31fa5b24f41b032796c81a36e94d7e577d9c516712

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\aug2007_d3dx10_35_x64.inf

Filesize
815B

MD5
703b4ea6a182ee3b48026d01319579c0

SHA1
3184959599dcee4e74b251ff14dd2aac81e2ad68

SHA256
af4bdfeb4283f04e24475279931e042f17052224cf708f0c444fba2f2e221289

SHA512
a6e67befdb1d757bc08f6a726e6d79c4f51324edbd1f48730616e27079bfa60262b88b4c49cca046e3da3832e375dfc29b2ff48b7007443606da94793ef7ed84

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\aug2007_d3dx10_35_x86.inf

Filesize
1KB

MD5
741a5ce76295b86694cd7540870eeec2

SHA1
2c165af0047c98d2864379ea5fec33bb1507bbf9

SHA256
7987e2c475705bf8f049a15af946ec0cb5ccddf27c0b5c8126694421df601770

SHA512
b7d0a0bdcd060ee263860024abe5b054aeb2c8c8c7ccdff9cfa9886188d7177b1bb8799909b3c95aba181292b5bb9f9426ecab0a6a2689970afca5a1739fc4d3

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\aug2007_d3dx9_35_x64.inf

Filesize
812B

MD5
0b3f4e715a43024fd00f769e62cd8b9d

SHA1
ef6de20d95a920e3b69307737976bb243783160a

SHA256
e34ad9e49f31cb9211e0f350405c344d93fc65075e470c8fe09dd78af68f2c80

SHA512
336df101ab341c5f22d516089fd31fd9f0541a01d3ac4ab4e171b73452ba3bab3cad84af50f1e9da17c46bcfbe7a1b52284e2ef2af49c67c6d6cce2969e14ec9

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\aug2007_d3dx9_35_x86.inf

Filesize
1KB

MD5
815d75e4264b1f9c0bbcc529ee7a290a

SHA1
cc956156066c87ce1bd2b7628453f1824a426412

SHA256
c0d87c1b079b54b75b86939199ca5ee1f796ae3de9c4ed0ae074a4fa01823c73

SHA512
bdaaca529cd52df20cf1e35b45e1824fe48d09442666b18faa3e948937026b09d880a27f1d915816bc6e1d98b0b486d590f867aeaa046317b7f48d6a0f949391

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\aug2007_xact_x64.inf

Filesize
920B

MD5
a78f12b4514614db269bf55faf383875

SHA1
0425c3e3ccb15f691d6f5d30b71856138063002b

SHA256
2fcc4bdc6516418d3b4935c301e14f30e3bbd0adfd264bc34067b27b0b266b8e

SHA512
9d1cc2704541b71b246c2cc8e6e1d667cd7e691e42865aa5b0a800cf26386cf00781ae7727b7f90711e987148e98f4253e05b6d3872d3f69b0584bcf97b3fbea

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\aug2007_xact_x86.inf

Filesize
1KB

MD5
8898bbb8acc1b54b3b9b6a2f6b0e2cfb

SHA1
e5ace499d26e573544be76c8e45cc5278d15022e

SHA256
c246c38e41ed71bde4b3cce4fe337826173896a04c26f8b2a00b06bb0cec024d

SHA512
b0633c44541cdaa2d2c3174027d849ecdf5ccf2149da4a2932f59db600cafd8b959aa0382973e23fec7a76ed7555e96065a4d8aa077f50c2a14e5080673aef30

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dcompiler_33.dll

Filesize
1.1MB

MD5
fae7e1d578c42a7c3d9d61a99d178bd5

SHA1
8ac88ff2bc5f616ed284a04ddcbaeb72fb1f304a

SHA256
12e238af4b4edc1f774213709a87a91b77b2c9d2d18fe475b027872923b6fa17

SHA512
75107c64acfb6d84e1b05ba78377dc4699ba83b694b7ace474665c85f3e5843db6d06348fefed539c6c2b233775c7ef81d7bfd81937207e04e637043633cd0b9

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dcompiler_34.dll

Filesize
1.1MB

MD5
75f206c195bbaca6ef28565b1c0cd75c

SHA1
4687454c58f64f2154f0e99bf5a323f73ca1790c

SHA256
5044a5810fd931339933a8d0c56115a5a5c27d8c0d8e348977e2724a032accf0

SHA512
84c0a8fd3e4293d85e919940f6f24d88fc6fd68f39cffefc34014656fee54256ce581ba408eebf5bf9dac3da9de19f2bf8403521c55881d3877dd64a8e50120f

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dcompiler_35.dll

Filesize
1.3MB

MD5
5b441670a4f5f8bcce76741902b8af56

SHA1
b98df0c54483664ecdc92eccdcdee09d082972d8

SHA256
5a866cdf74f981e783624dafb0e72f133ad9f9b293856d7a18c7558fa357beb1

SHA512
0243deac1124425b65cfbc7d6465bfb09a4849e6c5be3645b808cd3fa487c3044c5b45e9943ee31542a7a47803c02f0b92c05c1e4bee18cf6076641e1c0794f6

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dcompiler_36.dll

Filesize
1.3MB

MD5
fb4299688a0d3a37687c015ac2b9922d

SHA1
a4898d246afbb0ed399e77fa5ff29c99caf912a0

SHA256
f15efcab1780fe7d784a3cd3798f147fa249e81b7ef9a494b85dc7fdab084734

SHA512
664b139754d587dc32820354c1333fe6a5528b07b8bbfaf27374a5da7e86a4c3e7904250976ef3cf8620fd0568c34fa75704a8b1585c382b99d4ee46518617ae

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dcsx_42.dll

Filesize
5.2MB

MD5
b337306dfb508a1bcef1974bfbb8d924

SHA1
203c32d73f99e1097bc306c9225307a18c617f4d

SHA256
e462eb3d41db54988ce3be46ced60b0073f8d939a9946cda67fb1df3c8afe0a1

SHA512
5c7a101e403aa2eab57e2972427a67ae6cd1598a35f983af784ca3a7446f7c60ad3cff7e52510f14647645a49c387020a06242663433db89e6454188b93813e0

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dcsx_43.dll

Filesize
1.8MB

MD5
83eba442f07aab8d6375d2eec945c46c

SHA1
c29c20da6bb30be7d9dda40241ca48f069123bd9

SHA256
b46a44b6fce8f141c9e02798645db2ee0da5c69ea71195e29f83a91a355fa2ca

SHA512
288906c8aa8eb4d62440fe84deaa25e7f362dc3644dafc1227e45a71f6d915acf885314531db4757a9bf2e6cb12eaf43b54e9ff0f6a7e3239cabb697b07c25ea

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx10.dll

Filesize
429KB

MD5
6f34f7405807dcbf0b9bf6811c94c6d9

SHA1
2de04a49825acf76a6a7aa02108337142d30b6ff

SHA256
fd2caa28493ea76021b93641958238b7a933f4f6db1a2070be03cc81d87d8307

SHA512
df623daace6702d25365697b62a4ab7d03d944306521022c6e65e94cf1970b5057da811f10e675c952d93a37abd1b862b8ce8648429780aeb99a4d55fda6aaad

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx10_33.dll

Filesize
433KB

MD5
37a8171accf46a9c196054066c28827f

SHA1
886264510372602c2ee0193c5a185d719a61316a

SHA256
b04e2b089656eae01a0071359f9d7fb040dea804c1b9d2379431864174259c2d

SHA512
713b843a35dcfc32caa67c52ce0a32af6f54dfc4c11615d32613017aeeb257fb3f9168443a4288c71209e5d40f2e1b281febcbae6da076d2b57cf01aa3cd78b2

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx10_34.dll

Filesize
433KB

MD5
5aa9987f2e62b56d7661b6901901f927

SHA1
2cd4e3e70c3b37da134ecfeeedd377d1726d9759

SHA256
330e120d745e1132252df81800362a7ae0b61a9060afc800165ba8a1d55d3fb3

SHA512
af9e39f368b47b1500e5d68a6f234361fdfc29ea31c32f614c5887f124d6097be0b2d8f37287d0cd0b094d3a12e3f5881ea822542a1c85f10566604fd6228988

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx10_35.dll

Filesize
434KB

MD5
f3764552e45880dc49b82f38699aa87c

SHA1
25e347799bb3f36bdee30aa78cd9e59c7faa5add

SHA256
db775655fd923e29509402556f86002dd9aea062cdcdba7073e1057a67b5ce50

SHA512
7e52bbfb4f309b9f5a9632efd3dc28a0509b7d5edf471267f7e794ce8479dd8cefcb29535327a7384bcc25b5331ff87c223fb70fbb5da22fea3c919ba4c5444a

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx10_36.dll

Filesize
434KB

MD5
d9158e78a368b08d9133043eb3058c12

SHA1
d71d6f103bf7433f442f55c355dc74fd4b8a736c

SHA256
aee0248f18dfef8194451a22c69adda1cca38c03ae9aa776114da9d8851d4c38

SHA512
8bcf2da86f708ae84141089f80131244d957e64c6fed0fc39dc688201659cffa7005bfd4cbbb315ee0a60c61e38ead3b4e4fcb3d2f0ecd0386a6fbe486d82bd9

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx10_37.dll

Filesize
452KB

MD5
4a43e9a2b17e4cafa9cb5fec0b5b686b

SHA1
9e28d3d197958e65ab8dcaac91fa55cd1991c3f5

SHA256
61aaf973712f848b24c3e769e3252248ece96db63f206de0ca7ff43d9ed87a51

SHA512
8411bbd130427b690332d222233465bf79426670f565ac3b01a71929dadcfdd18002c54d60981dc1f202e6625f99ab73451805d64518fad9b5a9793407df2d71

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx10_38.dll

Filesize
457KB

MD5
a2650b27472c21cdd817eeede65648e1

SHA1
c0e5f70386bb229e289a476f2a95965699ba53fd

SHA256
bf463b7ee2235f351309b5fd790f514acf2b55a4a1f90222f7479024cc28fc34

SHA512
85320f262c10d80e889258a8584648dc20283d1af0467924e8745555c94a8fc056ac609b31d36a898829ad418c9df06047ecfcc644693bd136ccb50ecbd6fe91

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx10_39.dll

Filesize
457KB

MD5
e6c2f1d8b667ddc04cb55b9f0159ef97

SHA1
9dc5c2d54397aeb56deafb63ee34b641f7030ee7

SHA256
613afdb8b44bb3bed945279229d9604a3cd553f8c2b9b091235cbab8cd00de61

SHA512
5cc39f19b6de99bad0be00fcbde9d498e23f29303c6ed4ba79c2b2bc63f259f9b617ecf6ac67beee8a71c03a0e80c29412e0159a5014a43a6168c37835bb0e00

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx10_40.dll

Filesize
441KB

MD5
91b4aad4412bb223b466f3dfb43e86da

SHA1
850aeb2b3ca15158be00faa5c161312cf4a876f0

SHA256
c05787cbf3aa4527baae96a425ceac910090ef48809990a450c33f3cda0e4767

SHA512
413f68d1ad36aa51389da62eb2fe89969e4460ab166ce44943e382fd2d1cad0953979eebb20af58dd51def3fefa1100ea9fe95c05714c36d5322e281cea1a1a2

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx10_41.dll

Filesize
442KB

MD5
1aa571774936717ee776dbed51e9edf4

SHA1
98eac7257ab3350504c0a70342b6b24658411f55

SHA256
9f4c15e1f68795727eded4737acc5a1aa85f896cd9e6924fddc9128b48f1bbd6

SHA512
bb47d95d594b249608e323c8ff383c0655a56e9192e1a2f3157e9c18dc7b9baabcf8e6b09d30fef570e0718edf673c56a23df5b5d5c6ec3242ad3d887669127d

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx10_42.dll

Filesize
442KB

MD5
501ac862517c5445742bee8a2b88414e

SHA1
49f3f2df66d357aa84a5e7a0eb368ea595b7d95a

SHA256
46429c4affe041b08a7acfda0e9162ba42de966acb2cbcaf09ef976232073b51

SHA512
08dc13d5ad0a0d2aaca9d3dbfb53304216111da73bf48810df2982650d580757c10c8b9bf80ae5191e06ebaa44b2bf9c244ae141308748c3e7fb9ef6088900ad

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx10_43.dll

Filesize
459KB

MD5
20c835843fcec4dedfcd7bffa3b91641

SHA1
5dd1d5b42a0b58d708d112694394a9a23691c283

SHA256
56fcd13650fd1f075743154e8c48465dd68a236ab8960667d75373139d2631bf

SHA512
561eb2bb3a7e562bab0de6372e824f65b310d96d840cdaa3c391969018af6afba225665d07139fc938dcff03f4f8dae7f19de61c9a0eae7c658a32800dc9d123

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx11_42.dll

Filesize
229KB

MD5
d09ac80a4b5312239852836c84df3392

SHA1
ba838d90a1e74d6b9a57abfc9729dd3b2e7fb192

SHA256
8c8fa8dce19e2f43e82cecd73a268e831a5ce0a16023845f7fa7fcb597772e85

SHA512
69232a47c80f01433716f3a9202af25e1b9a298a2b7b7d23b959e59d9c4ebf329cbe9a9a5bde41c06e978fda062225447114f9ae736920e7bbce8587a9390613

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx11_43.dll

Filesize
242KB

MD5
8e0bb968ff41d80e5f2c747c04db79ae

SHA1
69b332d78020177a9b3f60cb672ec47578003c0d

SHA256
492e960cb3ccfc8c25fc83f7c464ba77c86a20411347a1a9b3e5d3e8c9180a8d

SHA512
7d71cb5411f239696e77fe57a272c675fe15d32456ce7befb0c2cf3fc567dce5d38a45f4b004577e3dec283904f42ae17a290105d8ab8ef6b70bad4e15c9d506

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_24.dll

Filesize
2.1MB

MD5
bc831661963763ac4d504c5cabb1fdd9

SHA1
51b323ea377f9dcd52946f5fe77ceb5673d1592c

SHA256
94ec67763f67932dd4273ef5cc12889a5cef090ffea3ee78a80c7b530272b1b5

SHA512
fe97241d5d9ce298f62ae3295eb9f4091430c8c2c53e967b76e0aed76c3579f8bb07338a0de48e4547c63ab381b3b3d0989a183447b8e47496f35493541295e3

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_25.dll

Filesize
2.2MB

MD5
5b48fe9d6686f0d54b26a005ace24d1d

SHA1
1c395f6d2aa729a607e69dca73f8205cefd26aa4

SHA256
4c54df27ce84d21b2924e64ff79b13e7876ce85d8e0c9c1d0abd8da73888187a

SHA512
6a4fa549578097ba36495ec210365c27d165065820f0fdad20864a3139949e72da00f9b7c614d07d8950307e596b693ed7a291a5c69cc0f9ba30c5f74d6332f1

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_26.dll

Filesize
2.2MB

MD5
523ab607eef81cc4d909e7febd8a788e

SHA1
2fbf1444daab3312da6b34509763656a28252134

SHA256
8ea96fe01c3c86a36fcb3795ae03eb12034003e335ef475571efaeda17c5bc78

SHA512
791f520533f58cbccded4e7c1f64fc14d20942efe57f32a5ee75eca4107543718eb35ecaf52e6eb3d9112867141271b8c097766fcc3562f016bb612bf840528a

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_27.dll

Filesize
2.2MB

MD5
852edc778a7a50077694f84d8e601234

SHA1
14705b638e1af81ddda5dc52f68c61ebfce5e9e3

SHA256
a70d571cd675c97c9eeb4a234dba1d667ffb54ec3bb14defb36b3e2f605ae257

SHA512
51c4031d98bfe3251a81ea9f4434ce38f077645a40d0ca413e31b6951c384a1635cb040c24ccf1baeef3d5a47d0d18d8b47fef3bcb28570d6e936fcea6f912c2

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_28.dll

Filesize
2.2MB

MD5
be19b603dfbaa829ee5b7749b3ba97db

SHA1
3d42825b3e7fe5744f67ef145ed47bb524496305

SHA256
f3e391b5f1c1f9637cabf2b812b6f5d65e4776c89d779f506f6b643cc563176d

SHA512
095e8357911c1a06000f5df291bc3cbd80aa3a9672f485fd1f2b9bdb1172d1c7235449485948bee26fcec630d6b80fc927454f9b32cb31c823494c780e0e3df6

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_29.dll

Filesize
2.2MB

MD5
99f4fc172a5ace36cf00aa7038d23f2c

SHA1
893e05e369c2388daec359ec550fee5b9122ed40

SHA256
c5e21c18f8c79bc517da59e3192c39ea73bdcaf85867628187f6b3cca07dd21f

SHA512
a4b86d84f99c3d0c0825e3581878aaa25207765bcfbf31cb07cd6bf69a9cbbe1c3068719b212e38f741e06a89b9bc6d217077a0dec7f9efb1be75fc3c214dd52

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_30.dll

Filesize
2.3MB

MD5
e415862612e65f10d7d888443ecd7594

SHA1
aa8440ec3b5bac6594fd58d97c10c2ab7d419b2d

SHA256
5edeed79f2359527a55b8189cfa8b9b121cd608d44eead905a0f3436938ad532

SHA512
f5de2f9e045c3d579d98b25fbbb7b90aa9ddcada0c6bc4e103e5257394f3cbb7c968d89db61e15b10605561cefdd63456912aa428af5a62cb769ac8c4e5eecba

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_31.dll

Filesize
2.3MB

MD5
797e24743937d67d69f28f2cf5052ee8

SHA1
7d39afbf94675487a9ff7e41d2dbb8daedf7ad00

SHA256
e2065619fe6eb0034833b1dc0369deb4a6edc3110e38a1132eeafcf430c578a5

SHA512
8804d0d95688a932c7bf7e1a023179de8df3a5436e356b36d803cb9781f3a378adb9fe69d03b28362755b808cbeb2cc718ab920672270de0b954996996328f5e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_32.dll

Filesize
3.3MB

MD5
26af232140c88b42d92a88f2198edf6a

SHA1
b62aed3f71d8963227e5021c2222192873ce753b

SHA256
e96693794daa05a75a83c11df2e7b42f2de61567c6ad0b69e353b50f6c88119f

SHA512
54a6a235af4dc3f3c693fba5ac2d487d96c9d7a2bb7deeab35d5a252e723e597226ec84e953625c8808546f91fbcfc42add85076846a63925fd9eabc09dbf935

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_33.dll

Filesize
3.3MB

MD5
cdb1cd22baff21f48606b3c1a18b000b

SHA1
9315b5db975a34dbebdb4dcae652ba1db01c482c

SHA256
c6b7b2ad7742dde5dd8d1a35fdc1c185e586e551ad9c74d3fb21759cd8ca4da8

SHA512
c5fb24de8f1ee6fc1ed6e74580b5d22599ea4eb6c3589645fff0b15dc8dca051c4917e60fbc00ca86542dd63a8f5e40da92ea77e24826c0c6bdba9b58c36d4db

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_34.dll

Filesize
3.3MB

MD5
1ca939918ed1b930059b3a882de6f648

SHA1
0c388397620ce0edbb362bb3ab2d4a9f31a56b6d

SHA256
b6f77f06518d35345fb61172b6a13159125ed60c469d28b1a2e07970e9ddf81d

SHA512
d1e09da8551e588b8d5d5837a79da9ae4ddd6a372457d3c341e68e3da07c0c1e84decadea9534cc87ef9ef38c094171004f836e6f74831fd6531ce72aaefeb5e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_35.dll

Filesize
3.6MB

MD5
3ef18b78d17c962f2b71ac1cb7757684

SHA1
2380329c17c7a530075c7572d17592bb3a00c4c2

SHA256
2198022938156b790e9cfb0f7997494b66a11a1ad49b395be58251d635b66b26

SHA512
93e9bff79630ee5897bfb3bc496f778aba160312edcff9f0b8cdb8e8af3d5c7b73a8d95d54ab26cc638a2ff7cfa27153629f9fa8a4a687ae3c83e1178471e720

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_36.dll

Filesize
3.6MB

MD5
44bfec5c9c82a2ee9871d88fd3b9a0e2

SHA1
e2aeb78330d0815cffedfe88438a71024577d4b6

SHA256
c12f0ab0338eb5031d3d04beaf7208ac848f7e037d21ff963d2af90221cbe935

SHA512
35c42ce3afeeb3710d3d96d2cf9ffa2828fe17f8d749fd149e3797e87e154508c77f637de0e424d38bb3fa56bca959cf9da7787323950ec8261b144c09ae306d

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_37.dll

Filesize
3.6MB

MD5
ac3c517fb0fbbe45fe44007bcd3625a7

SHA1
eabe1601d0132882c7226a4ed04fbbdd5e8f0db0

SHA256
c2ccb84c672a9d8966e82a28005a4269886ee304972ac3590c0b8a9c1622a3d8

SHA512
89b44142355c494f2a21276d0629f3536adc0dd7cec101a1f2816031afcc8a96f94663ad46744c772d6b63d172ea62e9b957d6292e4a6184f958576f62b05836

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_38.dll

Filesize
3.7MB

MD5
8f3eb548ac4ed90252394f60c77e3196

SHA1
e40bb2e3c99c55f2df9def2765bb014e01389622

SHA256
743e77a228e7d75442263ad70051e44534f7972c6326fd34b505a9c2c245894b

SHA512
bad441c93d37269a9d49edc39ded933e43baf2a563c425ea2db222a9859ecd1f076c2255c077a5afd07922b50adfda2bbb731ff6f292623b353a3dfbde4ce4e5

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_39.dll

Filesize
3.7MB

MD5
8cb3defb8887c4f0846db1fc1304d6d2

SHA1
5fbe058848db16117ce7cfdabea1f178ba229a6b

SHA256
5d29988cad858f754ecc62c3d30de555f82cc21b5b26c448b890295e9b7bee82

SHA512
4cb675b179d05ead18d2e42329e0d10cd1d520cf9c8c0681b89aca79ac9c814e82941b0086135bd57721b66b55b6feae00bd29af804f59a486e935fda413fc43

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_40.dll

Filesize
4.2MB

MD5
eea5e428ce63804f9b12d21c97b5968f

SHA1
77a7f48f4bdb7e66ed5e524bb8879e3da0d6cd1d

SHA256
16fd909aeb68d0d1aca8529dc7f78880b97d6649d70ce8d03a2c858bc28e216b

SHA512
545518dabd82441ddfc17fe1c1cbd7d14603bb58130de1307a31f73b93ca42afdf25dfcf481f0383c4e039edfe4a88ae7b84b06a2850c29bbc3550114e499c73

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_41.dll

Filesize
4.0MB

MD5
3fa06cf5079b84155d18b05c08f7131b

SHA1
fafe52876151a08f39dbb6b4aa137dd85558ba5f

SHA256
6ac4df203af419d3f3b7d9a99e14a3490ea3ad307c474bfe36baea642b1421f6

SHA512
24d29c3ffb6532da860fef4dd93e61f7532cea3af94928495a3af0231e7dff6db5cad25713451a2e722c076462b94818cd6969a1c7d8905585b0f64e12174d1e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_42.dll

Filesize
1.8MB

MD5
c6a44fc3cf2f5801561804272217b14d

SHA1
a173e7007e0f522d47eb97068df0ca43563b22bc

SHA256
f8b9cfab7fffbc8f98e41aa439d72921dc180634a1febca2a9d41a0df35d3472

SHA512
2371844bc86cdce2d1933625b921b982c4d1b84a39698b51180b09a2d45732407d721fa01d294ca92a88777607a1bb00283f6bcdd4231137a388216d0b09dd5a

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\d3dx9_43.dll

Filesize
1.9MB

MD5
86e39e9161c3d930d93822f1563c280d

SHA1
f5944df4142983714a6d9955e6e393d9876c1e11

SHA256
0b28546be22c71834501f7d7185ede5d79742457331c7ee09efc14490dd64f5f

SHA512
0a3e311c4fd5c2194a8807469e47156af35502e10aeb8a3f64a01ff802cd8669c7e668cc87b593b182fd830a126d002b5d5d7b6c77991158bffdb0b5b997f6b3

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\dec2005_d3dx9_28_x64.inf

Filesize
806B

MD5
9a3ccc90b71d554e968eca0a812bf0b3

SHA1
0ed1ca28d7f6c8b4e017cd48b8504340cb4d736e

SHA256
510b6d528be3f2997b8bd811486dc3c13eb27a9de22d1bf030e6db0e632cca4d

SHA512
0f10d2ec9f72651927599b69dc3f4e037febfb9c2a18e02eaa49962903c1cf77b63ae6335c06effdfac26b87418ef2c7a2d53dd799a28d275632d8255ffa8be4

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\dec2005_d3dx9_28_x86.inf

Filesize
1KB

MD5
e0b6120a048295ebbc629a9f8fbe53ad

SHA1
3d9cbcbdafc1f9058af74896a5859591e164555c

SHA256
d4d03c4ab3c8486d6331548e967ee17e011fdac90f63c0a9a44a744815a7da7a

SHA512
66c0b9501bb08d41bb708d0a724fe6ac27abaf735ca224074e594cde932ad1f9eb9db5defba8a8a71a0a12904f20324ee4d129a1ac9fcf816fe74d648379908c

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\dec2006_d3dx10_00_x64.inf

Filesize
426B

MD5
eec826f7141bedeeef38c5a3528b5034

SHA1
529081aedecb7b9fbc7d9707eeb6415f98bc128e

SHA256
2a43ac72ab9a6f4771c02b6e10884921b733b86dbd7ebdfc5502d011cd5c8d05

SHA512
62cbe09326cd04c891faa124c65554fd631382a2e078c70ef72a1a07d57239b3ce599b57be3fccc755075174df1d63ac3597dfb3aef9b4ea34ba4597d804d2c4

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\dec2006_d3dx10_00_x86.inf

Filesize
673B

MD5
1b702c5bdf738a8abf4a3108097a6b7c

SHA1
c1d9c9d5e07117f273064bec36ac92b5ed624d38

SHA256
33291a47388edecc059f1825c1979142d7a9cd4a850716f9dce687deba1fa750

SHA512
498483dc823e76316e977dcaf7fbc557c3e60c67129a678701d5168105edc97f97479107330d5eb3989dc179273cc9b74d055827f036f2f3551a0a3d398f04f4

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\dec2006_d3dx9_32_x64.inf

Filesize
806B

MD5
39929631df326b944470256c4f9cbbf3

SHA1
932de27abf59c889c02ed747f0ac04f5e494492a

SHA256
ff00313af4a90f426492d72969f5efc6c56a17f2dd91f20cb5c0a38d9f1f2b6b

SHA512
8dd2755a2b2fb90c6880cbbde65d127f55d12df2bab4560ddf86d6793b2cd4733929d97efef5fd8eeb417731a571888c893188df0361ee57eb4437fab331cb13

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\dec2006_d3dx9_32_x86.inf

Filesize
1KB

MD5
c28f4fd1644e2a20b1c897438e197e1a

SHA1
5178534444ed7dec8c63f02defe7bdb864c47123

SHA256
ef09d783bf5cff2cfba99946e5e71fda577b196a49c88bed1c51b5fd29cecf94

SHA512
7cf93260efb1d794a17ba25b1fa02ba03b0ceeed8131d274b805155072a9a2b92a899471a8b23add8bf46c6a5a3cda63499043eaa754001bb43cafd882c8e708

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\dec2006_xact_x64.inf

Filesize
908B

MD5
ca414f7196d9b2a7a9d4057ca0714fac

SHA1
7eae4a5bfcd42915adeff5377036ecb4bd656999

SHA256
f2f2040b8d13705f00d8e20a53f22093aa0f8c8d6aa6224992ba727ace7b75f6

SHA512
1efb725a49a8ea7125074436bfe988af360b1ac22629d34a754cabaf3c151855d08e826a0e244cdf9b624b531de14d23f32c1c16c82f6832c8604cbf52882e11

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\dec2006_xact_x86.inf

Filesize
1KB

MD5
211700aaa53bda6894be85df3dbdc792

SHA1
4874325e984b4f0d884cc732da474b3bb59d3848

SHA256
4c0a40094228a51f567bec65c2cdf289d268812c1af579e3c6b76cd3adb77e12

SHA512
8f51d965cd1ee20cac11256afc5e422d94d43435729d653b25c5347e108fa50e59c3bba18fbd7fe4e2a1a6bd54da1622b80e029a5914e973f3faf5884a262baa

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\dxdllreg_x86.inf

Filesize
724B

MD5
8272579b6d88f2ee435aeea19ec7603d

SHA1
6d141721b4b3a50612b4068670d9d10c1a08b4ac

SHA256
54e098294ef0ad3b14b9c77642838b5992fe4573099d8397a1ef566d9e36da40

SHA512
9f1311803db1607e079b037f49d8643daa43b59ce6eafb173b18d5a40239a5515091c92b244ffe9cfef2da20530fb15deb6cf5937633b434c3262e765d5a3b21

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\dxupdate.dll

Filesize
173KB

MD5
7ed554b08e5b69578f9de012822c39c9

SHA1
036d04513e134786b4758def5aff83d19bf50c6e

SHA256
fb4f297e295c802b1377c6684734b7249d55743dfb7c14807bef59a1b5db63a2

SHA512
7af5f9c4a3ad5c120bcdd681b958808ada4d885d21aeb4a009a36a674ad3ece9b51837212a982db6142a6b5580e5b68d46971b802456701391ce40785ae6ebd9

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\dxupdate.inf

Filesize
12KB

MD5
e6a74342f328afa559d5b0544e113571

SHA1
a08b053dfd061391942d359c70f9dd406a968b7d

SHA256
93f5589499ee4ee2812d73c0d8feacbbcfe8c47b6d98572486bc0eff3c5906ca

SHA512
1e35e5bdff1d551da6c1220a1a228c657a56a70dedf5be2d9273fc540f9c9f0bb73469595309ea1ff561be7480ee92d16f7acbbd597136f4fc5f9b8b65ecdfad

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\feb2006_d3dx9_29_x64.inf

Filesize
806B

MD5
0d951a2eda3638d4c976a5ffc1a9f8db

SHA1
fca89fa6bc6d4c25758b7baaff9136c3d73140ff

SHA256
ef36ece1a6bd8af3b0b9247b081d28ed511b7e18c43eb3aff364c9ce8d3a06c3

SHA512
89e960fbf9421a208476f7f65acf8047d231f3d6fd87fb31b01185ce88f5ebb1fa7513224124889082f41f1dcd579cc8bbb638f1af73081b4630fb07934dbb80

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\feb2006_d3dx9_29_x86.inf

Filesize
1KB

MD5
f4c258b663ebf54c55d7d09b05b26ff6

SHA1
85af1252cf3d9ae7afcf8d576cdc17910203ad03

SHA256
f12f4bd86d5cd748b0fcf7106e9dff333c27c0886541339ba1f40c443bdc61cd

SHA512
cbd491fd8e847a4659758bfe0f5a4b56c97e539e3b3aa7ca601c329d858c882cceefb9ee8341d794235b7c2403a090f45a0ba8f2f44de3e3b1685d027d8bd19f

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\feb2006_xact_x64.inf

Filesize
890B

MD5
7d46669082d530935e79c74c4fd83bf2

SHA1
194a05e3b019beb07da96c3bef780e6154a78b9d

SHA256
b7ca1a4942057592c5b83b4425350da41c61779dcae608112141d727091842d4

SHA512
590a9628fb90d4140d6f96238caac46f8ab23a59e3a9d94a28d1638006085efdbfad259b9633e4a56585f6cc10119d67abf3fa873a426a1946af589c17f84fa1

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\feb2006_xact_x86.inf

Filesize
1KB

MD5
9dda266ba05cd917cca889659e3b98c8

SHA1
2a2ba2ccb3c9d87c03198b9ef3b9c6e21d693055

SHA256
45146fd446fc8533dc5f97d88bee9ae220161f24797114d0bf3afc7c479ed69b

SHA512
26fa18c8058397b8b5d89baf1fb9cd689827b48781dbe40ddf884c0a3ff9cf8d8451c6c084a693e4fdf107ad181fcce35a2fcfb371548df948416b5713d8ce38

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\feb2007_xact_x64.inf

Filesize
908B

MD5
42161a1071084cb4f32b0d7d748d9b62

SHA1
e7e29605c21b7a2c370dcf979a40c50b93ceb298

SHA256
184c1684c57de07983edaaa1ae2751b263497673ee8418af023a63fa03553f53

SHA512
2aa8e864dc28ee5d0583d044e3d8a9399d8d49b9fb1c522c1c640eb7b079515ffb0bac5280a220c23e15ea4c7ad45c7f1722e05e9f9baa069f4a2670e4976358

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\feb2007_xact_x86.inf

Filesize
1KB

MD5
5f1df74b0110f56ae0b6556dd2dbc14c

SHA1
c8c7d383f5e37c06015e1304b599568999bd4e09

SHA256
64b6020f43bbab7f7c2368fcfe7224165fef555b2bef813aa13b2d9f6295d46c

SHA512
06572fbaa625c85b05f5f4eaf880083607b6d010a8d4bfdb28cfbb1021b08e533f3491080faecb24055acb897b337d83caf9306fadebc1f1353763e8908850a5

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe

Filesize
74KB

MD5
730e5493910e5693499485e352381c6a

SHA1
2871488c24d069e677868e0a590e7e74f1f19b12

SHA256
d808bb408a4bd695a9793e70b1c61637e008ac11174dbe1373481e2bdb0c9299

SHA512
62fb2a2ddfd62d48ca8a709426c07e1cda0e66df5b977c3bfdc3b191d15c3a139a5c6180ed7a66b2418a5436273d713f2af1cb21f7dc77df78e0743d6a18e176

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe

Filesize
81KB

MD5
a7ba8b723b327985ded1152113970819

SHA1
50be557a29f3d2d7300b71ab0ed4831669edd848

SHA256
8c62fe8466d9a24a0f1924de37b05d672a826454804086cddc7ed87c020e67ff

SHA512
60702f08fb621bf256b1032e572a842a141cf4219b22f98b27cb1da058b19b44cc37fb8386019463a7469961ca71f48a3347aaf1c74c3636e38d2aea3bca9967

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe

Filesize
65KB

MD5
fd1b55b856bcad2230f4338f72f9cf9f

SHA1
3d1bcaae1f2f2a759486bbf4dd543eadc7efbe91

SHA256
300ed1a4ef37c8d5f13d67a5daabd46bcdd9ad9da4fe6283f20d7d38f72caaf5

SHA512
dc73dab5f5384a01bf66197ebc9b74a24c146e8f17571c98edf1d7d1dbc33b0f4075d46150b782891397d8a4875a8cf375a111855eb689f2a8e6ed0aa3ee0091

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe

Filesize
65KB

MD5
bce73adcf5fcfac42ce15c6691275ea8

SHA1
484355fcbc55357c2f576fbdd64d33c8ec8ffa5b

SHA256
76eed293cdcdf17942acc313366b22b55ad78ee0389989438e63ab7ae145167d

SHA512
5e53f89142918eca969e005d006f0a106862877ee6e5d317ffa1b7c017730fd1d3d98e5e75f603183d0371da39c11022cf62232a2b614a9bc5e055f52d6da65e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe

Filesize
68KB

MD5
45d4dac07aa361bcd77aa815d1724a16

SHA1
3bbdf7da5d51211ae269572961b5ebf508ada28d

SHA256
34ab99536ea59ad60ba6efda3ea6d18291ef096a0bab3664248d6045805da0ec

SHA512
d940002a8e0112a3b56a909008403b447e9cbb80e38b9bbd508f40aa68224f7e5d9681e1039e747ae939e0829a25be2319b9f9d0862cebb042e4c525ccbc20be

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe

Filesize
68KB

MD5
98b1369d38333fe9143259687edfb25d

SHA1
3536573ce844dc1441b91e1124b6689b93add430

SHA256
d4e57566914f1d36f4ebfb6e164ce2170f1d5e6392189d0ad6de3ef3b0a9aad3

SHA512
3544088b8436ae6e48d22a7638d59f3c14fb914caeba17a87d1af469b82f818a1a71c5faacd52f69b5bff190b44fd91f893d07b7e05c2e9a9dd363bd75722057

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe

Filesize
68KB

MD5
ffc75edfaca60d28b6e6c1da8488f0bd

SHA1
358ae6e2680666b994e721db5fac0105a86a9c6f

SHA256
fbe2e9cf7e400537a4871218113df178f70501ffeea59a8f0f721927124d6d46

SHA512
dadf216d9e92b349179b27cf436483dd5a52bfdc1db659f3d99b6d1bcc5f1fdf3b0fa4bc8bd08f89439ca1f07f5dc66625043f8065c0cc75e8b3627e59eb8d0d

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe

Filesize
68KB

MD5
c92c92060d535cc9800b6ce231276852

SHA1
79281861482c717e61fe9bae300e0fba310485fb

SHA256
e0838d8d562ed4683bc06ecdbc46fe19dcddf711a0c7909dabf62da572035dcf

SHA512
7c8893c92c005c7c21f829912da4b9e5a843e842826d5e362a9828710486240aa109f26e38a84cfc03617f4abaeda25f0ce215b8f6a1f9a65c58ef5606814d13

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe

Filesize
73KB

MD5
edbb7730845fe5ed4717b06f84c1cb2b

SHA1
d9bc196e34d69ca0ec91a5a835b444ac3e8aea42

SHA256
de817d92db706f329d50567221c42110ae781d679ef853cc684aec779ab51ccf

SHA512
cb7c5db143087a470d7ca7f5d4200ae62513ffc27b864528d851c310d0f6f68d55b6fa45b7d3e0b81043ada5f7f6468447e9a877b6c6e06099c38690a6c07d10

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe

Filesize
74KB

MD5
6f05a242d0253e19d67978780bc06528

SHA1
ed8c623b0e462e92185d498552a11be01723861f

SHA256
ea31341129f7558d34fc2fcae9e715343aaadfc57f06a33a6da18448bd71b77d

SHA512
2bafde8afa6918956f745b34397a4f6ac479d3696a363184ea75cb9e05c5d83796527ea6cf343004544173e5370bca0258d5636e3cc5cec16701d68d82cd97f3

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe

Filesize
74KB

MD5
44442b56a318475a3e7acb055ca79d29

SHA1
9ffe16ecdacd79269344643ca160d940e88e7292

SHA256
4c8befaece0c58eb75c38e2347db04557c1bd2a4a269282c3769d6bcccf50395

SHA512
d64ab17f7e1baaeb5aafa4e7eb100257d7a29b1f5caed394b2d3b656c4c9ae56a0f9b952f60573e3ebffa090740f95b0f173eaf2642d6245eb8c2bc6c619b096

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe

Filesize
74KB

MD5
d001b26aaa9bec255c0b697732e571da

SHA1
adce71afb93cf04a86c1b9d2f80144ca35742d2a

SHA256
1707a6644d66406a9ac149b8fc959d964dce5c028ca3e1d0d5052e70f80515e2

SHA512
af39d48e90cd2cd575a8d039642985e25ead1fa51528a082d91c9bcaf9d1ec97afd0f66c0bebb53043221ef13dda69000ebbdaea87605efbe873f471e16a6f90

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\infinst.exe

Filesize
74KB

MD5
7d8f5afb77c3ada97a83f3fc253d6392

SHA1
e5424d020c6de84ccf72253834c545024161f682

SHA256
3a07c2436d3fd2473e15518a53262d4f0fb7f2a05589437cc5668f929063e782

SHA512
52f4bd961febfe6f691d7dd1e826f689319656393756e0c5c9e3d9729ad47e072071b204f63a3b37b67204fcdffd4539db08cbf190605dd9652ace51627e8845

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\jun2005_d3dx9_26_x64.inf

Filesize
806B

MD5
134624a22aefee1fad4eb11445b8d342

SHA1
3f0f65ab8be678250660ba47f33f229643c118b1

SHA256
addafcf0cfd36587c12eb2692922f0fb134874d11005a0544cc054546a493933

SHA512
24bfc2d96b3078f82ba031045271460295f3a1e6dd3c8c30d8d50c98daa9051aeca93ed8ecae8722b70083d3b0ba41735f81068e7514e81767e1e119e45ad6f3

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\jun2005_d3dx9_26_x86.inf

Filesize
1KB

MD5
62f8ec9c0d3bd54ace90cb15f5caa208

SHA1
e84f4a60c79f862aca0f917d1d30898af4036fad

SHA256
262ed4a65dd45e19f196cb2d9946326693ee31a86b51bf77116dec2727971cb6

SHA512
3de4ad76b207c2a0ecc10835cb787d61faa02e3531f6242a606ac0686cbfa156f59c30695effe5560d9a8481800b356873b7590beb8a739b33c0b1fcccea3fab

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\jun2006_xact_x64.inf

Filesize
908B

MD5
a983924d66305104b4e21a551dc66448

SHA1
23deca69eea790ae7afc30cffa55e87ac8520cdf

SHA256
fe9caa55be17684622fd7339b1b96e1f0d107dc33c065706d24a435d523c6e12

SHA512
83c2117df0fc37979ccca7d861598a8a127d135456f72597366ac65276906435ab99fa353f246f9f61634fe96f8376d38253300f177d5cedac194cc92407f3d9

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\jun2006_xact_x86.inf

Filesize
1KB

MD5
fa59f92f7d32613a12189e75eaa700dd

SHA1
f2c3947427e7eca9fd1ad53427d1dec28a5f0f55

SHA256
6bdce6f6779712e38c6d9e6e5961217e417254089f096c719f25566e952cb257

SHA512
e8dcbd918cdd7d98a94d53413088e2f75e4d1a15d4f69b6927f3cf19760d9f2fc577659fd533b2e4e2997aa29f285b0fbb35830331997549e429dbdcc7ae9853

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\jun2007_d3dx10_34_x64.inf

Filesize
815B

MD5
bf312732fe77f600a36f2a7b98a346dd

SHA1
5e9c70959111dbe60ad86258cb5bb20d0e9caa0b

SHA256
0f75b7ef71e183476ec938705024eb8a10a77d7602a336be876c7f5d17429725

SHA512
10f3d128da5180ecccda522164269e4940b69a7f55af9501de648e572ab5275f02c113be5342969c73e118fb7ec49209883c4a8d6c4648fb898289f77ce7a3d0

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\jun2007_d3dx10_34_x86.inf

Filesize
1KB

MD5
55e30750af2bf57321ad1097a512d725

SHA1
0af3c73afaae0e8a1fdabe25beeb96b32eafb9ad

SHA256
808983dfd3db7c3452589ea4e14ab4af8ef47dbad3b639f9a3c55685c9b73867

SHA512
0ad8b51a550243d3f24ec5934f2b5e53f1d8e0b87997a7cda38840b3160121f1e221e6cb09d3f5b384df74be2ed10d4dd92fb02aff98bd0ededab751ddaa7149

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\jun2007_d3dx9_34_x64.inf

Filesize
812B

MD5
d203c1993f21a870871ebb0c99de313d

SHA1
e69a5bc70fe66f89fddd81330dc148a1e788a56c

SHA256
77f3fa1756181a90d2ee63c26cddfdaba0d720c9a49121db28746cd02b3e071d

SHA512
e03c341f2d8df6e8174447d32bccb56b096073a35a3d8193860bd4628d812d1fa381bd35a55e17b4f27c5c5fffddb25223d932e995736fc608030501954d45ba

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\jun2007_d3dx9_34_x86.inf

Filesize
1KB

MD5
b1d65a13b527d75ecdc30cabf407d103

SHA1
db6df8ce6c28cb4a0275aa134c2d42a0ed957fa2

SHA256
a568b7b8a0360ad94b1ed6388eca6ca9d8770937360a426a0fdadef9a4019bba

SHA512
7d80f772b36c408c258f7db1180bc09996620634e6304761f5c10659d0885bb8d0b19bcad50a13a5d99ee92dc8e15587534d966bd32c5a8910308eab623a7f86

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\jun2007_xact_x64.inf

Filesize
920B

MD5
c8ca749e73883789faf6561a375d9b51

SHA1
fabee2ac65f1d4267da8df07cd3e4cf4eb19148f

SHA256
405d8cbe3c87b16afac2a9254497412a42de4ae2d8fb470a1234dc3260e0b90f

SHA512
56a0fd5b8f065b82f5f9b73dbcbf912045847180a6614dc48ed7b27fea3909839615aab0c8d0a122d9fca952e9591da5152b4c618e84a2d7aa409dea4fa4237f

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\jun2007_xact_x86.inf

Filesize
1KB

MD5
757a5f0cceaf39b5c7c9bd61650fd12e

SHA1
a7b3dda77f0f2334466d324eefeb3e5f6809d880

SHA256
33b980fb973394d9d8cb4645914d4cf6793bf92bd311e0431ce9cacc59fdcbc5

SHA512
f4f969b017c9233bc4a2267118fe921689b3237d28fc2b251ea3b6227e0b17dee84dfb8df6491928791891dfcd265688069b92d8a88cb9dfdbfff07b24a4dfcf

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\mdx_1.0.2904.0_x86.inf

Filesize
1KB

MD5
81700fd8d24ccd5ed83ce202dadcc625

SHA1
380473dc3560cc64fd0beca96674554d87085c28

SHA256
3bd14cf2a96544ece692e1911500f7196370a111017fb6b0e23db0f0d0f40dfa

SHA512
8ee1bd03fcd6125d22d1d35437537f594a84e67573ac72d440d45d419b88f5d3d1f5fcd8804e1a0b873714c1a71c63a488b8068f0c465e94940ea6e2db1c7860

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\microsoft.directx.diagnostics.dll

Filesize
12KB

MD5
c0843f0f45edeef233b1e581ae75e3bb

SHA1
04569c78868eaa8927ba64f93312720117152843

SHA256
8c9685959706750091b0094522cec8644de1d1c6309e7a2fe02cef130d3a2b9c

SHA512
8fc293f5c5de65893d92c54f921c84f8a3f44fc733445dda7907ee09d062371ef05c11d014ba2017fd15908b911d0185a14b89d0a311a870fa33650c3176e442

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\microsoft.directx.direct3d.dll

Filesize
462KB

MD5
7ad4d9fabd109432eed91b359ceae430

SHA1
c1dcddd86f9fc630cc0231acd7b732fd55dc5f63

SHA256
f3359d5e41b1d4fec7230579a593e40fe44f6afdfacd1e2bbe52ee06d84686fb

SHA512
bfeaba581a7aeff86bac0c184da823e4a26516a3c4f39af6b6b1bfced73117f3816c567b182f4da0df1935a6e97b6d0520cf02f518736b52fd27d37750e863fb

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\microsoft.directx.direct3dx.dll

Filesize
2.6MB

MD5
a73e7421449cca62b0561bad4c8ef23d

SHA1
cf51ca7d28fcdc79c215450fb759ffe9101b6cfe

SHA256
7986e3fbe05418fe5d8425f2f1b76b7a7b09952f3ec560b286dd744bf7178059

SHA512
63d24647ac5d0beb8f1284973927263cb6e05b4c399cda3912178114b42d541dd516c6d67a453ea997d9d0cd9126a1802678062f0951c2547e1b445ba50dfbe4

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\microsoft.directx.direct3dx.dll

Filesize
562KB

MD5
afcf5f50c632f3a5598abc28f196d77c

SHA1
294385693592f9d6320f8b0b18f45bc194d01a4d

SHA256
5e90089e69e4f7e2e42ea4a81fb62005c3710d0a4acdf207b97ed03f5641d013

SHA512
29746ffc665051e13386e452c3e41a593b6339e09a228927929be100cddb3e0e0fd3b54abe02eb7d46a3d97466ecb02bac362398b72fd8e804cbb21c8bc856d9

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\microsoft.directx.direct3dx.dll

Filesize
564KB

MD5
43c280c3b15ceb2472ab560d09629664

SHA1
e3a897d7608d03c93b5c2b8aef52703452cf6696

SHA256
bebbc40ca25ef22e9d16b0de1123e0cb0444fe7a78b4f0b4395bdfd81618698c

SHA512
5229eef9153b992684b6dcb4a32b231c63322b5e4b49ef262228c0dcca4760f97cda5d15a7fcdf77d813eb24b359101e716f72988374106ace13473f27e731c5

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\microsoft.directx.direct3dx.dll

Filesize
565KB

MD5
933085360527de1b4947289ca468184e

SHA1
d5ee5e1e3c992c7518b5ce510c627c1564131b12

SHA256
78d85f0e2cb7d7bde534222f4ebfea1c9e06d37ecd3bb7ebd59e35f00b94b11d

SHA512
2e22398d7cdcd6a46daf3dd3478d861bc4012ba1b54862311ae031ebcd3f908352157cbeea528f22ef1824f8924c3f217311feaf1804cf675eafc07a8d3962eb

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\microsoft.directx.direct3dx.xml

Filesize
1.3MB

MD5
d2ecbcc04f7e087d738df9329d47c30f

SHA1
0f2d7c485020928227b668a148b0a60d99bd6695

SHA256
7b38e6dd8c567d17d94f595c33fb234284abe884a1148025f59c8e426ec30c03

SHA512
5662bbb30d7a601efac49f0e090cf05112565ac40dd998787e40d4ee6988f985ad8513b0d5f80e17f8ec9e7784af1c50a70137c0ec22b0c72107b601503bcbeb

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\microsoft.directx.direct3dx.xml

Filesize
1.4MB

MD5
1c124cc5c3be4a5e8d6619125b1b33eb

SHA1
455365d2ff521d135b75522a4ce6382aa73b7c30

SHA256
c3cc575c93690ddf44fd71fdeaff3d61552e9d4eafbef77840e4208522d81fb7

SHA512
1e9fde35b9c4d4a123a92545f5b15b12657d4652328e8d249ca31338f80b10a9b70811a16c40e82f286ce1b192bc545d29605c2ded4b937cf69088d9aa9943dd

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\microsoft.directx.directsound.dll

Filesize
174KB

MD5
d035348ec8968861af585b7132fe4c7b

SHA1
877ffdf77b9cdc1be14135cff0b756a231401617

SHA256
2e28c8fb8b87b5ffd1e0ea27710a2e785ef4741a89e4b3c3af726ec63d15a1fa

SHA512
94358b581510c68049ac92990674a6cb495cb8ff005f7fc03696c57ba8b4cb384c5035d9332d0ea39093ba5fa5c8082143896cd2fc7ac24a192520789c707458

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\nov2007_d3dx10_36_x64.inf

Filesize
815B

MD5
60e353607750ae5e63cb8e56f443321a

SHA1
8f1b07f8cfbd66e9a7e3c15118bddd99b04d6871

SHA256
7a49ae818e199cf9f9bd831f94cb6d03a1e72a141d76546261979b30642757b7

SHA512
038aecc1264f608c6028ec2288f0d8de6c9202bb3d1e96fd247e889afa06f1ce592bc9e224f37e83f29c0984cca6c4e85ab11eb28570aafa20b076f2b2e5b6e8

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\nov2007_d3dx10_36_x86.inf

Filesize
1KB

MD5
582814cd47564fe8e3424cb2eb090501

SHA1
87a2114434564bb0a5cb4ea337577dd405f5e42d

SHA256
96f48bb810055699d37e9e27a65947483a0b4df304870e3b5448d3051b3e4926

SHA512
203d522271aacc0200bdd684934a8478b54a258f55ecca49a178ccabf418a328cd02ebd2a9656bd9dcd40c33de21d33664c5b16c1e7877de424d37b4f9b3e7a8

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\nov2007_d3dx9_36_x64.inf

Filesize
812B

MD5
345ecd585eec22fb33a62e59c2758b6d

SHA1
2d6ed63996903c32b3e7ae24d86c924b11d53e7c

SHA256
d1b544b3912e73e5984cd759096120febe6f17e41a3cf920ef82431b9b569c1d

SHA512
6d88cd48bc32a008989ec4bb71afba0afeeaa12f17833fb4072c38b237bd006f192f4e4e7a65d8aebe5d6dac1d13098eea370b03ced343a5541e0ef23e813364

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\nov2007_d3dx9_36_x86.inf

Filesize
1KB

MD5
08ffe480ee5e54fc19a2feea46adced6

SHA1
c939391c489bb321f70707183b0d3f4b5f13911b

SHA256
843764f70f56d430c0695e263c895a135a631f793213d1005fafcf9c210d1ac9

SHA512
c05aa34b860b5620c982731af15889da5571395fb35faa24d43ccbb1b42dcc756769a0b9153c28112d7347f28d4ba933d8b15fb36a3e511ac99eb148f848ed99

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\nov2007_x3daudio_x64.inf

Filesize
815B

MD5
55402001ac41f0bcd1f457a36d298848

SHA1
a18fbdc9631610f2550f05cc3aed5a665afee7a4

SHA256
1cc72ca78433fbb72ee6b654c908748ea846c87c80424816745f285ed3bc910b

SHA512
96cb7ff1d43a7c1642d8ce9cb3c23ba460f6c083a7927fe0ad7a3ebb85649c384ef0542ee3e7dff6b99413b95a2a333327cd28349665901f466782fe96ee491a

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\nov2007_x3daudio_x86.inf

Filesize
1KB

MD5
4287ed3f6647fcd80ec6b0f7f2606964

SHA1
27b2e4212295478645a017a4df820af6bdb4dd0b

SHA256
f882bdbc8230d24b24e20f9d0db447586e9493801900a8ba381eb493bd41f5d5

SHA512
c816d7127fb7fadb971b757ba76d4b918fe18bb16e5d2249b4bd80b0b6c47208e7ba5e11b521d9cd0a23d464c392f98a3c617b91c0ae799f3aa10401b4e2bcd7

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\nov2007_xact_x64.inf

Filesize
926B

MD5
bebd51d24aa338f6192e291d03684b6d

SHA1
cf2c0efb60f44748b0ef3f95276b0512719f130d

SHA256
841d579573afd51499c7cd8ee986a41db63cedb722e8fac351d3632ff470c161

SHA512
28fdc41091d761faad79c1af33da0372086689113df2f1cb40513d50727e5aefd652a977ad5c92bd62f1c5ef9cfc24c23bc6758ddd6a4d1ac5db0b5e401432ca

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\nov2007_xact_x86.inf

Filesize
1KB

MD5
7e2a5eadf9f1eaf90d5eac15b7a9f558

SHA1
907cf74056bf7ad91e47c98aaad9a092ab42fd02

SHA256
24714f229e479338ed89bdd6143140505fd63f517b7e71170ea6c072a1748b06

SHA512
63c2f438e6feaec2b9fce15617940c97862a54527d549fb6ea149e4d18199c1752e255c6cb167ff20b9cc1f74b87ffc97110b65652bc5c3883cd14894d21f8fc

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\oct2005_xinput_x64.inf

Filesize
618B

MD5
dbe238ed3a0d3805a1a57c23fb28b721

SHA1
076284d2fd60ea7c29acc3233ad41f2bc1e2f73d

SHA256
534d55cae9f43193f49d74c9303fa3d32cc309d0b23597a97c315f207f2a358d

SHA512
af8a605cec38385dc24bea7b4520ac924961bf8b4b7317430394dec3863f52b2a3cc2d86dfada3a9feec9906ca2f0f48c4e22c10a87fed0c9f70cedefd9ab32b

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\oct2005_xinput_x86.inf

Filesize
782B

MD5
be6e213583854cdfd305b207f4aee0d5

SHA1
4ac378fd06aa6dec48171fd1b4045d1bfe4bc04f

SHA256
a14d5947c0ad4a864f95e3f35344e93f4845094d660eb37b77b1fdae9f7995e2

SHA512
e331c30330b87ad1fc57502bca5cef45afc0a0b6ae1f8746fe8dc47fdcd12cc080062142bb01ed0248c2dba144fb7722564fe780a129e43680b1a73d19b507e0

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\oct2006_d3dx9_31_x64.inf

Filesize
806B

MD5
e2a0e651573cffbf81578b864b50cfe7

SHA1
1c739f17f63ce7c5ba00638259628f7fc919cf74

SHA256
c031987e68e476365cd885e41a072f85fdfc9e480c93871d024a5ccf26d17118

SHA512
abfc6452d055bf6a3fadafb9562352bda90ee0edae5a0fec798951ef9d39701835212533a60eaab67c5c0fcf01ccb9115fcea3779b024ee1e11f217cb676e7f0

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\oct2006_d3dx9_31_x86.inf

Filesize
1KB

MD5
8f7aa1f0f2389f3cac574652f5d6672d

SHA1
921f2161cf46c6314a330ff52c83f8a3f1058f0d

SHA256
a1c61096019a6ae1a9f31e3fe67aa2bb7e9e451967959d7088344f3f20ab572e

SHA512
a85c03ccaa27adf3c75287529f18e84f526cf91785e0f4281db0eb86feba78522603e21def19bd2a33e03ceaedd9109b8af1dbda4a3fe93fe6eb95366b6df747

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\oct2006_xact_x64.inf

Filesize
908B

MD5
535ca39d61f752c3f1ba4956871fa27e

SHA1
4941efb676adedb9a46d7cc7415d8af03957b3fc

SHA256
4c388e9eaf3c39e75d003a58020e491b675b3a6054c702062a9c90e86f691d96

SHA512
f203958ca9c7d37daccd342a4deb125b60ef839b5b674a2a0220d7f0d770d5cfcd5c1f691470200bb4d8711f2f6a77d8b968e17020dbcec8c40b127a09f5f9de

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\oct2006_xact_x86.inf

Filesize
1KB

MD5
6181c4b93bad5332b34180ac0bae5077

SHA1
259c8de2dff2a5dd8d4971fa1ab3fb0d193ae90b

SHA256
66998b21cbe6f05b12cdb4bb45549dcb1b4a92f8a1b910334150a8d767fa39e9

SHA512
8508ebc77b667907c5c2f587131f24cb25c5a67ab2f7d8b94216931457f486b37b9701397ed6ef527c9c6786f82a938a52d2b6cb0afddeff4101cb100e3ceca8

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\x3daudio1_0.dll

Filesize
13KB

MD5
4e961525cc7ff0e5d7da19e170b7c14c

SHA1
7e3654ef7f7c9524ff415582f1b066f29b4234c4

SHA256
228dfece2b4555a243a73e7bf461036f1e53951977625651ff5a59deaeaf4b88

SHA512
8785d0b2188f36d53c1a2b99a669d6edff1c0c27905d5bda1615a503f115d5b0762f008481145cb0cb6a2589926543b9c8ed0ecc2e328593682e39b90fca2087

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\x3daudio1_0.dll

Filesize
16KB

MD5
f77d5ab654881e683cff6650916c424e

SHA1
56d8f090755f1ec60b13e748b040069ea8759b5b

SHA256
77cc09cea6de69f12106e6dd9df1c0446a525a54c3953d69d64711b9394cc38f

SHA512
dcd1273673f4088e854057e47484bb363e1e7ce094bc2c98ad7cc9112877892c1d6fd591dd9cfb325d6c451f2d03a4cdcc238af1ffb5382b7153f079cbe13abd

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\x3daudio1_1.dll

Filesize
14KB

MD5
121b131eaa369d8f58dacc5c39a77d80

SHA1
d8fe20cb6f28bc5334ae64a8df3563d1985beb9b

SHA256
ff15f14174a5543f028fa49cca745582fe4cacf3bbe490749cf43444690ab359

SHA512
ffe19ffea137603e5401f133d461b30af6fc25b3affb8a8ce20b98e3270de398b9ecc83a6cd904ff42c5885d3806c7e175957bf4a5827dc2f067756a51bc40db

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\x3daudio1_1.dll

Filesize
17KB

MD5
489e5b8bb1bd1028ff1c798eaaec65e4

SHA1
da9c385c48a6f590347581c5c3dea67502b99837

SHA256
fac23787e7c199c1969806850b5a9652f66f6dcac86f48f6f834abc253848a55

SHA512
33e3c28d60c7063d76c6959ef18dbb0227466766c4be9ce920911e192b75c18d11943a2eb0bef2caa920a6efa29162acf9f6c9c07ed5ddf5858420b240e0c0cc

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\x3daudio1_2.dll

Filesize
17KB

MD5
9e4efe7cc29ece294f3506fe0d8090bd

SHA1
b5d0e9cf45ac3b05fe21aed3ba41dd94b1ad1fa7

SHA256
7c06bb70d12cf78de9c6a12a53c95f9dba41c140a48bccd500483e5b87795a8c

SHA512
998d3034cf21bb9aafe0821a96c64ab0c38f770cf9c6a6820a2292b569510dbcd0e71ce56dae813614d9a148c146e095245e963905e71679c3cfca1ad98f5e16

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\x3daudio1_2.dll

Filesize
17KB

MD5
ac49e8536bf510251611a77e2a6cb8dc

SHA1
8b1f64007fa777fa2aca1e456735ab872cbabeb9

SHA256
1ae37d90d39c36c142a51ab9fef7230788ff95080f2bc47734737bf82d3c2c9b

SHA512
2c33ba362315ab102e4898ae92f7bc71e7c0c7fda8cd79f896cfe76e5a2a4129bf6a1e48d75b82ed7d915c0ced819e81c0f89640677b6bfa388962ce19bde2a7

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\x3daudio1_2.dll

Filesize
17KB

MD5
f6a9fc2ad2f9111372b5ab3bba3707ec

SHA1
bc7afb780d42a332497139b5236b809433d86009

SHA256
4c448c7f77e3b4385d2cd35d0c470589cdf0524e532f9cf7ae084a8f88aa949a

SHA512
6cb44bb174ef28cee3e3a6ac51897b5cceb3f2d06d08c556cf6476a285de3e3b03a624ca92fc11b95f29694629457fa39747e3041736f9b76e84f19a052ecba6

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xactengine2_0.dll

Filesize
224KB

MD5
2112fe0c46662d429347a7d7b49e3ece

SHA1
8cf607547e9c5a10f129a3a8f8f32bd295c0d5b4

SHA256
cfd1c2d34feb7d94f282e97bf762a99bfa7309dc7353d96dfe4aadc187d26c67

SHA512
77f77add8411d418798d643d783752896d3fcac002f15696caeaf45b5396d2d42fe53bfb409d66ad505cdaac0ef0a20a62aa45b50aebe65237d2c44af36bbc34

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xactengine2_1.dll

Filesize
224KB

MD5
7c9952111f4c743b9f0d8b68b6ed93c9

SHA1
75dc863ed10e4e4a18fa06dc32789cf16c738c38

SHA256
666cef7d27a38f709063c9c581fd95e6b3fa27167bff4beff484dba2dc922a2b

SHA512
aaa3396fa9081f25b2eff6682ea26afbd297c8a61cee4540f9a947c1a96ad51f114a9985bbc69ea7d0251f6e4b1e835c92daf0f8c5fd66e477e3243ced3c9bef

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xactengine2_10.dll

Filesize
261KB

MD5
73e055af78a64f9b2779d44407ca2ab6

SHA1
d771ef11d22a79dba7deccb9b3efedcbe74532d9

SHA256
113640ae8cf78caa7cface2f906f9e6b60809906f5c26e08b2e90fc48430f3b7

SHA512
a8d979297ecce24a29459e7ff814e53c649a6c969869279dbf0f29edea4d73883441519a27e5e46bb1e4b5b942cb26907cea9a488de0067e589632687b25b5be

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xactengine2_2.dll

Filesize
224KB

MD5
5c4d3843b491c047b7a619901fbd2ec1

SHA1
e02dd40f54e7dde0bcbd648e4fc6f723ac438bee

SHA256
4f996edb65022e33ae9c9f7acf7232c8d444f75c50c72894f6d3173b55404ebe

SHA512
474105b213bc067e0822ee22c769f0caa7a02f2d74a0422b676675fc45482db3a8a3dcb2744339a4c7fa029a2f58a2aef5db500c65cf646106d8ed096b17d062

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xactengine2_3.dll

Filesize
231KB

MD5
69d841744b2bae38fbb2d40a230a549c

SHA1
2a6429b1b1758bffe3366ab72212fb9b02152d77

SHA256
ca20cf8e4034719a46bf67c6009486c2c1cfc2da10ffed3a67dcae677b4f6793

SHA512
d5e26da74fc84da90b0f60451479524f1d03946076d009328aa7f9939456762633006d11970dc4c849101728ca32350c125005eb4e3f75114d4528cb17a35b44

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xactengine2_4.dll

Filesize
232KB

MD5
6550e1a0a7be611592c31222fcb981fb

SHA1
2197a951ecac85f7144fb925f6daff9ae7811e5e

SHA256
1e0e09fc077bdeee3de065c663b83f6717d39d56778833f030955077d490d000

SHA512
4013fba5e4211e66ebd9f733ff35635cca82875d6af71dcfeb481a436efeab608fe41310bae63d55c7fdd64a5c5f64068ec1eeb997160c8ae27f21f28e2bade9

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xactengine2_5.dll

Filesize
245KB

MD5
86c93789e9006f1ac47ed9dd47d4c8a1

SHA1
e9de46eb68271018aa31c71ef89d1ddef19edf7b

SHA256
ec68b5163cbb5f15e2fbe37fdf5fcb0d01dffbe53a460cb2cf668f31f0127ad5

SHA512
5a86661171f039946fa0568c6a9c655026c0a74c04a7789fadcb4acfd6a4faa5179d14149321920ceca9a1214910abec3e67e356898d5bdd044ffeefaeb57df3

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xactengine2_6.dll

Filesize
249KB

MD5
39000e033d39d19ccce21aeafcce2476

SHA1
6e7823e689a9b720a049a260380805a235ddbf75

SHA256
be45aef0889b03e2243282a912f41580e8566db666a782c26a1d4d7988799d03

SHA512
65047afe28308ce69e3b410b3b52b5fa4f615c95802019cb9b78ac69694e9987076af4bddb2ed7e47b0fbe73729c91b94c525e5b7644a42658663ed044b384e6

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xactengine2_7.dll

Filesize
255KB

MD5
7febb8ce2233cbae738b16d42ed29674

SHA1
fdc5682d6aa0ec57b8f3c742fe736d74b3c649cb

SHA256
a43c92af3fbe91dfe2a1d415342631fe64e18c7dd3e16e93b6c78947b68e7bd6

SHA512
73a3c07b13b31d2df1cece720a0268cfdb7ae2a066b9e613f7c4ff0fc37b94bd4f32207149d56e1bcaa5656fd4501b1d136d94e18e97c07a8e793906dbc7927e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xactengine2_8.dll

Filesize
259KB

MD5
499210c45afeaadee8cf4dcf7d5e570b

SHA1
de5ca60de47c8f54d531b88ea80d9a24a8e87a98

SHA256
15d82e89bea30bf82de6ba0cfbe97eeaf05d1e06bc0133f0d1ee8d0cc41f51f6

SHA512
f76f69bc3b6cb4f92e675eeedbd10a80f0b970d75ea04392484d477a4d02dec670cdadcb90be9eb215c4ad48a90d28347c9104f0835e93b5a9803fd62670536e

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xactengine2_9.dll

Filesize
260KB

MD5
46ee68f04a75a1ccf40235ea6f1cba05

SHA1
43a30e195b8d894c69bd857ee377ce7fa6170fa0

SHA256
93a0d8fc38e4e9a301d9e721afbeedc5af40becc0b11a6e7e8e38f08f366ff6e

SHA512
16e4c624e4e74d8c1fd7652ae745a87de3698567faf0cf03651ad87f1f730405fc0d2eca68e4b0ff3c5c526c254aac232f9bd359ddb6563313a8f02db3603fa9

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xactengine3_0.dll

Filesize
232KB

MD5
8a83673f0ab001870583fde2b004fa59

SHA1
be8d312b359a9b8f9f184d78c93c762cbc46e321

SHA256
887329745c479ce8d3023c969adf66780dd7e51ab536f0a08550ba4c77066c20

SHA512
583c73590d4b90576955783e24149125615b135f5bf5a815674e2546b93a8f89f6c3a286df09257e547bcfa8c0bc399abba59fb64158b411a83f28a4a4feabca

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xactengine3_1.dll

Filesize
232KB

MD5
2e0e25252e1d41752876e9fe12ade175

SHA1
d9de3a83235166a4bbc4bc356419c07aaf3e3f8c

SHA256
088999560171c60129c95f9b541852392602561dce43e4c61a453d48065f52ca

SHA512
a4555cbbde372893c564e1fcd707525c92fbcfb6915354b0062474cc47fe36ef66a3af212c08da117f2f2121698e556633f8c399199344354ce0d4cea4d0a2ca

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xactengine3_2.dll

Filesize
232KB

MD5
f3c6be26949caadb11dbf0086082fac9

SHA1
6b7a2475aacaf63f30964e9958713bec331c82ba

SHA256
e6a34c1f068f89d6515cb460eed3b4dbb53522c5579e6c75741482f0d40d9f99

SHA512
167afd32d847088d4973437f8b89badce194211f8fb1a14cf30df11848e4d4dd8d5243765edb1ed09df0f9b674cd7de764f1dae9fcac91f0ec98ecd259181d3b

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xactengine3_3.dll

Filesize
230KB

MD5
8ba296419af3417d1e9806b83166e472

SHA1
a2a8a64aedcbda68149a2726b094f1710cba71d1

SHA256
ef052bc9b7fde596fff3ea2d9c8fc994f3282953dead1b7f5477e7154af67245

SHA512
877e89553cbfb6afc6dfb22a590a468f035dccffecf842cb26010d5e62e33fe10e477d5cb157d321de3ecc59112ba616b80e767028eedeb4e70a591f1b81b902

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xactengine3_4.dll

Filesize
229KB

MD5
686f8d1b4926d48227a06acd4d41cd1e

SHA1
324fd1d21a42f0c30bb071beb2cd5db9abbf3138

SHA256
d3bad7995b998f2c95dbb33020a198ef5a248825321032f051619f353d46182b

SHA512
6ed69ab933492870b7fbf4e178999b835846075fe103e65f9a0f9b1ad8d47c9277f31a7a0fb53f3620b591b103b02bfa8efec530d7372680f585b82e128edcc4

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xactengine3_5.dll

Filesize
233KB

MD5
db3c93e87452b8dab4f58ed1fd2b1998

SHA1
fbcc3c80c74e98e8554260b8a08e14dd1670075a

SHA256
1d37ab9b90372eaaafb5055401449dc3184428fed559baaf36fbcccd2479611a

SHA512
af693d7d326dd7874e0eba5b4163c21aad86270f8e54058c637f1cd200e45eafb75f79a2d579c477c06082ace44f3318bcef71698089808690ff88443ddf348b

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xactengine3_6.dll

Filesize
233KB

MD5
f81c4678a55ffee585ac75825faf5582

SHA1
8fb2e6cf2a022eaed2ff5e3e225b3ca1e453d1cc

SHA256
8a7e7c5ac2e6230f0249d46751522e7ecf85e7490cf7491ab73bf2e7e59e4c0f

SHA512
8c8071bc2640d5c0fcf140ad68d4788cbb0706d17313c3cb74e25624a748b282acbf77eda678cf0d5fecf2ec3d583508c6f4eaf5c84073909b616f59b4f4e5fe

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xactengine3_7.dll

Filesize
234KB

MD5
4fd7bcb9d8af6a165e9ba0c2eb702e7c

SHA1
a90863632c2d54dd06e01537744a7b65bb3d0db2

SHA256
d7b1cf58898046c430d49cf8f778e4898280f4709340c3938d3139894166fe8d

SHA512
7fcc435d07c434ec392bb9bfa98aee20b0b1cd2ad6a31f073af80f6f37639336349728c9b0fcd967c4c395fc40c0efad1e36142fe7632512b0f26aca1b1c4bea

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xinput1_1.dll

Filesize
61KB

MD5
f1726346e583442541fe73429f8e9c10

SHA1
a1b7a4edd7d1164197f734218fb485165c075d0a

SHA256
69cd725c53e0302e75db20e9a3e4b33f58dceaa2e6ea4938b2733df8bc289a71

SHA512
ba17740271ea92c917db85c64d4ef63a8f2036fb1398abdcbedf9d49c09a53e34ea04e8b3f5a2ee41c2b2ecea6196ed7f9866ee48a9f3528c3b4c1f19dc167d8

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xinput1_2.dll

Filesize
61KB

MD5
33b62be226934e1b01f5043870c70427

SHA1
ad96f837accd277da2933d07aa86ffe3ef803b5c

SHA256
9714d146a785d458f0de8fef387d82c9f8e101c02407a0cbeb06f02a69518eec

SHA512
41f859fa59145ef6cdd6cfc4a14f90bb932d2c6aa339bda1763d8e315e6a78bde561010152460e6f996c9ac9ffe6650ccdf6ded34656081a0ed9ab1270773710

Download Submit
C:\Users\Admin\AppData\Local\Temp\DXB54C.tmp\xinput1_3.dll

Filesize
79KB

MD5
77f595dee5ffacea72b135b1fce1312e

SHA1
d2a710b332de3ef7a576e0aed27b0ae66892b7e9

SHA256
8d540d484ea41e374fd0107d55d253f87ded4ce780d515d8fd59bbe8c98970a7

SHA512
a8683050d7758c248052c11ac6a46c9a0b3b3773902cca478c1961b6d9d2d57c75a8c925ba5af4499989c0f44b34eaf57abafafa26506c31e5e4769fb3439746

Download Submit
C:\Users\Admin\Downloads\DirectX_11_Technology_Update_US.zip

Filesize
43.0MB

MD5
4da23846fb84054c94f2f8b3ee70bd14

SHA1
f4a9262c2ea11a7765ce7d6d688f38be020ff4ad

SHA256
42a78581595f4215a219798460981b4337cf8b3707d6dbac5d415fdcb4b959c8

SHA512
af17517da8624a58af3716643646b23325502db6336b1c58f13e66b37ecae470f99f0a47ec9310399bc261f21541b070912efce362ee5f738c99078e5c60a4f6

Download Submit
C:\Users\Admin\Downloads\Kainite Free Cheet.7z

Filesize
2.7MB

MD5
04cac012357d7d57cc06a3b99177f8c6

SHA1
54b28b6851e00f30758926278142a09f575a45be

SHA256
1e9219694c9bddd5f2b532b61c186dbf48253824f7415eee42bbb42ea6ace995

SHA512
38094d3863b70588e1c7c5da81cb613c0e3a50a890960a03316fe3570717b66ef6a80c6a04131a685ec1e9dbb5c066dbc296e8a62737af808c24971ca97bc549

Download Submit
C:\Users\Admin\Downloads\Kainite Free Cheet\Kainite Free Cheet.exe

Filesize
3.5MB

MD5
e4f6b371dfed29fe680215a8f31c666c

SHA1
30461c45af355ac4de888e58a42775c6a3b2d2a8

SHA256
72a4f53f7cd879c66eb9f463d1643c41e29290ae9ac5a91987308c539c560382

SHA512
602a93d70dfa0fc3c716c30a894ea0638d7b95a1cfc571fd73d91250ea8b61c0af49f2d5baea0bdf6e4c29dd15ed27f3ecf78c4afd84df0d697a5a0acb02f7ad

Download Submit
C:\Users\Admin\Downloads\Kainite Free Cheet\driver.sys

Filesize
7KB

MD5
dcf73db717996a1a20acbf5bbb1eef8c

SHA1
ddea3ebae6bd6e8a1f0cc2a14a8c885a5096b3ca

SHA256
4d174697a79a3bf0a9494b7b5e9724bda06d10aee729131ed0d1889061a5db6a

SHA512
51212891e3804d854ea80388edd446bc1b3bef3072111c2cdd81ae8cb8cbce25f33fb18dd6a6b043021ad943dc241c5b9adc40fdbf03136625e2dce2d9bc9696

Download Submit
C:\Users\Admin\Downloads\Kainite Free Cheet\map.bat

Filesize
67B

MD5
301f93da9e551becf1e07233f2ddd94b

SHA1
a69135be15a2694d59a38a4e9ab09f76da468aee

SHA256
4f28413df1f7be4e42daf564a80e0e2f846dca8aaf18ef8fa791acceabca900b

SHA512
288fecb911e8e2317c59760820da83b46f5318d8476459648427564a536bdf21d8d500c296ea962056777e4244f7b1b8aece8af4dd060fa01fd168ec080d0423

Download Submit
C:\Users\Admin\Downloads\Kainite Free Cheet\sinmapper.exe

Filesize
147KB

MD5
a96f93da51ad1f65e68427135753b47a

SHA1
b89e8fa7fa08f66fd5b7c7d96f8dfbca8702ae9c

SHA256
e4a4a2dd0664ac833bcf8fba9bc0cc75a448b2066ab555564dd8bea0a34e3238

SHA512
14357af6ddb3ff407efabaef31d84742d12ed399b5f6c1d7b524ee3895b87d3dd5cc36f2eea0189c5b98832a0f3e1a75f9d4531c13379362fd76c5d5e83c8a37

Download Submit
C:\Users\Admin\Downloads\pula23\DXSETUP.exe

Filesize
505KB

MD5
bf3f290275c21bdd3951955c9c3cf32c

SHA1
9fd00f3bb8a870112dae464f555fcd5e7f9200c0

SHA256
8f47d7121ef6532ad9ad9901e44e237f5c30448b752028c58a9d19521414e40d

SHA512
d2c354ee8b6977d01f23c6d2bb4977812bf653eae25e7a75a7d0a36b588c89fcdbdc2a8087c24d6ff687afebd086d4b7d0c92203ce39691b21dab71eafd1d249

Download Submit
C:\Windows\DirectX.log

Filesize
4KB

MD5
e03cf9326f4513e390e81a83db07c7d8

SHA1
b8a291e70c4349115d097858dc59b867a5fa55c2

SHA256
a45ea7de5d6b1f1cbbb588fe00d7fd5d5053ed18f99f57c1220af4803a293812

SHA512
4c371916b39c8a0503c9364fecffc99950cb49531d911a239bf5558147d889d96be4b406ab8991c8a04b111f314969a106ba554061ef57390b8d6dd097287331

Download Submit
C:\Windows\Logs\DirectX.log

Filesize
499B

MD5
9c26a9f96b7c6e4eec7721cd90e86521

SHA1
9d428f5719a11432fd9fb0c288229da375f996c0

SHA256
a3ff9d7ba080f4f007805874f551a2dc6ec0774f859231773998225aad752651

SHA512
366cd9306a3debc9b37155a895b6cbc08d7742275bb6cd7a8a55fbcdd66d129cff622a3c8b14f7687f06a31f11a7bac066e053e46564fd28f4958026d0fb2f41

Download Submit
C:\Windows\Logs\DirectX.log

Filesize
1KB

MD5
3502e97a49de36fb6f52397384f09a62

SHA1
77c5177fdded2d999ef1125d023b5afb010dc917

SHA256
69339efc2b3582541bda67fff401877e6644654ce8cd3a3566efeb0e5d6e154c

SHA512
50da38c37d0232989f483ba2e9c9555f53a3aedb6e70515d2c1ab5c89d2d19ba4e9b59afa04bd2329fcfc83f82ac5b025854367e5ffff3c04e381855e12e4091

Download Submit
C:\Windows\Logs\DirectX.log

Filesize
4KB

MD5
1b3218b02dff571472f6c94932fc7c8f

SHA1
e7bc733bc33b95504a93f94783bf9d4f03e4c4bf

SHA256
adbf77dd044df8f183fe0161de1f5c804e2e8e32f7bc37c37b4a2ec7192b11d3

SHA512
57904dca9a9d83ad62aef9aa0c3353b2cef544a930fd4ce9da5b19ebf81822dd9f28cb35b0010a609df1cf6c513768348c76583351b3b93147e4fd572ec4b318

Download Submit
C:\Windows\System32\SETD9E.tmp

Filesize
20KB

MD5
bc78d5328541410510dde06b9fa92024

SHA1
f6123294896cc3c3d3cf5a9e0e03319f58da7cf3

SHA256
7a34a7a8af47c6b2cf890ecb56bad2454ba5eb1ef2df6fad9ee53c4770e941cc

SHA512
5284d695216aa4f70abafdea130326d8ee3c6d9a9858dfa3f5b184c6b8b185adebcbc92adb8a7530f9127ae1de30561986bf9c85bfb8b474a9812151a7843c59

Download Submit
C:\Windows\System32\XAPOFX1_3.dll

Filesize
71KB

MD5
37b348a79c4c9b8ab925b18ffd241e96

SHA1
a0b030e5652eafca2cc5d741dbbaac203781ed1d

SHA256
787e10d48d90db50dc155fca53fe8c5c1a383ca24d468733d4b8fe3acf2d0a34

SHA512
20ad359ed0a1fbfacbbba2749eaac9be4e9f416e24cb7ac9dda55c6d2d372fd290781607e5f806b4da3a9d01abef58b979153bc144a8cc8c6d7115166178fe85

Download Submit
C:\Windows\System32\x3daudio1_2.dll

Filesize
20KB

MD5
9355a1169ac104a3670c2a77d060ff60

SHA1
6935990e213c432e4fe3cd667148d95c0a33bd02

SHA256
b822d7de1253c52676f4e20f9c715e92759b43b69978dfef2527b6101e420ee6

SHA512
9897bf3ab16e869b47840b72e0d8166e0f6cfebe0b3254e278d7cb046a5d50fdd2d8624da788b9afbcf58fc95024ccd2e5b9b010de074e8d9500669f349061af

Download Submit
C:\Windows\Temp\OLD3460.tmp

Filesize
71KB

MD5
db6c0400a5e2e4f68c7eb75912443296

SHA1
f8c937c62774502960df9321ad1f1d7d0999cddd

SHA256
5f03017d3b51c1dc413952d21bf35ac660693c6f7539e8f8930ddd41d197a495

SHA512
2f950f06ac7806eb1e5e2d0de9b91efe938b0e7cdb85c5838de1bb98ca693be2046c94f7824b084b4bd31e956bd9ba90f891145fcb26cbf47911c925fd07f3db

Download Submit
C:\Windows\Temp\OLD9B6.tmp

Filesize
20KB

MD5
87d52a3ce4936f6c93ac092c3cc2780a

SHA1
3be34b222d022cd4dbe28f0668c14af716f1025e

SHA256
9566e346fbf72928e9b48b3408c8336a9e77b331bbc729e8ced9f0670c51c699

SHA512
d7809bf29599e86a5c164d6cdf83e9b8a29ae08972c998bed5bb8a93a11742a5905867d2bc7118498985c4f1f4e6223cb0659e8d9784a2ec05b12bebf339983e

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll

Filesize
52KB

MD5
75933586afd94ea24c5acd3dbc89a272

SHA1
970fd4b49d1368330c10279798991b901a233c2a

SHA256
406f473429573e9f0084aae125ef8f19f59291aa4c33cf7d40e7d996995a3238

SHA512
c096f0f11fb306c6a84886826306fe9c2862c3c79b14a8991a174224b41c2a68b76e5be506494d23d354384c715c5d82a1cacffff9644de9d6b93e9478087a1d

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
326B

MD5
45f3f98e647b9a318d748f205693e82a

SHA1
7cf5439a44f340737fed5f077f00fff7489e7125

SHA256
88b669459f70f7666f82eefb92bd1abd4e428c20a7d358e63dcbca847711842f

SHA512
82ffa20f2e3f87dbfe6bee2c40b267a7cc41adb5dd09ae95695c248a76a9d1717a87f6e691a58dfea6c67bda3b9dbefdd1982c59fe5510a4eb70f0cb0471e170

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

Filesize
2.7MB

MD5
5e2b8b8a5ed016468716b9ff82a1806f

SHA1
f1772121149d87745738cd471d0e504301a9ad0d

SHA256
5b70f0ac40a38c903062a12ff7cd71d907e75238a044ded9b34fb51e9a9a2799

SHA512
4620c9bafb7dfaa8d4351d0d99ae3442ceb2220201f16bd9bab4fbeb1f411fd63d4f0e79abf6e762f4d0e62d42608fbeebd13943ce338eca59ad1080ea6c2728

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
308B

MD5
5a14d0af3454e35767026fcdb42a38fe

SHA1
3a6c3c04fc1bcefdb91ae76461553c773c7f0279

SHA256
b8b655d8e0e54e23bfcd158a490f150aa95df7ce584fd16c57ab07b7aaf38f8c

SHA512
4e3aa4b2a709fb31316a748e5f09cc63d37ed928850e70b67bd43ba3f3baaa41a66ba0efa6f6e58b41ad6cd2daea0db7166a61577755f29c9713bbd202471092

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

Filesize
550KB

MD5
d3f1922325be8e7e1c72bfd8179454ce

SHA1
89134f43ce2af4adfbc4087392aee6fe56be7ff4

SHA256
8418941d8f1d4c84288e0bf54392378dd3d87b602bb693ff4f8a633022681c12

SHA512
d33f513ff6c199acabe86eca6dc06d56c330ccb78be4d13fb6b1906a3cba3c93afe982b05cb057f2b88f6e6637452f4d99d4a4fe6f3f7c473de9e67a40758bed

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
308B

MD5
6c09957eba98b4c94b669101cd14d0d9

SHA1
5a2e961b17a3789437bfba96b3986c108ac3110a

SHA256
10287a0d32e48050f5a338b6e1d4cdf687e64518d90ab4d0a6d0ab08ca229af6

SHA512
ef565c03f8a294632513431c5fd05eb75ae9aec885c15ca635f0aa78eb76140068c056e9a990d3e4375f490569ebe2a65b31c8a4057e7aac1e50d97da0c8d00d

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

Filesize
554KB

MD5
fb3bc0754921873a65f5fbdca845e6ee

SHA1
67cde5bc8577cd3040e275d290ac021874da9fe8

SHA256
f500c350dd71df7452b92444e19b4644b04283434a6557123f1e4d9fb078c3f8

SHA512
292b8bda44e6ff6449c4b38da9b8317491c0f0da3d1e5f7947741de27cc51bbc078fbf947c89c4be3a0b54f7066f0480990d1de57919edba3414aace77c47635

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
308B

MD5
e524eb367fce93f9aac836fa44944160

SHA1
1d52eaf7349651180e5f48bbaf5082cb7a032816

SHA256
cf6cc7247d8cf89d6b3fe1cd85aa04e8990c329c67c22c447c40a9a6ecaf3641

SHA512
53f07575d113a79bf19efc2a89f69f947438b4001c98d3b02085f15626ed17d24c1aa54aa6d519918ad516ac7e335ef040d2b2cd16486c2dc1ef0099a92c2fc2

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

Filesize
563KB

MD5
ccd53738df4fa27849b6bb05dd67d10d

SHA1
28126653a3d1b4574fcb0c09176f5fa0ff28ef78

SHA256
c29d337bf7639fbf424b34cc0409d2715762e1b4d82881fb524a2508381c9f62

SHA512
aa3a10504fbe49a4c44151beec7d9b543f4b89a51621fa60810f385bdc8a6821e4bfc37cd46f3688013f6f4facd33ab45bd0deb4a1fe16453e1be8f11f2119c3

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

Filesize
564KB

MD5
490807c150b7d8be44bde871f4df8c56

SHA1
69b68a5b8cc3f3e75aa2ba284654ca58bb62f23e

SHA256
36a21fc4f4c8f6ba4ad900613ee1b08ff43f2545585a2601c9fc4cf083d68a77

SHA512
9442e26de55009428cc6e747637c2cb64bd2f008541ccbb37fed4e83ff66845c7cf3874d93542e0ba544e2db61f4864b665b7720568eba284beb095489f3ca64

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

Filesize
565KB

MD5
25c76c1e29d3e8e7398f0901f558a629

SHA1
2e907c9688a025538f1b2d0cf1860a2ae49fd2e9

SHA256
2ee41d4d591a39d648e90db4d47d0fa0557fd68197756ee2ee94fcde4d820cfa

SHA512
7308fd91859d00debf446bd6b594f3ea196dbe46a3583858c76d2cbb008a8698207f1ce7746afe3de4efb9a27980f5f813c77cc88e273fa82b2695d8f3d15039

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll

Filesize
142KB

MD5
d9824a9dd107e598575112b4ff897292

SHA1
adcc54d159f1eeead01dbd2fbc73c808ce519920

SHA256
ff4c03bbeb292317a77c86c1c81ae9564acb984b352fbef36d66e2d8bcbd79a8

SHA512
caa1f0411e0470a315ee8c7a62defa972ff17557bcfcf74016c64ad11b0f6fa46a126131a18e275e59e025814545e1d7ffe145377f6a0bcdb8cc93471e4c9bd4

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
310B

MD5
28938f97eb1f59cd4b37dc97eeccdca8

SHA1
1dca7909c3b59b15a218f098f07b4b799b5014e4

SHA256
09acec50de7e04d374e3e72a657cbbfd3e5630aa7570333b5fdaca1f181d050a

SHA512
a12e4626495a42a0893f275606199bbd2b56415877d963823318dff4371aa736e0e7337f0bae47ff3916a2f4437ae184a745a5499d3a75b99c73347f86046752

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll

Filesize
155KB

MD5
cebd995ddeab2c525a5c4e95789bc961

SHA1
1c98da39d7eea36d73b361ddb24054038c2b8331

SHA256
0ee2a2c371a918cabc85143202864d0c3a4abf1b93a5029081a622e0acf17ab7

SHA512
158b3fe6e6605eb56a99b2135df529226f9af4b001ed0c2e1fd201a60054e2201dc22245ee5a02c6e7778337f1974ee21fa088e94b13a7402e61f64658de49a1

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
312B

MD5
c5356afaccc6dbe0a9b4776d48e21820

SHA1
0f35ac546a69a7bd99bc8f8c063c1f31d4f0389a

SHA256
278f8d54723bcca411e6d9fda18855ada686da2a78eae92cb53eb54691a5afef

SHA512
f19033587dd7dbf826a7d4ed48c3e25aa5304ccc1d09cc8faa5aee3c68167ee70bed28ce14e6c7e9a66b2cd62291a4766c3384d6efb23e451069c55ed3579a59

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll

Filesize
356KB

MD5
46f26e2bafd44960e7f13b2ef80aa0bc

SHA1
2277bc8980e0f6c3672c2348b0494f0cc0ad611a

SHA256
489f65e1e00534835486e9255eec92b83edae4dade6dff867a380859ae53006a

SHA512
5b5147940803bccd0184b46e60560f967831541e707b5ef19781103e31235f1ba05d00e44a6f2ed061ebf5dd7013d9c696131a3edaa77d3aabb85b3255ba5489

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll

Filesize
218KB

MD5
0c453970e89db1c1eb9de087e6eab5ba

SHA1
c4c7e034773a240909332814f499730575a1cd71

SHA256
942e98f142373547493f13b14e1603b2420851aff013d3085bada7b6b2214d9c

SHA512
ef3b2cc2598b4ea58f00f93155319674450c8c35b706108ce3bbb5c2502efa179046d9d50e12725e6dc7a555f4880404ed03de15a0753606f20a1654799886fb

Download Submit
C:\Windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

Filesize
288B

MD5
e943abc60f21c4cb50e4612fe2d49541

SHA1
dd346608867558be5468bc5181398561a125b025

SHA256
c50ed4a51eb01c2b196a7dc335f5221c47b0479572555380fb1ba0205eb20ece

SHA512
10015b508a604859d330f799d38b854eac0f6e3386b3b08a5bde30097f7d12ebc95b3abeb2b12699f8e56a6d6ec867ccfb99929bd7122eec19379d6a420fecaa

Download Submit
memory/3560-6957-0x0000000002020000-0x0000000002089000-memory.dmp

Filesize
420KB

Download
memory/3612-6316-0x0000000002100000-0x0000000002164000-memory.dmp

Filesize
400KB

Download
memory/4020-5880-0x0000000004970000-0x00000000049AF000-memory.dmp

Filesize
252KB

Download
memory/4020-4598-0x0000000004970000-0x00000000049AD000-memory.dmp

Filesize
244KB

Download
memory/4020-6140-0x0000000004970000-0x00000000049B2000-memory.dmp

Filesize
264KB

Download
memory/4020-6264-0x0000000004970000-0x00000000049B2000-memory.dmp

Filesize
264KB

Download
memory/4020-5707-0x0000000004970000-0x00000000049AE000-memory.dmp

Filesize
248KB

Download
memory/4020-7562-0x0000000004970000-0x00000000049B5000-memory.dmp

Filesize
276KB

Download
memory/4020-6560-0x0000000004970000-0x00000000049B4000-memory.dmp

Filesize
272KB

Download
memory/4020-5533-0x0000000004970000-0x00000000049AD000-memory.dmp

Filesize
244KB

Download
memory/4020-6909-0x0000000004970000-0x00000000049B5000-memory.dmp

Filesize
276KB

Download
memory/4020-7197-0x0000000004970000-0x00000000049B5000-memory.dmp

Filesize
276KB

Download
memory/4020-5359-0x0000000004970000-0x00000000049AD000-memory.dmp

Filesize
244KB

Download

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads