Analysis

  • max time kernel
    688s
  • max time network
    382s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    03/08/2026, 23:27

General

  • Target
    PFA-1.1.0-setup.exe
  • Size 2.5MB
  • Sample260803-3ff91adj8z
  • SHA256 e9c57280eb3a7a76b769ca7b99f610f7fe1d0600e514798689a003cf0c11e5de
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 8 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in System32 directory 6 IoCs
  • Drops file in Windows directory 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 11 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\PFA-1.1.0-setup.exe
    "C:\Users\Admin\AppData\Local\Temp\PFA-1.1.0-setup.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:536
    • C:\Users\Admin\AppData\Local\Piano From Above\DXSETUP.exe
      "C:\Users\Admin\AppData\Local\Piano From Above\DXSETUP.exe" /silent
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in System32 directory
      • Drops file in Windows directory
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2044
      • C:\Users\Admin\AppData\Local\Temp\DXCC63.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DXCC63.tmp\infinst.exe D3DX9_43_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in System32 directory
        • Drops file in Windows directory
        PID:5532
    • C:\Users\Admin\AppData\Local\Piano From Above\PFA-1.1.0-x86_64.exe
      "C:\Users\Admin\AppData\Local\Piano From Above\PFA-1.1.0-x86_64.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: GetForegroundWindowSpam
      PID:5936
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Checks SCSI registry key(s)
    • Suspicious use of AdjustPrivilegeToken
    PID:3544
  • C:\Windows\system32\srtasks.exe
    C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4764

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Jun2010_d3dx9_43_x64.cab

        • Path C:\Users\Admin\AppData\Local\PIANOF~1\Jun2010_d3dx9_43_x64.cab
        • Size 915KB
        • SHA256 9b98a1269af7f3a0007bfdc73206a47a6ee158d34ba8a87009396c18186bb06a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2010_d3dx9_43_x86.cab

        • Path C:\Users\Admin\AppData\Local\PIANOF~1\Jun2010_d3dx9_43_x86.cab
        • Size 750KB
        • SHA256 fcc6cf0966b4853d6fa3d32ab299cde5a9824feaecb0d4f34ea452fb9fd1c867
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxdllreg_x86.cab

        • Path C:\Users\Admin\AppData\Local\PIANOF~1\dxdllreg_x86.cab
        • Size 41KB
        • SHA256 8ad77a4d9c76f65cd62337588f847cc1e0ca6ca9735937f3a781f7395e9566a1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxupdate.cab

        • Path C:\Users\Admin\AppData\Local\PIANOF~1\dxupdate.cab
        • Size 91KB
        • SHA256 13393a91201e69e70a9f68d21428453fff3951535dec88f879270269cfe54d6f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DSETUP32.DLL

        • Path C:\Users\Admin\AppData\Local\Piano From Above\DSETUP32.DLL
        • Size 1.7MB
        • SHA256 642d9e7db6d4fc15129f011dce2ea087bf7f7fb015aececf82bf84ff6634a6fb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DXSETUP.exe

        • Path C:\Users\Admin\AppData\Local\Piano From Above\DXSETUP.exe
        • Size 524KB
        • SHA256 046041aba6ba77534c36bb0c2496408d23c6a09f930c46b392f1edc70dfd66de
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PFA-1.1.0-x86_64.exe

        • Path C:\Users\Admin\AppData\Local\Piano From Above\PFA-1.1.0-x86_64.exe
        • Size 665KB
        • SHA256 8bdb156e3f7ca0e1a9bb684ad95069084da498a9c8f676821049d97a08b968ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dsetup.dll

        • Path C:\Users\Admin\AppData\Local\Piano From Above\dsetup.dll
        • Size 87KB
        • SHA256 def6f245762be36cf18b435ba8b7ebc224b9c21d1a1db606a8e8fafdaa97bba0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        D3DX9_43.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DXCC63.tmp\D3DX9_43.dll
        • Size 2.3MB
        • SHA256 84b900dbd7fa978d6e0caee26fc54f2f61d92c9c75d10b35f00e3e82cd1d67b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        D3DX9_43_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DXCC63.tmp\D3DX9_43_x64.inf
        • Size 667B
        • SHA256 71bd128262424567380c63c9c23eb819212222317026ad44e965ecac2224b848
        • MD5 SHA1 SHA512 TLSH

        JUN2010_d3dx9_43_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DXCC63.tmp\JUN2010_d3dx9_43_x64.inf
        • Size 812B
        • SHA256 272650a2d9b1cfea17021f4bf941b21f2206791e279070d4e906ce0ce56ac16f
        • MD5 SHA1 SHA512 TLSH

        JUN2010_d3dx9_43_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DXCC63.tmp\JUN2010_d3dx9_43_x86.inf
        • Size 1KB
        • SHA256 6b33d32da02f664092d44b05237990f825b4062c105a063badcf978648b5e95b
        • MD5 SHA1 SHA512 TLSH

        d3dx9_43.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DXCC63.tmp\d3dx9_43.dll
        • Size 1.9MB
        • SHA256 0b28546be22c71834501f7d7185ede5d79742457331c7ee09efc14490dd64f5f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxdllreg_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DXCC63.tmp\dxdllreg_x86.inf
        • Size 724B
        • SHA256 54e098294ef0ad3b14b9c77642838b5992fe4573099d8397a1ef566d9e36da40
        • MD5 SHA1 SHA512 TLSH

        dxupdate.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DXCC63.tmp\dxupdate.dll
        • Size 168KB
        • SHA256 6dcad858cc3ff78d58c1dae5e93caf7d8bacb4f2fcf9e71bccb250bf32c7f564
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxupdate.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DXCC63.tmp\dxupdate.inf
        • Size 12KB
        • SHA256 93f5589499ee4ee2812d73c0d8feacbbcfe8c47b6d98572486bc0eff3c5906ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        infinst.exe

        • Path C:\Users\Admin\AppData\Local\Temp\DXCC63.tmp\infinst.exe
        • Size 81KB
        • SHA256 8c62fe8466d9a24a0f1924de37b05d672a826454804086cddc7ed87c020e67ff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsy6668.tmp\System.dll
        • Size 11KB
        • SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsDialogs.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsy6668.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bach - Minuet in B-flat Major.mid

        • Path C:\Users\Admin\Music\Piano From Above\1 Intermediate 1\Bach - Minuet in B-flat Major.mid
        • Size 2KB
        • SHA256 6b4c28b80a5a4ce6119468a75a020ad94ea4de227f62d175bd626b4e32307f07
        • MD5 SHA1 SHA512 TLSH

        Bach - Minuet in F Major.mid

        • Path C:\Users\Admin\Music\Piano From Above\1 Intermediate 1\Bach - Minuet in F Major.mid
        • Size 2KB
        • SHA256 66664dce24fdf95ad7602ecffda3c5f8462dc3be97b6ce3a63301f89391d0354
        • MD5 SHA1 SHA512 TLSH

        Bach - Minuet in G Major.mid

        • Path C:\Users\Admin\Music\Piano From Above\1 Intermediate 1\Bach - Minuet in G Major.mid
        • Size 2KB
        • SHA256 fa49852ae9a657842313e23b84a42a3399a3ca2c1b289de93bd466b1a1d85331
        • MD5 SHA1 SHA512 TLSH

        Bach - Minuet in G Minor.mid

        • Path C:\Users\Admin\Music\Piano From Above\1 Intermediate 1\Bach - Minuet in G Minor.mid
        • Size 2KB
        • SHA256 2a993b933f92f6adf317ce8d4da8592e20cf01195b92143595fee734b206ff5f
        • MD5 SHA1 SHA512 TLSH

        Bach - Musette in D Major.mid

        • Path C:\Users\Admin\Music\Piano From Above\1 Intermediate 1\Bach - Musette in D Major.mid
        • Size 1KB
        • SHA256 8813af8a9305e9f2264d130bd4bd4e69d550c05e51bb56c429dc76a64d829603
        • MD5 SHA1 SHA512 TLSH

        Chopin - Prelude in C Minor.mid

        • Path C:\Users\Admin\Music\Piano From Above\1 Intermediate 1\Chopin - Prelude in C Minor.mid
        • Size 3KB
        • SHA256 59c15525b27d3a2c400ca81cb8dc75b05685c0b929eb78268756b013e8d39986
        • MD5 SHA1 SHA512 TLSH

        Clementie - Sonatina Op. 36, No. 1 1st Movement.mid

        • Path C:\Users\Admin\Music\Piano From Above\1 Intermediate 1\Clementie - Sonatina Op. 36, No. 1 1st Movement.mid
        • Size 3KB
        • SHA256 9696c57417f40c66e9a74d3ba56e9b43905b798262c7ba7843f00205536e2265
        • MD5 SHA1 SHA512 TLSH

        Schumann - First Sorrow.mid

        • Path C:\Users\Admin\Music\Piano From Above\1 Intermediate 1\Schumann - First Sorrow.mid
        • Size 2KB
        • SHA256 55156715e3a34eeebb8cc6e8066b6c77c703ecd6f2a76de2d98928efdc619a9c
        • MD5 SHA1 SHA512 TLSH

        Schumann - Humming Song.mid

        • Path C:\Users\Admin\Music\Piano From Above\1 Intermediate 1\Schumann - Humming Song.mid
        • Size 2KB
        • SHA256 f747f9b5275d249f77f5b7c39ac1db3e2a1a26e850b3ef370859ec1af3e37cb3
        • MD5 SHA1 SHA512 TLSH

        Schumann - Melody.mid

        • Path C:\Users\Admin\Music\Piano From Above\1 Intermediate 1\Schumann - Melody.mid
        • Size 2KB
        • SHA256 e58e708afe8b31c634a0e9f3354a4ed94670e929d82926f7ff49dea3ebe146c2
        • MD5 SHA1 SHA512 TLSH

        Schumann - Sicilienne.mid

        • Path C:\Users\Admin\Music\Piano From Above\1 Intermediate 1\Schumann - Sicilienne.mid
        • Size 6KB
        • SHA256 faa91b513ff620d2f6a07d75b36240f67787dbdf5492fae4b1895a5e716c0ee2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Schumann - Soldiers' March.mid

        • Path C:\Users\Admin\Music\Piano From Above\1 Intermediate 1\Schumann - Soldiers' March.mid
        • Size 5KB
        • SHA256 d4d2665d25a105aba22ba08a02293c58b7853421075ad29c36ab378f9db6c52a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Schumann - The Happy Farmer.mid

        • Path C:\Users\Admin\Music\Piano From Above\1 Intermediate 1\Schumann - The Happy Farmer.mid
        • Size 4KB
        • SHA256 6c42561efae9ca63fbac7dbf72bbb0cf48c88d36553e6be73ed26341b668b411
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bach - Invention 01.mid

        • Path C:\Users\Admin\Music\Piano From Above\2 Intermediate 2\Bach - Invention 01.mid
        • Size 3KB
        • SHA256 9b9a6213941932d5171d9102d85912c3c1c61f8176ce02005cd2198881823c2d
        • MD5 SHA1 SHA512 TLSH

        Bach - Invention 04.mid

        • Path C:\Users\Admin\Music\Piano From Above\2 Intermediate 2\Bach - Invention 04.mid
        • Size 3KB
        • SHA256 5ecc06eb04d56ea40bd4db64bfd49ac9bff523e46d134912fa5bd07aea1db1c7
        • MD5 SHA1 SHA512 TLSH

        Bach - Invention 09.mid

        • Path C:\Users\Admin\Music\Piano From Above\2 Intermediate 2\Bach - Invention 09.mid
        • Size 4KB
        • SHA256 fcba8eaa630cec1e4207eb024ffe25e9ad03c4382a68c415b7162b6baa58b0b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bach - Invention 15.mid

        • Path C:\Users\Admin\Music\Piano From Above\2 Intermediate 2\Bach - Invention 15.mid
        • Size 4KB
        • SHA256 4b629b29d815d9f253600836a2801444780f20718b74892c502a044da6f85a88
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Beethoven - Fur Elise.mid

        • Path C:\Users\Admin\Music\Piano From Above\2 Intermediate 2\Beethoven - Fur Elise.mid
        • Size 13KB
        • SHA256 f26dee755a2eb52c993784fef76bd1a1038c2b9f9c3a5b5e3f28566dd837cc73
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Beethoven - Moonlight Sonata 1st Movement.mid

        • Path C:\Users\Admin\Music\Piano From Above\2 Intermediate 2\Beethoven - Moonlight Sonata 1st Movement.mid
        • Size 15KB
        • SHA256 e1924bdfc12a26afd80fcf2485463a76bd750632998d24c732080be069205755
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Beethoven - Pathetique 2nd Movement.mid

        • Path C:\Users\Admin\Music\Piano From Above\2 Intermediate 2\Beethoven - Pathetique 2nd Movement.mid
        • Size 15KB
        • SHA256 d1e30060013f68cb153b71b05a149df15b5f2781bf94b23fe0163c4800a285cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Chopin - Prelude in A Major.mid

        • Path C:\Users\Admin\Music\Piano From Above\2 Intermediate 2\Chopin - Prelude in A Major.mid
        • Size 2KB
        • SHA256 38e458909adb31067d118f011e525883bbf8b93014c03b94bf9b3a2565f19d19
        • MD5 SHA1 SHA512 TLSH

        Chopin - Prelude in E Minor.mid

        • Path C:\Users\Admin\Music\Piano From Above\2 Intermediate 2\Chopin - Prelude in E Minor.mid
        • Size 7KB
        • SHA256 8b8984ae232642ff1979b84af642d5d5db60f7f7f20b3745f2d4b4f17cdaf908
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mozart - Sonata Facile 1st Movement.mid

        • Path C:\Users\Admin\Music\Piano From Above\2 Intermediate 2\Mozart - Sonata Facile 1st Movement.mid
        • Size 30KB
        • SHA256 4eaf2669dcf4a5d9810c482c32696677227a9f7b42dbfc7356bce1d5d0940f90
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mozart - Turkish March.mid

        • Path C:\Users\Admin\Music\Piano From Above\2 Intermediate 2\Mozart - Turkish March.mid
        • Size 25KB
        • SHA256 f5a481a90b10e7cd5a2d80bc298229dcf6b41e711baa2922de5d769933bef393
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Schumann - Dreaming.mid

        • Path C:\Users\Admin\Music\Piano From Above\2 Intermediate 2\Schumann - Dreaming.mid
        • Size 5KB
        • SHA256 45d6428ad618385d45da53ce3021dd60044373149ce23d86e34aa647175b6edd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Schumann - Farmhand Rupert.mid

        • Path C:\Users\Admin\Music\Piano From Above\2 Intermediate 2\Schumann - Farmhand Rupert.mid
        • Size 14KB
        • SHA256 2ca396587cc463e3d5b96317f041ee3c4fd67a36582b6f27fb1f62f1423377a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Schumann - Hunting Song.mid

        • Path C:\Users\Admin\Music\Piano From Above\2 Intermediate 2\Schumann - Hunting Song.mid
        • Size 5KB
        • SHA256 18e7ae891edeafdc39d46f61864a88d3a52d2604cd213c2bae8cb3d32e523a46
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Schumann - The Wild Horseman.mid

        • Path C:\Users\Admin\Music\Piano From Above\2 Intermediate 2\Schumann - The Wild Horseman.mid
        • Size 3KB
        • SHA256 197f870dea372a09c7905b9b02c6ed3b4c6b10b18a3b79c421ca01947dc45991
        • MD5 SHA1 SHA512 TLSH

        Bach - Prelude and Fugue in C Major.mid

        • Path C:\Users\Admin\Music\Piano From Above\3 Advanced\Bach - Prelude and Fugue in C Major.mid
        • Size 12KB
        • SHA256 107f2b6a298f283f8d26d4e8359669e7780f7ea64011b7844f2ed066d874a37e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bach - Prelude and Fugue in C Minor.mid

        • Path C:\Users\Admin\Music\Piano From Above\3 Advanced\Bach - Prelude and Fugue in C Minor.mid
        • Size 15KB
        • SHA256 6a5a582455fee99765fd3c920810b36f1a4d7a991d7e93e74f072fc060faf0bf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Chopin - Black Key Etude.mid

        • Path C:\Users\Admin\Music\Piano From Above\3 Advanced\Chopin - Black Key Etude.mid
        • Size 12KB
        • SHA256 feb3bec0606917a92aba0344a4a601f4239a920714cbefd39a8981d6d0b607f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Chopin - Etude Op. 10, No. 1.mid

        • Path C:\Users\Admin\Music\Piano From Above\3 Advanced\Chopin - Etude Op. 10, No. 1.mid
        • Size 10KB
        • SHA256 6ebe4878b153e8f5b3761dcca36ff33a0bab286e213b74bc24a69862010af4b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Chopin - Fantaisie-Impromptu.mid

        • Path C:\Users\Admin\Music\Piano From Above\3 Advanced\Chopin - Fantaisie-Impromptu.mid
        • Size 36KB
        • SHA256 8f5df5f08a9f0615878ec344d445668e7af12da9d84d9f04136c0b458ed9ad8c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Chopin - Funeral March.mid

        • Path C:\Users\Admin\Music\Piano From Above\3 Advanced\Chopin - Funeral March.mid
        • Size 23KB
        • SHA256 ab29708f68016ec6db0f7d9b3f64a187ef5bae9e1e53c59a4fdce0ba29f34f28
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Chopin - Revolutionary Etude.mid

        • Path C:\Users\Admin\Music\Piano From Above\3 Advanced\Chopin - Revolutionary Etude.mid
        • Size 21KB
        • SHA256 a376584d5b8c7fb3983c46e4ddef3e5866c2c7ec11a3dd7b59fdecea9ba3914f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Debussy - Clair de Lune.mid

        • Path C:\Users\Admin\Music\Piano From Above\3 Advanced\Debussy - Clair de Lune.mid
        • Size 16KB
        • SHA256 10f58bc6fc50fe2eb5ac2e850ab0606338039ab90442e46ee62c2885ef626a4e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Godowsky - Study of Chopin Etude Op. 10, No. 1.mid

        • Path C:\Users\Admin\Music\Piano From Above\3 Advanced\Godowsky - Study of Chopin Etude Op. 10, No. 1.mid
        • Size 20KB
        • SHA256 b8968719db9f92a09f15a46a111a35ab7407dee6780923bb206c4b14ad98b0b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Grieg - March of the Trolls.mid

        • Path C:\Users\Admin\Music\Piano From Above\3 Advanced\Grieg - March of the Trolls.mid
        • Size 19KB
        • SHA256 f44bde38cbb0d73ebb8dc283a3a3ae8e7c0cb954202def1761864081fed2b1e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Joplin - Maple Leaf Rag.mid

        • Path C:\Users\Admin\Music\Piano From Above\3 Advanced\Joplin - Maple Leaf Rag.mid
        • Size 21KB
        • SHA256 89d2a6bfa077ddb161d960dd371d913753a5317eeec8f99c9a3a591514df74c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DirectX.log

        • Path C:\Windows\Logs\DirectX.log
        • Size 54KB
        • SHA256 9ccf9b58eb32d81214d88aff57d4aff18d0433b0b66777661477c35f7c9753f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DirectX.log

        • Path C:\Windows\Logs\DirectX.log
        • Size 61KB
        • SHA256 24831094dc0fb829fa88b9e5f9a01bf072bcae2a393bb7780664d7da039522e0
        • MD5 SHA1 SHA512 SSDEEP TLSH