Analysis

  • user interaction
    yes
  • max time kernel
    900s
  • max time network
    903s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    04/08/2026, 14:36

General

  • Target
    Installer-1.0.6.exe
  • Size 12.0MB
  • Sample260804-ryyffscd34
  • SHA256 37bf42ea69b77a3d13426f3c271bd51e0f32d58a0ad6d05b3fe90f66605837bf
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Command and Scripting Interpreter: PowerShell 1 TTPs 4 IoCs

    Run Powershell and hide display window.

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Drops desktop.ini file(s) 5 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Drops file in System32 directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 64 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 64 IoCs
  • Modifies registry key 1 TTPs 14 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 43 IoCs
  • Suspicious use of FindShellTrayWindow 23 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs
  • Suspicious use of SetWindowsHookEx 38 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Installer-1.0.6.exe
    "C:\Users\Admin\AppData\Local\Temp\Installer-1.0.6.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious use of WriteProcessMemory
    PID:4224
    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell.exe -NoLogo -NoProfile -NonInteractive -WindowStyle Hidden -ExecutionPolicy Bypass -File bootstrap.ps1
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:3256
      • C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-e5fbe831049b44ad9fc7f44c1fcce180\MadiumInstaller.exe
        "C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-e5fbe831049b44ad9fc7f44c1fcce180\MadiumInstaller.exe" --from-sfx --first-install
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:3312
        • C:\Users\Admin\AppData\Local\Madium\Installer\MadiumInstaller.exe
          C:\Users\Admin\AppData\Local\Madium\Installer\MadiumInstaller.exe --installed
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:3220
          • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
            "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass -Command "$ErrorActionPreference='Stop'; if ($null -eq (Get-Command Get-MpComputerStatus -ErrorAction SilentlyContinue)) { exit 0 }; $status=Get-MpComputerStatus -ErrorAction SilentlyContinue; if ($null -eq $status -or $status.AntivirusEnabled -ne $true) { exit 0 }; $p='C:\Users\Admin\AppData\Local\Madium'.TrimEnd('\'); $current=@((Get-MpPreference -ErrorAction Stop).ExclusionPath); $has=@($current | Where-Object { $_ -and $_.TrimEnd('\') -ieq $p }).Count -gt 0; if (-not $has) { Add-MpPreference -ExclusionPath $p -ErrorAction Stop; $current=@((Get-MpPreference -ErrorAction Stop).ExclusionPath); $has=@($current | Where-Object { $_ -and $_.TrimEnd('\') -ieq $p }).Count -gt 0; if (-not $has) { throw 'Defender did not save the exclusion.' } }"
            5⤵
            • Command and Scripting Interpreter: PowerShell
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:4280
          • C:\Program Files\dotnet\dotnet.exe
            dotnet.exe --list-runtimes
            5⤵
            • System Time Discovery
            PID:2524
          • C:\Windows\System32\reg.exe
            C:\Windows\System32\reg.exe query HKLM\SOFTWARE\Microsoft\VisualStudio\14.0\VC\Runtimes\x64 /v Installed
            5⤵
            • Modifies registry key
            PID:2508
          • C:\Windows\System32\reg.exe
            C:\Windows\System32\reg.exe query HKLM\SOFTWARE\WOW6432Node\Microsoft\VisualStudio\14.0\VC\Runtimes\x64 /v Installed
            5⤵
            • Modifies registry key
            PID:1116
          • C:\Windows\System32\reg.exe
            C:\Windows\System32\reg.exe query HKLM\SOFTWARE\Microsoft\VisualStudio\14.0\VC\Runtimes\x86 /v Installed
            5⤵
            • Modifies registry key
            PID:2020
          • C:\Windows\System32\reg.exe
            C:\Windows\System32\reg.exe query HKLM\SOFTWARE\WOW6432Node\Microsoft\VisualStudio\14.0\VC\Runtimes\x86 /v Installed
            5⤵
            • Modifies registry key
            PID:344
          • C:\Windows\System32\reg.exe
            C:\Windows\System32\reg.exe query HKLM\SOFTWARE\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} /v pv
            5⤵
            • Modifies registry key
            PID:1792
          • C:\Windows\System32\reg.exe
            C:\Windows\System32\reg.exe query HKLM\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} /v pv
            5⤵
            • Modifies registry key
            PID:912
          • C:\Windows\System32\reg.exe
            C:\Windows\System32\reg.exe query HKCU\Software\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} /v pv
            5⤵
            • Modifies registry key
            PID:976
          • C:\Windows\System32\reg.exe
            C:\Windows\System32\reg.exe query "HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full" /v Release
            5⤵
              PID:1108
            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
              C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -NoLogo -NoProfile -NonInteractive -Command "$sig = Get-AuthenticodeSignature -LiteralPath 'C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-redist.exe'; if ($sig.Status -eq 'Valid') { exit 0 }; exit 1"
              5⤵
              • Command and Scripting Interpreter: PowerShell
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of AdjustPrivilegeToken
              PID:1416
            • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
              "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\install.ps1"
              5⤵
              • Command and Scripting Interpreter: PowerShell
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:4972
              • C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-redist.exe
                "C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-redist.exe" /Q /T:"C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files"
                6⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                PID:5012
              • C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\DXSETUP.exe
                "C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\DXSETUP.exe" /silent
                6⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Drops desktop.ini file(s)
                • Drops file in System32 directory
                • Drops file in Windows directory
                • System Location Discovery: System Language Discovery
                • Modifies registry class
                • Suspicious use of WriteProcessMemory
                PID:4572
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx9_24_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:1284
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx9_25_x64.inf
                  7⤵
                  • Executes dropped EXE
                  • Drops file in System32 directory
                  • Drops file in Windows directory
                  PID:1848
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx9_26_x64.inf
                  7⤵
                  • Executes dropped EXE
                  • Drops file in Windows directory
                  PID:5312
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx9_27_x64.inf
                  7⤵
                  • Executes dropped EXE
                  • Drops file in System32 directory
                  • Drops file in Windows directory
                  PID:5592
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx9_28_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:5904
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx9_29_x64.inf
                  7⤵
                  • Executes dropped EXE
                  • Drops file in System32 directory
                  PID:3068
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XACT_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:5468
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_0.dll
                  7⤵
                  • Loads dropped DLL
                  • Modifies registry class
                  PID:4240
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx9_30_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:4276
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XACT2_1_x64.inf
                  7⤵
                  • Executes dropped EXE
                  • Drops file in System32 directory
                  PID:796
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_1.dll
                  7⤵
                  • Loads dropped DLL
                  • Modifies registry class
                  PID:3644
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe xinput1_1_x64.inf, Install_Driver
                  7⤵
                  • Executes dropped EXE
                  • Drops file in System32 directory
                  PID:5136
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XACT2_2_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:2264
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_2.dll
                  7⤵
                  • Loads dropped DLL
                  PID:5408
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe xinput1_2_x64.inf, Install_Driver
                  7⤵
                  • Executes dropped EXE
                  PID:5648
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XACT2_3_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:5692
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_3.dll
                  7⤵
                  • Loads dropped DLL
                  PID:5948
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx9_31_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:2532
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XACT2_4_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:5292
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_4.dll
                  7⤵
                  • Loads dropped DLL
                  • Modifies registry class
                  PID:5488
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx9_32_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:2828
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx10_00_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:3104
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XACT2_5_x64.inf
                  7⤵
                  • Executes dropped EXE
                  • Drops file in Windows directory
                  PID:5240
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_5.dll
                  7⤵
                  • Loads dropped DLL
                  • Modifies registry class
                  PID:4136
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XACT2_6_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:5536
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_6.dll
                  7⤵
                  • Loads dropped DLL
                  • Modifies registry class
                  PID:5580
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx9_33_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:3732
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx10_33_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:6056
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XACT2_7_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:2268
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_7.dll
                  7⤵
                  • Loads dropped DLL
                  PID:4812
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe xinput1_3_x64.inf, Install_Driver
                  7⤵
                  • Executes dropped EXE
                  PID:3224
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx9_34_x64.inf
                  7⤵
                  • Executes dropped EXE
                  • Drops file in Windows directory
                  PID:1232
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx10_34_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:5164
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XACT2_8_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:3488
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_8.dll
                  7⤵
                  • Loads dropped DLL
                  • Modifies registry class
                  PID:6128
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx9_35_x64.inf
                  7⤵
                  • Executes dropped EXE
                  • Drops file in Windows directory
                  PID:5592
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx10_35_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:6120
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XACT2_9_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:2524
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_9.dll
                  7⤵
                  • Loads dropped DLL
                  • Modifies registry class
                  PID:4184
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx9_36_x64.inf
                  7⤵
                  • Executes dropped EXE
                  • Drops file in Windows directory
                  PID:5488
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx10_36_x64.inf
                  7⤵
                  • Executes dropped EXE
                  • Drops file in System32 directory
                  PID:812
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe X3DAudio1_2_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:5140
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XACT2_10_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:5356
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_10.dll
                  7⤵
                  • Modifies registry class
                  PID:5396
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe D3DX9_37_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:5544
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx10_37_x64.inf
                  7⤵
                  • Executes dropped EXE
                  • Drops file in System32 directory
                  PID:5824
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe X3DAudio1_3_x64.inf
                  7⤵
                  • Executes dropped EXE
                  • Drops file in Windows directory
                  PID:1592
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XACT3_0_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:4184
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_0.dll
                  7⤵
                  • Modifies registry class
                  PID:816
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XAudio2_0_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:1328
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_0.dll
                  7⤵
                  • Modifies registry class
                  PID:1280
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe D3DX9_38_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:4540
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx10_38_x64.inf
                  7⤵
                  • Executes dropped EXE
                  • Drops file in System32 directory
                  PID:5136
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe X3DAudio1_4_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:5396
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XACT3_1_x64.inf
                  7⤵
                  • Executes dropped EXE
                  • Drops file in System32 directory
                  • Drops file in Windows directory
                  PID:5544
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_1.dll
                  7⤵
                  • Modifies registry class
                  PID:5628
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XAudio2_1_x64.inf
                  7⤵
                  • Executes dropped EXE
                  • Drops file in System32 directory
                  • Drops file in Windows directory
                  PID:5700
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_1.dll
                  7⤵
                  • Modifies registry class
                  PID:5692
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe D3DX9_39_x64.inf
                  7⤵
                  • Executes dropped EXE
                  • Drops file in System32 directory
                  PID:4796
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx10_39_x64.inf
                  7⤵
                  • Executes dropped EXE
                  • Drops file in System32 directory
                  PID:5552
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XACT3_2_x64.inf
                  7⤵
                  • Executes dropped EXE
                  • Drops file in Windows directory
                  PID:3904
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_2.dll
                  7⤵
                  • Modifies registry class
                  PID:2144
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XAudio2_2_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:4420
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_2.dll
                  7⤵
                  • Modifies registry class
                  PID:2572
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe X3DAudio1_5_x64.inf
                  7⤵
                  • Executes dropped EXE
                  • Drops file in System32 directory
                  PID:4136
                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XACT3_3_x64.inf
                  7⤵
                  • Executes dropped EXE
                  PID:4492
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_3.dll
                  7⤵
                    PID:3248
                  • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                    C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XAudio2_3_x64.inf
                    7⤵
                    • Executes dropped EXE
                    PID:5836
                  • C:\Windows\system32\regsvr32.exe
                    C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_3.dll
                    7⤵
                    • Modifies registry class
                    PID:5776
                  • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                    C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe D3DX9_40_x64.inf
                    7⤵
                    • Executes dropped EXE
                    • Drops file in System32 directory
                    PID:5984
                  • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                    C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx10_40_x64.inf
                    7⤵
                    • Executes dropped EXE
                    • Drops file in System32 directory
                    PID:4444
                  • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                    C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe X3DAudio1_6_x64.inf
                    7⤵
                    • Executes dropped EXE
                    PID:1152
                  • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                    C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XACT3_4_x64.inf
                    7⤵
                    • Executes dropped EXE
                    • Drops file in System32 directory
                    • Drops file in Windows directory
                    PID:5036
                  • C:\Windows\system32\regsvr32.exe
                    C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_4.dll
                    7⤵
                      PID:4608
                    • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                      C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XAudio2_4_x64.inf
                      7⤵
                      • Executes dropped EXE
                      • Drops file in Windows directory
                      PID:3700
                    • C:\Windows\system32\regsvr32.exe
                      C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_4.dll
                      7⤵
                      • Modifies registry class
                      PID:5220
                    • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                      C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe D3DX9_41_x64.inf
                      7⤵
                      • Executes dropped EXE
                      • Drops file in System32 directory
                      PID:5296
                    • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                      C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx10_41_x64.inf
                      7⤵
                      • Executes dropped EXE
                      PID:2344
                    • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                      C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe D3DX9_42_x64.inf
                      7⤵
                      • Executes dropped EXE
                      PID:5920
                    • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                      C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx10_42_x64.inf
                      7⤵
                      • Executes dropped EXE
                      PID:5212
                    • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                      C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx11_42_x64.inf
                      7⤵
                      • Executes dropped EXE
                      • Drops file in System32 directory
                      PID:4348
                    • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                      C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dcsx_42_x64.inf
                      7⤵
                        PID:1280
                      • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                        C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe D3DCompiler_42_x64.inf
                        7⤵
                        • Drops file in Windows directory
                        PID:2172
                      • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                        C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XACT3_5_x64.inf
                        7⤵
                        • Drops file in Windows directory
                        PID:216
                      • C:\Windows\system32\regsvr32.exe
                        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_5.dll
                        7⤵
                        • Modifies registry class
                        PID:5788
                      • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                        C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XAudio2_5_x64.inf
                        7⤵
                        • Drops file in System32 directory
                        PID:3188
                      • C:\Windows\system32\regsvr32.exe
                        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_5.dll
                        7⤵
                        • Modifies registry class
                        PID:5284
                      • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                        C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe X3DAudio1_7_x64.inf
                        7⤵
                          PID:2096
                        • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                          C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XACT3_6_x64.inf
                          7⤵
                            PID:5912
                          • C:\Windows\system32\regsvr32.exe
                            C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_6.dll
                            7⤵
                            • Modifies registry class
                            PID:2564
                          • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                            C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XAudio2_6_x64.inf
                            7⤵
                              PID:4312
                            • C:\Windows\system32\regsvr32.exe
                              C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_6.dll
                              7⤵
                              • Modifies registry class
                              PID:3480
                            • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                              C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe D3DX9_43_x64.inf
                              7⤵
                                PID:3552
                              • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                                C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx10_43_x64.inf
                                7⤵
                                  PID:3908
                                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dx11_43_x64.inf
                                  7⤵
                                  • Drops file in Windows directory
                                  PID:4100
                                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe d3dcsx_43_x64.inf
                                  7⤵
                                  • Drops file in Windows directory
                                  PID:5184
                                • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                                  C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe D3DCompiler_43_x64.inf
                                  7⤵
                                    PID:5324
                                  • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                                    C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XACT3_7_x64.inf
                                    7⤵
                                    • Drops file in Windows directory
                                    PID:4832
                                  • C:\Windows\system32\regsvr32.exe
                                    C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_7.dll
                                    7⤵
                                    • Modifies registry class
                                    PID:5596
                                  • C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                                    C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe XAudio2_7_x64.inf
                                    7⤵
                                    • Drops file in System32 directory
                                    • Drops file in Windows directory
                                    PID:4616
                                  • C:\Windows\system32\regsvr32.exe
                                    C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_7.dll
                                    7⤵
                                    • Modifies registry class
                                    PID:4716
                              • C:\Program Files\dotnet\dotnet.exe
                                dotnet.exe --list-runtimes
                                5⤵
                                • System Time Discovery
                                PID:5624
                              • C:\Windows\System32\reg.exe
                                C:\Windows\System32\reg.exe query HKLM\SOFTWARE\Microsoft\VisualStudio\14.0\VC\Runtimes\x64 /v Installed
                                5⤵
                                • Modifies registry key
                                PID:5644
                              • C:\Windows\System32\reg.exe
                                C:\Windows\System32\reg.exe query HKLM\SOFTWARE\WOW6432Node\Microsoft\VisualStudio\14.0\VC\Runtimes\x64 /v Installed
                                5⤵
                                • Modifies registry key
                                PID:1048
                              • C:\Windows\System32\reg.exe
                                C:\Windows\System32\reg.exe query HKLM\SOFTWARE\Microsoft\VisualStudio\14.0\VC\Runtimes\x86 /v Installed
                                5⤵
                                • Modifies registry key
                                PID:5684
                              • C:\Windows\System32\reg.exe
                                C:\Windows\System32\reg.exe query HKLM\SOFTWARE\WOW6432Node\Microsoft\VisualStudio\14.0\VC\Runtimes\x86 /v Installed
                                5⤵
                                • Modifies registry key
                                PID:3676
                                • C:\Windows\System32\Conhost.exe
                                  \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                  6⤵
                                    PID:2344
                                • C:\Windows\System32\reg.exe
                                  C:\Windows\System32\reg.exe query HKLM\SOFTWARE\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} /v pv
                                  5⤵
                                  • Modifies registry key
                                  PID:4896
                                • C:\Windows\System32\reg.exe
                                  C:\Windows\System32\reg.exe query HKLM\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} /v pv
                                  5⤵
                                  • Modifies registry key
                                  PID:3704
                                • C:\Windows\System32\reg.exe
                                  C:\Windows\System32\reg.exe query HKCU\Software\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} /v pv
                                  5⤵
                                  • Modifies registry key
                                  PID:1128
                                • C:\Windows\System32\reg.exe
                                  C:\Windows\System32\reg.exe query "HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full" /v Release
                                  5⤵
                                    PID:5884
                                  • C:\Users\Admin\AppData\Local\Madium\Bin\Madium.exe
                                    "C:\Users\Admin\AppData\Local\Madium\Bin\Madium.exe"
                                    5⤵
                                    • Checks whether UAC is enabled
                                    • Suspicious behavior: EnumeratesProcesses
                                    • Suspicious use of FindShellTrayWindow
                                    PID:5660
                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=5660.4512.5716910343375351797
                                      6⤵
                                      • Drops file in Windows directory
                                      • Enumerates system info in registry
                                      • Modifies data under HKEY_USERS
                                      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                      PID:3208
                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x188,0x18c,0x190,0x164,0x198,0x7ffbe519b078,0x7ffbe519b084,0x7ffbe519b090
                                        7⤵
                                          PID:5028
                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1884,i,14231960741768003731,14528407969953949228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1840 /prefetch:2
                                          7⤵
                                            PID:1684
                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1988,i,14231960741768003731,14528407969953949228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:3
                                            7⤵
                                              PID:5976
                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2072,i,14231960741768003731,14528407969953949228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:8
                                              7⤵
                                                PID:2796
                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3484,i,14231960741768003731,14528407969953949228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
                                                7⤵
                                                  PID:3672
                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4764,i,14231960741768003731,14528407969953949228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:8
                                                  7⤵
                                                    PID:5792
                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4820,i,14231960741768003731,14528407969953949228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:8
                                                    7⤵
                                                      PID:3056
                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4636,i,14231960741768003731,14528407969953949228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:8
                                                      7⤵
                                                        PID:4976
                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4884,i,14231960741768003731,14528407969953949228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:8
                                                        7⤵
                                                          PID:600
                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1004,i,14231960741768003731,14528407969953949228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:8
                                                          7⤵
                                                            PID:5196
                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4904,i,14231960741768003731,14528407969953949228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:8
                                                            7⤵
                                                              PID:5320
                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4788,i,14231960741768003731,14528407969953949228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:8
                                                              7⤵
                                                                PID:3608
                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4880,i,14231960741768003731,14528407969953949228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=780 /prefetch:8
                                                                7⤵
                                                                  PID:3824
                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4800,i,14231960741768003731,14528407969953949228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:8
                                                                  7⤵
                                                                    PID:6600
                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5016,i,14231960741768003731,14528407969953949228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:8
                                                                    7⤵
                                                                      PID:6516
                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1184,i,14231960741768003731,14528407969953949228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:8
                                                                      7⤵
                                                                        PID:816
                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4312,i,14231960741768003731,14528407969953949228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:8
                                                                        7⤵
                                                                          PID:5264
                                                                      • C:\Users\Admin\AppData\Local\Madium\Bin\lsp\luau-lsp.exe
                                                                        "C:\Users\Admin\AppData\Local\Madium\Bin\lsp\luau-lsp.exe" lsp --definitions:@roblox=C:\Users\Admin\AppData\Local\Madium\Tools\lsp\globalTypes.d.luau --docs=C:\Users\Admin\AppData\Local\Madium\Tools\lsp\docs.json
                                                                        6⤵
                                                                          PID:5252
                                                              • C:\Windows\system32\vssvc.exe
                                                                C:\Windows\system32\vssvc.exe
                                                                1⤵
                                                                • Checks SCSI registry key(s)
                                                                • Suspicious use of AdjustPrivilegeToken
                                                                PID:3876
                                                              • C:\Windows\system32\srtasks.exe
                                                                C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
                                                                1⤵
                                                                • Suspicious use of AdjustPrivilegeToken
                                                                PID:1224
                                                              • C:\Windows\system32\DllHost.exe
                                                                C:\Windows\system32\DllHost.exe /Processid:{F32D97DF-E3E5-4CB9-9E3E-0EB5B4E49801}
                                                                1⤵
                                                                  PID:6120
                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe"
                                                                  1⤵
                                                                    PID:4888
                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe"
                                                                      2⤵
                                                                      • Drops desktop.ini file(s)
                                                                      • Checks processor information in registry
                                                                      • Modifies registry class
                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                      • Suspicious use of FindShellTrayWindow
                                                                      • Suspicious use of SendNotifyMessage
                                                                      • Suspicious use of SetWindowsHookEx
                                                                      PID:2096
                                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2012 -prefsLen 27100 -prefMapHandle 2016 -prefMapSize 270279 -ipcHandle 2104 -initialChannelId {efe07b5a-db6f-44a1-a942-73e76377d78b} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
                                                                        3⤵
                                                                          PID:4616
                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2480 -prefsLen 27136 -prefMapHandle 2484 -prefMapSize 270279 -ipcHandle 2492 -initialChannelId {653fcb1d-b3a0-459b-bc59-3de0d1df5181} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
                                                                          3⤵
                                                                            PID:5876
                                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3860 -prefsLen 27277 -prefMapHandle 3864 -prefMapSize 270279 -jsInitHandle 3868 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3876 -initialChannelId {e9da23cb-9a9c-4c6c-b001-2ee7222e8ecb} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
                                                                            3⤵
                                                                            • Checks processor information in registry
                                                                            PID:1460
                                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4048 -prefsLen 27277 -prefMapHandle 4052 -prefMapSize 270279 -ipcHandle 4068 -initialChannelId {b789cc8b-caa5-40a8-9cf5-2cb58df13de0} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
                                                                            3⤵
                                                                              PID:4548
                                                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3212 -prefsLen 34776 -prefMapHandle 3220 -prefMapSize 270279 -jsInitHandle 3224 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4468 -initialChannelId {a696d078-8781-433d-b372-e28cd871c3ef} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
                                                                              3⤵
                                                                              • Checks processor information in registry
                                                                              PID:2996
                                                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4908 -prefsLen 35013 -prefMapHandle 4916 -prefMapSize 270279 -ipcHandle 4924 -initialChannelId {101ffc95-f964-4405-a238-d1156ffbad4d} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
                                                                              3⤵
                                                                              • Checks processor information in registry
                                                                              PID:2508
                                                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5220 -prefsLen 32900 -prefMapHandle 5224 -prefMapSize 270279 -jsInitHandle 5228 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5164 -initialChannelId {7b91d78a-9d68-46e0-b1b5-41a27da22eea} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
                                                                              3⤵
                                                                                PID:5364
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5388 -prefsLen 32900 -prefMapHandle 5392 -prefMapSize 270279 -jsInitHandle 5396 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5404 -initialChannelId {4f77b5b7-a57d-41d7-9c28-0b622633a031} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
                                                                                3⤵
                                                                                • Checks processor information in registry
                                                                                PID:2516
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5596 -prefsLen 32900 -prefMapHandle 5600 -prefMapSize 270279 -jsInitHandle 5604 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5440 -initialChannelId {d382eb1e-0047-4e6f-aa4d-dcd8e8e3b47d} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
                                                                                3⤵
                                                                                • Checks processor information in registry
                                                                                PID:1992
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4384 -prefsLen 37187 -prefMapHandle 3004 -prefMapSize 270279 -jsInitHandle 4776 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4892 -initialChannelId {2a693b6f-5fc3-4210-81ed-f3d583f0d0b1} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
                                                                                3⤵
                                                                                • Checks processor information in registry
                                                                                PID:5668
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7768 -prefsLen 37187 -prefMapHandle 7336 -prefMapSize 270279 -jsInitHandle 7812 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7012 -initialChannelId {320fdbde-1611-4d46-9813-a9f4eb61dbcf} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
                                                                                3⤵
                                                                                • Checks processor information in registry
                                                                                PID:4804
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7484 -prefsLen 37187 -prefMapHandle 8116 -prefMapSize 270279 -jsInitHandle 5604 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8040 -initialChannelId {4f287399-0b0d-4910-9211-ebf0bbbf4aa0} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
                                                                                3⤵
                                                                                • Checks processor information in registry
                                                                                PID:7044
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 19756 -prefsLen 37187 -prefMapHandle 19760 -prefMapSize 270279 -jsInitHandle 19764 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6408 -initialChannelId {f200821c-58fb-4be2-a9cd-1c4619774773} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
                                                                                3⤵
                                                                                • Checks processor information in registry
                                                                                PID:448
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12136 -prefsLen 37187 -prefMapHandle 12128 -prefMapSize 270279 -jsInitHandle 12140 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6948 -initialChannelId {de7b2382-aee2-4403-9c7b-c63cf9a8e7b5} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
                                                                                3⤵
                                                                                • Checks processor information in registry
                                                                                PID:6428
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6096 -prefsLen 37187 -prefMapHandle 13256 -prefMapSize 270279 -jsInitHandle 13928 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6400 -initialChannelId {6023c26d-3b51-4a2b-a06c-da804057eb7c} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
                                                                                3⤵
                                                                                • Checks processor information in registry
                                                                                PID:5696
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 13432 -prefsLen 37187 -prefMapHandle 13928 -prefMapSize 270279 -jsInitHandle 6400 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11152 -initialChannelId {220f67e6-6751-42f1-b946-3a773105cc37} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
                                                                                3⤵
                                                                                • Checks processor information in registry
                                                                                PID:6832
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7860 -prefsLen 37187 -prefMapHandle 7100 -prefMapSize 270279 -jsInitHandle 7244 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7096 -initialChannelId {a624a721-c98d-495c-b072-f3b3ee6b749f} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
                                                                                3⤵
                                                                                • Checks processor information in registry
                                                                                PID:3472
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5664 -prefsLen 37187 -prefMapHandle 5668 -prefMapSize 270279 -jsInitHandle 5652 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5700 -initialChannelId {4b7d64ed-8c8d-4381-b58d-93e7f248f26e} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 tab
                                                                                3⤵
                                                                                • Checks processor information in registry
                                                                                PID:1416
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 31712 -prefsLen 37187 -prefMapHandle 26696 -prefMapSize 270279 -jsInitHandle 13444 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 26724 -initialChannelId {476c14ed-103a-4342-9078-f89fe0dc48e0} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 19 tab
                                                                                3⤵
                                                                                • Checks processor information in registry
                                                                                PID:6176
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 13212 -prefsLen 37187 -prefMapHandle 13356 -prefMapSize 270279 -jsInitHandle 13436 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 26292 -initialChannelId {c1055e42-d7cc-4a12-9e26-ede23ba6e5fb} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 20 tab
                                                                                3⤵
                                                                                • Checks processor information in registry
                                                                                PID:3840
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7920 -prefsLen 37187 -prefMapHandle 8472 -prefMapSize 270279 -jsInitHandle 8400 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12608 -initialChannelId {33b28249-0277-4096-9349-718ff79ff334} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 21 tab
                                                                                3⤵
                                                                                • Checks processor information in registry
                                                                                PID:3836
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12540 -prefsLen 37187 -prefMapHandle 8160 -prefMapSize 270279 -jsInitHandle 12848 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 26388 -initialChannelId {698802fd-f951-40b7-a4d3-d5e49edeb1f6} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 22 tab
                                                                                3⤵
                                                                                • Checks processor information in registry
                                                                                PID:2128
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11908 -prefsLen 37187 -prefMapHandle 5528 -prefMapSize 270279 -jsInitHandle 5924 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5880 -initialChannelId {9f363311-d064-4ede-b1f2-d4d1639d13b3} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 23 tab
                                                                                3⤵
                                                                                • Checks processor information in registry
                                                                                PID:1744
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 27932 -prefsLen 37187 -prefMapHandle 11340 -prefMapSize 270279 -jsInitHandle 31656 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 31676 -initialChannelId {8d6ebda6-d6a3-414b-b51e-9eb8d68010aa} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 24 tab
                                                                                3⤵
                                                                                • Checks processor information in registry
                                                                                PID:6168
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11368 -prefsLen 37187 -prefMapHandle 11312 -prefMapSize 270279 -jsInitHandle 11620 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10216 -initialChannelId {49ed8922-5d18-4143-8ce9-140efae476d0} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 25 tab
                                                                                3⤵
                                                                                • Checks processor information in registry
                                                                                PID:5312
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 29744 -prefsLen 37187 -prefMapHandle 30020 -prefMapSize 270279 -jsInitHandle 11652 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 29816 -initialChannelId {8933cb27-7bed-499b-a918-fe2e319d437d} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 26 tab
                                                                                3⤵
                                                                                • Checks processor information in registry
                                                                                PID:1988
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 13104 -prefsLen 37187 -prefMapHandle 12168 -prefMapSize 270279 -jsInitHandle 29936 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 26732 -initialChannelId {21a4be6e-9fb6-46f1-8f17-6e8304c574f2} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 27 tab
                                                                                3⤵
                                                                                  PID:6656
                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8400 -prefsLen 37187 -prefMapHandle 8440 -prefMapSize 270279 -jsInitHandle 7920 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7184 -initialChannelId {cfc36eb9-ac6a-4a0d-af66-79e405297590} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 28 tab
                                                                                  3⤵
                                                                                  • Checks processor information in registry
                                                                                  PID:5196
                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 29380 -prefsLen 37187 -prefMapHandle 29440 -prefMapSize 270279 -jsInitHandle 31688 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6972 -initialChannelId {a87caa7f-74a7-4f96-90b8-8e3076b28d20} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 29 tab
                                                                                  3⤵
                                                                                  • Checks processor information in registry
                                                                                  PID:5008
                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 30224 -prefsLen 37187 -prefMapHandle 6516 -prefMapSize 270279 -jsInitHandle 11880 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7536 -initialChannelId {60969786-78ef-4cb7-a2db-bf173a07598a} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 30 tab
                                                                                  3⤵
                                                                                  • Checks processor information in registry
                                                                                  PID:5432
                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 29700 -prefsLen 37187 -prefMapHandle 30136 -prefMapSize 270279 -jsInitHandle 30128 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 26752 -initialChannelId {6aafe969-565a-42e8-9ca6-3bbee0504e43} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 31 tab
                                                                                  3⤵
                                                                                  • Checks processor information in registry
                                                                                  PID:6480
                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 30104 -prefsLen 37187 -prefMapHandle 12224 -prefMapSize 270279 -jsInitHandle 5736 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 30168 -initialChannelId {b376f67f-2992-4a6a-bb97-2810cdd0a026} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 32 tab
                                                                                  3⤵
                                                                                  • Checks processor information in registry
                                                                                  PID:6576
                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5836 -prefsLen 37187 -prefMapHandle 11656 -prefMapSize 270279 -jsInitHandle 12624 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 29672 -initialChannelId {2d7ea9a5-b131-494b-b4af-0b95ae42cf11} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 33 tab
                                                                                  3⤵
                                                                                  • Checks processor information in registry
                                                                                  PID:7108
                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5160 -prefsLen 37187 -prefMapHandle 11432 -prefMapSize 270279 -jsInitHandle 26444 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11656 -initialChannelId {002e5ebb-5311-480c-b2a1-c950e00a84be} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 34 tab
                                                                                  3⤵
                                                                                  • Checks processor information in registry
                                                                                  PID:5216
                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 26476 -prefsLen 40405 -prefMapHandle 26472 -prefMapSize 270279 -ipcHandle 11572 -initialChannelId {c0811d72-d311-4d76-b348-1b8e6a117855} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 35 utility
                                                                                  3⤵
                                                                                  • Checks processor information in registry
                                                                                  PID:7000
                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 11432 -prefsLen 40405 -prefMapHandle 30512 -prefMapSize 270279 -ipcHandle 26456 -initialChannelId {766cc29c-0f74-4f7a-b3d2-fe1725b985e4} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -appDir "C:\Program Files\Mozilla Firefox\browser" - 36 utility
                                                                                  3⤵
                                                                                  • Checks processor information in registry
                                                                                  PID:2560
                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 26536 -prefsLen 37187 -prefMapHandle 11444 -prefMapSize 270279 -jsInitHandle 5676 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12428 -initialChannelId {7d4a2574-7a1f-4067-9e9f-0529ca6fce53} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 37 tab
                                                                                  3⤵
                                                                                  • Checks processor information in registry
                                                                                  PID:5196
                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 31576 -prefsLen 37187 -prefMapHandle 6628 -prefMapSize 270279 -jsInitHandle 5356 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2684 -initialChannelId {1fb18e2c-d7a6-4d9a-92ce-45b1ca19c980} -parentPid 2096 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2096" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 38 tab
                                                                                  3⤵
                                                                                  • Checks processor information in registry
                                                                                  PID:3288

                                                                            Network

                                                                                  MITRE ATT&CK Enterprise v16

                                                                                  Replay Monitor

                                                                                  Loading Replay Monitor...

                                                                                  Downloads

                                                                                  Madium.exe.download

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\Bin\Madium.exe.download
                                                                                  • Size 12.0MB
                                                                                  • SHA256 efd75eba74c4e6ff9eabf11f68036283f869ca5457eefb437638f1181392c279
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Apr2005_d3dx9_25_x64.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2005_d3dx9_25_x64.cab
                                                                                  • Size 1.3MB
                                                                                  • SHA256 b4188ce988af9c4771ae0abcc7edc42a091133f9f20196564f51755dc55ea85d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Apr2005_d3dx9_25_x86.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2005_d3dx9_25_x86.cab
                                                                                  • Size 1.0MB
                                                                                  • SHA256 6ebfb6ed6ac0b69502a5b74e2edca188872fe767269c4ebf62f174157d198de4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Apr2006_MDX1_x86.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2006_MDX1_x86.cab
                                                                                  • Size 894KB
                                                                                  • SHA256 0e3b4b9d5a45884620820d0e9cfed852b03dfb44e443179a35e93f3183384db3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Apr2006_MDX1_x86_Archive.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2006_MDX1_x86_Archive.cab
                                                                                  • Size 4.0MB
                                                                                  • SHA256 0a051a9b50f58dc631254102ac885942ced67c2911950de0cdd93cd1cd9453ec
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Apr2006_XACT_x64.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2006_XACT_x64.cab
                                                                                  • Size 174KB
                                                                                  • SHA256 002f45af20e43a24abee7a79c5add11987c88140b84e2ecd33c0c67259c7f71b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Apr2006_XACT_x86.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2006_XACT_x86.cab
                                                                                  • Size 129KB
                                                                                  • SHA256 875662d0fc1fe865bf43e7279fd391e88f96b3141c1a829ab3080d547501ff8f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Apr2006_d3dx9_30_x64.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2006_d3dx9_30_x64.cab
                                                                                  • Size 1.3MB
                                                                                  • SHA256 079f61e155695a61a0ce009ee00cf76fbf6b2b9b412c1a5b4a2035d4b5c90a5b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Apr2006_d3dx9_30_x86.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2006_d3dx9_30_x86.cab
                                                                                  • Size 1.1MB
                                                                                  • SHA256 4b5da79e14ef58f2608fc5ccedfc7c6c6f782291aa5573f36af76f2903173db5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Apr2006_xinput_x64.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2006_xinput_x64.cab
                                                                                  • Size 85KB
                                                                                  • SHA256 48da57aa045a877053a481802fdb3ec5782615d9ad85a8c06612bd80272e75d7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Apr2006_xinput_x86.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2006_xinput_x86.cab
                                                                                  • Size 44KB
                                                                                  • SHA256 a9b3dd45926364d79b42b75d8064c814ff428437143c59b1c703ec8323305fbb
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Aug2005_d3dx9_27_x64.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Aug2005_d3dx9_27_x64.cab
                                                                                  • Size 1.3MB
                                                                                  • SHA256 281d20c56caa3a2851199c028d4d20ef0a862cc3f84b165eb200da573d9e4401
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Aug2005_d3dx9_27_x86.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Aug2005_d3dx9_27_x86.cab
                                                                                  • Size 1.0MB
                                                                                  • SHA256 7a10900872ecd9bdbc8f7beb7869a260fa4b25e34084f237f1b096df5371c273
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Aug2006_xinput_x86.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Aug2006_xinput_x86.cab
                                                                                  • Size 44KB
                                                                                  • SHA256 ad2b521d1a7abca6314eaeacb23690b63b2a17adbb2a47d3d69cc4660c7d2152
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Dec2005_d3dx9_28_x64.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Dec2005_d3dx9_28_x64.cab
                                                                                  • Size 1.3MB
                                                                                  • SHA256 8231b38a0ab70018f15d7239ed96e5f2bc89ddae6cf9650c9d7bd052b96877e3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Dec2005_d3dx9_28_x86.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Dec2005_d3dx9_28_x86.cab
                                                                                  • Size 1.0MB
                                                                                  • SHA256 bdee0708db956a4ce59220626106a2df70ede2e1e32f29e432254b04876fa7b9
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Feb2005_d3dx9_24_x64.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2005_d3dx9_24_x64.cab
                                                                                  • Size 1.2MB
                                                                                  • SHA256 48eeeecd6411039b23f32b7b22c8d40bce45280af5f8b066edd6cf30284b90ca
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Feb2005_d3dx9_24_x86.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2005_d3dx9_24_x86.cab
                                                                                  • Size 989KB
                                                                                  • SHA256 12e2aab3dbaee503724a5505a6f6951f07306578801a4b5b6b9b54514275ce79
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Feb2006_XACT_x64.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2006_XACT_x64.cab
                                                                                  • Size 174KB
                                                                                  • SHA256 ea39caab8e071df53c2f44c19fb2ff6e2f6af4ef47f0c66d8e7b1b0918d6745f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Feb2006_XACT_x86.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2006_XACT_x86.cab
                                                                                  • Size 129KB
                                                                                  • SHA256 633a1fe357e57bbb8e058e1e029f61f379ab936a85c5d30ee442d804a1806868
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Feb2006_d3dx9_29_x64.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2006_d3dx9_29_x64.cab
                                                                                  • Size 1.3MB
                                                                                  • SHA256 405bd17fe25128a91693807a6008031d87c005ba93d016cbab6276891d3bc6bb
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Feb2006_d3dx9_29_x86.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2006_d3dx9_29_x86.cab
                                                                                  • Size 1.0MB
                                                                                  • SHA256 20231448d5d74b7df1e43d796d76381d563699f81944c7ad9ccbcc1a77a5591e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Jun2005_d3dx9_26_x64.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Jun2005_d3dx9_26_x64.cab
                                                                                  • Size 1.3MB
                                                                                  • SHA256 7237630b897ce760948d9144151ef27c0699fb76150b5f157676fa2d220a236f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Jun2005_d3dx9_26_x86.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Jun2005_d3dx9_26_x86.cab
                                                                                  • Size 1.0MB
                                                                                  • SHA256 b448d7ba5b6fe1dc27639d42eb6ba0a997a793135678c729ba6756cfe4efc38b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Jun2006_XACT_x64.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Jun2006_XACT_x64.cab
                                                                                  • Size 176KB
                                                                                  • SHA256 e7bddd9db994cbb19671d45216edf40ffb3a77068cc97fbeb4c4e41e0d073501
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Jun2006_XACT_x86.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Jun2006_XACT_x86.cab
                                                                                  • Size 130KB
                                                                                  • SHA256 c1a1348611259756b5921d43f9fd9f2a5b40a48af88ea679a40263a2aca029ec
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Oct2005_xinput_x64.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Oct2005_xinput_x64.cab
                                                                                  • Size 84KB
                                                                                  • SHA256 10f2bcfcc38d3150bc80eb0030a1cd40084f1ec028dc927543c485d54ec35022
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Oct2005_xinput_x86.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Oct2005_xinput_x86.cab
                                                                                  • Size 44KB
                                                                                  • SHA256 f2d475864e34409fb586093f92390e1f47403867c39ac30918941f19f3fccb0f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  dxdllreg_x86.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\dxdllreg_x86.cab
                                                                                  • Size 43KB
                                                                                  • SHA256 4afe0249a13868b7c4a92b4d53c998adf6053eb5e2c47fd81020fd8d4bb11150
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  dxupdate.cab

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\dxupdate.cab
                                                                                  • Size 94KB
                                                                                  • SHA256 e18a5404b612e88fa8b403c9b33f064c0a89528db7ef9a79aa116908d0e6afed
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  DSETUP32.DLL

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\DSETUP32.DLL
                                                                                  • Size 1.5MB
                                                                                  • SHA256 fb0e534f9b0926e518f1c2980640dfd29f14217cdfa37cf3a0c13349127ed9a8
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  DXSETUP.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\DXSETUP.exe
                                                                                  • Size 505KB
                                                                                  • SHA256 8f47d7121ef6532ad9ad9901e44e237f5c30448b752028c58a9d19521414e40d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  dsetup.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\dsetup.dll
                                                                                  • Size 93KB
                                                                                  • SHA256 2a61679eeedabf7d0d0ac14e5447486575622d6b7cfa56f136c1576ff96da21f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  install.ps1

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\install.ps1
                                                                                  • Size 2KB
                                                                                  • SHA256 7f7eb8cf4fba079948705a83f968f52937c9f1733e752eda436ba6319cd5bece
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  globalTypes.d.luau

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\Tools\lsp\globalTypes.d.luau
                                                                                  • Size 751KB
                                                                                  • SHA256 dca06de17994c51bdd3f5f9fe8610fd38277a14b95a88a09527104392d317c86
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  settings.dat

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Crashpad\settings.dat
                                                                                  • Size 280B
                                                                                  • SHA256 4acce38bb6263ee7f6f3c8d320321e672684650f168d3e80efee231514183b33
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  the-real-index

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                  • Size 240B
                                                                                  • SHA256 39d49409ca20dcc939aa6dcf828292763e8e3ee0a91576df15c03f8ea23c5616
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  the-real-index~RFe5cef78.TMP

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5cef78.TMP
                                                                                  • Size 48B
                                                                                  • SHA256 51dc18b856cc3c8ede34b750aac72f11865f04a462f4195cfc3851208d5ba32c
                                                                                  • MD5 SHA1 SHA512

                                                                                  MANIFEST-000001

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\Extension Rules\MANIFEST-000001
                                                                                  • Size 41B
                                                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                  • MD5 SHA1 SHA512

                                                                                  Network Persistent State

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\Network\Network Persistent State
                                                                                  • Size 1KB
                                                                                  • SHA256 05b6df654bd2631ad9c560e98fe3d4b375c3236618bf418e4da23108e251824a
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Network Persistent State~RFe5db1fd.TMP

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\Network\Network Persistent State~RFe5db1fd.TMP
                                                                                  • Size 59B
                                                                                  • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  SCT Auditing Pending Reports

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\Network\SCT Auditing Pending Reports
                                                                                  • Size 2B
                                                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                  • MD5 SHA1 SHA512

                                                                                  Preferences

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\Preferences
                                                                                  • Size 6KB
                                                                                  • SHA256 333876f80fe7fae51447a16663f0fa5a5af3f90e49bf43bd2a7757013409cbb5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Preferences~RFe5d38d5.TMP

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\Preferences~RFe5d38d5.TMP
                                                                                  • Size 6KB
                                                                                  • SHA256 e4b8e1aa4dda78dc350bbf1a3301f8c42c19cced6eaf044ccbfca857d00f77e6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  CURRENT

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\Sync Data\LevelDB\CURRENT
                                                                                  • Size 16B
                                                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                  • MD5 SHA1 SHA512

                                                                                  data_0

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\GrShaderCache\data_0
                                                                                  • Size 8KB
                                                                                  • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                  data_1

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\GrShaderCache\data_1
                                                                                  • Size 264KB
                                                                                  • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                  data_2

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\GrShaderCache\data_2
                                                                                  • Size 8KB
                                                                                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                  data_3

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\GrShaderCache\data_3
                                                                                  • Size 8KB
                                                                                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                  Local State

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Local State
                                                                                  • Size 1KB
                                                                                  • SHA256 5842fbdbbc4c84f7207aa68334c4bf3eb64ac2695d069de3662ef07aae93999e
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Local State

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Local State
                                                                                  • Size 2KB
                                                                                  • SHA256 0a6bb66647199e5af383eff1b4b66ab4df2f7f756f0bf9d66822ee9508eacf92
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Local State

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Local State
                                                                                  • Size 3KB
                                                                                  • SHA256 ee705128f3ec8ac78459a624c261002d8c8809115c02bfba7d7fdc18b6343dd0
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Local State

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Local State
                                                                                  • Size 16KB
                                                                                  • SHA256 a30880231d61f828a8d3ff3ce3053dda8ec6b4e46a85004dd6232268757d9068
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Local State

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Local State
                                                                                  • Size 18KB
                                                                                  • SHA256 f41daab975d4d9549b9bf76d230acedf8166130cc4be993018f9b68ea058ecf6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Local State~RFe5c9b8c.TMP

                                                                                  • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Local State~RFe5c9b8c.TMP
                                                                                  • Size 1KB
                                                                                  • SHA256 d608711deb051360df06e85ce3d11a58efc72472bdbc2d7c67ecae343f6c3d93
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  powershell.exe.log

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log
                                                                                  • Size 3KB
                                                                                  • SHA256 c485a6e2fd17c342fca60060f47d6a5655a65a412e35e001bb5bf88d96e6e485
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ModuleAnalysisCache

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache
                                                                                  • Size 54KB
                                                                                  • SHA256 268bee1ca34ec3bacfd3dea7c2c70052814090f04aea2e19940df5791cf51dee
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  StartupProfileData-NonInteractive

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                                                                  • Size 1KB
                                                                                  • SHA256 084bb2e16783789133cab9dc4025c49514accd12f41a808994837f6c9a551781
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  StartupProfileData-NonInteractive

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                                                                  • Size 1020B
                                                                                  • SHA256 a090fa37860d7a9781298e7f13cbcbc02a4ad5432d51145435079a2821bfa45f
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  activity-stream.contile.json

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\activity-stream.contile.json
                                                                                  • Size 5KB
                                                                                  • SHA256 045d26f6b4d868f34ffe3cc841b6d427569a6620a2e34bf41b458870a61d4bc7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  04BE9F84BABAD90191A02931D44DF40AABDEBB28

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\04BE9F84BABAD90191A02931D44DF40AABDEBB28
                                                                                  • Size 592KB
                                                                                  • SHA256 0e55bc4ace4b4ba7032559a6f663d282ce005678dc80c63a22730c574089367c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  1E69497351989CF3638D1586F670F0A139B02A0B

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\1E69497351989CF3638D1586F670F0A139B02A0B
                                                                                  • Size 30KB
                                                                                  • SHA256 730f54955b4b7471122e0eae01edde8a2c7b4bce5857eaf31c326619c3ca1646
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  2EA3A1A4EBC50B3482603235430F9368EE8ACD4B

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\2EA3A1A4EBC50B3482603235430F9368EE8ACD4B
                                                                                  • Size 290KB
                                                                                  • SHA256 135c5299c35e6cf5e275272932e9c456b43660511d72eaba6c0d1f22040c2f78
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  3C41307E41E4622659D523FD19E0578D9C1ADD23

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\3C41307E41E4622659D523FD19E0578D9C1ADD23
                                                                                  • Size 505KB
                                                                                  • SHA256 d20685721bcc876dc3a8773e833ae3b08d4d0c59a442323d04865e25a9407bbd
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
                                                                                  • Size 16KB
                                                                                  • SHA256 4ecc7f88bfc15c250263aaccd855be5f828a98d577e9bfadad1d52ff325f3e7c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  523200E686755D047457C56C0718E087E6BE5A61

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\523200E686755D047457C56C0718E087E6BE5A61
                                                                                  • Size 16KB
                                                                                  • SHA256 fb1dbc7dadcb73d060ad9a5a5d17b15dbb685d8622f55b14bc055d2a71f1eeaa
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  67CC60409298FEF4225EFD40D57CA46EBACDE4FB

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\67CC60409298FEF4225EFD40D57CA46EBACDE4FB
                                                                                  • Size 582KB
                                                                                  • SHA256 7e532328a7e56696b3cb876b5878234483300868f8b833dac4282cf6717b9893
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  715BC26FBCC6E98873345FD1D1B2EC542F191D7E

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\715BC26FBCC6E98873345FD1D1B2EC542F191D7E
                                                                                  • Size 38KB
                                                                                  • SHA256 04fa5b244b00e1f1f32f94b7f2bd7c14f0868f9216f000f240905c06cb163e43
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  72AAA38A8EDA3FC12BE1F2399B39473015FE5257

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\72AAA38A8EDA3FC12BE1F2399B39473015FE5257
                                                                                  • Size 82KB
                                                                                  • SHA256 f0059bda2090190f2c26f30b82736d17b52b7638d83f42a4c68788edad75d186
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  88B402B2EC519328E44A3FD813F20E56F88F5D10

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\88B402B2EC519328E44A3FD813F20E56F88F5D10
                                                                                  • Size 545KB
                                                                                  • SHA256 cba57a30ebbd147aae51f996031fc3e9f5df2593d828004706cbc5bae52cc086
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  91776CBAEE845A37216E9ED309BA846263E44849

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\91776CBAEE845A37216E9ED309BA846263E44849
                                                                                  • Size 20KB
                                                                                  • SHA256 b85d114aa259929fa0ab64bd1375a60330b35cc022b9d3df82b44587dca2fb2b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  AB1FD468A2A600FF1F3425D50E17AA53C92C2C86

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\AB1FD468A2A600FF1F3425D50E17AA53C92C2C86
                                                                                  • Size 32KB
                                                                                  • SHA256 18dfe3c8418dacc648051aa2974cb259740249adf80442e478d68a60e50ebe99
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  C060126E4F74AC4B7ADE0B83481FB39D1D8F07A1

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\C060126E4F74AC4B7ADE0B83481FB39D1D8F07A1
                                                                                  • Size 17KB
                                                                                  • SHA256 d751691fd069abf01760be53d08a8424f6581008e896f00117457b6ef9b839ed
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  C0BD95D8C89B2C1239018E3FC4AB211B18FB02F2

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\C0BD95D8C89B2C1239018E3FC4AB211B18FB02F2
                                                                                  • Size 16KB
                                                                                  • SHA256 9c75989d55a82e0491eb41ca93b41cb78731e4e9f01329529e80926c8b15e5f2
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  D3F44A987D4802D8874F83BD06552F60EDB9823D

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\D3F44A987D4802D8874F83BD06552F60EDB9823D
                                                                                  • Size 16KB
                                                                                  • SHA256 30baf8fac1209ce1ef840dd2672cc4b557e7c9a7a50db51001fef50697435f09
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  D61586D1BD3D5B2D64A088E6B758881157A8ADC5

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\D61586D1BD3D5B2D64A088E6B758881157A8ADC5
                                                                                  • Size 1.8MB
                                                                                  • SHA256 1c27a524d70e9e3926d39e21fc994a02b6ed8b54fe685970ca6ddc988286c1dc
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  E90B1C85D577512C2BF72FEE59F72E4B7ECBD743

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\E90B1C85D577512C2BF72FEE59F72E4B7ECBD743
                                                                                  • Size 579KB
                                                                                  • SHA256 13837bd957440f2f344e4a8f8849dae087ab155985cde0f776eb0c3ff78b4630
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  F4A7A95B9F025739576F4B7675D0D8614E09FAC9

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\F4A7A95B9F025739576F4B7675D0D8614E09FAC9
                                                                                  • Size 52KB
                                                                                  • SHA256 c077431f01d334e47b3ccc25fc1b333ebe20d4779466e618a4de6d93ff1f2b91
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  FBAC2BB399F7AE1C3414867A605525EEE624BB57

                                                                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\FBAC2BB399F7AE1C3414867A605525EEE624BB57
                                                                                  • Size 107KB
                                                                                  • SHA256 313798d17b39c9df133c6c54d20f7e3a4de04d78e2b610958fa62a4f28eebfaa
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  3c850922-a8ec-44a4-8da6-4833b2a3ffdb.zip

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\3c850922-a8ec-44a4-8da6-4833b2a3ffdb.zip
                                                                                  • Size 3.7MB
                                                                                  • SHA256 5294294bc8f81626cad76fa46c1fdec8df4f6d7a05576adfecbaa571149f3daa
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  AUG2009_D3DCompiler_42_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\AUG2009_D3DCompiler_42_x64.inf
                                                                                  • Size 830B
                                                                                  • SHA256 8977772e5392b8e79364b3b8d97300e97ad891f38d5a2dd306549401e46b05ff
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  AUG2009_D3DCompiler_42_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\AUG2009_D3DCompiler_42_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 bb8834d2366f6899c507bae176a13dadbd44488451a263eac830be95f4bad43f
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  AUG2009_XACT_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\AUG2009_XACT_x64.inf
                                                                                  • Size 920B
                                                                                  • SHA256 5d57466af1801ff3a92b1540907f0e4b91d90189177d68c6b4c8833e5d57dec3
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  AUG2009_XACT_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\AUG2009_XACT_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 1eb88b5460824fd32eec9b90e7ef5cb529f51215046e539d39fa27a409709766
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  AUG2009_XAudio_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\AUG2009_XAudio_x64.inf
                                                                                  • Size 923B
                                                                                  • SHA256 4348663aa7cfe22916fb13d93307e7384376fad9d6fa34c6196f80df42c61a33
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  AUG2009_XAudio_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\AUG2009_XAudio_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 842cc52100b5774bcda19e40837bd552b308e74829d5b35a505822c7436892e1
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  AUG2009_d3dcsx_42_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\AUG2009_d3dcsx_42_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 f7a5a84bb654837193e0f40b579777f5c6cc2c7341cf90503d6a6709d319797f
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  AUG2009_d3dcsx_42_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\AUG2009_d3dcsx_42_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 ff9da1b0328fd918cf9558ee57387a4865afe98db1410cc16b1e921c5a744c48
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  AUG2009_d3dx10_42_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\AUG2009_d3dx10_42_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 2bfdd3d3bf485439013045b3a08942f457385bb89ab76d9479fbdd85f09e9d96
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  AUG2009_d3dx10_42_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\AUG2009_d3dx10_42_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 a80a00464775da82c02f628c5bc13cab0d0643ec2a44b28d2acf7c77d467becf
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  AUG2009_d3dx11_42_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\AUG2009_d3dx11_42_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 f9c13939779d4526107cf7d3554c122efb564cff02228d02b0b6ff211904f5dd
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  AUG2009_d3dx11_42_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\AUG2009_d3dx11_42_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 edf6764083b47c04fda52b149f565587c6a07d4455357fe3c27c9e56cc57a94d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  AUG2009_d3dx9_42_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\AUG2009_d3dx9_42_x64.inf
                                                                                  • Size 812B
                                                                                  • SHA256 4887cbec8545b02152eb16f6296987a43a256b69b408330eaee362184f298d98
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  AUG2009_d3dx9_42_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\AUG2009_d3dx9_42_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 5989dc367a8f84815bcfa1c46ff756527c6250c62973220d1af354b70027eaf2
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Aug2008_XACT_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Aug2008_XACT_x64.inf
                                                                                  • Size 920B
                                                                                  • SHA256 cf09d632a4b2cc670d435f356f309dc58359735834baed10343fdfbf37eddaa1
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Aug2008_XACT_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Aug2008_XACT_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 f1daaa8d96108a4a338f62a4a1339143ddc566e194ca00dde5427136bfccb0af
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Aug2008_XAudio_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Aug2008_XAudio_x64.inf
                                                                                  • Size 923B
                                                                                  • SHA256 311bd58ed7437a1cc79692ae360a02efbc8ec51194abcb80bad78b2208a94d58
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Aug2008_XAudio_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Aug2008_XAudio_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 f211a7d99b3ffa0180bd91f68b2c285564227e075d499e950e76fde04e7707e3
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Aug2008_d3dx10_39_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Aug2008_d3dx10_39_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 a5eab981c313538afcd7abc7742854d251c736835ffc1f549a4768fdf49c3e71
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Aug2008_d3dx10_39_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Aug2008_d3dx10_39_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 e83f8d48323887af89648c5bd7af713b42d20ccb757be34675f1fa527e6cc33f
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Aug2008_d3dx9_39_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Aug2008_d3dx9_39_x64.inf
                                                                                  • Size 812B
                                                                                  • SHA256 4cbb1c6804b9c76bba4e41f0d2a45f1daba7350af9da4ae6966651f7f4da041a
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Aug2008_d3dx9_39_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Aug2008_d3dx9_39_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 8a23d386626328f9519076f33d5c3b71c639f2347741442c3374974e6f61bd53
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  D3DCompiler_37.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\D3DCompiler_37.dll
                                                                                  • Size 1.4MB
                                                                                  • SHA256 715876d15b590936e4d32602a764d810650eec134922b32eea742e2fa71791c1
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  D3DCompiler_38.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\D3DCompiler_38.dll
                                                                                  • Size 1.4MB
                                                                                  • SHA256 ddcaadbdd47bcba02c8d1880d456acc20732d21554977338ae507987ed04046e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  D3DCompiler_39.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\D3DCompiler_39.dll
                                                                                  • Size 1.4MB
                                                                                  • SHA256 b99b655abc4ec45851cc2acdb7a348e739687200a4fe3be9c35d6738dd61112f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  D3DCompiler_40.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\D3DCompiler_40.dll
                                                                                  • Size 1.9MB
                                                                                  • SHA256 f0a6f156d13150de6ebb094233e5ff78581fbdb77bd0ff8d083698c42bc8e13b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  D3DCompiler_41.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\D3DCompiler_41.dll
                                                                                  • Size 1.8MB
                                                                                  • SHA256 69ddadf8f5be24f10382706480b55e2492008d102001779f976608e880c65aab
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  D3DCompiler_42.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\D3DCompiler_42.dll
                                                                                  • Size 1.9MB
                                                                                  • SHA256 6c976311406c23aa71018d274da0ecdef43b6e3a3b0b01e941a5e8e4e974386c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  D3DCompiler_43.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\D3DCompiler_43.dll
                                                                                  • Size 2.0MB
                                                                                  • SHA256 2f23182ec6f4889397ac4bf03d62536136c5bdba825c7d2c4ef08c827f3a8a1c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  FEB2010_X3DAudio_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\FEB2010_X3DAudio_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 68351f03f4ef83e4b8c359e3e130441081690a1866b838a1b35d64674ef3abbf
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  FEB2010_X3DAudio_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\FEB2010_X3DAudio_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 d4da3e530982812d1e2a31570b80af541fac1b13c72997d2aad7ea3bfeaf4a4a
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  FEB2010_XACT_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\FEB2010_XACT_x64.inf
                                                                                  • Size 920B
                                                                                  • SHA256 c7efd1ec4e4d31644a5054d32cc1e6795464472c05439573ae93e1727a5eea4a
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  FEB2010_XACT_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\FEB2010_XACT_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 e850fdb84bcac0f667927e53fee943efd3f43be6c6a0ae1e17f3fff83ddb2635
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  FEB2010_XAudio_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\FEB2010_XAudio_x64.inf
                                                                                  • Size 923B
                                                                                  • SHA256 da63330fd2a1538b714ee6cf2e09256446a04a55f866b3f70237d8a7165cb3e3
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  FEB2010_XAudio_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\FEB2010_XAudio_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 74c827ef94881099761e04397ef8f162fd0ccaf4876a5503c4b53a5216d2acca
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  JUN2010_D3DCompiler_43_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\JUN2010_D3DCompiler_43_x64.inf
                                                                                  • Size 830B
                                                                                  • SHA256 3e779533a273e3395109c7efac13ba1c804c01b3ddb16938406fbdf90d851216
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  JUN2010_D3DCompiler_43_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\JUN2010_D3DCompiler_43_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 5dd568919e1b3cbcb23ab21d0f2d6c1a065070848aba5d2a896da39e55c6cbbf
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  JUN2010_XACT_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\JUN2010_XACT_x64.inf
                                                                                  • Size 920B
                                                                                  • SHA256 f3c288d84db29f7bc4d2c771341f765b5e1940a4827fcb55a65b48eec83c71d3
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  JUN2010_XACT_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\JUN2010_XACT_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 ca604ce9d2ee43a09b39b23a6a2a048b1a79d85c7d78679cc73aacc75cf7a62e
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  JUN2010_XAudio_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\JUN2010_XAudio_x64.inf
                                                                                  • Size 923B
                                                                                  • SHA256 1a0f1b929724f8b71d5ce922f19b9d539d2d804c89af947d5927b049ef0fd3d8
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  JUN2010_XAudio_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\JUN2010_XAudio_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 d786d06a709d5dc26067132b9735fc317763fcf8064442d6f77f65012ba179da
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  JUN2010_d3dcsx_43_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\JUN2010_d3dcsx_43_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 5289b5ad22146d7cc0c35cdb2c9662742693550de8f013d1ec40e944288d155a
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  JUN2010_d3dcsx_43_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\JUN2010_d3dcsx_43_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 d5200b332caf4fff25eb3d224527a3944878c5c3849512779a2afcfeae4c3ca1
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  JUN2010_d3dx10_43_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\JUN2010_d3dx10_43_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 a65f370a741d62c2be0ca588758d089dd976092cb910bb6b1b7d008741e18377
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  JUN2010_d3dx10_43_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\JUN2010_d3dx10_43_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 4d4263cbb11858c727824c4a071f992909675719be3076b4a47852bf6affd862
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  JUN2010_d3dx11_43_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\JUN2010_d3dx11_43_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 2c4cf75b76203cba6378693668c8c00b564871c8bfd7fbda01e1e841477b2a3b
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  JUN2010_d3dx11_43_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\JUN2010_d3dx11_43_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 3925c924eb4ec4f5a643b2d14d2eda603341fbbd22118cdd8ae04aaa96f443c0
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  JUN2010_d3dx9_43_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\JUN2010_d3dx9_43_x64.inf
                                                                                  • Size 812B
                                                                                  • SHA256 272650a2d9b1cfea17021f4bf941b21f2206791e279070d4e906ce0ce56ac16f
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  JUN2010_d3dx9_43_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\JUN2010_d3dx9_43_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 6b33d32da02f664092d44b05237990f825b4062c105a063badcf978648b5e95b
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Jun2008_X3DAudio_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Jun2008_X3DAudio_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 f4526ad18f081b84a139e6d98923569fc8ffc7644e20499e2f68abfb3e87753e
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Jun2008_X3DAudio_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Jun2008_X3DAudio_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 0064b7db5bfe52b6f40f61d962901c7baa116abbc72328f50586b6fa65f894bd
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Jun2008_XACT_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Jun2008_XACT_x64.inf
                                                                                  • Size 920B
                                                                                  • SHA256 90577c4c3d5d0de80c805caf0cc713582698ef7224fecf4ff911ba6309c5c920
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Jun2008_XACT_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Jun2008_XACT_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 79cb10222e466d54908d30ee433830e9673d5a538fabc5f4568521c2aff66eb1
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Jun2008_XAudio_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Jun2008_XAudio_x64.inf
                                                                                  • Size 923B
                                                                                  • SHA256 9ce21064f2feed9bc9426a6e92e9c850aae31abeb80c7906ff917fbf4cc03913
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Jun2008_XAudio_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Jun2008_XAudio_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 e5e435c4536f987e1087218b025e6dc66c24c3e300e839391891f1b3bfd360dd
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Jun2008_d3dx10_38_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Jun2008_d3dx10_38_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 0de0ada970774620c0905227666fc30910e64f3cfa4b99e4c5481685d12e3ded
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Jun2008_d3dx10_38_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Jun2008_d3dx10_38_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 f5f54664ec67f6333a9f0607d891bd0dc2acfee8cce09ac4ee0372b5d0aa12fd
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Jun2008_d3dx9_38_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Jun2008_d3dx9_38_x64.inf
                                                                                  • Size 812B
                                                                                  • SHA256 ddad68974990a21a8d4a91c47ef1034ddf0475551586f04e86b8cd2f0c990d6f
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Jun2008_d3dx9_38_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Jun2008_d3dx9_38_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 06faf7f7ea5503dcece13d6537e57cd2581d5188a5d839fe7f118298a721b51a
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2008_X3DAudio_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2008_X3DAudio_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 b7dba312a71ed109c9c54cc5cc096096eb8cf0962396e8dc996f8fa28307547c
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2008_X3DAudio_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2008_X3DAudio_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 0b6e28f00364a9ff436c3d99f0d4e80bf615f1450f420122324853cc0b88b16c
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2008_XACT_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2008_XACT_x64.inf
                                                                                  • Size 920B
                                                                                  • SHA256 1038a41e63ee8abbc8be85a86fafb2ac1d03defa6b88deb270f96a6ed1a97122
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2008_XACT_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2008_XACT_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 6b0cc0dc993e172855864fa078c4e5c8f2f46bfc3200bf2ccdf3292931ee3cb2
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2008_XAudio_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2008_XAudio_x64.inf
                                                                                  • Size 923B
                                                                                  • SHA256 10a2db49dd3bea59133bbd82b3fc0f8a959b65b0c250c11a9a6f3123b961e6e9
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2008_XAudio_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2008_XAudio_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 472bcfb54b5d63377da128596dfb30c8f200f79edaaf6d29de1afcdb71a3413d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2008_d3dx10_37_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2008_d3dx10_37_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 f37681f4d49f71d48b1960c3efac74f28af9fa764b29ed3a40b5f424fc8f60c9
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2008_d3dx10_37_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2008_d3dx10_37_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 bae3bc2b7071d2d1c657a87a8c8af6c0fb5373f11c9aa5f61b406924717d0792
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2008_d3dx9_37_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2008_d3dx9_37_x64.inf
                                                                                  • Size 812B
                                                                                  • SHA256 a4fda3373241c2748a969ddeeb6ef41b3cc1bca6608362ba87db75f69023fe9c
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2008_d3dx9_37_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2008_d3dx9_37_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 d55858e166a2fe00d4acc30da756f0ab2c4dd5a79a9874eab3100722c74a1b75
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2009_X3DAudio_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2009_X3DAudio_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 4da1a6bbcb7e84073dcd1898f854702ec32f5324478b2fa39c4a9868abeecd3b
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2009_X3DAudio_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2009_X3DAudio_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 aabd029d75f25244bae4ca17dbf9c4feebec0d5f121fcd388c175c3360be1bac
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2009_XACT_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2009_XACT_x64.inf
                                                                                  • Size 920B
                                                                                  • SHA256 9369fb0a9d3353627c097fc19780e5e7126af47766ef6a4a95ff3ddcca56691e
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2009_XACT_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2009_XACT_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 764c3caeb1725a11701ca7119fdc49b3219553b79f9a5c1a02b20991391e5a21
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2009_XAudio_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2009_XAudio_x64.inf
                                                                                  • Size 923B
                                                                                  • SHA256 4a554d09934581a87a4cc98749b525b6794947b64b8414d380edfd502713f9b6
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2009_XAudio_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2009_XAudio_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 1b66e4d80f9843fc73b0a6097fb8ed5f3d2cfd5cfb5c328904d2c370bd87bb3e
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2009_d3dx10_41_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2009_d3dx10_41_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 53dc284b87f5787804823977d2fbb528e393829367db5d2ac5dd79c581a27616
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2009_d3dx10_41_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2009_d3dx10_41_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 0170a4b551b58d92a753e86793bf3af762fe3f8d781512f710a4d661aec8d626
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2009_d3dx9_41_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2009_d3dx9_41_x64.inf
                                                                                  • Size 812B
                                                                                  • SHA256 12fe918aeb224a9bd4d2a8142f97c95d58a9a69e591e7e4f95014c155bb03519
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Mar2009_d3dx9_41_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Mar2009_d3dx9_41_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 bd29711cc2ecd924990167ffa95f48842e24aeed3acef1023717040240b4bbb6
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Nov2008_X3DAudio_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Nov2008_X3DAudio_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 d04d052fa3065cdf00e96bcdd7dabf3583ef10b6d80fd67cb03c32f09f2e602d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Nov2008_X3DAudio_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Nov2008_X3DAudio_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 d0361ffe046b7a7a374a4938d419e4121365892e4f2138899f670619ab34ac6a
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Nov2008_XACT_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Nov2008_XACT_x64.inf
                                                                                  • Size 920B
                                                                                  • SHA256 2d8a68e726728e4f4be05e35fca812b855046ce4bf697f0dea14094dbd7e1d79
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Nov2008_XACT_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Nov2008_XACT_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 31680e7a90d24eda04c910e1f3e6c02774cfc5c36ae08e7ac043665264702f83
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Nov2008_XAudio_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Nov2008_XAudio_x64.inf
                                                                                  • Size 923B
                                                                                  • SHA256 ed20b160dd26a5ed3c220a1fd9b5fc880b3280ebf56c2f73e76b6d4da5ef82bd
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Nov2008_XAudio_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Nov2008_XAudio_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 950b5aef596fc5048732f6cf263dfca5bcc25df7dc17df91efcbc3551751a3b3
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Nov2008_d3dx10_40_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Nov2008_d3dx10_40_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 7f902d9ce6f6d71be1d16997ffc9661be2540522c73cc185516415a52dced2a5
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Nov2008_d3dx10_40_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Nov2008_d3dx10_40_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 a4eed39cf36adccac4317e5822b30aa37ac5b001bcf4a24f7b5ccac6b8b71e9d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Nov2008_d3dx9_40_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Nov2008_d3dx9_40_x64.inf
                                                                                  • Size 812B
                                                                                  • SHA256 d071b30f56763506da0c939b8d35b0540bef3ef0d51a5cfbc45816ca91f891a3
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Nov2008_d3dx9_40_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\Nov2008_d3dx9_40_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 955637638635025f01f82febab4a4977252a765439d90ce940fba752723b9db6
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  X3DAudio1_3.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\X3DAudio1_3.dll
                                                                                  • Size 25KB
                                                                                  • SHA256 74ec3e6b253af1b68252e62a5c08479453b3341d49c606adcf36913fe9ed9717
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  X3DAudio1_4.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\X3DAudio1_4.dll
                                                                                  • Size 25KB
                                                                                  • SHA256 799b38139523a3b30d26e21798ee705375c61eed8ae2434fddb52fde51f4bb78
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  X3DAudio1_5.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\X3DAudio1_5.dll
                                                                                  • Size 22KB
                                                                                  • SHA256 315944bb2a1959c8a4bd2677ed415363e1611c7351ce55319dc98fd2aac83f87
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  X3DAudio1_6.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\X3DAudio1_6.dll
                                                                                  • Size 21KB
                                                                                  • SHA256 574d14ab9a641c6cbadd78f2cd6c088b64b59c3646057952e63cad7d2778e1c3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  X3DAudio1_7.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\X3DAudio1_7.dll
                                                                                  • Size 21KB
                                                                                  • SHA256 288c701bdedf1d45c63dd0b7d424a752f8819f90feb5088c582f76bc98970ba3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  XAPOFX1_0.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\XAPOFX1_0.dll
                                                                                  • Size 63KB
                                                                                  • SHA256 8b396d275de2550af8ada6a1ff71f0f4870b51c8407e44044c2dde7ad6b754cc
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  XAPOFX1_1.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\XAPOFX1_1.dll
                                                                                  • Size 67KB
                                                                                  • SHA256 5ab63c0f040fdf65e681eba4daa55ed83e89ea10c426dc2fc763da0fc94f3ace
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  XAPOFX1_2.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\XAPOFX1_2.dll
                                                                                  • Size 69KB
                                                                                  • SHA256 d1a55061bcb42f69b7cf35e2985d48e30c7a90f0bc668e90390f465b36bd0161
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  XAPOFX1_3.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\XAPOFX1_3.dll
                                                                                  • Size 67KB
                                                                                  • SHA256 c6956ac2ee59f71e86784138b5443de6970a1274ac161945b8a44dc1d535db84
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  XAPOFX1_3.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\XAPOFX1_3.dll
                                                                                  • Size 67KB
                                                                                  • SHA256 b05ad9417028b9777f69422caa01ae9fd22c7bfe542bc6e7de2649e28a4ea643
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  XAPOFX1_4.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\XAPOFX1_4.dll
                                                                                  • Size 72KB
                                                                                  • SHA256 0aee44b12913a95840ee6431d90518b0d72c54a27392e21ee6995e2151554a06
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  XAPOFX1_5.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\XAPOFX1_5.dll
                                                                                  • Size 72KB
                                                                                  • SHA256 becfdcd6b16523573cb52df87aa7d993f1b345ba903d0618c3b36535c3800197
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  XAudio2_0.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\XAudio2_0.dll
                                                                                  • Size 468KB
                                                                                  • SHA256 e435b73193bdf651f7ae564eba05266595ac672db45e0e22dce92d0bcb3c6513
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  XAudio2_1.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\XAudio2_1.dll
                                                                                  • Size 495KB
                                                                                  • SHA256 32a7c6a4edef46f025a4a5c64b892e29baaae948e86d9ed49e82014eec1441de
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  XAudio2_2.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\XAudio2_2.dll
                                                                                  • Size 497KB
                                                                                  • SHA256 9c7897b4ee1bcd190b1c0b7b77e64ee731d234764683a1e2286af70d86b62753
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  XAudio2_3.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\XAudio2_3.dll
                                                                                  • Size 502KB
                                                                                  • SHA256 04dec9d7c68962e01efec0aac0ef7a3499bc4c16e8a41bd61fe6641da48d7dcc
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  XAudio2_4.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\XAudio2_4.dll
                                                                                  • Size 505KB
                                                                                  • SHA256 bcde4317debd0052b1436a6fda60e1dcb1e308979498117fa0cb50061f38101c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  XAudio2_5.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\XAudio2_5.dll
                                                                                  • Size 503KB
                                                                                  • SHA256 c596de2ab8394fb62538fef0b4657317f4ead50a6d798c5d066e25e334576c27
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  XAudio2_6.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\XAudio2_6.dll
                                                                                  • Size 515KB
                                                                                  • SHA256 61b57170f7c6365714396072d22cb98746718c0f44c9f0d5c62fdb1b218639c7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  XAudio2_7.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\XAudio2_7.dll
                                                                                  • Size 514KB
                                                                                  • SHA256 d1690b602cb317f7f1e1e13e3fc5819ad8b5b38a92d812078afb1b408ccc4b69
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  apr2005_d3dx9_25_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\apr2005_d3dx9_25_x64.inf
                                                                                  • Size 806B
                                                                                  • SHA256 3d97810d00ceb3e7674a2ef81427d4180f77f93f9454837c5933fbc6a1ad5c1d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  apr2005_d3dx9_25_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\apr2005_d3dx9_25_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 f484ef48e0c6e2be8207d8c8c7308dd966d52bea1fde221b927d3e49f1cab0b7
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  apr2006_d3dx9_30_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\apr2006_d3dx9_30_x64.inf
                                                                                  • Size 806B
                                                                                  • SHA256 b70b8f62a2459580d22999301f1823bcb8a9bef54bd33b38e0af274a3a12e010
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  apr2006_d3dx9_30_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\apr2006_d3dx9_30_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 373cca07c0ceffa72901441219a4457de9ff110aededae5e4818588da39cd344
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  apr2006_mdx1_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\apr2006_mdx1_x86.inf
                                                                                  • Size 2KB
                                                                                  • SHA256 2546a1875bf868edc621a1cd0ee262151faa08762bcced0117e1304eace0c04d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  apr2006_mdx1_x86_archive.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\apr2006_mdx1_x86_archive.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 80d44f16d81ae8bdb1ef8f0efdf53911523280723bab4392285cbd33a0fc633c
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  apr2006_xact_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\apr2006_xact_x64.inf
                                                                                  • Size 908B
                                                                                  • SHA256 d9c3216ada5dd7791ca852a8ea97765f94a7b56fed27b20916b5067eb82b14d0
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  apr2006_xact_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\apr2006_xact_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 037db252501fd0e30303c11706d804d9eabbf319d0b4e88181ef8f297b4fef8e
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  apr2006_xinput_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\apr2006_xinput_x64.inf
                                                                                  • Size 854B
                                                                                  • SHA256 f9d01e93e547045e1d232242c900530dfdfa54698586c7049281965e3bd01ca2
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  apr2006_xinput_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\apr2006_xinput_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 b604779115d32d439f77b33257c96f928ec4ce564189f7d0d357099c1da140c4
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  apr2007_d3dx10_33_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\apr2007_d3dx10_33_x64.inf
                                                                                  • Size 844B
                                                                                  • SHA256 3e61c4d723d282c36c5493d82644ea96715b7b548e50494d22b4a83d4e2b8237
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  apr2007_d3dx10_33_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\apr2007_d3dx10_33_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 3286ba521fda888b1808f12955a58d7da4df7d2fdb472c7837a1e0e1a6317a06
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  apr2007_d3dx9_33_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\apr2007_d3dx9_33_x64.inf
                                                                                  • Size 812B
                                                                                  • SHA256 2d87efca75d8b9aeab3262841d52a7c56bad34ac6b9691f4df2d89b14c950f8d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  apr2007_d3dx9_33_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\apr2007_d3dx9_33_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 349a09a2791d697bffffc61410a536cdcf258f0d7c86dda44a297e8aec4bdf00
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  apr2007_xact_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\apr2007_xact_x64.inf
                                                                                  • Size 920B
                                                                                  • SHA256 bf6ca1165632efccb0292ae8b739ce68d78ebb95dd39b8e4c1717d78a026db10
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  apr2007_xact_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\apr2007_xact_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 008db10780aa8fb6f20b7aa5f5d513ca77efb36c8dddfb9ad89173ecaf700af5
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  apr2007_xinput_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\apr2007_xinput_x64.inf
                                                                                  • Size 860B
                                                                                  • SHA256 0d6e1c0e961d878b319ac30d3439056883448dcf26774003b73920f3377ecac8
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  apr2007_xinput_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\apr2007_xinput_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 1c798cb80e9e46ce03356ea7316e1eff5d3a88ccdd7cbfbfcdce73cded23b4e5
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  aug2005_d3dx9_27_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\aug2005_d3dx9_27_x64.inf
                                                                                  • Size 806B
                                                                                  • SHA256 0a8ffec8d7ef3a0aa005f604a045dcf80cf5b6473b4f26e30c58eee23e253fae
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  aug2005_d3dx9_27_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\aug2005_d3dx9_27_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 d02232a6587c460c026601517178318bab2ac29c59d269c6e3d1a3a993a9a1c4
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  aug2006_xact_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\aug2006_xact_x64.inf
                                                                                  • Size 908B
                                                                                  • SHA256 6fe310a67227203bbca3389dfe3403fa268cb424f4b525cca2d5407ed26670a5
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  aug2006_xact_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\aug2006_xact_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 34e7227e03812fce5415b0a4c3d15a9e9b259350ac9873db2a98b2ea76ae2284
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  aug2006_xinput_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\aug2006_xinput_x64.inf
                                                                                  • Size 854B
                                                                                  • SHA256 35f25b9538e55172cf36729519581444e26b38a9dae5cccc4ad75dfa34ea08e7
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  aug2006_xinput_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\aug2006_xinput_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 cc66d67daa1f4c31ff5e59c2606c3930f72204a5057c29b9d58dde37a47b1cb7
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  aug2007_d3dx10_35_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\aug2007_d3dx10_35_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 af4bdfeb4283f04e24475279931e042f17052224cf708f0c444fba2f2e221289
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  aug2007_d3dx10_35_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\aug2007_d3dx10_35_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 7987e2c475705bf8f049a15af946ec0cb5ccddf27c0b5c8126694421df601770
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  aug2007_d3dx9_35_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\aug2007_d3dx9_35_x64.inf
                                                                                  • Size 812B
                                                                                  • SHA256 e34ad9e49f31cb9211e0f350405c344d93fc65075e470c8fe09dd78af68f2c80
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  aug2007_d3dx9_35_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\aug2007_d3dx9_35_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 c0d87c1b079b54b75b86939199ca5ee1f796ae3de9c4ed0ae074a4fa01823c73
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  aug2007_xact_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\aug2007_xact_x64.inf
                                                                                  • Size 920B
                                                                                  • SHA256 2fcc4bdc6516418d3b4935c301e14f30e3bbd0adfd264bc34067b27b0b266b8e
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  aug2007_xact_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\aug2007_xact_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 c246c38e41ed71bde4b3cce4fe337826173896a04c26f8b2a00b06bb0cec024d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  d3dcompiler_33.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dcompiler_33.dll
                                                                                  • Size 1.1MB
                                                                                  • SHA256 12e238af4b4edc1f774213709a87a91b77b2c9d2d18fe475b027872923b6fa17
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dcompiler_34.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dcompiler_34.dll
                                                                                  • Size 1.1MB
                                                                                  • SHA256 5044a5810fd931339933a8d0c56115a5a5c27d8c0d8e348977e2724a032accf0
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dcompiler_35.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dcompiler_35.dll
                                                                                  • Size 1.3MB
                                                                                  • SHA256 5a866cdf74f981e783624dafb0e72f133ad9f9b293856d7a18c7558fa357beb1
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dcompiler_36.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dcompiler_36.dll
                                                                                  • Size 1.3MB
                                                                                  • SHA256 f15efcab1780fe7d784a3cd3798f147fa249e81b7ef9a494b85dc7fdab084734
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dcsx_42.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dcsx_42.dll
                                                                                  • Size 5.2MB
                                                                                  • SHA256 e462eb3d41db54988ce3be46ced60b0073f8d939a9946cda67fb1df3c8afe0a1
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dcsx_43.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dcsx_43.dll
                                                                                  • Size 1.8MB
                                                                                  • SHA256 b46a44b6fce8f141c9e02798645db2ee0da5c69ea71195e29f83a91a355fa2ca
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx10.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx10.dll
                                                                                  • Size 429KB
                                                                                  • SHA256 fd2caa28493ea76021b93641958238b7a933f4f6db1a2070be03cc81d87d8307
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx10_33.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx10_33.dll
                                                                                  • Size 433KB
                                                                                  • SHA256 b04e2b089656eae01a0071359f9d7fb040dea804c1b9d2379431864174259c2d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx10_34.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx10_34.dll
                                                                                  • Size 433KB
                                                                                  • SHA256 330e120d745e1132252df81800362a7ae0b61a9060afc800165ba8a1d55d3fb3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx10_35.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx10_35.dll
                                                                                  • Size 434KB
                                                                                  • SHA256 db775655fd923e29509402556f86002dd9aea062cdcdba7073e1057a67b5ce50
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx10_36.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx10_36.dll
                                                                                  • Size 434KB
                                                                                  • SHA256 aee0248f18dfef8194451a22c69adda1cca38c03ae9aa776114da9d8851d4c38
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx10_37.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx10_37.dll
                                                                                  • Size 452KB
                                                                                  • SHA256 61aaf973712f848b24c3e769e3252248ece96db63f206de0ca7ff43d9ed87a51
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx10_38.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx10_38.dll
                                                                                  • Size 457KB
                                                                                  • SHA256 bf463b7ee2235f351309b5fd790f514acf2b55a4a1f90222f7479024cc28fc34
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx10_39.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx10_39.dll
                                                                                  • Size 457KB
                                                                                  • SHA256 613afdb8b44bb3bed945279229d9604a3cd553f8c2b9b091235cbab8cd00de61
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx10_40.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx10_40.dll
                                                                                  • Size 441KB
                                                                                  • SHA256 c05787cbf3aa4527baae96a425ceac910090ef48809990a450c33f3cda0e4767
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx10_41.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx10_41.dll
                                                                                  • Size 442KB
                                                                                  • SHA256 9f4c15e1f68795727eded4737acc5a1aa85f896cd9e6924fddc9128b48f1bbd6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx10_42.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx10_42.dll
                                                                                  • Size 442KB
                                                                                  • SHA256 46429c4affe041b08a7acfda0e9162ba42de966acb2cbcaf09ef976232073b51
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx10_43.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx10_43.dll
                                                                                  • Size 459KB
                                                                                  • SHA256 56fcd13650fd1f075743154e8c48465dd68a236ab8960667d75373139d2631bf
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx11_42.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx11_42.dll
                                                                                  • Size 229KB
                                                                                  • SHA256 8c8fa8dce19e2f43e82cecd73a268e831a5ce0a16023845f7fa7fcb597772e85
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx11_43.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx11_43.dll
                                                                                  • Size 242KB
                                                                                  • SHA256 492e960cb3ccfc8c25fc83f7c464ba77c86a20411347a1a9b3e5d3e8c9180a8d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_24.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_24.dll
                                                                                  • Size 2.1MB
                                                                                  • SHA256 94ec67763f67932dd4273ef5cc12889a5cef090ffea3ee78a80c7b530272b1b5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_25.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_25.dll
                                                                                  • Size 2.2MB
                                                                                  • SHA256 4c54df27ce84d21b2924e64ff79b13e7876ce85d8e0c9c1d0abd8da73888187a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_26.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_26.dll
                                                                                  • Size 2.2MB
                                                                                  • SHA256 8ea96fe01c3c86a36fcb3795ae03eb12034003e335ef475571efaeda17c5bc78
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_27.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_27.dll
                                                                                  • Size 2.2MB
                                                                                  • SHA256 a70d571cd675c97c9eeb4a234dba1d667ffb54ec3bb14defb36b3e2f605ae257
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_28.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_28.dll
                                                                                  • Size 2.2MB
                                                                                  • SHA256 f3e391b5f1c1f9637cabf2b812b6f5d65e4776c89d779f506f6b643cc563176d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_29.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_29.dll
                                                                                  • Size 2.2MB
                                                                                  • SHA256 c5e21c18f8c79bc517da59e3192c39ea73bdcaf85867628187f6b3cca07dd21f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_30.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_30.dll
                                                                                  • Size 2.3MB
                                                                                  • SHA256 5edeed79f2359527a55b8189cfa8b9b121cd608d44eead905a0f3436938ad532
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_31.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_31.dll
                                                                                  • Size 2.3MB
                                                                                  • SHA256 e2065619fe6eb0034833b1dc0369deb4a6edc3110e38a1132eeafcf430c578a5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_32.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_32.dll
                                                                                  • Size 3.3MB
                                                                                  • SHA256 e96693794daa05a75a83c11df2e7b42f2de61567c6ad0b69e353b50f6c88119f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_33.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_33.dll
                                                                                  • Size 3.3MB
                                                                                  • SHA256 c6b7b2ad7742dde5dd8d1a35fdc1c185e586e551ad9c74d3fb21759cd8ca4da8
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_34.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_34.dll
                                                                                  • Size 3.3MB
                                                                                  • SHA256 b6f77f06518d35345fb61172b6a13159125ed60c469d28b1a2e07970e9ddf81d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_35.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_35.dll
                                                                                  • Size 3.6MB
                                                                                  • SHA256 2198022938156b790e9cfb0f7997494b66a11a1ad49b395be58251d635b66b26
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_36.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_36.dll
                                                                                  • Size 3.6MB
                                                                                  • SHA256 c12f0ab0338eb5031d3d04beaf7208ac848f7e037d21ff963d2af90221cbe935
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_37.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_37.dll
                                                                                  • Size 3.6MB
                                                                                  • SHA256 c2ccb84c672a9d8966e82a28005a4269886ee304972ac3590c0b8a9c1622a3d8
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_38.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_38.dll
                                                                                  • Size 3.7MB
                                                                                  • SHA256 743e77a228e7d75442263ad70051e44534f7972c6326fd34b505a9c2c245894b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_39.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_39.dll
                                                                                  • Size 3.7MB
                                                                                  • SHA256 5d29988cad858f754ecc62c3d30de555f82cc21b5b26c448b890295e9b7bee82
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_40.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_40.dll
                                                                                  • Size 4.2MB
                                                                                  • SHA256 16fd909aeb68d0d1aca8529dc7f78880b97d6649d70ce8d03a2c858bc28e216b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_41.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_41.dll
                                                                                  • Size 4.0MB
                                                                                  • SHA256 6ac4df203af419d3f3b7d9a99e14a3490ea3ad307c474bfe36baea642b1421f6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_42.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_42.dll
                                                                                  • Size 1.8MB
                                                                                  • SHA256 f8b9cfab7fffbc8f98e41aa439d72921dc180634a1febca2a9d41a0df35d3472
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d3dx9_43.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\d3dx9_43.dll
                                                                                  • Size 1.9MB
                                                                                  • SHA256 0b28546be22c71834501f7d7185ede5d79742457331c7ee09efc14490dd64f5f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  dec2005_d3dx9_28_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\dec2005_d3dx9_28_x64.inf
                                                                                  • Size 806B
                                                                                  • SHA256 510b6d528be3f2997b8bd811486dc3c13eb27a9de22d1bf030e6db0e632cca4d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  dec2005_d3dx9_28_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\dec2005_d3dx9_28_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 d4d03c4ab3c8486d6331548e967ee17e011fdac90f63c0a9a44a744815a7da7a
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  dec2006_d3dx10_00_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\dec2006_d3dx10_00_x64.inf
                                                                                  • Size 426B
                                                                                  • SHA256 2a43ac72ab9a6f4771c02b6e10884921b733b86dbd7ebdfc5502d011cd5c8d05
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  dec2006_d3dx10_00_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\dec2006_d3dx10_00_x86.inf
                                                                                  • Size 673B
                                                                                  • SHA256 33291a47388edecc059f1825c1979142d7a9cd4a850716f9dce687deba1fa750
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  dec2006_d3dx9_32_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\dec2006_d3dx9_32_x64.inf
                                                                                  • Size 806B
                                                                                  • SHA256 ff00313af4a90f426492d72969f5efc6c56a17f2dd91f20cb5c0a38d9f1f2b6b
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  dec2006_d3dx9_32_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\dec2006_d3dx9_32_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 ef09d783bf5cff2cfba99946e5e71fda577b196a49c88bed1c51b5fd29cecf94
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  dec2006_xact_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\dec2006_xact_x64.inf
                                                                                  • Size 908B
                                                                                  • SHA256 f2f2040b8d13705f00d8e20a53f22093aa0f8c8d6aa6224992ba727ace7b75f6
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  dec2006_xact_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\dec2006_xact_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 4c0a40094228a51f567bec65c2cdf289d268812c1af579e3c6b76cd3adb77e12
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  dxdllreg_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\dxdllreg_x86.inf
                                                                                  • Size 724B
                                                                                  • SHA256 54e098294ef0ad3b14b9c77642838b5992fe4573099d8397a1ef566d9e36da40
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  dxupdate.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\dxupdate.dll
                                                                                  • Size 173KB
                                                                                  • SHA256 fb4f297e295c802b1377c6684734b7249d55743dfb7c14807bef59a1b5db63a2
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  dxupdate.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\dxupdate.inf
                                                                                  • Size 12KB
                                                                                  • SHA256 93f5589499ee4ee2812d73c0d8feacbbcfe8c47b6d98572486bc0eff3c5906ca
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  feb2006_d3dx9_29_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\feb2006_d3dx9_29_x64.inf
                                                                                  • Size 806B
                                                                                  • SHA256 ef36ece1a6bd8af3b0b9247b081d28ed511b7e18c43eb3aff364c9ce8d3a06c3
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  feb2006_d3dx9_29_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\feb2006_d3dx9_29_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 f12f4bd86d5cd748b0fcf7106e9dff333c27c0886541339ba1f40c443bdc61cd
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  feb2006_xact_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\feb2006_xact_x64.inf
                                                                                  • Size 890B
                                                                                  • SHA256 b7ca1a4942057592c5b83b4425350da41c61779dcae608112141d727091842d4
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  feb2006_xact_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\feb2006_xact_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 45146fd446fc8533dc5f97d88bee9ae220161f24797114d0bf3afc7c479ed69b
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  feb2007_xact_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\feb2007_xact_x64.inf
                                                                                  • Size 908B
                                                                                  • SHA256 184c1684c57de07983edaaa1ae2751b263497673ee8418af023a63fa03553f53
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  feb2007_xact_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\feb2007_xact_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 64b6020f43bbab7f7c2368fcfe7224165fef555b2bef813aa13b2d9f6295d46c
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  infinst.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                                                                                  • Size 65KB
                                                                                  • SHA256 300ed1a4ef37c8d5f13d67a5daabd46bcdd9ad9da4fe6283f20d7d38f72caaf5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  infinst.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                                                                                  • Size 65KB
                                                                                  • SHA256 76eed293cdcdf17942acc313366b22b55ad78ee0389989438e63ab7ae145167d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  infinst.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                                                                                  • Size 68KB
                                                                                  • SHA256 34ab99536ea59ad60ba6efda3ea6d18291ef096a0bab3664248d6045805da0ec
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  infinst.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                                                                                  • Size 68KB
                                                                                  • SHA256 d4e57566914f1d36f4ebfb6e164ce2170f1d5e6392189d0ad6de3ef3b0a9aad3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  infinst.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                                                                                  • Size 68KB
                                                                                  • SHA256 fbe2e9cf7e400537a4871218113df178f70501ffeea59a8f0f721927124d6d46
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  infinst.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                                                                                  • Size 68KB
                                                                                  • SHA256 e0838d8d562ed4683bc06ecdbc46fe19dcddf711a0c7909dabf62da572035dcf
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  infinst.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                                                                                  • Size 73KB
                                                                                  • SHA256 de817d92db706f329d50567221c42110ae781d679ef853cc684aec779ab51ccf
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  infinst.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                                                                                  • Size 74KB
                                                                                  • SHA256 ea31341129f7558d34fc2fcae9e715343aaadfc57f06a33a6da18448bd71b77d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  infinst.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                                                                                  • Size 74KB
                                                                                  • SHA256 4c8befaece0c58eb75c38e2347db04557c1bd2a4a269282c3769d6bcccf50395
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  infinst.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                                                                                  • Size 74KB
                                                                                  • SHA256 1707a6644d66406a9ac149b8fc959d964dce5c028ca3e1d0d5052e70f80515e2
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  infinst.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                                                                                  • Size 74KB
                                                                                  • SHA256 3a07c2436d3fd2473e15518a53262d4f0fb7f2a05589437cc5668f929063e782
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  infinst.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                                                                                  • Size 74KB
                                                                                  • SHA256 d808bb408a4bd695a9793e70b1c61637e008ac11174dbe1373481e2bdb0c9299
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  infinst.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\infinst.exe
                                                                                  • Size 81KB
                                                                                  • SHA256 8c62fe8466d9a24a0f1924de37b05d672a826454804086cddc7ed87c020e67ff
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  jun2005_d3dx9_26_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\jun2005_d3dx9_26_x64.inf
                                                                                  • Size 806B
                                                                                  • SHA256 addafcf0cfd36587c12eb2692922f0fb134874d11005a0544cc054546a493933
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  jun2005_d3dx9_26_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\jun2005_d3dx9_26_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 262ed4a65dd45e19f196cb2d9946326693ee31a86b51bf77116dec2727971cb6
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  jun2006_xact_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\jun2006_xact_x64.inf
                                                                                  • Size 908B
                                                                                  • SHA256 fe9caa55be17684622fd7339b1b96e1f0d107dc33c065706d24a435d523c6e12
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  jun2006_xact_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\jun2006_xact_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 6bdce6f6779712e38c6d9e6e5961217e417254089f096c719f25566e952cb257
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  jun2007_d3dx10_34_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\jun2007_d3dx10_34_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 0f75b7ef71e183476ec938705024eb8a10a77d7602a336be876c7f5d17429725
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  jun2007_d3dx10_34_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\jun2007_d3dx10_34_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 808983dfd3db7c3452589ea4e14ab4af8ef47dbad3b639f9a3c55685c9b73867
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  jun2007_d3dx9_34_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\jun2007_d3dx9_34_x64.inf
                                                                                  • Size 812B
                                                                                  • SHA256 77f3fa1756181a90d2ee63c26cddfdaba0d720c9a49121db28746cd02b3e071d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  jun2007_d3dx9_34_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\jun2007_d3dx9_34_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 a568b7b8a0360ad94b1ed6388eca6ca9d8770937360a426a0fdadef9a4019bba
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  jun2007_xact_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\jun2007_xact_x64.inf
                                                                                  • Size 920B
                                                                                  • SHA256 405d8cbe3c87b16afac2a9254497412a42de4ae2d8fb470a1234dc3260e0b90f
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  jun2007_xact_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\jun2007_xact_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 33b980fb973394d9d8cb4645914d4cf6793bf92bd311e0431ce9cacc59fdcbc5
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  mdx_1.0.2904.0_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\mdx_1.0.2904.0_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 3bd14cf2a96544ece692e1911500f7196370a111017fb6b0e23db0f0d0f40dfa
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  microsoft.directx.diagnostics.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\microsoft.directx.diagnostics.dll
                                                                                  • Size 12KB
                                                                                  • SHA256 8c9685959706750091b0094522cec8644de1d1c6309e7a2fe02cef130d3a2b9c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  microsoft.directx.direct3d.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\microsoft.directx.direct3d.dll
                                                                                  • Size 462KB
                                                                                  • SHA256 f3359d5e41b1d4fec7230579a593e40fe44f6afdfacd1e2bbe52ee06d84686fb
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  microsoft.directx.direct3dx.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\microsoft.directx.direct3dx.dll
                                                                                  • Size 2.6MB
                                                                                  • SHA256 7986e3fbe05418fe5d8425f2f1b76b7a7b09952f3ec560b286dd744bf7178059
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  microsoft.directx.direct3dx.xml

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\microsoft.directx.direct3dx.xml
                                                                                  • Size 1.4MB
                                                                                  • SHA256 c3cc575c93690ddf44fd71fdeaff3d61552e9d4eafbef77840e4208522d81fb7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  microsoft.directx.direct3dx.xml

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\microsoft.directx.direct3dx.xml
                                                                                  • Size 1.3MB
                                                                                  • SHA256 7b38e6dd8c567d17d94f595c33fb234284abe884a1148025f59c8e426ec30c03
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  nov2007_d3dx10_36_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\nov2007_d3dx10_36_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 7a49ae818e199cf9f9bd831f94cb6d03a1e72a141d76546261979b30642757b7
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  nov2007_d3dx10_36_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\nov2007_d3dx10_36_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 96f48bb810055699d37e9e27a65947483a0b4df304870e3b5448d3051b3e4926
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  nov2007_d3dx9_36_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\nov2007_d3dx9_36_x64.inf
                                                                                  • Size 812B
                                                                                  • SHA256 d1b544b3912e73e5984cd759096120febe6f17e41a3cf920ef82431b9b569c1d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  nov2007_d3dx9_36_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\nov2007_d3dx9_36_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 843764f70f56d430c0695e263c895a135a631f793213d1005fafcf9c210d1ac9
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  nov2007_x3daudio_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\nov2007_x3daudio_x64.inf
                                                                                  • Size 815B
                                                                                  • SHA256 1cc72ca78433fbb72ee6b654c908748ea846c87c80424816745f285ed3bc910b
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  nov2007_x3daudio_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\nov2007_x3daudio_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 f882bdbc8230d24b24e20f9d0db447586e9493801900a8ba381eb493bd41f5d5
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  nov2007_xact_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\nov2007_xact_x64.inf
                                                                                  • Size 926B
                                                                                  • SHA256 841d579573afd51499c7cd8ee986a41db63cedb722e8fac351d3632ff470c161
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  nov2007_xact_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\nov2007_xact_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 24714f229e479338ed89bdd6143140505fd63f517b7e71170ea6c072a1748b06
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  oct2005_xinput_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\oct2005_xinput_x64.inf
                                                                                  • Size 618B
                                                                                  • SHA256 534d55cae9f43193f49d74c9303fa3d32cc309d0b23597a97c315f207f2a358d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  oct2005_xinput_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\oct2005_xinput_x86.inf
                                                                                  • Size 782B
                                                                                  • SHA256 a14d5947c0ad4a864f95e3f35344e93f4845094d660eb37b77b1fdae9f7995e2
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  oct2006_d3dx9_31_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\oct2006_d3dx9_31_x64.inf
                                                                                  • Size 806B
                                                                                  • SHA256 c031987e68e476365cd885e41a072f85fdfc9e480c93871d024a5ccf26d17118
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  oct2006_d3dx9_31_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\oct2006_d3dx9_31_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 a1c61096019a6ae1a9f31e3fe67aa2bb7e9e451967959d7088344f3f20ab572e
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  oct2006_xact_x64.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\oct2006_xact_x64.inf
                                                                                  • Size 908B
                                                                                  • SHA256 4c388e9eaf3c39e75d003a58020e491b675b3a6054c702062a9c90e86f691d96
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  oct2006_xact_x86.inf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\oct2006_xact_x86.inf
                                                                                  • Size 1KB
                                                                                  • SHA256 66998b21cbe6f05b12cdb4bb45549dcb1b4a92f8a1b910334150a8d767fa39e9
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  x3daudio1_0.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\x3daudio1_0.dll
                                                                                  • Size 13KB
                                                                                  • SHA256 228dfece2b4555a243a73e7bf461036f1e53951977625651ff5a59deaeaf4b88
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  x3daudio1_1.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\x3daudio1_1.dll
                                                                                  • Size 14KB
                                                                                  • SHA256 ff15f14174a5543f028fa49cca745582fe4cacf3bbe490749cf43444690ab359
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  x3daudio1_2.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\x3daudio1_2.dll
                                                                                  • Size 17KB
                                                                                  • SHA256 7c06bb70d12cf78de9c6a12a53c95f9dba41c140a48bccd500483e5b87795a8c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  x3daudio1_2.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\x3daudio1_2.dll
                                                                                  • Size 17KB
                                                                                  • SHA256 1ae37d90d39c36c142a51ab9fef7230788ff95080f2bc47734737bf82d3c2c9b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  x3daudio1_2.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\x3daudio1_2.dll
                                                                                  • Size 17KB
                                                                                  • SHA256 4c448c7f77e3b4385d2cd35d0c470589cdf0524e532f9cf7ae084a8f88aa949a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xactengine2_0.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xactengine2_0.dll
                                                                                  • Size 224KB
                                                                                  • SHA256 cfd1c2d34feb7d94f282e97bf762a99bfa7309dc7353d96dfe4aadc187d26c67
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xactengine2_1.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xactengine2_1.dll
                                                                                  • Size 224KB
                                                                                  • SHA256 666cef7d27a38f709063c9c581fd95e6b3fa27167bff4beff484dba2dc922a2b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xactengine2_10.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xactengine2_10.dll
                                                                                  • Size 261KB
                                                                                  • SHA256 113640ae8cf78caa7cface2f906f9e6b60809906f5c26e08b2e90fc48430f3b7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xactengine2_2.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xactengine2_2.dll
                                                                                  • Size 224KB
                                                                                  • SHA256 4f996edb65022e33ae9c9f7acf7232c8d444f75c50c72894f6d3173b55404ebe
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xactengine2_3.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xactengine2_3.dll
                                                                                  • Size 231KB
                                                                                  • SHA256 ca20cf8e4034719a46bf67c6009486c2c1cfc2da10ffed3a67dcae677b4f6793
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xactengine2_4.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xactengine2_4.dll
                                                                                  • Size 232KB
                                                                                  • SHA256 1e0e09fc077bdeee3de065c663b83f6717d39d56778833f030955077d490d000
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xactengine2_5.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xactengine2_5.dll
                                                                                  • Size 245KB
                                                                                  • SHA256 ec68b5163cbb5f15e2fbe37fdf5fcb0d01dffbe53a460cb2cf668f31f0127ad5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xactengine2_6.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xactengine2_6.dll
                                                                                  • Size 249KB
                                                                                  • SHA256 be45aef0889b03e2243282a912f41580e8566db666a782c26a1d4d7988799d03
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xactengine2_7.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xactengine2_7.dll
                                                                                  • Size 255KB
                                                                                  • SHA256 a43c92af3fbe91dfe2a1d415342631fe64e18c7dd3e16e93b6c78947b68e7bd6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xactengine2_8.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xactengine2_8.dll
                                                                                  • Size 259KB
                                                                                  • SHA256 15d82e89bea30bf82de6ba0cfbe97eeaf05d1e06bc0133f0d1ee8d0cc41f51f6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xactengine2_9.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xactengine2_9.dll
                                                                                  • Size 260KB
                                                                                  • SHA256 93a0d8fc38e4e9a301d9e721afbeedc5af40becc0b11a6e7e8e38f08f366ff6e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xactengine3_0.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xactengine3_0.dll
                                                                                  • Size 232KB
                                                                                  • SHA256 887329745c479ce8d3023c969adf66780dd7e51ab536f0a08550ba4c77066c20
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xactengine3_1.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xactengine3_1.dll
                                                                                  • Size 232KB
                                                                                  • SHA256 088999560171c60129c95f9b541852392602561dce43e4c61a453d48065f52ca
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xactengine3_2.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xactengine3_2.dll
                                                                                  • Size 232KB
                                                                                  • SHA256 e6a34c1f068f89d6515cb460eed3b4dbb53522c5579e6c75741482f0d40d9f99
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xactengine3_3.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xactengine3_3.dll
                                                                                  • Size 230KB
                                                                                  • SHA256 ef052bc9b7fde596fff3ea2d9c8fc994f3282953dead1b7f5477e7154af67245
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xactengine3_4.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xactengine3_4.dll
                                                                                  • Size 229KB
                                                                                  • SHA256 d3bad7995b998f2c95dbb33020a198ef5a248825321032f051619f353d46182b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xactengine3_5.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xactengine3_5.dll
                                                                                  • Size 233KB
                                                                                  • SHA256 1d37ab9b90372eaaafb5055401449dc3184428fed559baaf36fbcccd2479611a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xactengine3_6.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xactengine3_6.dll
                                                                                  • Size 233KB
                                                                                  • SHA256 8a7e7c5ac2e6230f0249d46751522e7ecf85e7490cf7491ab73bf2e7e59e4c0f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xactengine3_7.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xactengine3_7.dll
                                                                                  • Size 234KB
                                                                                  • SHA256 d7b1cf58898046c430d49cf8f778e4898280f4709340c3938d3139894166fe8d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xinput1_1.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xinput1_1.dll
                                                                                  • Size 61KB
                                                                                  • SHA256 69cd725c53e0302e75db20e9a3e4b33f58dceaa2e6ea4938b2733df8bc289a71
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xinput1_2.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xinput1_2.dll
                                                                                  • Size 61KB
                                                                                  • SHA256 9714d146a785d458f0de8fef387d82c9f8e101c02407a0cbeb06f02a69518eec
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  xinput1_3.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\DX64E1.tmp\xinput1_3.dll
                                                                                  • Size 79KB
                                                                                  • SHA256 8d540d484ea41e374fd0107d55d253f87ded4ce780d515d8fd59bbe8c98970a7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  bootstrap.ps1

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\bootstrap.ps1
                                                                                  • Size 1KB
                                                                                  • SHA256 e94f4f3efcbe350f34cc5d0a4481e32f9d8cbe554faefa741821fa618798d0eb
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  payload.zip

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\payload.zip
                                                                                  • Size 11.8MB
                                                                                  • SHA256 672c80bc9a37fd04e46679772a91cb60b696d76c6d84f6853fcfd88a494701f5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  MadiumInstaller.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-e5fbe831049b44ad9fc7f44c1fcce180\MadiumInstaller.exe
                                                                                  • Size 201KB
                                                                                  • SHA256 613678d816cfccd88a0f4dc506f5f63bbfa6eb222bb4f215217cca6e5395287e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  MadiumInstaller.exp

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-e5fbe831049b44ad9fc7f44c1fcce180\MadiumInstaller.exp
                                                                                  • Size 836B
                                                                                  • SHA256 8fc56228ccf1eab527c30de992491c94ef499de6db4f0c93a17d29169f450273
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  MadiumInstaller.lib

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-e5fbe831049b44ad9fc7f44c1fcce180\MadiumInstaller.lib
                                                                                  • Size 1KB
                                                                                  • SHA256 1e2998f883ecaf4726628900f791e5a114ee9af80184dca4c6abc3dd286079b6
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  bitsdojo_window_windows_plugin.lib

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-e5fbe831049b44ad9fc7f44c1fcce180\bitsdojo_window_windows_plugin.lib
                                                                                  • Size 571KB
                                                                                  • SHA256 e30c3b143bf064f7a2f8438247ae46ce7eada3850536ad0ea415952b3100c87b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  app.so

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-e5fbe831049b44ad9fc7f44c1fcce180\data\app.so
                                                                                  • Size 5.3MB
                                                                                  • SHA256 1ff379c029f8b24bbe86a34b61e633d32d41c88049ea50fe93e062465b89e210
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  AssetManifest.bin

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-e5fbe831049b44ad9fc7f44c1fcce180\data\flutter_assets\AssetManifest.bin
                                                                                  • Size 2B
                                                                                  • SHA256 f566cc6fccc657365c0197accf3a7d6f80f85209ff666ff774f4dcbc524aa842
                                                                                  • MD5 SHA1 SHA512

                                                                                  FontManifest.json

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-e5fbe831049b44ad9fc7f44c1fcce180\data\flutter_assets\FontManifest.json
                                                                                  • Size 82B
                                                                                  • SHA256 28b1eb2b3d2e1ad60b8c8b0f9100b1ccbf492f7fa97f5bebb51ea97e73926e7d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  NOTICES.Z

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-e5fbe831049b44ad9fc7f44c1fcce180\data\flutter_assets\NOTICES.Z
                                                                                  • Size 102KB
                                                                                  • SHA256 bdb492de2b031ec16101eede4cd2f26feefcd75c16a09239fa471a9cc552fcca
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  NativeAssetsManifest.json

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-e5fbe831049b44ad9fc7f44c1fcce180\data\flutter_assets\NativeAssetsManifest.json
                                                                                  • Size 45B
                                                                                  • SHA256 9548a31e4a048135c1d94f919328bfb62ae2c7bb3cab96557c7941daa97776cb
                                                                                  • MD5 SHA1 SHA512

                                                                                  MaterialIcons-Regular.otf

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-e5fbe831049b44ad9fc7f44c1fcce180\data\flutter_assets\fonts\MaterialIcons-Regular.otf
                                                                                  • Size 1.6MB
                                                                                  • SHA256 d9865b671a09d683d13a863089d8825e0f61a37696ce5d7d448bc8023aa62453
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  ink_sparkle.frag

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-e5fbe831049b44ad9fc7f44c1fcce180\data\flutter_assets\shaders\ink_sparkle.frag
                                                                                  • Size 21KB
                                                                                  • SHA256 1fe8436a743884cb65078fe8c7b38e18f5365f2a2961270916f426fd13c604af
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  stretch_effect.frag

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-e5fbe831049b44ad9fc7f44c1fcce180\data\flutter_assets\shaders\stretch_effect.frag
                                                                                  • Size 17KB
                                                                                  • SHA256 62a899ff4e168ac6ca888ce7c2f40e5d3fbf8ca20a1c3ded781a116a6d7907e2
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  icudtl.dat

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-e5fbe831049b44ad9fc7f44c1fcce180\data\icudtl.dat
                                                                                  • Size 842KB
                                                                                  • SHA256 998367809a821d595928089c197b3f7959f0420f81f79d4d0daee53378492ed5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  flutter_windows.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-e5fbe831049b44ad9fc7f44c1fcce180\flutter_windows.dll
                                                                                  • Size 20.3MB
                                                                                  • SHA256 a5c880a4218a04cfb3e58b103160334658122c5e43d3b818b3d9af5ab3e1fc0e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  __PSScriptPolicyTest_pdkgyhwo.bwl.ps1

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_pdkgyhwo.bwl.ps1
                                                                                  • Size 60B
                                                                                  • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  tmpaddon

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                                                                  • Size 502KB
                                                                                  • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  tmpaddon

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                                                                  • Size 11KB
                                                                                  • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  6824f4a902c78fbd.customDestinations-ms

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                                                                                  • Size 15KB
                                                                                  • SHA256 c74f39040479e96f948791eedfe74c6f42817fef3762a08b42b5faaa85940ffd
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  6824f4a902c78fbd.customDestinations-ms

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                                                                                  • Size 31KB
                                                                                  • SHA256 69c9dbf21f416bdc64de3da068881f36ba881bda5df9a1a6c689ba7cf239688d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  AlternateServices.bin

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\AlternateServices.bin
                                                                                  • Size 8KB
                                                                                  • SHA256 ab7bc3237195ed3c128f79d90c9b6cd2102ce078c462fb44caf1009960a927d2
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  AlternateServices.bin

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\AlternateServices.bin
                                                                                  • Size 30KB
                                                                                  • SHA256 5fb43ee8026c889edde556474a59fda2494e5ff0d9b8e5980e3f7aefcb25790a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  AlternateServices.bin

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\AlternateServices.bin
                                                                                  • Size 33KB
                                                                                  • SHA256 159ee1455ffc5109aedc2720a9088fb0f9c63f2deeb15dbfd51afc5e484e4e23
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  AlternateServices.bin

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\AlternateServices.bin
                                                                                  • Size 35KB
                                                                                  • SHA256 edca89f980eb07139db9f230db9ee287f6f673b0ab75c64b24ba4d85408e0117
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  AlternateServices.bin

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\AlternateServices.bin
                                                                                  • Size 38KB
                                                                                  • SHA256 0863bfd275a59fb86dbf149fc12bc475417766766187ead3668ee94eb10b25bd
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  data.safe.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\db\data.safe.tmp
                                                                                  • Size 6KB
                                                                                  • SHA256 99540a9886a5e391dd678d519a69bc0411fa52947295ff0c3ce04506b50f5f43
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  data.safe.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\db\data.safe.tmp
                                                                                  • Size 149KB
                                                                                  • SHA256 3545b6b0da85e7bc35030333f999ad5b40ebeb0176f50cf6de19df2747774455
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  data.safe.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\db\data.safe.tmp
                                                                                  • Size 149KB
                                                                                  • SHA256 db9f70e02c71ee8304d4559737b4e15685fb3f99c8774157910a9e74b11a1a88
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  data.safe.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\db\data.safe.tmp
                                                                                  • Size 149KB
                                                                                  • SHA256 eb467c1173d5f20d457f695e2d1fa0224ff7917841549387127b3d1ddf4f463b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  data.safe.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\db\data.safe.tmp
                                                                                  • Size 149KB
                                                                                  • SHA256 09eae01ed933a72af9d06455c646781a53f98fbffb8f64f4e0e14f5bce25b965
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  events

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\events\events
                                                                                  • Size 1KB
                                                                                  • SHA256 dbae3a95106791e0c8c76aa8a3e997127fe14cbd3e411660c19e2e19fd1d3380
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  events

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\events\events
                                                                                  • Size 4KB
                                                                                  • SHA256 9454670ae4ee14b8fd8d23137bfb337a8780e6b5d8a84a1b18173c2036706e0c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  067bece9-35f9-40eb-8333-63fb8d13e26e

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\pending_pings\067bece9-35f9-40eb-8333-63fb8d13e26e
                                                                                  • Size 2KB
                                                                                  • SHA256 2e717b006e5a0041fd3e323ed654cb1a4aacc44f56eedaa868b34bc7cee9f6cd
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  4f77a52b-8312-4aea-a689-06f03e02acce

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\pending_pings\4f77a52b-8312-4aea-a689-06f03e02acce
                                                                                  • Size 15KB
                                                                                  • SHA256 80d9bb43308c4315d4a13e495b05be3aa1aa4d8680e3f14f59a3729a88817cf6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  579d46f6-65f9-42ea-b994-8de70a496fb0

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\pending_pings\579d46f6-65f9-42ea-b994-8de70a496fb0
                                                                                  • Size 886B
                                                                                  • SHA256 c421f5b3ee83c7570cbb7e109a5be526b0e2de00cbd4571b5915f2a2007aa540
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  74fa7c80-328b-447c-8d5f-3076cd4dce88

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\pending_pings\74fa7c80-328b-447c-8d5f-3076cd4dce88
                                                                                  • Size 883B
                                                                                  • SHA256 39bdfd2be656c8acc45bb6543a109052541117e32e26d027583511d070aa805c
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  8524f07d-ed4d-4bf6-aeec-0b0d184709de

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\pending_pings\8524f07d-ed4d-4bf6-aeec-0b0d184709de
                                                                                  • Size 235B
                                                                                  • SHA256 c914040e22762c5c332adda39d073a4872c59798283811e4fcf48043932389b3
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  c77839a4-a674-4bdf-876f-e49925989cbb

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\pending_pings\c77839a4-a674-4bdf-876f-e49925989cbb
                                                                                  • Size 235B
                                                                                  • SHA256 cbb3195af7b9171cee7ea8c4a525d60c4f0be2fee1da5a0547930e00b1eee9e5
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  extensions.json

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\extensions.json
                                                                                  • Size 16KB
                                                                                  • SHA256 adae90ad101d47bc135e0c87e470d76ef836251dff73e16c500855b75bb3c681
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  gmpopenh264.dll

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                                                                                  • Size 1.1MB
                                                                                  • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  gmpopenh264.info

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                                                                                  • Size 116B
                                                                                  • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  LICENSE

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
                                                                                  • Size 473B
                                                                                  • SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  manifest.json

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                                                                                  • Size 1002B
                                                                                  • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  widevinecdm.dll

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                                                                                  • Size 21.6MB
                                                                                  • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  prefs-1.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\prefs-1.js
                                                                                  • Size 12KB
                                                                                  • SHA256 b5e7dae15660f5b88291fb791eb6751ed2696e76169563ec7d639ea54e1f7746
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  prefs-1.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\prefs-1.js
                                                                                  • Size 7KB
                                                                                  • SHA256 2d9bfcd329febe38c9f40b6bfee1d5f33d0d2e8683d70728473362bfe6e72545
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  prefs-1.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\prefs-1.js
                                                                                  • Size 12KB
                                                                                  • SHA256 35f4d4b5016eeba4b21d73fc20d2bc5ab952e9d141bfb396713e1b6447009f9a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  prefs-1.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\prefs-1.js
                                                                                  • Size 12KB
                                                                                  • SHA256 61d9eaf229b78c79e8aa2c783d885dc6ec03577e02333aa2f90ccbe04c340dcb
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  prefs-1.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\prefs-1.js
                                                                                  • Size 6KB
                                                                                  • SHA256 73493fce814fd3d3426990c79c4caded8e85adbe89fcbe180501b6e64db4bf3b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  prefs.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\prefs.js
                                                                                  • Size 6KB
                                                                                  • SHA256 1ecf71f75670985331190554830306a21692cf87f41b5a75d2850a815ea7d0b3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  prefs.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\prefs.js
                                                                                  • Size 6KB
                                                                                  • SHA256 cf34ba3d6eba6983b703b277af5651c1566366502595476009d689b920a9915b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  recovery.baklz4

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.baklz4
                                                                                  • Size 7KB
                                                                                  • SHA256 a1f6fdf048c3c8ce381b39bf7bc680feeebe3b90c8efcf71ebc8c8f75e95ae01
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  recovery.baklz4

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.baklz4
                                                                                  • Size 5KB
                                                                                  • SHA256 5d9bac8035b9e48f38facc1e91455baaef62b9a19f3ba3de7e54ff6e55bf0392
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  recovery.baklz4

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.baklz4
                                                                                  • Size 17KB
                                                                                  • SHA256 2f12a9603bdc4f1fc4b110992e6e2a9ef3c56e5bc5b11175c47501461394b8fb
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  recovery.baklz4

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.baklz4
                                                                                  • Size 23KB
                                                                                  • SHA256 28a363ff298e8a2cc6eaef45270f94aa85f1dca39b936913a551db70e3dac653
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  recovery.baklz4

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.baklz4
                                                                                  • Size 26KB
                                                                                  • SHA256 0b4d630a04178cd8dd71b3050bdd8464b43f633c336bbe59dc5f5f22a6ed4e50
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  recovery.baklz4

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.baklz4
                                                                                  • Size 1KB
                                                                                  • SHA256 d31d1a23bcdbd79572e047c66a24e05f1875856e21b0ab281946d5fac618a2b6
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  recovery.baklz4

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.baklz4
                                                                                  • Size 4KB
                                                                                  • SHA256 85eaf279995d1560e09c30b02509ca32303f22b1b95c0b96cf2610f20687c7fe
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  recovery.baklz4

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.baklz4
                                                                                  • Size 8KB
                                                                                  • SHA256 e979316efa436cb213638e790727842c701ff28aca16cc8f33b41f9d3b9e5e3f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  recovery.baklz4

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.baklz4
                                                                                  • Size 14KB
                                                                                  • SHA256 cc805a102bc1acaf67b0391db0320a88f0fa4246e91dbc838195e6d522460da7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  recovery.baklz4

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.baklz4
                                                                                  • Size 23KB
                                                                                  • SHA256 b464f1550195edc1a7dc0786105ea25fec255a2528a9ac5f34f9e14653b9a118
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  recovery.baklz4

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.baklz4
                                                                                  • Size 23KB
                                                                                  • SHA256 9eada9e1ea51f24caee5c85a33d8facb4700306bebb6867439202d7ca1cf469a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  recovery.jsonlz4

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                  • Size 1KB
                                                                                  • SHA256 0108c97f0ee25567454612254010fc9b1368127e26661f7cee94fad429f248d2
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  3870112724rsegmnoittet-es.sqlite

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                                                                  • Size 4.1MB
                                                                                  • SHA256 2132a9aebb35fc90e0dedc96837f676e9e44b3958bcbee6b6fa5dce40369800c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  DirectX.log

                                                                                  • Path C:\Windows\DirectX.log
                                                                                  • Size 4KB
                                                                                  • SHA256 93f9f27a3f4e06d513d75b75750a0b25d43d8e16a70f970e11eec35ee9973b6a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  DirectX.log

                                                                                  • Path C:\Windows\Logs\DirectX.log
                                                                                  • Size 475B
                                                                                  • SHA256 9da0a1f1ef411c4de20f1d2ea00afd1dfdd301b65503793fe975d44b20f0c5b6
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  DirectX.log

                                                                                  • Path C:\Windows\Logs\DirectX.log
                                                                                  • Size 5KB
                                                                                  • SHA256 c1dd7b9c1b2cf599406679eb42ddd1e0b49c3ca29eaaef6d1febc1800f707bcb
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Staging

                                                                                  • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3208_1882311536\Mu\Staging
                                                                                  • Size 36B
                                                                                  • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                                                                                  • MD5 SHA1 SHA512

                                                                                  hyph-bn.hyb

                                                                                  • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3208_197644755\hyph-bn.hyb
                                                                                  • Size 703B
                                                                                  • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  hyph-mr.hyb

                                                                                  • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3208_197644755\hyph-mr.hyb
                                                                                  • Size 687B
                                                                                  • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  hyph-nn.hyb

                                                                                  • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3208_197644755\hyph-nn.hyb
                                                                                  • Size 141KB
                                                                                  • SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Microsoft.DirectX.AudioVideoPlayback.dll

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
                                                                                  • Size 52KB
                                                                                  • SHA256 406f473429573e9f0084aae125ef8f19f59291aa4c33cf7d40e7d996995a3238
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  __AssemblyInfo__.ini

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                                  • Size 326B
                                                                                  • SHA256 68ab0e673b364f9aed1abaca1c99ed28a381a28e550cbaa90a305b3c2408ba2b
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Microsoft.DirectX.Direct3DX.dll

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                                  • Size 2.7MB
                                                                                  • SHA256 5b70f0ac40a38c903062a12ff7cd71d907e75238a044ded9b34fb51e9a9a2799
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  __AssemblyInfo__.ini

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                                  • Size 308B
                                                                                  • SHA256 036bd03d79c613befee3da731d370145878e4376e335e1e6397c3fda6ef21d24
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Microsoft.DirectX.Direct3DX.dll

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                                  • Size 550KB
                                                                                  • SHA256 8418941d8f1d4c84288e0bf54392378dd3d87b602bb693ff4f8a633022681c12
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  __AssemblyInfo__.ini

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                                  • Size 308B
                                                                                  • SHA256 fefc1287900d2d970e86fbe76ae51a455546d9bc3dfce5fc58ed08111a0b5caf
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Microsoft.DirectX.Direct3DX.dll

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                                  • Size 554KB
                                                                                  • SHA256 f500c350dd71df7452b92444e19b4644b04283434a6557123f1e4d9fb078c3f8
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  __AssemblyInfo__.ini

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                                  • Size 308B
                                                                                  • SHA256 a2c76f63d026a35975782eeabc617b40104efff1e2dc9bee3b9e3c3727b36f27
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Microsoft.DirectX.Direct3DX.dll

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                                  • Size 562KB
                                                                                  • SHA256 5e90089e69e4f7e2e42ea4a81fb62005c3710d0a4acdf207b97ed03f5641d013
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  __AssemblyInfo__.ini

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                                  • Size 308B
                                                                                  • SHA256 0608a3a4e7ce8586848145e67986dcdb5f7e2a3c354e8f5416204664a69d9464
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Microsoft.DirectX.Direct3DX.dll

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                                  • Size 563KB
                                                                                  • SHA256 c29d337bf7639fbf424b34cc0409d2715762e1b4d82881fb524a2508381c9f62
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  __AssemblyInfo__.ini

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                                  • Size 308B
                                                                                  • SHA256 95436e14834c3ddd365788d1241d189f8caef41b9047e8c2f63e5034e2f9053e
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Microsoft.DirectX.Direct3DX.dll

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                                  • Size 564KB
                                                                                  • SHA256 bebbc40ca25ef22e9d16b0de1123e0cb0444fe7a78b4f0b4395bdfd81618698c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Microsoft.DirectX.Direct3DX.dll

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                                  • Size 564KB
                                                                                  • SHA256 36a21fc4f4c8f6ba4ad900613ee1b08ff43f2545585a2601c9fc4cf083d68a77
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  __AssemblyInfo__.ini

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                                  • Size 308B
                                                                                  • SHA256 a68b28e26893e6315da325306f34864d1b6dbc1ad3dcc16a8f35bfdd291b78c6
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Microsoft.DirectX.Direct3DX.dll

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                                  • Size 565KB
                                                                                  • SHA256 78d85f0e2cb7d7bde534222f4ebfea1c9e06d37ecd3bb7ebd59e35f00b94b11d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Microsoft.DirectX.Direct3DX.dll

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                                  • Size 565KB
                                                                                  • SHA256 2ee41d4d591a39d648e90db4d47d0fa0557fd68197756ee2ee94fcde4d820cfa
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  __AssemblyInfo__.ini

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                                  • Size 308B
                                                                                  • SHA256 7fa29f62f9739c4d8cab2e23211ef30033358ec254f1b1c2bb16fa199abb147b
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Microsoft.DirectX.DirectDraw.dll

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
                                                                                  • Size 142KB
                                                                                  • SHA256 ff4c03bbeb292317a77c86c1c81ae9564acb984b352fbef36d66e2d8bcbd79a8
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  __AssemblyInfo__.ini

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                                  • Size 310B
                                                                                  • SHA256 07531525525c834abc32a635a0f8f52a327e98e8304037eb156846baa332979b
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Microsoft.DirectX.DirectInput.dll

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
                                                                                  • Size 155KB
                                                                                  • SHA256 0ee2a2c371a918cabc85143202864d0c3a4abf1b93a5029081a622e0acf17ab7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  __AssemblyInfo__.ini

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                                  • Size 312B
                                                                                  • SHA256 c060a3648a7fab827e914b4e1e55e3945dc85c87dbb3817b93b255b5625d6482
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Microsoft.DirectX.DirectPlay.dll

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
                                                                                  • Size 356KB
                                                                                  • SHA256 489f65e1e00534835486e9255eec92b83edae4dade6dff867a380859ae53006a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  __AssemblyInfo__.ini

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                                  • Size 310B
                                                                                  • SHA256 50367ec13ea126c87a2c3a2b524b8f38e30309ded9e63f79d4e1956e39f3562f
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Microsoft.DirectX.DirectSound.dll

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
                                                                                  • Size 174KB
                                                                                  • SHA256 2e28c8fb8b87b5ffd1e0ea27710a2e785ef4741a89e4b3c3af726ec63d15a1fa
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  __AssemblyInfo__.ini

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                                  • Size 312B
                                                                                  • SHA256 318973995e0701b3e9325089ca446041ba6d3c3fced07a673de584df9ce599d7
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Microsoft.DirectX.dll

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
                                                                                  • Size 218KB
                                                                                  • SHA256 942e98f142373547493f13b14e1603b2420851aff013d3085bada7b6b2214d9c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  __AssemblyInfo__.ini

                                                                                  • Path C:\Windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                                  • Size 288B
                                                                                  • SHA256 0ec7ae518d418b1050d66c8b6c7acbed7be021ac0c98dccf8c9eaec7aa263b15
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  memory/1684-9613-0x00007FFC0C380000-0x00007FFC0C381000-memory.dmp

                                                                                  memory/2796-9626-0x00007FFC0D8B0000-0x00007FFC0D8B1000-memory.dmp

                                                                                  memory/2796-9625-0x00007FFC0DB40000-0x00007FFC0DB41000-memory.dmp

                                                                                  memory/3220-93-0x000001E66B800000-0x000001E66B880000-memory.dmp

                                                                                  memory/3220-94-0x000001E66B800000-0x000001E66B880000-memory.dmp

                                                                                  memory/3256-14-0x0000027946390000-0x00000279463A0000-memory.dmp

                                                                                  memory/3256-5-0x0000027946390000-0x00000279463A0000-memory.dmp

                                                                                  memory/3256-12-0x0000027948680000-0x00000279486A2000-memory.dmp

                                                                                  memory/3256-4-0x0000027946390000-0x00000279463A0000-memory.dmp

                                                                                  memory/3256-16-0x0000027949350000-0x0000027949362000-memory.dmp

                                                                                  memory/3256-17-0x0000027946380000-0x000002794638A000-memory.dmp

                                                                                  memory/3312-72-0x0000023C79400000-0x0000023C79480000-memory.dmp

                                                                                  memory/3312-73-0x0000023C79400000-0x0000023C79480000-memory.dmp

                                                                                  memory/3312-68-0x0000023C794B0000-0x0000023C79A09000-memory.dmp

                                                                                  memory/3312-65-0x0000023C75B90000-0x0000023C75B91000-memory.dmp

                                                                                  memory/3312-66-0x0000023C794B0000-0x0000023C79A09000-memory.dmp

                                                                                  memory/3312-67-0x0000023C794B0000-0x0000023C79A09000-memory.dmp

                                                                                  memory/3312-69-0x0000023C75BA0000-0x0000023C75BA1000-memory.dmp

                                                                                  memory/3672-9648-0x00007FFC0C380000-0x00007FFC0C381000-memory.dmp

                                                                                  memory/4136-4884-0x0000000001F80000-0x0000000001FE4000-memory.dmp

                                                                                  memory/4972-9562-0x0000028445410000-0x00000284455D2000-memory.dmp

                                                                                  memory/4972-9563-0x0000028445B10000-0x0000028446038000-memory.dmp

                                                                                  memory/4976-9920-0x00000200C89A0000-0x00000200C89A1000-memory.dmp

                                                                                  memory/4976-9921-0x00000200C89A0000-0x00000200C89A1000-memory.dmp

                                                                                  memory/4976-9922-0x00000200C89A0000-0x00000200C89A1000-memory.dmp

                                                                                  memory/4976-9926-0x00000200C89A0000-0x00000200C89A1000-memory.dmp

                                                                                  memory/4976-9929-0x00000200C89A0000-0x00000200C89A1000-memory.dmp

                                                                                  memory/4976-9932-0x00000200C89A0000-0x00000200C89A1000-memory.dmp

                                                                                  memory/4976-9931-0x00000200C89A0000-0x00000200C89A1000-memory.dmp

                                                                                  memory/4976-9930-0x00000200C89A0000-0x00000200C89A1000-memory.dmp

                                                                                  memory/4976-9928-0x00000200C89A0000-0x00000200C89A1000-memory.dmp

                                                                                  memory/4976-9927-0x00000200C89A0000-0x00000200C89A1000-memory.dmp

                                                                                  memory/6128-5505-0x0000000002160000-0x00000000021C9000-memory.dmp