hxxps://olemad[.]fromsmash[.]com/MADIUMv2

Analysis

user interaction
yes
max time kernel
282s
max time network
278s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
04/08/2026, 16:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://olemad.fromsmash.com/MADIUMv2
Sample260804-vc6fqavgrd

Score

8^/10

discovery execution persistence ransomware

Malware Config

Signatures

Command and Scripting Interpreter: PowerShell 1 TTPs 4 IoCs

Run Powershell and hide display window.

execution

PowerShell

T1059.001

pid	Process
1680	powershell.exe
872	powershell.exe
5280	powershell.exe
5916	powershell.exe

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1741132852-2793423776-1557670484-1000\Control Panel\International\Geo\Nation	MadiumInstaller.exe

Executes dropped EXE 4 IoCs

pid	Process
4828	MadiumInstaller.exe
4908	MadiumInstaller.exe
6024	directx-redist.exe
4180	DXSETUP.exe

Loads dropped DLL 5 IoCs

pid	Process
4828	MadiumInstaller.exe
4908	MadiumInstaller.exe
4180	DXSETUP.exe
4180	DXSETUP.exe
4180	DXSETUP.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0 = "rundll32.exe C:\\Windows\\system32\\advpack.dll,DelNodeRunDLL32 \"C:\\Users\\Admin\\AppData\\Local\\Temp\\IXP000.TMP\\\""	Installer-1.0.6.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Logs\DirectX.log	DXSETUP.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	directx-redist.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	DXSETUP.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3220	msedge.exe
892	dotnet.exe

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 00000000040000002b274edb6f8192100000000000000000000000000000000000000000000000000000000000000000000000000000000000001071020000000000c01200000000ffffffff0000000027010100008838012b274edb0000000000001071020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d083020000000000c050dc000000ffffffff000000000700010000e841012b274edb000000000000d08302000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090d4de0000000000000005000000ffffffff000000000700010000486a6f2b274edb00000000000090d4de000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090d4e30000000000000005000000ffffffff00000000070001000048ea712b274edb00000000000090d4e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe

Checks processor information in registry 2 TTPs 26 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303359246068270"	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1741132852-2793423776-1557670484-1000\{BFDF6C5C-79CB-4548-BECC-E3A2E2486738}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1741132852-2793423776-1557670484-1000_Classes\Local Settings	firefox.exe

Modifies registry key 1 TTPs 7 IoCs

Modify Registry

T1112

pid	Process
2256	reg.exe
760	reg.exe
4292	reg.exe
1848	reg.exe
544	reg.exe
2764	reg.exe
4748	reg.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\Installer-1.0.6.zip:Zone.Identifier	firefox.exe

Suspicious behavior: EnumeratesProcesses 9 IoCs

pid	Process
1680	powershell.exe
1680	powershell.exe
1680	powershell.exe
872	powershell.exe
872	powershell.exe
5280	powershell.exe
5280	powershell.exe
5916	powershell.exe
5916	powershell.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe

Suspicious use of AdjustPrivilegeToken 31 IoCs

description	pid	Process
Token: SeDebugPrivilege	2752	firefox.exe
Token: SeDebugPrivilege	2752	firefox.exe
Token: SeDebugPrivilege	2752	firefox.exe
Token: SeDebugPrivilege	1680	powershell.exe
Token: SeDebugPrivilege	872	powershell.exe
Token: SeIncreaseQuotaPrivilege	872	powershell.exe
Token: SeSecurityPrivilege	872	powershell.exe
Token: SeTakeOwnershipPrivilege	872	powershell.exe
Token: SeLoadDriverPrivilege	872	powershell.exe
Token: SeSystemProfilePrivilege	872	powershell.exe
Token: SeSystemtimePrivilege	872	powershell.exe
Token: SeProfSingleProcessPrivilege	872	powershell.exe
Token: SeIncBasePriorityPrivilege	872	powershell.exe
Token: SeCreatePagefilePrivilege	872	powershell.exe
Token: SeBackupPrivilege	872	powershell.exe
Token: SeRestorePrivilege	872	powershell.exe
Token: SeShutdownPrivilege	872	powershell.exe
Token: SeDebugPrivilege	872	powershell.exe
Token: SeSystemEnvironmentPrivilege	872	powershell.exe
Token: SeRemoteShutdownPrivilege	872	powershell.exe
Token: SeUndockPrivilege	872	powershell.exe
Token: SeManageVolumePrivilege	872	powershell.exe
Token: 33	872	powershell.exe
Token: 34	872	powershell.exe
Token: 35	872	powershell.exe
Token: 36	872	powershell.exe
Token: SeDebugPrivilege	5280	powershell.exe
Token: SeDebugPrivilege	5916	powershell.exe
Token: SeBackupPrivilege	3912	vssvc.exe
Token: SeRestorePrivilege	3912	vssvc.exe
Token: SeAuditPrivilege	3912	vssvc.exe

Suspicious use of FindShellTrayWindow 41 IoCs

pid	Process
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
2752	firefox.exe
2752	firefox.exe
2752	firefox.exe
2752	firefox.exe
2752	firefox.exe
3108	msedge.exe
2752	firefox.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe
3108	msedge.exe

Suspicious use of SetWindowsHookEx 11 IoCs

pid	Process
2752	firefox.exe
2752	firefox.exe
2752	firefox.exe
2752	firefox.exe
4828	MadiumInstaller.exe
4828	MadiumInstaller.exe
4908	MadiumInstaller.exe
4908	MadiumInstaller.exe
4908	MadiumInstaller.exe
4908	MadiumInstaller.exe
4908	MadiumInstaller.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3108 wrote to memory of 4336	3108	msedge.exe	83
PID 3108 wrote to memory of 3220	3108	msedge.exe	84
PID 3108 wrote to memory of 4312	3108	msedge.exe	85
PID 3108 wrote to memory of 3404	3108	msedge.exe	86
PID 3108 wrote to memory of 4312	3108	msedge.exe	85
PID 3108 wrote to memory of 4312	3108	msedge.exe	85
PID 3108 wrote to memory of 3404	3108	msedge.exe	86
PID 3108 wrote to memory of 2496	3108	msedge.exe	87
PID 3108 wrote to memory of 2496	3108	msedge.exe	87
PID 3108 wrote to memory of 2496	3108	msedge.exe	87
PID 3108 wrote to memory of 3428	3108	msedge.exe	88
PID 3108 wrote to memory of 3428	3108	msedge.exe	88
PID 3108 wrote to memory of 3428	3108	msedge.exe	88
PID 3108 wrote to memory of 4540	3108	msedge.exe	89
PID 3108 wrote to memory of 3492	3108	msedge.exe	90
PID 3108 wrote to memory of 4540	3108	msedge.exe	89
PID 3108 wrote to memory of 4540	3108	msedge.exe	89
PID 3108 wrote to memory of 3492	3108	msedge.exe	90
PID 3108 wrote to memory of 3492	3108	msedge.exe	90
PID 3108 wrote to memory of 4580	3108	msedge.exe	95
PID 3108 wrote to memory of 4580	3108	msedge.exe	95
PID 3108 wrote to memory of 4668	3108	msedge.exe	96
PID 3108 wrote to memory of 4668	3108	msedge.exe	96
PID 3108 wrote to memory of 3620	3108	msedge.exe	99
PID 3064 wrote to memory of 2752	3064	firefox.exe	103
PID 3064 wrote to memory of 2752	3064	firefox.exe	103
PID 2752 wrote to memory of 2716	2752	firefox.exe	104
PID 2752 wrote to memory of 2716	2752	firefox.exe	104
PID 2752 wrote to memory of 2716	2752	firefox.exe	104
PID 2752 wrote to memory of 4308	2752	firefox.exe	105
PID 2752 wrote to memory of 4308	2752	firefox.exe	105
PID 2752 wrote to memory of 4308	2752	firefox.exe	105
PID 2752 wrote to memory of 4308	2752	firefox.exe	105
PID 2752 wrote to memory of 4156	2752	firefox.exe	106
PID 2752 wrote to memory of 4156	2752	firefox.exe	106
PID 2752 wrote to memory of 4156	2752	firefox.exe	106
PID 2752 wrote to memory of 4156	2752	firefox.exe	106
PID 2752 wrote to memory of 896	2752	firefox.exe	107
PID 2752 wrote to memory of 896	2752	firefox.exe	107
PID 2752 wrote to memory of 896	2752	firefox.exe	107
PID 2752 wrote to memory of 3804	2752	firefox.exe	108
PID 2752 wrote to memory of 3804	2752	firefox.exe	108
PID 2752 wrote to memory of 3804	2752	firefox.exe	108
PID 2752 wrote to memory of 3804	2752	firefox.exe	108
PID 2752 wrote to memory of 4372	2752	firefox.exe	109
PID 2752 wrote to memory of 4372	2752	firefox.exe	109
PID 2752 wrote to memory of 4372	2752	firefox.exe	109
PID 2752 wrote to memory of 4372	2752	firefox.exe	109
PID 2752 wrote to memory of 5156	2752	firefox.exe	110
PID 2752 wrote to memory of 5156	2752	firefox.exe	110
PID 2752 wrote to memory of 5156	2752	firefox.exe	110
PID 2752 wrote to memory of 5156	2752	firefox.exe	110
PID 2752 wrote to memory of 5164	2752	firefox.exe	111
PID 2752 wrote to memory of 5164	2752	firefox.exe	111
PID 2752 wrote to memory of 5164	2752	firefox.exe	111
PID 2752 wrote to memory of 5164	2752	firefox.exe	111
PID 2752 wrote to memory of 5172	2752	firefox.exe	112
PID 2752 wrote to memory of 5172	2752	firefox.exe	112
PID 2752 wrote to memory of 5172	2752	firefox.exe	112
PID 2752 wrote to memory of 5172	2752	firefox.exe	112
PID 3108 wrote to memory of 5260	3108	msedge.exe	115
PID 3108 wrote to memory of 5700	3108	msedge.exe	116
PID 3108 wrote to memory of 5228	3108	msedge.exe	117
PID 2752 wrote to memory of 2604	2752	firefox.exe	118

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://olemad.fromsmash.com/MADIUMv2
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff934ecc188,0x7ff934ecc194,0x7ff934ecc1a0
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,16715700996725167314,1730277381024299608,524288 --field-trial-handle=2916,i,4806796870478883883,16764771843655105199,262144 --variations-seed-version --mojo-platform-channel-handle=2952 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1804,i,5483223416089391791,6560109331167008036,262144 --field-trial-handle=2916,i,4806796870478883883,16764771843655105199,262144 --variations-seed-version --mojo-platform-channel-handle=2912 /prefetch:2
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2320,i,6610471038933885243,6774663185209316044,524288 --field-trial-handle=2916,i,4806796870478883883,16764771843655105199,262144 --variations-seed-version --mojo-platform-channel-handle=2972 /prefetch:8
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,12418443948234537476,7665352031032671082,2097152 --field-trial-handle=2916,i,4806796870478883883,16764771843655105199,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,16390169134266027469,14560711667665353263,2097152 --field-trial-handle=2916,i,4806796870478883883,16764771843655105199,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4136,i,14145859014255157293,6816519807349509591,2097152 --field-trial-handle=2916,i,4806796870478883883,16764771843655105199,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4140,i,7654646153304285318,16970835227944532411,2097152 --field-trial-handle=2916,i,4806796870478883883,16764771843655105199,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:2
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,9548012740848308403,10508029154004619054,524288 --field-trial-handle=2916,i,4806796870478883883,16764771843655105199,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,7949949708091991057,2295376116700992832,524288 --field-trial-handle=2916,i,4806796870478883883,16764771843655105199,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,10436116140079861981,2149279490523687247,524288 --field-trial-handle=2916,i,4806796870478883883,16764771843655105199,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,10436116140079861981,2149279490523687247,524288 --field-trial-handle=2916,i,4806796870478883883,16764771843655105199,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,9198684627189842738,12283379287361724885,524288 --field-trial-handle=2916,i,4806796870478883883,16764771843655105199,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:5260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,11774154230782430669,4197404091406247136,524288 --field-trial-handle=2916,i,4806796870478883883,16764771843655105199,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:5700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,9813742352299154010,6374143043827458362,524288 --field-trial-handle=2916,i,4806796870478883883,16764771843655105199,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:5228

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1152

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3064
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2752
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2012 -prefsLen 27100 -prefMapHandle 2016 -prefMapSize 270279 -ipcHandle 2088 -initialChannelId {9935e80c-9824-4a5e-8ac9-688d97defdb8} -parentPid 2752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2752" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:2716
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2460 -prefsLen 27136 -prefMapHandle 2464 -prefMapSize 270279 -ipcHandle 2472 -initialChannelId {6b36e723-0911-4942-acb5-67e08c837cbe} -parentPid 2752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2752" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:4308
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3844 -prefsLen 27277 -prefMapHandle 3848 -prefMapSize 270279 -jsInitHandle 3852 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3860 -initialChannelId {99fb4dda-a7f0-4bf1-af8b-e3de861da40c} -parentPid 2752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2752" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:4156
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4016 -prefsLen 27277 -prefMapHandle 4020 -prefMapSize 270279 -ipcHandle 4036 -initialChannelId {2785636a-f990-4fc4-bbf7-59d5f1616409} -parentPid 2752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2752" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:896
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3400 -prefsLen 34776 -prefMapHandle 876 -prefMapSize 270279 -jsInitHandle 1244 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4368 -initialChannelId {5e57fbae-6755-4112-835b-f3a6fc57a4d2} -parentPid 2752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2752" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:3804
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5028 -prefsLen 35092 -prefMapHandle 5032 -prefMapSize 270279 -ipcHandle 5024 -initialChannelId {ce5c6c0d-d4d2-47df-b4e4-5fcb28c3c768} -parentPid 2752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2752" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:4372
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5124 -prefsLen 32979 -prefMapHandle 5072 -prefMapSize 270279 -jsInitHandle 5076 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5288 -initialChannelId {f00a7941-e786-4d23-9f54-c9a3af8fd0ce} -parentPid 2752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2752" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5156
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5352 -prefsLen 32979 -prefMapHandle 5356 -prefMapSize 270279 -jsInitHandle 5360 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5368 -initialChannelId {ee3f380e-8bd2-4b80-bded-f25e41752978} -parentPid 2752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2752" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5164
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5392 -prefsLen 32979 -prefMapHandle 5492 -prefMapSize 270279 -jsInitHandle 5496 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5540 -initialChannelId {1d8c66ea-bc60-43c4-b1d7-407ec3e66ca2} -parentPid 2752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2752" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5172
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4508 -prefsLen 33031 -prefMapHandle 6252 -prefMapSize 270279 -jsInitHandle 6256 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6244 -initialChannelId {aa29a68d-7a10-47e2-97bb-5eb9fe0f3405} -parentPid 2752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2752" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:2604

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3844

C:\Users\Admin\Downloads\Installer-1.0.6\Installer-1.0.6.exe
"C:\Users\Admin\Downloads\Installer-1.0.6\Installer-1.0.6.exe"
1⤵
- Adds Run key to start application
PID:2092
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -NoLogo -NoProfile -NonInteractive -WindowStyle Hidden -ExecutionPolicy Bypass -File bootstrap.ps1
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:1680
- - C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-bd354ac1f0434e8ca244ed211ee35cf0\MadiumInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-bd354ac1f0434e8ca244ed211ee35cf0\MadiumInstaller.exe" --from-sfx --first-install
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious use of SetWindowsHookEx
    PID:4828
  - - C:\Users\Admin\AppData\Local\Madium\Installer\MadiumInstaller.exe
      C:\Users\Admin\AppData\Local\Madium\Installer\MadiumInstaller.exe --installed
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Loads dropped DLL
      Suspicious use of SetWindowsHookEx
      PID:4908
    - - C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass -Command "$ErrorActionPreference='Stop'; if ($null -eq (Get-Command Get-MpComputerStatus -ErrorAction SilentlyContinue)) { exit 0 }; $status=Get-MpComputerStatus -ErrorAction SilentlyContinue; if ($null -eq $status -or $status.AntivirusEnabled -ne $true) { exit 0 }; $p='C:\Users\Admin\AppData\Local\Madium'.TrimEnd('\'); $current=@((Get-MpPreference -ErrorAction Stop).ExclusionPath); $has=@($current | Where-Object { $_ -and $_.TrimEnd('\') -ieq $p }).Count -gt 0; if (-not $has) { Add-MpPreference -ExclusionPath $p -ErrorAction Stop; $current=@((Get-MpPreference -ErrorAction Stop).ExclusionPath); $has=@($current | Where-Object { $_ -and $_.TrimEnd('\') -ieq $p }).Count -gt 0; if (-not $has) { throw 'Defender did not save the exclusion.' } }"
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        
        PID:872
    - - C:\Program Files\dotnet\dotnet.exe
        
        dotnet.exe --list-runtimes
        5⤵
        System Time Discovery
        
        PID:892
    - - C:\Windows\System32\reg.exe
        
        C:\Windows\System32\reg.exe query HKLM\SOFTWARE\Microsoft\VisualStudio\14.0\VC\Runtimes\x64 /v Installed
        5⤵
        Modifies registry key
        
        PID:544
    - - C:\Windows\System32\reg.exe
        
        C:\Windows\System32\reg.exe query HKLM\SOFTWARE\WOW6432Node\Microsoft\VisualStudio\14.0\VC\Runtimes\x64 /v Installed
        5⤵
        Modifies registry key
        
        PID:1848
    - - C:\Windows\System32\reg.exe
        
        C:\Windows\System32\reg.exe query HKLM\SOFTWARE\Microsoft\VisualStudio\14.0\VC\Runtimes\x86 /v Installed
        5⤵
        Modifies registry key
        
        PID:4292
    - - C:\Windows\System32\reg.exe
        
        C:\Windows\System32\reg.exe query HKLM\SOFTWARE\WOW6432Node\Microsoft\VisualStudio\14.0\VC\Runtimes\x86 /v Installed
        5⤵
        Modifies registry key
        
        PID:760
    - - C:\Windows\System32\reg.exe
        
        C:\Windows\System32\reg.exe query HKLM\SOFTWARE\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} /v pv
        5⤵
        Modifies registry key
        
        PID:2256
    - - C:\Windows\System32\reg.exe
        
        C:\Windows\System32\reg.exe query HKLM\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} /v pv
        5⤵
        Modifies registry key
        
        PID:4748
    - - C:\Windows\System32\reg.exe
        
        C:\Windows\System32\reg.exe query HKCU\Software\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} /v pv
        5⤵
        Modifies registry key
        
        PID:2764
    - - C:\Windows\System32\reg.exe
        
        C:\Windows\System32\reg.exe query "HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full" /v Release
        5⤵
        
        PID:2892
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -NoLogo -NoProfile -NonInteractive -Command "$sig = Get-AuthenticodeSignature -LiteralPath 'C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-redist.exe'; if ($sig.Status -eq 'Valid') { exit 0 }; exit 1"
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        
        PID:5280
    - - C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\install.ps1"
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        
        PID:5916
      - C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-redist.exe
        
        "C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-redist.exe" /Q /T:"C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files"
        6⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:6024
      - C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\DXSETUP.exe
        
        "C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\DXSETUP.exe" /silent
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        Drops file in Windows directory
        System Location Discovery: System Language Discovery
        
        PID:4180

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:3912

C:\Windows\system32\srtasks.exe
C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
1⤵
PID:1536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Madium.exe.download

Path C:\Users\Admin\AppData\Local\Madium\Bin\Madium.exe.download
Size 12.0MB
SHA256 efd75eba74c4e6ff9eabf11f68036283f869ca5457eefb437638f1181392c279
MD5 7c35c2e67c3eef0c6e72b65a83025406
SHA1 3d8c26649f79457bf25482af348a845380a6a810
SHA512 38356630638c6c454661636c9e3af9101a1485ecc0e2aa7a92ac17d18659a48f211b8be365768bbdcaee3c2aacd26fd29cab4de6b307985da1e30cbc52f11a70
SSDEEP 196608:2s9GT85PF80DWSwa+HDM7YKb7Bmyn+v3fw:h5PF8EW9HDM7YSBmq+v3f
TLSH
T192C6AE07F644C1F4C4AEC278836B9636EA32B889452471AF1BE45B112F2BF606F1D79D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Apr2005_d3dx9_25_x64.cab

Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2005_d3dx9_25_x64.cab
Size 1.3MB
SHA256 b4188ce988af9c4771ae0abcc7edc42a091133f9f20196564f51755dc55ea85d
MD5 fe9e6c4c7d7aa341a84f039d954560e9
SHA1 0830cc54adec654ab4394032ec4e046185ba01e5
SHA512 40322144e859063872af8b91b1c6682e92974b26c13cb92e17d179560f6706be4f9a7eac0e5a3c6664a7576b5884e8b4f3bbc35976d6cd2867ab9359e9d1815c
SSDEEP 24576:Gc+wdspnWpjnrcf+FH+guUawET50xShS+KMMMBNNxjUBH/0ghOw5uY:P+AspngnK1TDhS+jMMBN3jeHLhOo
TLSH
T1705533D00861D9AF2DA576C2707C0995F3B0D8DEC71BA81B27EDFAD1E3F03484666A94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Apr2005_d3dx9_25_x86.cab

Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2005_d3dx9_25_x86.cab
Size 1.0MB
SHA256 6ebfb6ed6ac0b69502a5b74e2edca188872fe767269c4ebf62f174157d198de4
MD5 b7457f5d50176d38d36a2e2dc0429fd2
SHA1 1abe9f17489e389e7400dea76a0386873446e9cc
SHA512 81306420caf830770114ad9e1f43160a83e3042540aa6f5da722f0f8b25bc18a7c84ea5240203dbc4c328b44f084ff948923b344848be778a79251ec8d22732c
SSDEEP 24576:20BodqhH/OCy8M+j5lcB4ZfeXBXUd/QLML9bw6UzcxY:2Ubffy/+lmBXF8Ioxw6Uo+
TLSH
T17135337A4ADCA341613AFFE293F9DE8286B025D2F4B99BD0F56B484142773C91EE5D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Aug2005_d3dx9_27_x64.cab

Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Aug2005_d3dx9_27_x64.cab
Size 1.3MB
SHA256 281d20c56caa3a2851199c028d4d20ef0a862cc3f84b165eb200da573d9e4401
MD5 c91aa9c752a7c46aa11101347209ba33
SHA1 c3412728d632da9b4433dc30a0e53863198971bf
SHA512 08855d230074a7ec94d4cde4fb72f28a37c4d013474a7ef44e8f67f03901eefffe9bb81962d6f8f9fd356e3b4bc47ce7a910011982ae78b5c66e6f78a42c22cd
SSDEEP 24576:CG/1unuf7Ga2dGKSnUG+zOADaZmd+JzQpymAFVZcRVhZ9k7LN7QDKW+Rz:Cg4G7GaISn+6FZC+5vmC7EUNRWm
TLSH
T1565533A3FFED0EC4A5873D40767CED7B956920794DA2601A1A8D8BC7168F2D23079C9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Aug2005_d3dx9_27_x86.cab

Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Aug2005_d3dx9_27_x86.cab
Size 1.0MB
SHA256 7a10900872ecd9bdbc8f7beb7869a260fa4b25e34084f237f1b096df5371c273
MD5 5cdddd58ae010e03ecc6ced128002291
SHA1 3fa025c7810b23e8f83b8f93dd818fb652e590cd
SHA512 35880b2f0c52066aedefb7de5b4eb04c165b2a682ef51def55dbdbb4b2fee03e899d36a27571037a76459777af49c3e2e8faa44b5f8236bf3f156293e7e7c9d1
SSDEEP 24576:YP2N00PXWcq4UsDMMlsOgDUaQFMBZ0To2xuI:YP2CuZQsVl96fQiZMo2xj
TLSH
T11D3533F51010C719D936EFF07A8328219DEDD16349E2B0A73B499519352EFAE907AF28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Dec2005_d3dx9_28_x64.cab

Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Dec2005_d3dx9_28_x64.cab
Size 1.3MB
SHA256 8231b38a0ab70018f15d7239ed96e5f2bc89ddae6cf9650c9d7bd052b96877e3
MD5 95a871983dcce1c8a4fd87483e1f047c
SHA1 6af009e1d9d0bcc1c54509b90bda22def3b67a6e
SHA512 7efa6b77cd9b1f8074047870bbc5c5561080283f28d6076a34c99fc701496f11091e2a6f1f4744643993b5ce7d899fbbb90c14e2f30718f0658d41aeef7eb5ca
SSDEEP 24576:YWKJ8/HOO46naMPT4WtPIDONJkwzpow5Xl6tgvmKSGfEov6tTc1RImGLtqrtYEEN:Yj+146nP3PIabkUl6tg+KSG8o2TcRG8m
TLSH
T14F55335543E074C976FF25894E94E9578DF8E8A57C3AE0289FC491C2FBA0BA0FC11B64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Dec2005_d3dx9_28_x86.cab

Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Dec2005_d3dx9_28_x86.cab
Size 1.0MB
SHA256 bdee0708db956a4ce59220626106a2df70ede2e1e32f29e432254b04876fa7b9
MD5 c5455fac40117333ba1ae32c8cb91633
SHA1 ba1ddc5df441dfc58d52a25cc8903fb8f549e7ee
SHA512 bdd8bfb069ab5f8c1cb531ca5affffe3643dabd2fdf0c661f279d82609a925c72099d80dfdf1064cdd77c94cf5a8ad2da758cb99c8de0554473bcb347c54af80
SSDEEP 24576:aa0lNxqf7fg42FhNffA/Lj41q7+YeSFfSKidHVmTJwagz8aV:aHXx652fNffm0oleSt3Fwa32
TLSH
T1753533D792387706FDDED293D3C83E3E7CE5E83A1170EA421899CDBA72506A30297645
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Feb2005_d3dx9_24_x64.cab

Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2005_d3dx9_24_x64.cab
Size 1.2MB
SHA256 48eeeecd6411039b23f32b7b22c8d40bce45280af5f8b066edd6cf30284b90ca
MD5 f0215800a0031dd763c3cd7913717587
SHA1 253aef9afbbb0bb8f7c68f2ff8ffd51d89a60a67
SHA512 29e50a68d84ca3bd3bbde4a24728a3ac4079e6edff1e6b67b710bab4e03da3f7ba8485d96483b5161e6633635871c2d340aa7fbe1ac16570d1bb121ebd368b88
SSDEEP 24576:/sacaEhnsKcwXWOBfH7OhvlY2HIbbK09zRy2/TnN75EEvIOiOhpbFn:NuzcwXW6YlFIbtN7MOiOV
TLSH
T1BB453398F5958D05C61BCEBE8071DBEE76146F0E38B27F1AC0284202A7D9EF59734D52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Feb2005_d3dx9_24_x86.cab

Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2005_d3dx9_24_x86.cab
Size 989KB
SHA256 12e2aab3dbaee503724a5505a6f6951f07306578801a4b5b6b9b54514275ce79
MD5 7ee3c0e90d831041e6c845672660fe60
SHA1 7872beaf83ea8e57543331fada1bcfe808529f18
SHA512 07e3aa95fab08921984fbec8e82357c3c1110ea25d0a7e8876b8cdf5e69f109c374e37fa2a17071c494478b32559005da76503b3e6be0cc28bf9b16b1e462cec
SSDEEP 24576://HUK+hlSM4jwe8WpmQUrxiUyULWoF/V++TYrjVdLa8i:nHURewe8W4VN8uF/VhMr5sP
TLSH
T15A25337018B0AE7AD5C6CF27B20E589B70723FE7809299A5681B7EE7145C3CE1D36670
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Feb2006_d3dx9_29_x86.cab

Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2006_d3dx9_29_x86.cab
Size 1.0MB
SHA256 20231448d5d74b7df1e43d796d76381d563699f81944c7ad9ccbcc1a77a5591e
MD5 09fe2721b43875cc085e0da4470a47ad
SHA1 050dee7c3f81554a17b3a58c1348eb469050a05a
SHA512 b2b792e2680a1e6263b2d666acfb3d7cd239a5e41c107211e6dfd3c613ce6fbc1c63337bc8eea5558114e62e9512831dad34eb6967d49db59aa0001289735d36
SSDEEP 24576:gWlF24ngnZPhX4ciAwvVHgK6SgHY6OmSfL4m:gWls4gnZTmHx6SgnPCv
TLSH
T1873533EC450EAF14FDFAF9B5720CC67DFE3F95CA16B02822ABAAE2554CD161700441E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Jun2005_d3dx9_26_x64.cab

Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Jun2005_d3dx9_26_x64.cab
Size 1.3MB
SHA256 7237630b897ce760948d9144151ef27c0699fb76150b5f157676fa2d220a236f
MD5 d795fd4fe6bacecbe706430e16f80a8b
SHA1 cfe5b5c96f7754853d54de7aceda5d0ea9e9afe0
SHA512 56da08bda50b7ff5a0d08e651267ae6ff6054c29968d49a1870421df781a660da77b07e9c2b9527e654e6f9190469a3b5fe33cbb73b993fd03667ff27d956c72
SSDEEP 24576:+cfUVHkSDmhcG/IQtmLMLfNYIpTTHh0am4l76wbZE:rUBvDzfQtCMLfNYqXqal75y
TLSH
T1FB553357B50CA7A7E1F32A3E6E048FAE7768DC2C09F699564487A121D27C3338DE21D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Jun2005_d3dx9_26_x86.cab

Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Jun2005_d3dx9_26_x86.cab
Size 1.0MB
SHA256 b448d7ba5b6fe1dc27639d42eb6ba0a997a793135678c729ba6756cfe4efc38b
MD5 cc994475277a3d4fb3257c6230d12f8d
SHA1 f7f6a524a23a056defdcda0bf5fa983434619bf1
SHA512 54d18da46be9552dc8e3c895b677632be38faddf0213d840ece51ff2dc79454bd2288921dc809463e05d7c4c17096915bd035d5a9d4053651c87215680ce6220
SSDEEP 24576:RxFMsUF1MmwONoWu85w6SFBu+vveJ0sut3z2A1s9z/D8gi8t:53dm3NoW+9FBhuJ9ut36A1s9z78gio
TLSH
T1CB353397493D8C01F8A1D8D3188269B12E501BDB9EF4528EBC0E97929FD5F747A0B1BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Oct2005_xinput_x64.cab

Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Oct2005_xinput_x64.cab
Size 84KB
SHA256 10f2bcfcc38d3150bc80eb0030a1cd40084f1ec028dc927543c485d54ec35022
MD5 c39e4358cea9538ab1d4b842da669bc6
SHA1 2201149bc0a1e69b0f76d25f3ab4decd6eca73b6
SHA512 6b25da2e8b67e9b02dbef22629c260e43ae4c78398d901faf8afd3528ba402511b05ad84de8679d53341ca89c3215b82ce90441e4347976679bcc5906b98a2da
SSDEEP 1536:AoJHWDGdRy1wT1qQLdhg/k1Zg273zPZY9rHUpU:AEcUy141qQLdaup73Dm9opU
TLSH
T1268312DE197EDB4ACC8616C4933949274D3C43CB4885A10A206FDAE63C5A7B5B53CE2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Oct2005_xinput_x86.cab

Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Oct2005_xinput_x86.cab
Size 44KB
SHA256 f2d475864e34409fb586093f92390e1f47403867c39ac30918941f19f3fccb0f
MD5 b296431a5dfff596fef2f04b4f36362a
SHA1 d4a177df95b23a958e6a019508af5667d27f1af7
SHA512 8c8119e8ca2cf7f8ee8fcfd95605c53642833decf8fc6fcf5eb602ba780177cd1d077c91247687f9fa0b7c50624db69c8fccc9e1f4207490198fa6932c83bfab
SSDEEP 768:YPZb7khld0r6ZUgGc4A/gNZieM/0gqsD3vOGTN/uZPQo8w/lP9y+mMPVMi2jXHUL:Yeh0UmkCkD3F8ebqdltP+9rHUL
TLSH
T1BE13E0965EDEE2C3EF0A76D0639CF6C37E789BC35474A0196463F1B42A897801F2582C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxdllreg_x86.cab

Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\dxdllreg_x86.cab
Size 43KB
SHA256 4afe0249a13868b7c4a92b4d53c998adf6053eb5e2c47fd81020fd8d4bb11150
MD5 4b4f83d1dd86314b65760f44f9c7a9b1
SHA1 d8d857ebbe2c0dd5b63e564bf8428c55ece55778
SHA512 91a556dee865f9a625a148556c289b287187d4a7c2814658d8b59a99afbf226dcf557094f43349ebfbd2fabc5628940cce942a22c29f5dbca086a3ddeef8e9c6
SSDEEP 768:47CbQVl8ORHNCNzUSWyEHNaNo6lc22V6yey6qoomHhPokDLmaV3QN7b6Fjpvh:47Cm1HwzUSWFU72UTHhPoknhk6F5h
TLSH
T16E13E1B4CD08ED409DBA2E992368FF363E78D99318703C5B46CAD78605883E58F6587D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxupdate.cab

Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\dxupdate.cab
Size 94KB
SHA256 e18a5404b612e88fa8b403c9b33f064c0a89528db7ef9a79aa116908d0e6afed
MD5 d495680aba28caafc4c071a6d0fe55ac
SHA1 5885ece90970eb10b6b95d6c52d934674835929e
SHA512 a25c647678661473b99462d7433c1d05af54823d404476e35315c11c93b3f5ece92c912560af0d9efe8f07e36ae68594362d73abf5d5de409a3f0a146fe31a10
SSDEEP 1536:JvknxJRHNYzrAzRstaRGk0jzphvXdy57XwwnNb+vnaI1eYpIKxozNlmn6F5x:JvknxJpNYAzRstaRkz0BwwnNbSa+vp58
TLSH
T1BA9302EC875DCF93D5622DADA168EA0B7DBEF98E891CD42580B5F20418627DCB2F444C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DSETUP.dll

Path C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\DSETUP.dll
Size 93KB
SHA256 2a61679eeedabf7d0d0ac14e5447486575622d6b7cfa56f136c1576ff96da21f
MD5 eb701def7d0809e8da765a752ab42be5
SHA1 7897418f0fae737a3ebe4f7954118d71c6c8b426
SHA512 6ff8433c0dadc0e87d18f04289ab6f48624c908acbda506708f5e0f3c9522e9316e587e71f568938067ba9f37f96640b793fdfaa580caedc3bf9873dc221271f
SSDEEP 1536:Bc8tBKv1HCyODN2wjIqlLmqxY3AMVI4I9okOEvc0/c/sZRYltL26VVE2S+JJqsHy:BftQv1iyODswNLmqxY3AMV71Ev54EAxM
TLSH
T113937D107694D076D9D620BD718CD7715ABEA6B41F6880CBBB461BDA8C653C0BA3E30F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DSETUP32.DLL

Path C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\DSETUP32.DLL
Size 1.5MB
SHA256 fb0e534f9b0926e518f1c2980640dfd29f14217cdfa37cf3a0c13349127ed9a8
MD5 d8fa7bb4fe10251a239ed75055dd6f73
SHA1 76c4bd2d8f359f7689415efc15e3743d35673ae8
SHA512 73f633179b1340c1c14d0002b72e44cab1919d0ef174f307e4bfe6de240b0b6ef233e67a8b0a0cd677556865ee7b88c6de152045a580ab9fbf1a50d2db0673b4
SSDEEP 24576:CIQ+ddddddddddddddxOOOOOOOOOOOOOO2iWeXiWeXiWeXiWeXiWeXiWeXiWeXi+:CIQsOOOOOOOOOOOOOO2iWeXiWeXiWeXf
TLSH
T166759D31B1D40332EA7103B177128AB7F63EEB9DE119DA257DAE82552182B9CC37E351
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DXSETUP.exe

Path C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\DXSETUP.exe
Size 505KB
SHA256 8f47d7121ef6532ad9ad9901e44e237f5c30448b752028c58a9d19521414e40d
MD5 bf3f290275c21bdd3951955c9c3cf32c
SHA1 9fd00f3bb8a870112dae464f555fcd5e7f9200c0
SHA512 d2c354ee8b6977d01f23c6d2bb4977812bf653eae25e7a75a7d0a36b588c89fcdbdc2a8087c24d6ff687afebd086d4b7d0c92203ce39691b21dab71eafd1d249
SSDEEP 3072:Qi6LKKSPluzye9iHWptICTrbusJxDO9insyH6+PJTOramZap5XVeR4zW1mFD1gbH:8UHWDICTmUxDpEa04+GU
TLSH
T103B4B05036F4D926F2F32B743ABDE26158BA7E80A934C20D2501665D1BF3B40A96CF77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

install.ps1

Path C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\install.ps1
Size 2KB
SHA256 7f7eb8cf4fba079948705a83f968f52937c9f1733e752eda436ba6319cd5bece
MD5 6b839d23be8eb3f524a742bf0ab52299
SHA1 3416d874e28f19d2ed45ad94b085af7d9ca30c57
SHA512 104f4fdab5f5b78133ebb81763e81399c5ab25ddd4d5830dd11ebad806582e08a571f926418399545bb99751bed3f2b71a33dc2852e304e9d826b414d020c04d
TLSH
T17241320579F271A246F42A3319894245662B941AC10D6E103CBEC3C5FFE28BF9FEC756
MD5 SHA1 SHA512 TLSH

Submit Download

powershell.exe.log

Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log
Size 3KB
SHA256 c485a6e2fd17c342fca60060f47d6a5655a65a412e35e001bb5bf88d96e6e485
MD5 3eb3833f769dd890afc295b977eab4b4
SHA1 e857649b037939602c72ad003e5d3698695f436f
SHA512 c24bbc8f278478d43756807b8c584d4e3fb2289db468bc92986a489f74a8da386a667a758360a397e77e018e363be8912ac260072fa3e31117ad0599ac749e72
TLSH
T13A51EE313375B0D4C95A7F07193819C063BF8386E698AF58B65C521ED92751B9B222F3
MD5 SHA1 SHA512 TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 aa0d78ec9cd90e7c6714bdce5235de1fc6b7c3088a6cd8f6e6d2c1cebea7d661
MD5 63134f635628c0af90baed8399868c70
SHA1 0a02b0ee6e4253e3534f292530612cd9f5f16106
SHA512 3c98f5f62643131db7887f04a33b0ca1c1c00b00c63332d61c392e6bf04039e1f5ce53adff3458c5b96f00e8454a916a07ab2c53d268c7a0bedbef781bef81f0
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7o:fwUQC5VwBIiElEd2K57P7o
TLSH
T123B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7073226b4cd1cfc4cf618f45a53939bc635bacfa557eafd1683ee91614cda0d8
MD5 5ff1793d8c9849e8aa6f4b07eaa08bef
SHA1 f5fe82f06b14c36eb220d075b1991d8ce3ddd649
SHA512 12cef1a00cae76ef3fc336350f290b288914eff9dcc7d486d3ac1f47bd4fde52db613b450bb58f380ab912b64ce3ec0b76fcdbb59da73ad728aa42c2e562ab9f
TLSH
T177D012A27A0DB440F6055331E25383012666256028535702B261D41CD6644DC13D71C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 12e1bbb61d0076ce10c20fed0ca68b2741f6bdb4ea9db2d443a4fbf4782f5387
MD5 77486dc916e018f79860499f5c6a2cd4
SHA1 fbdc36aa17aedf985bf4ea6b41b1af02a6341ab1
SHA512 a82737a3dc1c831a6c81af8dbcee29eb7e1148353de74e980535e4b4c793fc8826ac6ffc46932feb6b71afc5d66d7de999399feb3de65986431cc3c98b2940c8
TLSH
T184D0A7B0B829AAD0E5190139926011002225166122A7579671A2580CDB7404C53EB9DB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9a3d10b16d8afe0c105f8b187f8f3616b1a6a5acead1299db43d8132ffbdd701
MD5 b1909b2a7b7440e7b9a3adf7750f7e70
SHA1 b05948679b364b6e193b3dfce38acfcbbce327a5
SHA512 6e1a661cdc2dcd861ab31eb46bd839bfe8a465393ade11a2c8d9ad612b4cc1265fdb4cf2a0d373288d8cd20cc1cb7f3e8bf565e575e5204858390018dabaae28
TLSH
T16FD012A27A0DB840F6055331E25283012666256028539702B261D41CC6644DC13D71C7
MD5 SHA1 SHA512 TLSH

Submit Download

9fc005e9-4dd2-4027-8f21-deea1eae5adc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9fc005e9-4dd2-4027-8f21-deea1eae5adc.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f357c8ca008705b56243143712685e5bd359c41eeef26586ac50e9a685a6b07c
MD5 396b6c11ecae1b62feca9d92f08ed8f6
SHA1 d64ca7a7cd964e80b734334e9633f68fe0273d2a
SHA512 b85dbf2a31da13b60a0589cd3559ae4577891c5f9da746cd588652ceea178a96b4b01f2f988aa92b6017eff6c00e815caa7e86a3441a0e4d92209044276671f7
TLSH
T1CE713D98027388A1E3A61F33DBD6D10935F1A99F7AC34E12037FD9B6161D7A4751BC08
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe583d04.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe583d04.TMP
Size 3KB
SHA256 4fa533af003fc6e9240e4daa09a79c08c24d3c868cad292a88e264c2676f6623
MD5 91a5ecc23f1d38d3041c37ecb2d40782
SHA1 463987a24b99f7846d31b355c0da8260efde12c2
SHA512 aaa588ea0290bdf1e05edb2014e01f7f67144b32309bd82528f6d7a063492b28cebc8499ea2f73f99e1672acb74a38306a191cac2b0ecbce3cfde97a1f57d0b9
TLSH
T17E71FB98026388A1E7A61F33D7D5D10935F1A5DF7AD34E02077FD8B6121DBA4B517C08
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 6c9b909f0f89953b38d5ff52086f380ca2ac98869a90f69f2c83658f67e53899
MD5 39e28e3307dd1aafefb395a54a3fe149
SHA1 524f4da786fe6f7a05ffca791ac256f97faf32f4
SHA512 ebaf6f2a0dc941e3e0f6501c28aacdf4160c9833996fadb3346921c689fbc585dd003c7f6f2377f93d2800d663c66c7fca84d75655df9161f3675ab46b1a0960
SSDEEP 3:MsEllllkEthXllkl2zEkliB:/M/xT02zni
TLSH
T10444044C7FC00C05C50010304431C3500370DD514D7157D334514513FCCD5444C00500
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 75a1b78c3d8f30482734b6345a59d8e49379d1a601d2f5513a02c2ad791bd767
MD5 7eb707f60411b8885396dc03482e52e0
SHA1 af5256685ba8094d6ad6bfabd23cd214353dc5c9
SHA512 670f816e1ed34f2e569250c94f62bac0a1c434146c8293ffa95ae197dc3a044f0113e945a63d4edbd80074f2c0c1bb807dc741f983a75db73e33d5c65230acf5
TLSH
T141316BB7C3E5966EC91157F05A24AE2BCE1D0A1582283C2989D8FF57D3E3471E101A4F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 f05792a604d700e6a75e622e44abf703d560c0480f2a0f38f3a8b3f21906a7e6
MD5 4f02be61c5e839703bd1f329b6445a11
SHA1 d11b71774bba7c30ce724ad443b7729cf86c1f05
SHA512 f3e6b3b4b70a6d9533a8d2f9a6afdbd5c93434211d2ad7f9c843d23d366282dee2bad102e3c51e54b371c3bdd249086715dfc090ae04fccd587a47e0f820e3e1
SSDEEP 192:sxZ6zRayM/jK1Ml8FkF/f9sAWpVa9dgIdpYTHW6+WNJj/dXYEPNvLIgbmJ:sxZ6zMrF/f9sAWva9dhSHbTXjm
TLSH
T1AA62D815A63469BBCCDBD209BA857F53D6F95422A2900E58A9FCDA1C00E7BDD2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 f8939c8853cb59c1b337f60a1a6209ebf735f38f98c41e8e4d8fab6b0ea5dcd0
MD5 d3aad7d824ba4bbd5c885818d1a904d7
SHA1 4824d691ee58021c3a485650e3fd847d0bfbede0
SHA512 8649a0a953c4d15c17c4162d7864758510df85a296eb1983e1895059e8eaaa79d19bc2fdf9f970703377a3e49b775c108a329a97106e06abfffea47adf578185
SSDEEP 192:sxZ6zRayM/jK1Ml8MkF/f9s/9OkIdpYTHW6+WNhda/YcF+5pIgrJ:sxZ6zMMF/f9s/9O9SHbu/Q9
TLSH
T1A2420911AA34A977CCDBD209FA45BB53D6F55472A2900E48A9FCDA1C04E7BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 f11c062968d0f872432df15725388f47cac09ead2aae6ecfa071bf1c44335a9e
MD5 685fafffec5fe960d8c926a18c660843
SHA1 136f5334a35ac09384e1ee5248b2f8c27297f220
SHA512 51a7b11a5884f81b7dd2a4ffc6cf6c5e8f49127321a1641ca4cf9ca17113cda6bb464dbfc998256716de2f5b0c96232b1014ec1275549756c6a76018155e36e4
SSDEEP 768:5K03ifCWvqG1m8F1+UoAYDCx9Tuqh0VfUC9xbog/OVb9Ll1/CBiroXJEG:5K03ifCWvqG1mu1jaa9LfKB5Zr
TLSH
T10BD2FB3B280CCB7E4F840E5CEC66AF966DD801DB5698895447FA884C02C77EF512B9DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 270842c272bc34ea9b347bc1ef471fe093d4b50d82c338b7228e78099ea7f853
MD5 549eb3ab3995734ce4de9095f3f1be9f
SHA1 0787e335cbf13489bb28077358918d84e7535c38
SHA512 4df2cd7bc4cc5c1592178f0c5369cf31c85d5850546140782c9f8bc7fa01222c7a3abd720c65c512e655f1225d34acbb1686045795b67274a4a9827e1ea78fbd
SSDEEP 96:Kw5e9ZHfP2RfE9PZ2KXTPL2bh5M75nCqcKjCADyKscuZR8HTRX3xazKs07xKM40/:+PvmBZR8HTRX3wzKH7940xi5By7H
TLSH
T142C1CE13713E120B783D2908AAA797378F4235A37059B9EF7B7850A50966E124EFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 94256ee4fd7d6f487d86dc7fc3d709a8a2f512ac936ff5cadc4604150a34616d
MD5 49a4e76bac84d0ac27961d8a2ac10b1d
SHA1 8b1b96f130d7434d12080e2cf803a8f4669c46b8
SHA512 941edd2bd0ba7aa7aa6b3af180dade2a7c64acc3a0f3b226b1139e1977e9a2d3668b86887698970a29a862df697eaf2404dd5fbde6b439480367f279a371b5c6
SSDEEP 384:nZcIhsNTkPSgXqrYO1OBhjK8mLTbBeRs9JKgqijU4k:Pht8OBVK8sTbTjKgqmU4k
TLSH
T1F0928E3468386DB699A6B581F08732174FF8D027EBD52F98E1DC7F0D019B99C231B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 fa63c0a592c0391f66aec8e9cc931579e2112ef2d08acf6326cabffbbb3b7efe
MD5 11654193a88bd01c960dd3895c276446
SHA1 6bcec5d84fc7a8a29de887ecc333cd0bfd06ba1e
SHA512 4a0fc944a67c923e2e1fe5231a01e332d02a8200774e1ea5f97444a87e5333b04ecd098e82831cda5d9fbb483f04f428942a67e1b89ba6704838028687e80963
SSDEEP 384:KZcIzsNlAuSgXqjXO1OBhjK8mL2+JZYaYIhC6kpWBeRs9JKgqijU4k:ozb8OBVK8s2+kaYIhClWTjKgqmU4k
TLSH
T1D4C26D7C9C246C7F44AE7748A18E35274EB89137D6F45AA8E3DC5B0DC136898F30792A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ee7e1bbb44ee3be0500f39376ca50e70c0e3c73150b9d4425a8d346ccbd1e529
MD5 35f98ff4e8530d961a34e9e2d651bcc1
SHA1 b533a189a026f0f6682697cb4446974012f0d6ad
SHA512 bba7cfef83d5c3c28bff67348e9d3340697694942d98ca7746e90772affcc42bf83947da36732e5d6f214aed90389e26185268400a9bd973799c807c601e27a5
SSDEEP 192:eONL6v+XaQmiUyjtCmXOBqGjKdinlR6to0U6:eONL6vtECCOBhjK4z09U6
TLSH
T15202E9397C6C6CB79EA2AE45F08737175FA91067EA922F84D5E85F0C00DBA5C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 1ca3e404496b9b3889fbe3229945e8027eec63b9459ca28cf26d1d7642565c69
MD5 4edf8100cdd6ab3bda98e76437318953
SHA1 cec703f47fe086acea08c055c61ef9380b057014
SHA512 a0e1fe36a0c0a46ae099126f42f5f2186ed9bc7d862de88c5513f0e4d16acddbbbb2c11216b4d055e5860d58652e14351e3261601041a35a847fd339f1d26f81
SSDEEP 384:0ZcI5sNTAuSgXqrqO1OBhjK8mLTbBeRs9JKgqijU4k:y588OBVK8sTbTjKgqmU4k
TLSH
T1B0928F346C386DB699A6B541F09632174FF8D017DBC52F98E1EC7F0D019B59C231B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 8ce455f5b8d962ed757787420c3de59c21ffd264ee9d18157048de992c841339
MD5 a1482ad2f59d56e5343fb5c5347b3288
SHA1 80247b672fea7517e8139b3ff1fc281dbf3a751b
SHA512 e0afb158d2d75ac4623491dba3b44320124d14259b536a6090d8d3e59068ca45ca28311f0a8589a77daa9fcd0e4ef783798521c61561275ad275aec2efc66a70
SSDEEP 384:4ZcI5sNTAuSgXqrqO1OBhjK8mLTbBeRs9JKgqijU4k:G588OBVK8sTbTjKgqmU4k
TLSH
T1E7928F346C386DB699A6B541F09632174FF8D017DBC52F98E1DC7F0D019B59C231B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6ecc233c219b136c53e04b7040203171a1dd20fd64dfed2fbfdb3467566a4293
MD5 a0dd2a2279b710867ee7f54d030f7a48
SHA1 8690f9d0cac68a142c5968ef86c8e9a3936615b9
SHA512 2bea012fc3b06509c61676d520970c8c91463e109d6d0012a139f2cd5842aa8c3a75a9aa07452494dd343c0a23a52fff250b4552f7018bb5696ec4b490eac0da
SSDEEP 192:jONW6v+UQmiUygtqmXOBqGjKdCmNdERiFqOU6:jONW6vfbqCOBhjK8mLpbU6
TLSH
T17E12FA35B86CACB75E91A540F08732179FA95127EE867F94D5DC2E0C00EF6AC230B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

962e0372-d95c-4bdf-a71a-7ab15530c8d8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\962e0372-d95c-4bdf-a71a-7ab15530c8d8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1c00ebd6cb8e54f07c4341caacba1916baf844ff2d7dda4bdb9877ecaa01a26d
MD5 d63064883d20440c8f6569e3ff6e35ef
SHA1 e00c9bf2e0b26ce2415426930e8cd6a8ec6d0f7d
SHA512 5c8aa51ee09318f2818dbb2ad74a3480821e4006665a9d7532e9b01a86f19c10fb19ac75dce511492e124bd4a59de357f760d2743a965493f885731ad2487452
TLSH
T18B412B58ABF91148B3B72F1A9FF6A86E447A7C372E06959E01110E4E0667F40C871737
MD5 SHA1 SHA512 TLSH

Submit Download

ModuleAnalysisCache

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache
Size 54KB
SHA256 5f4c3f51d524e226339c55c032837d280961f1aae920205754c81d48d879d05b
MD5 a4c1a62ac1f9e841f3ba3df8d48cd305
SHA1 1fb707b97a032a0a7542f25e139dc53e21dd9e1b
SHA512 cb176fd8bb21f1fc619a90e2f5911f9b9e21373d51e7395e94871ce135c4c6a7f1b05b29ba4317582ee49e74804fd9f8d3260ec9967d8361ba2a7e073f3dc4e4
SSDEEP 1536:0UsTNhfkR+jH0Mv35iFHzdyehl3Oi9flJdiNuhETYoWUpBa5EVi3j39MVvjpCKLW:0UsTNhfkR+jH0Mv3gFHzdLhEi9flJdiE
TLSH
T14D434093E9204D71E1A66F3EF15662227D34394690F8113212DC25EFA983D970B1FAFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 1KB
SHA256 b0e7a2b98089a18d8c56513f14316d4ea74e94b21592e99c6cbd970745196af1
MD5 d80e1a2c9d5011aed8b2b0a6c9b713a6
SHA1 687cc761d5505cc80702b10e7464b1c0b80e4637
SHA512 75a1279b1113daaa4ad8d6222baaa5d0abb89a7cd057d03b10d1ddd39271b43e029c68de8deda4a24a80e0a03f16a591a81f6053298f4edc3ed1a2af5cc1bf43
TLSH
T1FD217423B39DC850CC99023B509C9D9076B697CB80DEDF9B2EC4C215907FA89CB101A4
MD5 SHA1 SHA512 TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 1020B
SHA256 a8392fa048400a1b33e0877888157d91e8cebb5b343f7cbb920b6f419bf5c668
MD5 a87bd39194ac151ad871b63e9bb4488d
SHA1 afe299ba9eb4461fe0fa199f991fcaae691b3bef
SHA512 3d34badfeb809a50cbed7af3b4bd3606e1043bc1a67ca875b510f8d07770b39ad8998db76226fc4f9b38fe880f008ef6309de03790593c16f6e9cc177088d942
TLSH
T1E8115523F79CC961CC99423A409C9DA176B2CBC7819EDE9F2EC4C215E07F589CB201A0
MD5 SHA1 SHA512 TLSH

Submit Download

72216AA93CED561C32B601DA81412E7C65BF8BCD

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\cache2\entries\72216AA93CED561C32B601DA81412E7C65BF8BCD
Size 217KB
SHA256 1d180a79cd7becd7acd74ecfdaf6492031c7c31014c975de7b8e60fab6ced997
MD5 89ac12737d3427f1eb2abfcf960e31b5
SHA1 70ff31b490622fa955253c98d904c00c8f68a97c
SHA512 623e3610d1cd586952569e58491a1c265c7bbf4bcfd404cad41b2daf52b493ebfec7a8f181c24b0c718fd2657f5bd3c8d7adc3be20e89f7d99217ce8e124390b
SSDEEP 6144:HrW/X21RpNG/PbYgoggMTTZbq/juwZyJZY/7d:vJ
TLSH
T18924086F5B5128C8CF8705CFB4FDBC4FA6A96016466442EA74BF6008B3947DC43FA989
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 e7358fbdf80ea1d935adb0eacba41f73ae3627ee3426c74e79d5b4cac6b846ae
MD5 1f40dc2b530784187d6bf9bf93eb184a
SHA1 2d809a87499a0c3c7ef21ac16aee1bb572a76b84
SHA512 925bea947cc91f6443897ab67da9e06cfcda21cd65236e7fb07cbfc026f034f3d913694e16907a0352a8823c46a517cd15a0e258ed97325a5d86850a69baa417
SSDEEP 1536:jTrli3p2DKGq+7V7vbwY+g3YBuPyXuvlfsQQUviiqkTxtQtfwMUW+LDkA9W1sImi:j3lpr7VeB/uvlLQtc4todLZXve
TLSH
T1E9A3AFF6DBE2C93D55FFD42D6A82893EFD262400B3E72009C9536310A1C7FA87679649
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Jun2008_d3dx9_38_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\Jun2008_d3dx9_38_x86.inf
Size 1KB
SHA256 06faf7f7ea5503dcece13d6537e57cd2581d5188a5d839fe7f118298a721b51a
MD5 c7fc0a82355bafed08a5597930b80263
SHA1 037419fc93581e053b4cd31c57222c8b8761e242
SHA512 51829843dd7e2e501d6054f500fa523bf63f19382890880cac0e3f207a00dbc544195489de67c7dcf876d9061f2af12bd346513e1c98047b0c185669be5d8cc9
TLSH
T1853146DD8802E430BA98F6B2BB9F375F1627450BFA61320973CA0990ABB3341115D2F8
MD5 SHA1 SHA512 TLSH

Submit Download

Mar2008_X3DAudio_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\Mar2008_X3DAudio_x64.inf
Size 815B
SHA256 b7dba312a71ed109c9c54cc5cc096096eb8cf0962396e8dc996f8fa28307547c
MD5 2f7b3369825c6b74f4b645ebf52c8e98
SHA1 105972c77223b943df6533d517c698241ddee9b1
SHA512 88a47bc3520f9fbc082f1ddca7e083cff9bdbe5c4a0a851925ea14d8e0f327f2a9982e5b4ac457e4950acdcf6788299c4e13a15ff38bb76c8d212f1466cfcec2
TLSH
T11901829DCC03D532B789F1F17B8B27CB5B27041AEA316518B68A04C4BB7310051AC1FD
MD5 SHA1 SHA512 TLSH

Submit Download

Mar2008_X3DAudio_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\Mar2008_X3DAudio_x86.inf
Size 1KB
SHA256 0b6e28f00364a9ff436c3d99f0d4e80bf615f1450f420122324853cc0b88b16c
MD5 9ab8a749708995453ee8a995a877af2b
SHA1 eb8a0ad7f7b38aa190e2fb8a4a2d11cc9fa9b493
SHA512 9b0ed586fed0ffe25d4076b202afcc7ad580dbb05593e392a12d64b639098f8b7687463f213e53dfbb85616c5a3781adaef8f1ffd293c082a84291472266480b
TLSH
T18A21049DCC0294707685B2B27B8B768F6B670416E961150CB3CB0A90BB73601219D1FE
MD5 SHA1 SHA512 TLSH

Submit Download

Mar2008_XACT_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\Mar2008_XACT_x64.inf
Size 920B
SHA256 1038a41e63ee8abbc8be85a86fafb2ac1d03defa6b88deb270f96a6ed1a97122
MD5 d5debb90aee2d6a73bb448aaa99f985d
SHA1 950ff1a768bdabf14ca2cc6809431c3be8b19d9a
SHA512 dca65e91d4eb619fb34615a3c8683e04af84e843346b88bf4d52cae0c27e52b5a7a417c531eaf50cf45932e3fd6f5fff1bcfeeea4fe65efffbe791c8ac1a8101
TLSH
T13F1190D9CC03C1737699B1F17F47368AA7670407E91113187AC505CE6BA3145919C2F9
MD5 SHA1 SHA512 TLSH

Submit Download

Mar2008_XACT_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\Mar2008_XACT_x86.inf
Size 1KB
SHA256 6b0cc0dc993e172855864fa078c4e5c8f2f46bfc3200bf2ccdf3292931ee3cb2
MD5 e3ad8befca2528572d6c51a15e072c94
SHA1 9718337261b8b93b546a5c20bee8b44d26707053
SHA512 de4915424d8a53ede76394fac14c4de46838f21afc8bf30f560d2d00df4f366dc9ab48bb343be3580087a7d5862a14c08f83b5d9cc8e78aa4cce4e6b71b70c59
TLSH
T14331BCD9C802D1327689B2B1BF4B368E96774407E860161873CA0E9E6BA3245538C4FA
MD5 SHA1 SHA512 TLSH

Submit Download

Mar2008_XAudio_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\Mar2008_XAudio_x64.inf
Size 923B
SHA256 10a2db49dd3bea59133bbd82b3fc0f8a959b65b0c250c11a9a6f3123b961e6e9
MD5 8eab978252843c5c47a913e4eee460b5
SHA1 b5ac7e6a36157c41d56e1113d7768e67530640c0
SHA512 d1b7be4eaba7126f3f64d625cb9c9d16dd40dd1dec96b4d647f9a5e24d6b945faebb65f25348d9ffbe092b03b1a54414cea9a2e4d1eb1deb102ab5abdb34d810
TLSH
T1B31190C5CC43C3737799B0F2BF572E8A57570416ED211648BAD605CD5BA310A52EC1FA
MD5 SHA1 SHA512 TLSH

Submit Download

Mar2008_XAudio_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\Mar2008_XAudio_x86.inf
Size 1KB
SHA256 472bcfb54b5d63377da128596dfb30c8f200f79edaaf6d29de1afcdb71a3413d
MD5 35c6f6f109257f242cfb2ad2062d50c4
SHA1 222406bf52449ff0d5a7ca8ace6cbd3dd5f41708
SHA512 71180d47d8c177d84e68bcd6b9f948dc8c946f7a6c4091e20e04f1c8098b9ba92bde976194b06595834ba4b159a702c091d04ec823ac377b7ba7713f057f99ee
TLSH
T1B6316BC9CC0292717784B1F27F6F3A8F57670416ED61150873D64E9D6BA3206226C1FE
MD5 SHA1 SHA512 TLSH

Submit Download

Mar2008_d3dx10_37_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\Mar2008_d3dx10_37_x64.inf
Size 815B
SHA256 f37681f4d49f71d48b1960c3efac74f28af9fa764b29ed3a40b5f424fc8f60c9
MD5 b21f653f707315be4c85ff4630af305b
SHA1 32b0d69a786a2cd37d2fdf541931d90ae8656944
SHA512 e68348c9413f77749218fa34e55e416c7bac95f234522bb6eccbed1185a3f3af2a393511d3b83dbfc64580e1725f9f53e7e586570d696a3fee76761e8b0902f4
TLSH
T1670166998C039436769AE1F2778BB78A6B270806EA5125187D9E01C8EB6330461AC2E9
MD5 SHA1 SHA512 TLSH

Submit Download

Mar2008_d3dx10_37_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\Mar2008_d3dx10_37_x86.inf
Size 1KB
SHA256 bae3bc2b7071d2d1c657a87a8c8af6c0fb5373f11c9aa5f61b406924717d0792
MD5 1242da12c637d5976af936f60f387c26
SHA1 a6890fa9d41f6785d54a7d3e1b229b64010089ab
SHA512 7fcaf6ac1a8166e8c68d650dfea40bf329565d4ef92316ed0188a252736c9e288cc8f7d017b0de4af05245d1bf94a85b2dc72a93c618a1f2caeda45fd84a6a09
TLSH
T1593105D9D9129030B6D9B6B2BB8F3B8F5A370407F96221587AC90990EB73751128E1FD
MD5 SHA1 SHA512 TLSH

Submit Download

Mar2008_d3dx9_37_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\Mar2008_d3dx9_37_x64.inf
Size 812B
SHA256 a4fda3373241c2748a969ddeeb6ef41b3cc1bca6608362ba87db75f69023fe9c
MD5 ec75fe979fd2c2372ea75c72a905c832
SHA1 954642c9087489285c8f0786b63aee108ec08d04
SHA512 dcaa772d21d1be7fe59f1ad32d10e7cb454ed2a4d98b3add201f8bef03718c29f9915fb4cb779111a954a9d93d898393ac2ba593c2d4d378b88bd492b7b5381b
TLSH
T1B0016B99C802D43677DAE9B27B8B375A6B67050AFA163158799A01C4AF63240116C6EC
MD5 SHA1 SHA512 TLSH

Submit Download

Mar2008_d3dx9_37_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\Mar2008_d3dx9_37_x86.inf
Size 1KB
SHA256 d55858e166a2fe00d4acc30da756f0ab2c4dd5a79a9874eab3100722c74a1b75
MD5 020d1260794d5780937f0f7a919cd62d
SHA1 511ecd1186deaf129a5532b79fc776a9ab8fa9be
SHA512 201e24e51dd859c35fa9d0a403993cb0b2eba67effbc598ca4491f05bff4f0805731b1e7cf6026b7dff9fbc3167c16b43887f080fa40ac11c6ffe09297401f9f
TLSH
T11A3157DDC802E4307B94B6B2BB9F375F1A27450BEA61310973CA0990AFB3341115E2F8
MD5 SHA1 SHA512 TLSH

Submit Download

apr2005_d3dx9_25_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\apr2005_d3dx9_25_x64.inf
Size 806B
SHA256 3d97810d00ceb3e7674a2ef81427d4180f77f93f9454837c5933fbc6a1ad5c1d
MD5 f052926f0715b88b23ad52855b34df46
SHA1 c411b1ddee73a4b317d652bc3ec159ed58efffa8
SHA512 8fad81eeb503d81b96c098190b5c4155f4bfe1cf2f36fdb5834a176c7c78d11b52efb6b3ba6f3168d7a21a1fc5e53fec770d125feaecd7d1cfad9cb1106d0b94
TLSH
T1E2018E9ACC03D43976CAF1B27B8B374B27B70907EB11255879CA0184EB33244716C6E8
MD5 SHA1 SHA512 TLSH

Submit Download

apr2005_d3dx9_25_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\apr2005_d3dx9_25_x86.inf
Size 1KB
SHA256 f484ef48e0c6e2be8207d8c8c7308dd966d52bea1fde221b927d3e49f1cab0b7
MD5 bae5034d79a545ce120f2c336de0f68a
SHA1 7276af2015696d5041214fa92eff4375b3d8b183
SHA512 be58875949d23732ff63a6f505b242a44811cb9603a9863d6a78a4c9193b6336b89ec9a82666865888590a7b81ad99d466a3847e7c22d0de399d476364280a22
TLSH
T1244125DA8802D5347798B2B2B79F3B8F5B77451BED62214973C50980AFB3361264D2B8
MD5 SHA1 SHA512 TLSH

Submit Download

apr2006_d3dx9_30_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\apr2006_d3dx9_30_x64.inf
Size 806B
SHA256 b70b8f62a2459580d22999301f1823bcb8a9bef54bd33b38e0af274a3a12e010
MD5 5d684b07779ae5b421e23167e2b9b44a
SHA1 1e3570908b810cc799f047221351cac7a3583787
SHA512 6688f5a9952b36a0a83e806c9be99d9ffe9ba4982b76a9c7e8cef5f824c17ffe9e5ad9ef4e4974c6e2a9cb37e8c05584d8d83033182d1c5d00a786bd2b693e23
TLSH
T18E0189D9CC03D47A76DAF1F27B8B378B27770907AA21255879CB0184EB33240616C6F8
MD5 SHA1 SHA512 TLSH

Submit Download

apr2006_d3dx9_30_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\apr2006_d3dx9_30_x86.inf
Size 1KB
SHA256 373cca07c0ceffa72901441219a4457de9ff110aededae5e4818588da39cd344
MD5 a49046c25439fa900b1d1bf826506ce3
SHA1 deb71dad1d55dc5af2f80a1c3010c0d899bec187
SHA512 d3e04f2e7b358faaefdd683e7ede8a41c2f65b7c8072754b03b2a5de416651f92712fa7d9bc6027d7326dc5bd8a497161685c04cbb7bb36a384aeee8dd77b086
TLSH
T1604123D98802D5357699F2F2B79F378F5B37491BED61214972C60980AFB3361224D2F8
MD5 SHA1 SHA512 TLSH

Submit Download

apr2006_mdx1_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\apr2006_mdx1_x86.inf
Size 2KB
SHA256 2546a1875bf868edc621a1cd0ee262151faa08762bcced0117e1304eace0c04d
MD5 2ca62bfeb43facdd1fc06f20fb20397b
SHA1 ffbb8f6a8a11f949ca180a7e73279c4b775bbbb4
SHA512 3d16b07bbfd172dfa979dfcf4384baff35538de371dfd0b266e5110772f0751f9e5274fa92b06d1f289f8aaa585ca1fe382f8469561e74e343f37e8a05f85dbb
TLSH
T159417BE4E8015036F29AF1E27BDB274B172F14479C39218CB1D98344E7BBAC2125C4BD
MD5 SHA1 SHA512 TLSH

Submit Download

apr2006_mdx1_x86_archive.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\apr2006_mdx1_x86_archive.inf
Size 1KB
SHA256 80d44f16d81ae8bdb1ef8f0efdf53911523280723bab4392285cbd33a0fc633c
MD5 b9dda5b7e6323561b289e0be4e4027e1
SHA1 510f83f8d2b50816e33df8684b35fa53dae51a47
SHA512 cfd470d44ca0d76e756f8a72e01ac7d60c498a0012b461c9b371fccdbdc6bf972ed848ad7487dadea7f16aec7f8749630b1aacc7f936e6ced30a6c798a6c139a
TLSH
T159412EE9CC1169387785F1B2B79F768E172B145BAD21510CB2CA4E899F63200135D2FC
MD5 SHA1 SHA512 TLSH

Submit Download

apr2006_xact_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\apr2006_xact_x64.inf
Size 908B
SHA256 d9c3216ada5dd7791ca852a8ea97765f94a7b56fed27b20916b5067eb82b14d0
MD5 09c9b7346b65f5ba209934f16e711c8a
SHA1 9d6cf0fe295475c438fce214d9d24d5579f2f29e
SHA512 26b84a457b5bd17a5deba56926af156a2144213a2b75fb015641a7817fd2307cfb439ca22ec0bb584dd21f8f9e4c7b3cc749a350b26cfcd0257f5fbda23fd9c6
TLSH
T1BE119CD9CC4380367F89F7B1BF47274B97770827AC211249BAC6058D9BE3141A1DC1E9
MD5 SHA1 SHA512 TLSH

Submit Download

apr2006_xact_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\apr2006_xact_x86.inf
Size 1KB
SHA256 037db252501fd0e30303c11706d804d9eabbf319d0b4e88181ef8f297b4fef8e
MD5 f67df97463d42bedc122fbedc37096c4
SHA1 42cde962b355cb3c6a7a7a88c8dc315f811a7494
SHA512 93815abbd6b6666438adb146bff476aa2728aa7475178259fea623dbfdae819bcf1accddddb7695ef23bb2913d234264ad2ec826bda6eae5d99459798b032144
TLSH
T19C3178D9880391317A94F372BF4F364FD7770816ED22010967CA4AC9ABE324266DC5FA
MD5 SHA1 SHA512 TLSH

Submit Download

apr2006_xinput_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\apr2006_xinput_x64.inf
Size 854B
SHA256 f9d01e93e547045e1d232242c900530dfdfa54698586c7049281965e3bd01ca2
MD5 019f21ca754cc2e21d97c3a2a97d5ef6
SHA1 54d97b4018e0cd04c63f1221cd8da7a0990a2cb0
SHA512 0c0ef6a8bbc05eb81cdba8aa2c3f4a0d39f4859b6de495c79f813894253ad1ddca4851841064cadfb1901ea1f056c68560aae1e68bd12c590a143a6b7f0b16f6
TLSH
T1E2018CCC8D469031B689F2B17B8B3B8A1B7F0817D9502218B5DF4688DB37104A27C6F9
MD5 SHA1 SHA512 TLSH

Submit Download

apr2006_xinput_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\apr2006_xinput_x86.inf
Size 1KB
SHA256 b604779115d32d439f77b33257c96f928ec4ce564189f7d0d357099c1da140c4
MD5 53294b978995caafcb6a9ac8f67b8580
SHA1 c165d2c615261f135f60442ad0a6e589d681a850
SHA512 a3da7e02ecfadb181ed13855b093908fca0aae2ee75e6bc4f873fe69a34cdc08f3bf504aac2ea98f9573437d2ff000e43ae8450c87036ead48e6c2b80ec523ed
TLSH
T10A21F4D9C9039635768AF2B27B9F7B8F573B4806AD12121C72CA45C4AB63301126C6F8
MD5 SHA1 SHA512 TLSH

Submit Download

apr2007_d3dx10_33_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\apr2007_d3dx10_33_x64.inf
Size 844B
SHA256 3e61c4d723d282c36c5493d82644ea96715b7b548e50494d22b4a83d4e2b8237
MD5 00ad98b94609033c2819745587b0eed5
SHA1 2a07dda60a97dc2b4a7cf3cfc6245e72cea0efb0
SHA512 e7fea5f9186c324423c0b129dc3e8594df49dc84c61400f4635ccf688075b256d7923ca8f4483bf7b2fe43862e71aa134cf2c9545a23c622d0cc04dc7d6dac1b
TLSH
T11301AF998C039436768AF1F27787A74B1B271806DD5125187D9E00C9EBA3704516C2E9
MD5 SHA1 SHA512 TLSH

Submit Download

apr2007_d3dx10_33_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\apr2007_d3dx10_33_x86.inf
Size 1KB
SHA256 3286ba521fda888b1808f12955a58d7da4df7d2fdb472c7837a1e0e1a6317a06
MD5 fda5776cc944ebf6d84fb45c8a1a35f5
SHA1 f3b603dcdcfd6a310c2b0945f1a3b97276041ecf
SHA512 b051b04ce06ad21d08ace3a28d490214556f4b5be060ee05f8a4ff872d1cc72df05624021a9a0cc1efa4e63772f55cc61f11edf03537831a44ddd6ab409e83b1
TLSH
T1F6314499D912943076C4B6B2BB8F374F1A332407EA62215C7AC908D5EBB3700129D1FD
MD5 SHA1 SHA512 TLSH

Submit Download

apr2007_d3dx9_33_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\apr2007_d3dx9_33_x64.inf
Size 812B
SHA256 2d87efca75d8b9aeab3262841d52a7c56bad34ac6b9691f4df2d89b14c950f8d
MD5 e40a6f3215c3f1397eb18b3388f95032
SHA1 4845590abf12bb5725d94d7aeb953a5686918537
SHA512 942f54a3984a29e1973ec096709de890fe870a9dfc84a8c5597244251cbd69f84543cc5cffe620a076d0a16dea6e393c6790553d6d9e2fea1af1c0f00a12140d
TLSH
T1C1018ED9CC03D43A76CAF5B27B8B374B27670906FA15219879CA01C4EB73250526C2FC
MD5 SHA1 SHA512 TLSH

Submit Download

apr2007_d3dx9_33_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\apr2007_d3dx9_33_x86.inf
Size 1KB
SHA256 349a09a2791d697bffffc61410a536cdcf258f0d7c86dda44a297e8aec4bdf00
MD5 044cae9c30c88bda73727243f5e5206d
SHA1 de744e349cf4ea458b10657d510966d21ad08d67
SHA512 18e501142004afbcd28b41bdd3a9b19e2eebc047d7858ee11a9135f19759cfd8c643ff074a51e937bbcab7162888fd95effc146be21fe63dfc300ef03ed44056
TLSH
T1F13157D9C802D4347694B2B2BB9F374F263B450BEA51214C73CA0990AFB3761125D2F8
MD5 SHA1 SHA512 TLSH

Submit Download

apr2007_xact_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\apr2007_xact_x64.inf
Size 920B
SHA256 bf6ca1165632efccb0292ae8b739ce68d78ebb95dd39b8e4c1717d78a026db10
MD5 dcfa000ba60f73c2c02ab590faa1ae10
SHA1 154b9ff40cd92bfaa572b289662d0305fa2fa017
SHA512 34f6cf1f3fbbdd79d04dd55315b0074abc21b9c26df6e2fc9d66c6d15f36ad35edea741000a84a25ea9a68a94d46f500398a27c8865a30746574741dffaadabf
TLSH
T12C117D99C802C0377789B6F17F876B4AD7670816EC1022487A9E15CDABD3241A1DC1F9
MD5 SHA1 SHA512 TLSH

Submit Download

apr2007_xact_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\apr2007_xact_x86.inf
Size 1KB
SHA256 008db10780aa8fb6f20b7aa5f5d513ca77efb36c8dddfb9ad89173ecaf700af5
MD5 99f23af200574f24c4c5d9ee12fd2cb8
SHA1 f0e50816ed808748f9379733921c9302551cd937
SHA512 5e97d157ed8ad10f9cbb9490a16141fa52b2f32e09edc7e7f5e4b2d9c9bf38bbb85706d76543ca4ffe9b54d5fbc4b763b7df0893f1e7e56ae4c8ac1a720dbaf2
TLSH
T128319AD9D802D1313A84B372BF4B364F86774416FD71214822D95A89EBE324162CD5FA
MD5 SHA1 SHA512 TLSH

Submit Download

apr2007_xinput_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\apr2007_xinput_x64.inf
Size 860B
SHA256 0d6e1c0e961d878b319ac30d3439056883448dcf26774003b73920f3377ecac8
MD5 94563a3b9affb41d2bfd41a94b81e08d
SHA1 17cad981ef428e132aa1d571e0c77091e750e0dd
SHA512 53cac179d7e11c74772e7b9bd7dd94ffbc810cfc25e28326e4d0844f3f59fd10d9089b44a88358ac6dbd09fb8b456a0937778f78ecc442645764f693ccd620b8
TLSH
T1CC118CCCCC0290327789E2B17B8B3BCA5B6B0417E961225C35DF4588EB67145A27C6FD
MD5 SHA1 SHA512 TLSH

Submit Download

apr2007_xinput_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\apr2007_xinput_x86.inf
Size 1KB
SHA256 1c798cb80e9e46ce03356ea7316e1eff5d3a88ccdd7cbfbfcdce73cded23b4e5
MD5 e188f534500688cec2e894d3533997b4
SHA1 f073f8515b94cb23b703ab5cdb3a5cfcc10b3333
SHA512 332ccb25c5ed92ae48c5805a330534d985d6b41f9220af0844d407b2019396fcefea7076b409439f5ab8a9ca6819b65c07ada7bd3aa1222429966dc5a440d4f7
TLSH
T1D42126DDC8039435778AF2B27F9F7A8F663B8406E951221C73CA4994AB73341126C2F8
MD5 SHA1 SHA512 TLSH

Submit Download

aug2005_d3dx9_27_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\aug2005_d3dx9_27_x64.inf
Size 806B
SHA256 0a8ffec8d7ef3a0aa005f604a045dcf80cf5b6473b4f26e30c58eee23e253fae
MD5 7cfa60cdb7e697b40a268eb8814446e5
SHA1 e8e77082361d5a5ebf6163cf880f9700cff5741b
SHA512 77aaea559ef94d405194351b52643512a71990833dac22a331d5b78d569263db11bf969e26224ba8a362bf538782010ca074286ea605490d40c10f7d2d53d255
TLSH
T190018ED9CC03D43976CAF1B27B8B375B6B770907AA11255879CA0184EB33284616C6E8
MD5 SHA1 SHA512 TLSH

Submit Download

aug2005_d3dx9_27_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\aug2005_d3dx9_27_x86.inf
Size 1KB
SHA256 d02232a6587c460c026601517178318bab2ac29c59d269c6e3d1a3a993a9a1c4
MD5 e45a175750a672cbb2553087a8c5cf8a
SHA1 70d487f99e101bf39650594c27674313181a8ff6
SHA512 199882ada178e41be14af82001829d009379445028d3803d2a86eef899c01600cf2aa86123311b728e888498674379a35d40ed0964c2f88da24758fe3c7093d2
TLSH
T1A54143D99802D5347698B2B2B79F379F5B37081BED21214873C50980AFB33A1264D2F8
MD5 SHA1 SHA512 TLSH

Submit Download

aug2006_xact_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\aug2006_xact_x64.inf
Size 908B
SHA256 6fe310a67227203bbca3389dfe3403fa268cb424f4b525cca2d5407ed26670a5
MD5 d40e6c659cb7a757d8e751b050495927
SHA1 a9c515d786bc8f5c739fcf5ac1b6e15365f9e14e
SHA512 fb58acb95f1914da3c650168ed50fb6f75df68773daa8e8389db9c7c7c4d0e8bf93e46458fb76de676acc65132d781a7624f67289860a19e03520ecdbdb66896
TLSH
T1B2119CDDCC438436BB8AB7B2BF47274B97670817AC21124879C6058D9FA3141A1DC1F9
MD5 SHA1 SHA512 TLSH

Submit Download

aug2006_xact_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\aug2006_xact_x86.inf
Size 1KB
SHA256 34e7227e03812fce5415b0a4c3d15a9e9b259350ac9873db2a98b2ea76ae2284
MD5 ddb0d03b1d4a6ce09da5cbc61f5525c0
SHA1 ba5e1361e394301d5b9d9a4aec68ae21f19c70a5
SHA512 2160652a7f8adfc346e0af6f822875c34d2d13f168b9895b063925979d4fcf33a7da777ce7d43c9ef2b23186ac00378e8c2d4ee115bb2ff794e863e8b6feec5e
TLSH
T1903168DD880399317B94B372BF4F364BA6770416AD21010C67C94A89AFE32416ADC5FA
MD5 SHA1 SHA512 TLSH

Submit Download

aug2006_xinput_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\aug2006_xinput_x64.inf
Size 854B
SHA256 35f25b9538e55172cf36729519581444e26b38a9dae5cccc4ad75dfa34ea08e7
MD5 90d7a7386af9b951f939d869567894d1
SHA1 ef70a6efb5f7b32193bdec6c5ff13a4abeb4f00c
SHA512 10920d0116aab01eb1130eb91b26bd91d4b3ff8e09a77db5b79f88c94c463389548c2b3ce494162d4b2c3fda903eae6c2d87492475c56fc901c37fc8306555ce
TLSH
T1A1018CCC8C4694327689F2B17B8B3B8A1B6F0417DA50221875DF46C8DF77104A27C6F9
MD5 SHA1 SHA512 TLSH

Submit Download

aug2006_xinput_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\aug2006_xinput_x86.inf
Size 1KB
SHA256 cc66d67daa1f4c31ff5e59c2606c3930f72204a5057c29b9d58dde37a47b1cb7
MD5 f87111f61ac57d80199cead8e63ec45a
SHA1 4a525a78a90fa87290f60f0598fe285f9f46c90a
SHA512 ddb1b7259aeec662fa271f6a6d271e9d48c4b8ce4d47d452dc2ab15611421baa13cec0024e668309b7444b31fa5b24f41b032796c81a36e94d7e577d9c516712
TLSH
T15E21F4D9C803AA3576CAF3B27B9F7A8F57374406AE11121C72CA45C4ABA3301126C2F8
MD5 SHA1 SHA512 TLSH

Submit Download

aug2007_d3dx10_35_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\aug2007_d3dx10_35_x64.inf
Size 815B
SHA256 af4bdfeb4283f04e24475279931e042f17052224cf708f0c444fba2f2e221289
MD5 703b4ea6a182ee3b48026d01319579c0
SHA1 3184959599dcee4e74b251ff14dd2aac81e2ad68
SHA512 a6e67befdb1d757bc08f6a726e6d79c4f51324edbd1f48730616e27079bfa60262b88b4c49cca046e3da3832e375dfc29b2ff48b7007443606da94793ef7ed84
TLSH
T18501899DCC03D436768AF1F2778BA78B2B670806EE5125187DDE00C8EB6730461AC6F9
MD5 SHA1 SHA512 TLSH

Submit Download

aug2007_d3dx10_35_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\aug2007_d3dx10_35_x86.inf
Size 1KB
SHA256 7987e2c475705bf8f049a15af946ec0cb5ccddf27c0b5c8126694421df601770
MD5 741a5ce76295b86694cd7540870eeec2
SHA1 2c165af0047c98d2864379ea5fec33bb1507bbf9
SHA512 b7d0a0bdcd060ee263860024abe5b054aeb2c8c8c7ccdff9cfa9886188d7177b1bb8799909b3c95aba181292b5bb9f9426ecab0a6a2689970afca5a1739fc4d3
TLSH
T15A31F299CD129030B6C9B6B3BB8F3B8F5A770407E96221587AC90890EB77651128D1BD
MD5 SHA1 SHA512 TLSH

Submit Download

aug2007_d3dx9_35_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\aug2007_d3dx9_35_x64.inf
Size 812B
SHA256 e34ad9e49f31cb9211e0f350405c344d93fc65075e470c8fe09dd78af68f2c80
MD5 0b3f4e715a43024fd00f769e62cd8b9d
SHA1 ef6de20d95a920e3b69307737976bb243783160a
SHA512 336df101ab341c5f22d516089fd31fd9f0541a01d3ac4ab4e171b73452ba3bab3cad84af50f1e9da17c46bcfbe7a1b52284e2ef2af49c67c6d6cce2969e14ec9
TLSH
T11F016B9AC802D43A76CAE5B27B8B374A27A70906FA11219C798A41C4AB63250616C6FC
MD5 SHA1 SHA512 TLSH

Submit Download

aug2007_d3dx9_35_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\aug2007_d3dx9_35_x86.inf
Size 1KB
SHA256 c0d87c1b079b54b75b86939199ca5ee1f796ae3de9c4ed0ae074a4fa01823c73
MD5 815d75e4264b1f9c0bbcc529ee7a290a
SHA1 cc956156066c87ce1bd2b7628453f1824a426412
SHA512 bdaaca529cd52df20cf1e35b45e1824fe48d09442666b18faa3e948937026b09d880a27f1d915816bc6e1d98b0b486d590f867aeaa046317b7f48d6a0f949391
TLSH
T1A33157DAC802D4347694B2B2BB9F3B4F167B450BE951214C73CA4990AFB3361115D2F8
MD5 SHA1 SHA512 TLSH

Submit Download

aug2007_xact_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\aug2007_xact_x64.inf
Size 920B
SHA256 2fcc4bdc6516418d3b4935c301e14f30e3bbd0adfd264bc34067b27b0b266b8e
MD5 a78f12b4514614db269bf55faf383875
SHA1 0425c3e3ccb15f691d6f5d30b71856138063002b
SHA512 9d1cc2704541b71b246c2cc8e6e1d667cd7e691e42865aa5b0a800cf26386cf00781ae7727b7f90711e987148e98f4253e05b6d3872d3f69b0584bcf97b3fbea
TLSH
T1A5117A9DC802C0377B89B6F1BF47674E97670816EC1012487A8606CDABE7249B1DD1F9
MD5 SHA1 SHA512 TLSH

Submit Download

aug2007_xact_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\aug2007_xact_x86.inf
Size 1KB
SHA256 c246c38e41ed71bde4b3cce4fe337826173896a04c26f8b2a00b06bb0cec024d
MD5 8898bbb8acc1b54b3b9b6a2f6b0e2cfb
SHA1 e5ace499d26e573544be76c8e45cc5278d15022e
SHA512 b0633c44541cdaa2d2c3174027d849ecdf5ccf2149da4a2932f59db600cafd8b959aa0382973e23fec7a76ed7555e96065a4d8aa077f50c2a14e5080673aef30
TLSH
T11D3158D9C802D1313A94B372BF4B365F86774816FD71114826C64B89AFE324672CE5FA
MD5 SHA1 SHA512 TLSH

Submit Download

dec2005_d3dx9_28_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\dec2005_d3dx9_28_x64.inf
Size 806B
SHA256 510b6d528be3f2997b8bd811486dc3c13eb27a9de22d1bf030e6db0e632cca4d
MD5 9a3ccc90b71d554e968eca0a812bf0b3
SHA1 0ed1ca28d7f6c8b4e017cd48b8504340cb4d736e
SHA512 0f10d2ec9f72651927599b69dc3f4e037febfb9c2a18e02eaa49962903c1cf77b63ae6335c06effdfac26b87418ef2c7a2d53dd799a28d275632d8255ffa8be4
TLSH
T15D01899DCC03D43A7ACEF1B27B8B378B27770907AB21255879CA0184EB33244616C6E8
MD5 SHA1 SHA512 TLSH

Submit Download

dec2005_d3dx9_28_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\dec2005_d3dx9_28_x86.inf
Size 1KB
SHA256 d4d03c4ab3c8486d6331548e967ee17e011fdac90f63c0a9a44a744815a7da7a
MD5 e0b6120a048295ebbc629a9f8fbe53ad
SHA1 3d9cbcbdafc1f9058af74896a5859591e164555c
SHA512 66c0b9501bb08d41bb708d0a724fe6ac27abaf735ca224074e594cde932ad1f9eb9db5defba8a8a71a0a12904f20324ee4d129a1ac9fcf816fe74d648379908c
TLSH
T1864127D98802D5347A98F2B2B79F374F573B451BEE61224973C50980AFB3361254D2B8
MD5 SHA1 SHA512 TLSH

Submit Download

dec2006_d3dx10_00_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\dec2006_d3dx10_00_x64.inf
Size 426B
SHA256 2a43ac72ab9a6f4771c02b6e10884921b733b86dbd7ebdfc5502d011cd5c8d05
MD5 eec826f7141bedeeef38c5a3528b5034
SHA1 529081aedecb7b9fbc7d9707eeb6415f98bc128e
SHA512 62cbe09326cd04c891faa124c65554fd631382a2e078c70ef72a1a07d57239b3ce599b57be3fccc755075174df1d63ac3597dfb3aef9b4ea34ba4597d804d2c4
TLSH
T1FFE02B1CCC03543830CAF4B23B4363863AEB2203EF1011183A4F04C8DB3324091BC2EA
MD5 SHA1 SHA512 TLSH

Submit Download

dec2006_d3dx10_00_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\dec2006_d3dx10_00_x86.inf
Size 673B
SHA256 33291a47388edecc059f1825c1979142d7a9cd4a850716f9dce687deba1fa750
MD5 1b702c5bdf738a8abf4a3108097a6b7c
SHA1 c1d9c9d5e07117f273064bec36ac92b5ed624d38
SHA512 498483dc823e76316e977dcaf7fbc557c3e60c67129a678701d5168105edc97f97479107330d5eb3989dc179273cc9b74d055827f036f2f3551a0a3d398f04f4
TLSH
T1EC01D39DEC0255343194F5B27B5F768B27BB2107EE91151C378A05C8AFB338052AD2F9
MD5 SHA1 SHA512 TLSH

Submit Download

dec2006_d3dx9_32_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\dec2006_d3dx9_32_x64.inf
Size 806B
SHA256 ff00313af4a90f426492d72969f5efc6c56a17f2dd91f20cb5c0a38d9f1f2b6b
MD5 39929631df326b944470256c4f9cbbf3
SHA1 932de27abf59c889c02ed747f0ac04f5e494492a
SHA512 8dd2755a2b2fb90c6880cbbde65d127f55d12df2bab4560ddf86d6793b2cd4733929d97efef5fd8eeb417731a571888c893188df0361ee57eb4437fab331cb13
TLSH
T1BC0189DDCC03943AB6CAF1B27B8B378B27670907AE11615879CB0584EF33250616C2F8
MD5 SHA1 SHA512 TLSH

Submit Download

dec2006_d3dx9_32_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\dec2006_d3dx9_32_x86.inf
Size 1KB
SHA256 ef09d783bf5cff2cfba99946e5e71fda577b196a49c88bed1c51b5fd29cecf94
MD5 c28f4fd1644e2a20b1c897438e197e1a
SHA1 5178534444ed7dec8c63f02defe7bdb864c47123
SHA512 7cf93260efb1d794a17ba25b1fa02ba03b0ceeed8131d274b805155072a9a2b92a899471a8b23add8bf46c6a5a3cda63499043eaa754001bb43cafd882c8e708
TLSH
T1043167D98802E5347699B2B2B79F3B8F5777451BED51215872CA0980BFB3361124D2FC
MD5 SHA1 SHA512 TLSH

Submit Download

dec2006_xact_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\dec2006_xact_x64.inf
Size 908B
SHA256 f2f2040b8d13705f00d8e20a53f22093aa0f8c8d6aa6224992ba727ace7b75f6
MD5 ca414f7196d9b2a7a9d4057ca0714fac
SHA1 7eae4a5bfcd42915adeff5377036ecb4bd656999
SHA512 1efb725a49a8ea7125074436bfe988af360b1ac22629d34a754cabaf3c151855d08e826a0e244cdf9b624b531de14d23f32c1c16c82f6832c8604cbf52882e11
TLSH
T1A011DCD9CC838236BB88B7B1BF47274B87270817BE21224879C6118D9BA3140B1DC9E8
MD5 SHA1 SHA512 TLSH

Submit Download

dec2006_xact_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\dec2006_xact_x86.inf
Size 1KB
SHA256 4c0a40094228a51f567bec65c2cdf289d268812c1af579e3c6b76cd3adb77e12
MD5 211700aaa53bda6894be85df3dbdc792
SHA1 4874325e984b4f0d884cc732da474b3bb59d3848
SHA512 8f51d965cd1ee20cac11256afc5e422d94d43435729d653b25c5347e108fa50e59c3bba18fbd7fe4e2a1a6bd54da1622b80e029a5914e973f3faf5884a262baa
TLSH
T134317AD988839131BA94B373BF4F3A4F96770416FD21210867C94A89ABE324166DC5FA
MD5 SHA1 SHA512 TLSH

Submit Download

dxupdate.dll

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\dxupdate.dll
Size 173KB
SHA256 fb4f297e295c802b1377c6684734b7249d55743dfb7c14807bef59a1b5db63a2
MD5 7ed554b08e5b69578f9de012822c39c9
SHA1 036d04513e134786b4758def5aff83d19bf50c6e
SHA512 7af5f9c4a3ad5c120bcdd681b958808ada4d885d21aeb4a009a36a674ad3ece9b51837212a982db6142a6b5580e5b68d46971b802456701391ce40785ae6ebd9
SSDEEP 3072:KU6LKKnw8i/9S7BLGKm/nuFV3uNgosUBxr+2y97CqGIpHtWMeJnQRLj+bTHyKaY:Iw8aIMrfuFVeNgosUBxra4rIZsqq
TLSH
T133047C19F640E871D4D20178311C6B3119FEA87017A980CBF3472BCEE9A97D5A67E36B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxupdate.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\dxupdate.inf
Size 12KB
SHA256 93f5589499ee4ee2812d73c0d8feacbbcfe8c47b6d98572486bc0eff3c5906ca
MD5 e6a74342f328afa559d5b0544e113571
SHA1 a08b053dfd061391942d359c70f9dd406a968b7d
SHA512 1e35e5bdff1d551da6c1220a1a228c657a56a70dedf5be2d9273fc540f9c9f0bb73469595309ea1ff561be7480ee92d16f7acbbd597136f4fc5f9b8b65ecdfad
SSDEEP 384:eXTiDxtV0xxmBxbD6Ys7s6xHOJYwYdDxAp8xXZyUxIJM:eXiM
TLSH
T121429976B5168259F40EB3A016AF3EC95E3B008FB53164CD79EF11B0572E1ACA2FE464
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

feb2006_d3dx9_29_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\feb2006_d3dx9_29_x64.inf
Size 806B
SHA256 ef36ece1a6bd8af3b0b9247b081d28ed511b7e18c43eb3aff364c9ce8d3a06c3
MD5 0d951a2eda3638d4c976a5ffc1a9f8db
SHA1 fca89fa6bc6d4c25758b7baaff9136c3d73140ff
SHA512 89e960fbf9421a208476f7f65acf8047d231f3d6fd87fb31b01185ce88f5ebb1fa7513224124889082f41f1dcd579cc8bbb638f1af73081b4630fb07934dbb80
TLSH
T1DE01899DCC03D43A76CAF1B27B8B378F27770907BA21255879CA0184EF33244616C6E8
MD5 SHA1 SHA512 TLSH

Submit Download

feb2006_d3dx9_29_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\feb2006_d3dx9_29_x86.inf
Size 1KB
SHA256 f12f4bd86d5cd748b0fcf7106e9dff333c27c0886541339ba1f40c443bdc61cd
MD5 f4c258b663ebf54c55d7d09b05b26ff6
SHA1 85af1252cf3d9ae7afcf8d576cdc17910203ad03
SHA512 cbd491fd8e847a4659758bfe0f5a4b56c97e539e3b3aa7ca601c329d858c882cceefb9ee8341d794235b7c2403a090f45a0ba8f2f44de3e3b1685d027d8bd19f
TLSH
T1964123D98802D5347698B2B2B79F378F5B37491BEDA1214973C90980AFB3361264D2B8
MD5 SHA1 SHA512 TLSH

Submit Download

feb2006_xact_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\feb2006_xact_x64.inf
Size 890B
SHA256 b7ca1a4942057592c5b83b4425350da41c61779dcae608112141d727091842d4
MD5 7d46669082d530935e79c74c4fd83bf2
SHA1 194a05e3b019beb07da96c3bef780e6154a78b9d
SHA512 590a9628fb90d4140d6f96238caac46f8ab23a59e3a9d94a28d1638006085efdbfad259b9633e4a56585f6cc10119d67abf3fa873a426a1946af589c17f84fa1
TLSH
T1F911CCD9CC4380327BC9B6B1BB87278E5767480BE82151087ACA06CD9BE3101B2AC1ED
MD5 SHA1 SHA512 TLSH

Submit Download

feb2006_xact_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\feb2006_xact_x86.inf
Size 1KB
SHA256 45146fd446fc8533dc5f97d88bee9ae220161f24797114d0bf3afc7c479ed69b
MD5 9dda266ba05cd917cca889659e3b98c8
SHA1 2a2ba2ccb3c9d87c03198b9ef3b9c6e21d693055
SHA512 26fa18c8058397b8b5d89baf1fb9cd689827b48781dbe40ddf884c0a3ff9cf8d8451c6c084a693e4fdf107ad181fcce35a2fcfb371548df948416b5713d8ce38
TLSH
T1E0319BD9CC0391317A96B372BB4F364F57774806E921410877CA488AABE3202769C5FA
MD5 SHA1 SHA512 TLSH

Submit Download

feb2007_xact_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\feb2007_xact_x64.inf
Size 908B
SHA256 184c1684c57de07983edaaa1ae2751b263497673ee8418af023a63fa03553f53
MD5 42161a1071084cb4f32b0d7d748d9b62
SHA1 e7e29605c21b7a2c370dcf979a40c50b93ceb298
SHA512 2aa8e864dc28ee5d0583d044e3d8a9399d8d49b9fb1c522c1c640eb7b079515ffb0bac5280a220c23e15ea4c7ad45c7f1722e05e9f9baa069f4a2670e4976358
TLSH
T1DB119CD9CC4380367B89B7B1BF47A74B97670817AC21225879C6058DDBA3141A1DC1ED
MD5 SHA1 SHA512 TLSH

Submit Download

feb2007_xact_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\feb2007_xact_x86.inf
Size 1KB
SHA256 64b6020f43bbab7f7c2368fcfe7224165fef555b2bef813aa13b2d9f6295d46c
MD5 5f1df74b0110f56ae0b6556dd2dbc14c
SHA1 c8c7d383f5e37c06015e1304b599568999bd4e09
SHA512 06572fbaa625c85b05f5f4eaf880083607b6d010a8d4bfdb28cfbb1021b08e533f3491080faecb24055acb897b337d83caf9306fadebc1f1353763e8908850a5
TLSH
T1A631ACD98803D1317A88B372BF4F764F97770416ED21211873C94A89EBE32416ADC9FA
MD5 SHA1 SHA512 TLSH

Submit Download

jun2005_d3dx9_26_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\jun2005_d3dx9_26_x64.inf
Size 806B
SHA256 addafcf0cfd36587c12eb2692922f0fb134874d11005a0544cc054546a493933
MD5 134624a22aefee1fad4eb11445b8d342
SHA1 3f0f65ab8be678250660ba47f33f229643c118b1
SHA512 24bfc2d96b3078f82ba031045271460295f3a1e6dd3c8c30d8d50c98daa9051aeca93ed8ecae8722b70083d3b0ba41735f81068e7514e81767e1e119e45ad6f3
TLSH
T183016699C803D43A76CAF1F27B9B378A27770906AA21355879CA0184AB23244616CAEC
MD5 SHA1 SHA512 TLSH

Submit Download

jun2005_d3dx9_26_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\jun2005_d3dx9_26_x86.inf
Size 1KB
SHA256 262ed4a65dd45e19f196cb2d9946326693ee31a86b51bf77116dec2727971cb6
MD5 62f8ec9c0d3bd54ace90cb15f5caa208
SHA1 e84f4a60c79f862aca0f917d1d30898af4036fad
SHA512 3de4ad76b207c2a0ecc10835cb787d61faa02e3531f6242a606ac0686cbfa156f59c30695effe5560d9a8481800b356873b7590beb8a739b33c0b1fcccea3fab
TLSH
T10C4125D98802D5347698B2F2BB9F378F5B37451BED61314973C90980AFB3361264D2B8
MD5 SHA1 SHA512 TLSH

Submit Download

jun2006_xact_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\jun2006_xact_x64.inf
Size 908B
SHA256 fe9caa55be17684622fd7339b1b96e1f0d107dc33c065706d24a435d523c6e12
MD5 a983924d66305104b4e21a551dc66448
SHA1 23deca69eea790ae7afc30cffa55e87ac8520cdf
SHA512 83c2117df0fc37979ccca7d861598a8a127d135456f72597366ac65276906435ab99fa353f246f9f61634fe96f8376d38253300f177d5cedac194cc92407f3d9
TLSH
T1F6119CD9CC4380367BC9B7B1BF47274B97670817AC25124879C605CD9FA7141A1DC1E9
MD5 SHA1 SHA512 TLSH

Submit Download

jun2006_xact_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\jun2006_xact_x86.inf
Size 1KB
SHA256 6bdce6f6779712e38c6d9e6e5961217e417254089f096c719f25566e952cb257
MD5 fa59f92f7d32613a12189e75eaa700dd
SHA1 f2c3947427e7eca9fd1ad53427d1dec28a5f0f55
SHA512 e8dcbd918cdd7d98a94d53413088e2f75e4d1a15d4f69b6927f3cf19760d9f2fc577659fd533b2e4e2997aa29f285b0fbb35830331997549e429dbdcc7ae9853
TLSH
T11F317AD98C03A1317AD4B372BF4F364F96770416ED25410867C94AC9AFE324166DC5FA
MD5 SHA1 SHA512 TLSH

Submit Download

jun2007_d3dx10_34_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\jun2007_d3dx10_34_x64.inf
Size 815B
SHA256 0f75b7ef71e183476ec938705024eb8a10a77d7602a336be876c7f5d17429725
MD5 bf312732fe77f600a36f2a7b98a346dd
SHA1 5e9c70959111dbe60ad86258cb5bb20d0e9caa0b
SHA512 10f3d128da5180ecccda522164269e4940b69a7f55af9501de648e572ab5275f02c113be5342969c73e118fb7ec49209883c4a8d6c4648fb898289f77ce7a3d0
TLSH
T108016B9D8C039436768AE1F27787679A1B270806E95126287D9E00C4EB67304516C2E9
MD5 SHA1 SHA512 TLSH

Submit Download

jun2007_d3dx10_34_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\jun2007_d3dx10_34_x86.inf
Size 1KB
SHA256 808983dfd3db7c3452589ea4e14ab4af8ef47dbad3b639f9a3c55685c9b73867
MD5 55e30750af2bf57321ad1097a512d725
SHA1 0af3c73afaae0e8a1fdabe25beeb96b32eafb9ad
SHA512 0ad8b51a550243d3f24ec5934f2b5e53f1d8e0b87997a7cda38840b3160121f1e221e6cb09d3f5b384df74be2ed10d4dd92fb02aff98bd0ededab751ddaa7149
TLSH
T1B531F49DC913903076C5B6B2BB8F379F5A370407E96222A87AC90990EB77751128D1BD
MD5 SHA1 SHA512 TLSH

Submit Download

jun2007_d3dx9_34_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\jun2007_d3dx9_34_x64.inf
Size 812B
SHA256 77f3fa1756181a90d2ee63c26cddfdaba0d720c9a49121db28746cd02b3e071d
MD5 d203c1993f21a870871ebb0c99de313d
SHA1 e69a5bc70fe66f89fddd81330dc148a1e788a56c
SHA512 e03c341f2d8df6e8174447d32bccb56b096073a35a3d8193860bd4628d812d1fa381bd35a55e17b4f27c5c5fffddb25223d932e995736fc608030501954d45ba
TLSH
T164016B99C803D43A76CAE5B27B8B375A27670906FA112698798A01C4AB63250516C2FC
MD5 SHA1 SHA512 TLSH

Submit Download

jun2007_d3dx9_34_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\jun2007_d3dx9_34_x86.inf
Size 1KB
SHA256 a568b7b8a0360ad94b1ed6388eca6ca9d8770937360a426a0fdadef9a4019bba
MD5 b1d65a13b527d75ecdc30cabf407d103
SHA1 db6df8ce6c28cb4a0275aa134c2d42a0ed957fa2
SHA512 7d80f772b36c408c258f7db1180bc09996620634e6304761f5c10659d0885bb8d0b19bcad50a13a5d99ee92dc8e15587534d966bd32c5a8910308eab623a7f86
TLSH
T1463157D9C802D4347694B2B2BB9F375F163B450BE951224873CA0A90AFB3361115D2F8
MD5 SHA1 SHA512 TLSH

Submit Download

jun2007_xact_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\jun2007_xact_x64.inf
Size 920B
SHA256 405d8cbe3c87b16afac2a9254497412a42de4ae2d8fb470a1234dc3260e0b90f
MD5 c8ca749e73883789faf6561a375d9b51
SHA1 fabee2ac65f1d4267da8df07cd3e4cf4eb19148f
SHA512 56a0fd5b8f065b82f5f9b73dbcbf912045847180a6614dc48ed7b27fea3909839615aab0c8d0a122d9fca952e9591da5152b4c618e84a2d7aa409dea4fa4237f
TLSH
T138117AA9C802C0377B8DF6F1BF47674A976B0817EC1012497A8605CEABE3241B1DC1F9
MD5 SHA1 SHA512 TLSH

Submit Download

jun2007_xact_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\jun2007_xact_x86.inf
Size 1KB
SHA256 33b980fb973394d9d8cb4645914d4cf6793bf92bd311e0431ce9cacc59fdcbc5
MD5 757a5f0cceaf39b5c7c9bd61650fd12e
SHA1 a7b3dda77f0f2334466d324eefeb3e5f6809d880
SHA512 f4f969b017c9233bc4a2267118fe921689b3237d28fc2b251ea3b6227e0b17dee84dfb8df6491928791891dfcd265688069b92d8a88cb9dfdbfff07b24a4dfcf
TLSH
T124315CE9C802D1317A98F371BF4B365F877B4416FE71224826C6468A6BE324172CD5FA
MD5 SHA1 SHA512 TLSH

Submit Download

nov2007_d3dx10_36_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\nov2007_d3dx10_36_x64.inf
Size 815B
SHA256 7a49ae818e199cf9f9bd831f94cb6d03a1e72a141d76546261979b30642757b7
MD5 60e353607750ae5e63cb8e56f443321a
SHA1 8f1b07f8cfbd66e9a7e3c15118bddd99b04d6871
SHA512 038aecc1264f608c6028ec2288f0d8de6c9202bb3d1e96fd247e889afa06f1ce592bc9e224f37e83f29c0984cca6c4e85ab11eb28570aafa20b076f2b2e5b6e8
TLSH
T10E016B99CC039436768AE1F27B97678A1B271846E95125187D9E00C4EB63304526C6ED
MD5 SHA1 SHA512 TLSH

Submit Download

nov2007_d3dx10_36_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\nov2007_d3dx10_36_x86.inf
Size 1KB
SHA256 96f48bb810055699d37e9e27a65947483a0b4df304870e3b5448d3051b3e4926
MD5 582814cd47564fe8e3424cb2eb090501
SHA1 87a2114434564bb0a5cb4ea337577dd405f5e42d
SHA512 203d522271aacc0200bdd684934a8478b54a258f55ecca49a178ccabf418a328cd02ebd2a9656bd9dcd40c33de21d33664c5b16c1e7877de424d37b4f9b3e7a8
TLSH
T18E3105D9C9129070B6C9B6B2BB8F3B8F5A371407F96221587AC90890EB73751128D1FD
MD5 SHA1 SHA512 TLSH

Submit Download

nov2007_d3dx9_36_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\nov2007_d3dx9_36_x64.inf
Size 812B
SHA256 d1b544b3912e73e5984cd759096120febe6f17e41a3cf920ef82431b9b569c1d
MD5 345ecd585eec22fb33a62e59c2758b6d
SHA1 2d6ed63996903c32b3e7ae24d86c924b11d53e7c
SHA512 6d88cd48bc32a008989ec4bb71afba0afeeaa12f17833fb4072c38b237bd006f192f4e4e7a65d8aebe5d6dac1d13098eea370b03ced343a5541e0ef23e813364
TLSH
T119016BD9C802D43A76CAE5F27B9B374A27671906FA113198798A01C4AB63250526C6FC
MD5 SHA1 SHA512 TLSH

Submit Download

nov2007_d3dx9_36_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\nov2007_d3dx9_36_x86.inf
Size 1KB
SHA256 843764f70f56d430c0695e263c895a135a631f793213d1005fafcf9c210d1ac9
MD5 08ffe480ee5e54fc19a2feea46adced6
SHA1 c939391c489bb321f70707183b0d3f4b5f13911b
SHA512 c05aa34b860b5620c982731af15889da5571395fb35faa24d43ccbb1b42dcc756769a0b9153c28112d7347f28d4ba933d8b15fb36a3e511ac99eb148f848ed99
TLSH
T1493137D9C802D4347699B2F2BB9F374F567B451BE951314873CA0990AFB3361115D2F8
MD5 SHA1 SHA512 TLSH

Submit Download

nov2007_x3daudio_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\nov2007_x3daudio_x64.inf
Size 815B
SHA256 1cc72ca78433fbb72ee6b654c908748ea846c87c80424816745f285ed3bc910b
MD5 55402001ac41f0bcd1f457a36d298848
SHA1 a18fbdc9631610f2550f05cc3aed5a665afee7a4
SHA512 96cb7ff1d43a7c1642d8ce9cb3c23ba460f6c083a7927fe0ad7a3ebb85649c384ef0542ee3e7dff6b99413b95a2a333327cd28349665901f466782fe96ee491a
TLSH
T1F3018299CC03D53276C9F1F27B8B27CB1B27081AEA316518B68A04C4BFB310051AC1FD
MD5 SHA1 SHA512 TLSH

Submit Download

nov2007_x3daudio_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\nov2007_x3daudio_x86.inf
Size 1KB
SHA256 f882bdbc8230d24b24e20f9d0db447586e9493801900a8ba381eb493bd41f5d5
MD5 4287ed3f6647fcd80ec6b0f7f2606964
SHA1 27b2e4212295478645a017a4df820af6bdb4dd0b
SHA512 c816d7127fb7fadb971b757ba76d4b918fe18bb16e5d2249b4bd80b0b6c47208e7ba5e11b521d9cd0a23d464c392f98a3c617b91c0ae799f3aa10401b4e2bcd7
TLSH
T198212699CC02A4707685B2B27F8F768F5B670817E9611508B3CB0A90BBB3701219D1FE
MD5 SHA1 SHA512 TLSH

Submit Download

nov2007_xact_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\nov2007_xact_x64.inf
Size 926B
SHA256 841d579573afd51499c7cd8ee986a41db63cedb722e8fac351d3632ff470c161
MD5 bebd51d24aa338f6192e291d03684b6d
SHA1 cf2c0efb60f44748b0ef3f95276b0512719f130d
SHA512 28fdc41091d761faad79c1af33da0372086689113df2f1cb40513d50727e5aefd652a977ad5c92bd62f1c5ef9cfc24c23bc6758ddd6a4d1ac5db0b5e401432ca
TLSH
T1F4117A9DC803C07B7699F2F1BB47264BA7670456EE2111087AC605CDABE3541A1DC2F9
MD5 SHA1 SHA512 TLSH

Submit Download

nov2007_xact_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\nov2007_xact_x86.inf
Size 1KB
SHA256 24714f229e479338ed89bdd6143140505fd63f517b7e71170ea6c072a1748b06
MD5 7e2a5eadf9f1eaf90d5eac15b7a9f558
SHA1 907cf74056bf7ad91e47c98aaad9a092ab42fd02
SHA512 63c2f438e6feaec2b9fce15617940c97862a54527d549fb6ea149e4d18199c1752e255c6cb167ff20b9cc1f74b87ffc97110b65652bc5c3883cd14894d21f8fc
TLSH
T16C3195DDC80290397689F3B2BB4F264F96774416EC601508A3CB089DABE3A4257CC4FA
MD5 SHA1 SHA512 TLSH

Submit Download

oct2006_d3dx9_31_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\oct2006_d3dx9_31_x64.inf
Size 806B
SHA256 c031987e68e476365cd885e41a072f85fdfc9e480c93871d024a5ccf26d17118
MD5 e2a0e651573cffbf81578b864b50cfe7
SHA1 1c739f17f63ce7c5ba00638259628f7fc919cf74
SHA512 abfc6452d055bf6a3fadafb9562352bda90ee0edae5a0fec798951ef9d39701835212533a60eaab67c5c0fcf01ccb9115fcea3779b024ee1e11f217cb676e7f0
TLSH
T15A0189D9CC03D43A7ACAF1B27B8B378B67770917AA11255879CB0184EB33240616C6F8
MD5 SHA1 SHA512 TLSH

Submit Download

oct2006_d3dx9_31_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\oct2006_d3dx9_31_x86.inf
Size 1KB
SHA256 a1c61096019a6ae1a9f31e3fe67aa2bb7e9e451967959d7088344f3f20ab572e
MD5 8f7aa1f0f2389f3cac574652f5d6672d
SHA1 921f2161cf46c6314a330ff52c83f8a3f1058f0d
SHA512 a85c03ccaa27adf3c75287529f18e84f526cf91785e0f4281db0eb86feba78522603e21def19bd2a33e03ceaedd9109b8af1dbda4a3fe93fe6eb95366b6df747
TLSH
T17C416AD98802D5347698B2B2B79F378F5B3B451BED52214972C60980BFB3361224D2FC
MD5 SHA1 SHA512 TLSH

Submit Download

oct2006_xact_x64.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\oct2006_xact_x64.inf
Size 908B
SHA256 4c388e9eaf3c39e75d003a58020e491b675b3a6054c702062a9c90e86f691d96
MD5 535ca39d61f752c3f1ba4956871fa27e
SHA1 4941efb676adedb9a46d7cc7415d8af03957b3fc
SHA512 f203958ca9c7d37daccd342a4deb125b60ef839b5b674a2a0220d7f0d770d5cfcd5c1f691470200bb4d8711f2f6a77d8b968e17020dbcec8c40b127a09f5f9de
TLSH
T143119CD9CC4380367B89B7B1BF47274B97670817AC211A487AD6058D9BA3141A1DC1E9
MD5 SHA1 SHA512 TLSH

Submit Download

oct2006_xact_x86.inf

Path C:\Users\Admin\AppData\Local\Temp\DX1E6D.tmp\oct2006_xact_x86.inf
Size 1KB
SHA256 66998b21cbe6f05b12cdb4bb45549dcb1b4a92f8a1b910334150a8d767fa39e9
MD5 6181c4b93bad5332b34180ac0bae5077
SHA1 259c8de2dff2a5dd8d4971fa1ab3fb0d193ae90b
SHA512 8508ebc77b667907c5c2f587131f24cb25c5a67ab2f7d8b94216931457f486b37b9701397ed6ef527c9c6786f82a938a52d2b6cb0afddeff4101cb100e3ceca8
TLSH
T1AB3198D9880391317A84B372BF4F364F96770856ED21018863DA4B89ABE334262DC5FA
MD5 SHA1 SHA512 TLSH

Submit Download

bootstrap.ps1

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\bootstrap.ps1
Size 1KB
SHA256 e94f4f3efcbe350f34cc5d0a4481e32f9d8cbe554faefa741821fa618798d0eb
MD5 136886518d85e01aff60db54d56bad90
SHA1 25fe6604325b69ac1f50da2c3844526350070a81
SHA512 895aaf9dece99f9074811534d5f80d53d0a82efe3d4c71b85bfb310c8ed36bbc61d565991aa3a3df03b28cc650b607588fac52b6bacc1ac8af135b3e0eed9c07
TLSH
T1D621C5252A15107119F6537BDA1A45F0CB0E746F8075476039AF8149CFB64EE0FC6FE5
MD5 SHA1 SHA512 TLSH

Submit Download

payload.zip

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\payload.zip
Size 11.8MB
SHA256 672c80bc9a37fd04e46679772a91cb60b696d76c6d84f6853fcfd88a494701f5
MD5 6146888492aa259e261844c8fd73e482
SHA1 7ef84e8941266a27496fc7ff159bad8e4407c156
SHA512 9ec57be3f360c761f2688ac83b23927a053b1bf0af8edf92b23e3d1767b1cb09bb37dcd6ba91e2cbae9c4f9d5fb84112614704cfbb9fbe162869a6322589d071
SSDEEP 196608:j9vfDrVf/hcNqmMH0Ozbl7PWr0l1UsnoOsuMfZ74z56EwHddX4kqj0RkI0/eprh8:FDrDc8fblSrSZofVh74cE8dxA0KI0/sO
TLSH
T1CCC633A2A03BDD3A6FBD56F7B021D200818B8299A61FC7FB324615416C67FDE1F1650B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MadiumInstaller.exe

Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-bd354ac1f0434e8ca244ed211ee35cf0\MadiumInstaller.exe
Size 201KB
SHA256 613678d816cfccd88a0f4dc506f5f63bbfa6eb222bb4f215217cca6e5395287e
MD5 b7442b75184293a49d6f7d67cf04e92d
SHA1 9302d28c6169e6636dee63da7de7350268e921cd
SHA512 81521602aacf2828647c7dc774c65e2e7dd8d0edca34cb51bdfe2c2114766168c51a6ee94283484afb916da851f46e889199482722e8c418c3691172e9eafcae
SSDEEP 6144:x/6h0bqhOCz3hu01iXdfditfnOO5rEH9pJfsEC:BsLPoi9nOO5rc9p1i
TLSH
T129147E16FA6500F9E25AD5BC8D534A02EB73F896073197CF17804A7A0F27AD85E3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MadiumInstaller.exp

Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-bd354ac1f0434e8ca244ed211ee35cf0\MadiumInstaller.exp
Size 836B
SHA256 8fc56228ccf1eab527c30de992491c94ef499de6db4f0c93a17d29169f450273
MD5 1819e6afe8314f4369a45d02d4b1b120
SHA1 aa04d948209ba9878deb67414aa4708f915f99c5
SHA512 5cefa38dc65fcdb06ad726ced1bf7dc8d3dcb7daeddcb1e01ef976977616d2dcc482a2ddb7d41ec7c6a8b45fe7d4c2ce13a7e60e913649ded24deadcbb5a4a3e
TLSH
T1E5011010E3E25C12F6204C3E83AB67796083FD95C85063139B80130ABD0B6E9C8208D3
MD5 SHA1 SHA512 TLSH

Submit Download

MadiumInstaller.lib

Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-bd354ac1f0434e8ca244ed211ee35cf0\MadiumInstaller.lib
Size 1KB
SHA256 1e2998f883ecaf4726628900f791e5a114ee9af80184dca4c6abc3dd286079b6
MD5 d36b5c5903a7b1c4cf390481483dcca9
SHA1 814485782b54b29a1060c9639d6444efbe3613fa
SHA512 23606b0f6f1d9397a425f9b2d4e27158b85e5fa92819428cc4e68f263e40e49af94f333ae7d5322b718035214c54d2294c493de44b8b836493af5ac0e138d745
TLSH
T11A41D2716DA21463E639D637935BAD74242C300A9326FFFF3C9D06D543865CCD6A2983
MD5 SHA1 SHA512 TLSH

Submit Download

bitsdojo_window_windows_plugin.lib

Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-bd354ac1f0434e8ca244ed211ee35cf0\bitsdojo_window_windows_plugin.lib
Size 571KB
SHA256 e30c3b143bf064f7a2f8438247ae46ce7eada3850536ad0ea415952b3100c87b
MD5 c7e97a58ca8c875c5b97828290ae4cf3
SHA1 b6cd1aac71c892a7c8d2775740d5cb74095b0ee1
SHA512 d7810575de81352512c179617d5d1609e4abba3aa05f13c29254fb74a231805422e9f8d696b09772611d2ea74b5a86a565c3fce71651d7a4b5a8a94c238a10f9
SSDEEP 12288:P66m66K66K6FK66EFFH6FS66q66w66jFFSDDMW66m66q66gVFomDD2qSw66F66TO:P66m66K66K6FK66EFFH6FS66q66w66jY
TLSH
T14FC4445DE7868783F434EE3B88AD05F256A6EE512443FB0792FD23251F03A5E56BB120
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.so

Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-bd354ac1f0434e8ca244ed211ee35cf0\data\app.so
Size 5.3MB
SHA256 1ff379c029f8b24bbe86a34b61e633d32d41c88049ea50fe93e062465b89e210
MD5 eb5eaf14de56e59da68a5848d455cfdc
SHA1 ff31b5df0cd138fe4dab7e66a4f7ebe35224d0e6
SHA512 d9e3e0e75a9f1cc694c4aa3ee4624f1ef46cb15f9bd6181184e31fa360f19f82773ab7e0799d8846f467c182badca3266b6575a9cf8d31de6d66ff8d2fc5c3cb
SSDEEP 49152:RfVy+f06kKz2ELkfcGjChmcUWpIf3o2/yAhByBRSRpe0V8BxV/zNyzB570gKHoZE:RxUf57RpSBxV5yd57b5UT
TLSH
T19546F897C0E48770D572E772B75F26A55E2438CC4E70B68607C86B563E9ACE04ACF272
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AssetManifest.bin

Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-bd354ac1f0434e8ca244ed211ee35cf0\data\flutter_assets\AssetManifest.bin
Size 2B
SHA256 f566cc6fccc657365c0197accf3a7d6f80f85209ff666ff774f4dcbc524aa842
MD5 0b0a3415aad49b6e9bf965ff578614f9
SHA1 db5b55a9b215f744db82517864984d073f2e8f8c
SHA512 0404c26467d39c9394c15c26d360cb48cc474aeefe2bae5fd5d46b72b5e9ebb8f1497d561dfed5a21942db92b648bab8167d8e02f5f19880a77e3afdc68526f8
MD5 SHA1 SHA512

Submit Download

FontManifest.json

Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-bd354ac1f0434e8ca244ed211ee35cf0\data\flutter_assets\FontManifest.json
Size 82B
SHA256 28b1eb2b3d2e1ad60b8c8b0f9100b1ccbf492f7fa97f5bebb51ea97e73926e7d
MD5 7b2a36307916a9721811788013e65289
SHA1 f83d716c83a8a1cdf2a5c7b5fa387e9a62f2d49d
SHA512 0659dbdc8042768ce6e75c5e36fef1f93fde820dced5e2cf07f0949e59b25f87c01607f97c1926a792dbda28ebd7e4334ad942dfef3782e5ceb61de893f8df67
TLSH
T141A0120F005405D540CD9045F0957051E040284B000BC4CAD164064493E2130033C307
MD5 SHA1 SHA512 TLSH

Submit Download

NOTICES.Z

Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-bd354ac1f0434e8ca244ed211ee35cf0\data\flutter_assets\NOTICES.Z
Size 102KB
SHA256 bdb492de2b031ec16101eede4cd2f26feefcd75c16a09239fa471a9cc552fcca
MD5 79e3b032d03665232fb84f194fc934bd
SHA1 cd30f816703e3d15a6c5d3f7c986005c044f7425
SHA512 4d2f906c47e088e8e8256063fa21425e8989e97a0ac94230ca1650177f68b332f65dcd800be281b12295596aa56d022cc88d444fa27a8cdf12e23206e7550323
SSDEEP 3072:n7tECDp05eSkCmIQ+P/sKr/bw+hoh5H3/P:n7tEC8e+o+H28oh5H3/P
TLSH
T125A3127E6A2C044171BC119D23498B64FEA6FBC630C94EFEB43352B41D7A889712D572
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NativeAssetsManifest.json

Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-bd354ac1f0434e8ca244ed211ee35cf0\data\flutter_assets\NativeAssetsManifest.json
Size 45B
SHA256 9548a31e4a048135c1d94f919328bfb62ae2c7bb3cab96557c7941daa97776cb
MD5 f3a664e105b4f792c6c7fe4e4d22c398
SHA1 adee29ec4f2b3cb2ec37ec3368f37ff805695d36
SHA512 b7df555970e20c6a50f650cd0df6ab782fba7004782b3f7921ccfd314db53bfb61523986628d2e05d085f4c2263dfcf54000ffdfc946b0158c5766fc6f1d0a86
MD5 SHA1 SHA512

Submit Download

MaterialIcons-Regular.otf

Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-bd354ac1f0434e8ca244ed211ee35cf0\data\flutter_assets\fonts\MaterialIcons-Regular.otf
Size 1.6MB
SHA256 d9865b671a09d683d13a863089d8825e0f61a37696ce5d7d448bc8023aa62453
MD5 e7069dfd19b331be16bed984668fe080
SHA1 fc25284ee3d0aaa75ec5fc8e4fd96926157ed8c4
SHA512 27d9662a22c3e9fe66c261c45bf309e81be7a738ae5dc5b07ad90d207d9901785f3f11dc227c75ca683186b4553b0aa5a621f541c039475b0f032b7688aaa484
SSDEEP 24576:PsSIRolMKvGXtkXKLkMp2fXrNsAxI6zD2/qxDoq4eeeDrG2eOeGr2lkzhlTMrRoV:P9njdzbwc9
TLSH
T1787529100276EF4CC1EF507D43B74A48F4C59AFEA53ABB1AF9B64795220BDBDA1C8181
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ink_sparkle.frag

Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-bd354ac1f0434e8ca244ed211ee35cf0\data\flutter_assets\shaders\ink_sparkle.frag
Size 21KB
SHA256 1fe8436a743884cb65078fe8c7b38e18f5365f2a2961270916f426fd13c604af
MD5 0a8f4531af1d1a54aee8c7d23e640d2d
SHA1 0e13f340acb6eab5ddfcf70df99d06e3fabbb454
SHA512 e93fe163ebddb759a7f53c611eedb560fce18c5f5536b8a19781a3c5c3aabb0c0fcd65159b24d60c5113f3c542bf417132f3e8aa5b9b996b5b546cdb34683b51
SSDEEP 384:TThcP2xBwl0yU6iMRRLkgpXlp+TrlI+6QkopXlp+TrlIPLmNlkf/M+c3Vp3P9KP:TdcP2xBwl0yUNeRwoL+TrlIPzgL+Trly
TLSH
T121A23348D2E60E22DD166B3D556B21043F3EF09BAB67D2033748BA547F87327468A6D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stretch_effect.frag

Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-bd354ac1f0434e8ca244ed211ee35cf0\data\flutter_assets\shaders\stretch_effect.frag
Size 17KB
SHA256 62a899ff4e168ac6ca888ce7c2f40e5d3fbf8ca20a1c3ded781a116a6d7907e2
MD5 4acf2167e56d604e5acd1928ac03f0cf
SHA1 38c5e7d5b2583906cc67f5c018c06c5b43bdd120
SHA512 097a61ba8ea49c29dd06c92358094a423c9baec14027f2fed616d8da24bb91beb9c82bfdb3fe42de2c1610028a2ae6dbe01ae3636a813c7f0d6fa55369e140f2
SSDEEP 192:8sVNLhNETx5kgIDkHs9tmogoxjaDViqNi6O9aNiqgiSuKRqDi64BaXiqGiaaZdBf:8Mph6Tx59HUtXYDc2/boE/
TLSH
T1FC821254D6730897CC5BA37D4E4F0218AB34C087968687037E4DF224AF8676A4AA9FD7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-bd354ac1f0434e8ca244ed211ee35cf0\data\icudtl.dat
Size 842KB
SHA256 998367809a821d595928089c197b3f7959f0420f81f79d4d0daee53378492ed5
MD5 018361032ba13dfeab636138ab6b9831
SHA1 8f9c259d3a330786ab8bbd49e7e79abfa1d552ed
SHA512 d7d3fffb41576cf2c90cd260727cc0ea23c5a4c458f84b01426c2a4578004b94168047c7282222e9ffade2f082e189cf167146cc3303bd7dbbb252a593236967
SSDEEP 12288:8Mlhw771h0jM7ykPG07rr4c8w0P4N48Rkjt3dPHz982VYhq:Zhw3zVtjLbGu4RjTPHzMhq
TLSH
T199056A17B0435E6FE0C48277C652E7B65637838DEB3317EAB698B5593E8A1C20241BCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flutter_windows.dll

Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-bd354ac1f0434e8ca244ed211ee35cf0\flutter_windows.dll
Size 20.3MB
SHA256 a5c880a4218a04cfb3e58b103160334658122c5e43d3b818b3d9af5ab3e1fc0e
MD5 0c8c6ad1f023a515e37ab2bce12b4512
SHA1 d97f4ef98acc752a2ca6cd7fa89b605205f9cb24
SHA512 18445153a65b0641d85676cff4a17d736065822bd56a9bc712b3e61d96201cbc10e46f2e4fcf2568f7f29bd22ec15bce75bd7897c90773bf3cceb42d20c7c33f
SSDEEP 98304:B24Wmz6AP8+AmlPps4yoz95mYjH1x0q1KiROOUsMuZSxAwg5mByfcdrNh7k/WV4h:Bt8omoxj1IWEjEw9+BZ5vStib5HHe
TLSH
T1E2276C03E29640EDC059E179971BAA27F670B8490B20BADF3B5C47213F66BE05B3E754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_eai11xvh.ben.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_eai11xvh.ben.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon-1

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon-1
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\AlternateServices.bin
Size 10KB
SHA256 66b2aa8b15fd2381a14fa4108d039caf1b4f179d3276e47b3da9c3f41b33d563
MD5 da53170e06d4f7c1b30386d954d6fcc7
SHA1 0553cb44171d9d5d32b5e78d1f522f1945651202
SHA512 5591317bceedb82276910a85672f83b062b4c43d9a70429ceab9002968d22d24e1642ecf9d9d277e4aefed3f28808bd17aee7fe00889ab5edc1db1f2df0bcd13
SSDEEP 24:NuhMZivCUlevoQU1xWvooUhzcvoec5UR5z/vomUxlcvoJPUBxrvocUhzcvo:ifMgZeghJcgeXzgLjcgJMbrgFhcg
TLSH
T15622C9FB5F7A6416F8F28FF0007E78889C33121556F2459A9A3BE0D712927A1D03EB58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\AlternateServices.bin
Size 21KB
SHA256 ec8519930861ebbf42a4b3179b8d0b203c32ffd4da0870a14aba2c2760544f1c
MD5 07fa06e165f484a9c55e5636cc921a4b
SHA1 402d096782495e1c927bac65bf422dbddfe6aa36
SHA512 c564d40bbe364bd7fff93c89d8d0d07f932d6a919b213a931ed10aacefa384e6074f8df0206391714b15ef38dac6f6cabdd77360eea8b557089ef68e0d321cb9
SSDEEP 96:vuqyuEEWMG/MbeysWEmHEbEmpmlVmSwGCA2nPm0Ym2PG3/emS4:ueSVgq0VQPJY
TLSH
T15DA295FF0F7A7412EDA24FB000AE78498C7311158AF6859DA63FA0D612563A4D07FF59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\datareporting\glean\db\data.safe.tmp
Size 5KB
SHA256 0e676f5dc5c8bc85b0ef4314c3304ba2fc6de38584618f1b62e28f4a3664c7e6
MD5 a4eedc1eccc4d048e5ae4fafa35c2a85
SHA1 e2a9635ff2575600b6acc3f2c6d84b7efcc0df3b
SHA512 70e05e618439287b312c34dd9fd5324784a2e7fc8df1b399c763fea42c6da9ed0ac4e1cb5755378f54ae5d56cc3e1dc08bf7b06d51fbc2740b09d4b5546a1b05
SSDEEP 96:LFV1VUFViFVYFV+/dd66Joz1zgClKtmc0d/UWwSdF95/7bkW6BrcPyUR6rWI:d1d66Joz1zgCl6mc0dAOv5zboBCyjCI
TLSH
T1A4B1B968F229463FD409423ECDA21B400E76384A985E7F2A36EC745C3D572DD7A8D17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\datareporting\glean\db\data.safe.tmp
Size 5KB
SHA256 5dde565c9df1e7083d8d51924b7ec762e9c61fa804aa2fefb53f0c6e035d9993
MD5 7f1814272875ac0d61e9075a502cf11b
SHA1 e370efe6dc7e4f30a4d52730836943fd5b7eeec8
SHA512 2931eeab4db733752005d44f8a5821b9ea5db1ddc38135e6189c9a9d32218ad33be738e1acb72c1e0c0507ebe70ad9e83b6575b191a2de675f7f236a67905153
SSDEEP 96:c3TlDDSdF95/7bkW6BrcEjW1TyUR6mHUWZLFW2FVhFViFVYFV+/dd66Joz1zgClW:KOv5zboBb6pyjyq1d66Joz1zgCl6mc0d
TLSH
T1BDC1CC64F639963BC418427BCCA55B400E36394B984E3F2932DC64192D9B2DEBB8D17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 856370a5786aa034fafc06e05182e7a6a6a28ab3ed93aed048076045a052860a
MD5 63fbd772341b245a4a599e99af1db2c7
SHA1 6062be42f4ebea74f22fa8ace393cd812576d72e
SHA512 3b43ab58246608750b96c43296280dfaf90a0a263b4741b5b91f158c523c06092bf6d567529494e34605b2f33295cb69568932d25ab1fff920e9075c156fd070
SSDEEP 192:u1d66Joz1zgCl6mc0dSOv5zboAg6pyjw+o:Id66Joz1zgC1jTboj6pyjU
TLSH
T197F12064E629867BC41802BBDCA51B444F35384A9C4E3F2935DC751C2C972DE7B8E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 dcf42fe6661dc1e28017c06b0954d14c02499b1f3ceace12e383ee306d6dbb0b
MD5 bc7d19d8192f0d9208596b64d161f38e
SHA1 d2fee1fbe6dd07d60bc753ee69f8fdf84e1a4a26
SHA512 c74e83d6645f3eb292158386cf2f88a9b0291e3903d60c8ed8cf778034a6d86a9f6a2823a674f79002ae30708efb5bc2aff8fb0bc0928567777457100d5a51a6
SSDEEP 192:vOv5zboAxZ6pyjw+K1d66Joz1zgCl6mc0d:AbokZ6pyjAd66Joz1zgC1j
TLSH
T131E141A4E629867BC41402BBDCA51B444F35384A9C4E3F2935DC741C2C572DE7B8E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\datareporting\glean\events\events
Size 1KB
SHA256 a461f36976caa3d9a3c7528bad25e6167def67364eca992547cace19bb49f3d4
MD5 f56aa543254f54a93fbe83d5ad0f91a7
SHA1 28903002ffe7cbf36e8a6195799b979345793c8a
SHA512 2f9408ced658a2abe0f852fe77e13786b0b5ee55504e33d8dd8040a3a950ad28b03be05d837c1ef2ff5ad78b087d53bbf7dadad1f7f7dc5adfa45453b8daa5ab
TLSH
T1FB11CC5C3EF84D6A5ECBD3AC7485068E57118E02058B1C5B1E12FF8DDE82ADA322A43C
MD5 SHA1 SHA512 TLSH

Submit Download

4e9a4b12-0943-477c-b9da-71b354cf825b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\datareporting\glean\pending_pings\4e9a4b12-0943-477c-b9da-71b354cf825b
Size 14KB
SHA256 41973651f168fbfd23094eb35fbac6332b2122c9f37647d6cad4556225960929
MD5 a3fdfbdfd0da0b05f1900e62d28b278e
SHA1 074180464d1b6d32b0d0dd4e1aa6fff99a3ad18e
SHA512 b46f6dc6a8cae4e07c2309235f4c55633d97d5d09c5d55f81b9902dfc2a3281500342fc317517a4038eeefddaedde9bca4e438e73fb52440c65ba893368e8bb1
SSDEEP 192:2rMtB1ba21LTOQwKd1CsuJqnOqqIBbLY5HB5yStQ0TgOhjIt33ypKivMRbuzxPiX:e0GGl05H7y0ThhjI1liERbulPiX
TLSH
T12F62D755646049BA8651E368D9EC7FC3E2F518CB8C019FCE9BE47E0869EF0AD1127C4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5e7ec2a1-5cad-4ff3-9461-cff10785f56a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\datareporting\glean\pending_pings\5e7ec2a1-5cad-4ff3-9461-cff10785f56a
Size 7KB
SHA256 583cfd49234eb4fb42a7a00e4a570fefa481aeb135e421ebee4ea46126233043
MD5 a96ed424c136386d64ca0a92fa7ec600
SHA1 4a6b316d220614df66b11b53f38da4c19a9b9574
SHA512 47644f8bbbe3c130965f7a9285b6832864185283b7e61d0f349a768a3ec9c38915c70840bc591363c89c58ade6c53b54f3465b6e85d73aac846bef51c936c340
SSDEEP 96:GQEvjNIUyn3qMevLn/pHem+XfdaibVeM9AjM0kn/CwcFADbH9yemoH4Mwr67zB9g:Evwh7sWG9cSY5u
TLSH
T102F1EDFDCD1240433A66F62EF1A9BDAB001A28314AC8879D6BFC4C3A36D6DB70557354
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7448a68a-cf65-4ed8-ba4f-ca3daa7536fe

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\datareporting\glean\pending_pings\7448a68a-cf65-4ed8-ba4f-ca3daa7536fe
Size 235B
SHA256 5803911a960fe707a901d066c951bf59bdfb0fd062490c2b132c652f23213f40
MD5 d520dab837e24d2d4bbad6910e400893
SHA1 5f71aaf465b00c513dd733996dddc75188784408
SHA512 96143f3ddd914f0d5280d9a9a429ffbfec56dc0c3aa206215257c20a3629a5ef5d2c87b0cc83382f98a7fc73ddcfe498c2586325fb3c9f2ec8ae443c02a99861
TLSH
T174D097C0648C376E08180F0BB0F029C630CA8C331074A810DE61027899BADD801A2A16
MD5 SHA1 SHA512 TLSH

Submit Download

bb7e1f84-5ffe-4c9a-8239-06d2e71e3bb1

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\datareporting\glean\pending_pings\bb7e1f84-5ffe-4c9a-8239-06d2e71e3bb1
Size 235B
SHA256 71a90dbfc935e995c42b90c26804b22462c10b99118bf08f6135ae0bf567e656
MD5 9cb089e186511c0c8aa0a8304501afb1
SHA1 6d7759037efd4ff598d89748e73c6512424b342f
SHA512 56f8b378d5cebac0fbab630e40cd51f4e6cb07692cfc4cbfcba55b09f647673f577058c74c94d704b36f029668b2cbd02f27da74546cedbfaae688df7aae4d54
TLSH
T1BCD0978058E8B35C080C2F02F0F0A8D230454C3B1468A870979005B889B9EC40121816
MD5 SHA1 SHA512 TLSH

Submit Download

bcd991fb-9b34-41a6-b6b9-16641322eca7

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\datareporting\glean\pending_pings\bcd991fb-9b34-41a6-b6b9-16641322eca7
Size 886B
SHA256 1521c8e0c864d2f87753f60c7e9a487fd5dd0a193feb85274cc9f4d777b4ab2d
MD5 7a98b24409df8845384163387a77ce75
SHA1 a65afc613aa27c452656c942e682cc6732b96f35
SHA512 c5a282b0d3c2ffa5074b47302610485d923a347daeba1925d980a21741e35433883f47c6daf611b348249cc2f89f28926810951e43cc6419592dc0427d6c1734
TLSH
T17C1100804566B9F28C28D2DB95A477028AE03123C0C54C187EA05B280CAF52EA76B30B
MD5 SHA1 SHA512 TLSH

Submit Download

c17378aa-d557-4447-bdc4-c1e042069d9d

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\datareporting\glean\pending_pings\c17378aa-d557-4447-bdc4-c1e042069d9d
Size 883B
SHA256 7474c627cf84205975f804dbd868c68aa89a5f1ad2a85664b65875dd73078d2c
MD5 3cb214514c3ca1a217a8f2431f3cca87
SHA1 8c91a8306f51613b2f8a08ca5ffd5f52422a41e0
SHA512 444cb10fc07db390b1f5fb308343071cc0cc30c0fe0b6ab8a79b6745b8dba3aae604d8b7e9f99ca93f20834acbc0d4eeb00dd5e20c17f0fba3198c27008eb1e7
TLSH
T12411C0419A32B8F3DC2892DB856577028FF4352380C555287EA15E280D7F62EA76A70B
MD5 SHA1 SHA512 TLSH

Submit Download

d349d563-ecc9-4b15-9d09-455df1de20ba

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\datareporting\glean\pending_pings\d349d563-ecc9-4b15-9d09-455df1de20ba
Size 2KB
SHA256 19b755fe98b4164d06c58dc2185f427ffbde7e550c88b428b8c14894789e439f
MD5 3b064b3cc67d1de202cb7e250216850a
SHA1 835b682570f19b33f267c00fd69899c00c120648
SHA512 c01d08f92ede3e2fa4c5c5c66ea1da2d3daba1930bd864b504724036d05b9e6bb37743ecc6bd03e7481b91acebe884c3484c6a68792e19740890c5a07aa0b188
TLSH
T1BE41412C75788CB79D9AF1DDD142234E57704A0240C25CC72E52EF4C9CAB66E336E53A
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\extensions.json
Size 16KB
SHA256 898028ca78e277e05ecb94409bb6672b1eb3f780f83ac11f859f86487f9b5bee
MD5 f9103720e68259283422d2a05f9c2964
SHA1 6b9842fab4ae12d5c92580a359c27157d1c9be01
SHA512 75b714e73cd97da740ce25c6037cf19dd22a7a1925f4a1d72c67d2fdbb69f52ad6f68cf1e3ae52d4c3e64ef56995a97244de3f43d7269c11aa83b87c79add3c6
SSDEEP 384:nkI4vQUmldvM8dhW4U94zu96oFL4HQL4PuL4HBL4H8L4HDPn4ha:kI44RfFXlO426m4y4M45424z4M
TLSH
T14B72521545049E78294EA78BAA367E02C37D433B60855C78F4DD8FC802FB5B902FB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\prefs-1.js
Size 6KB
SHA256 d50a4df666040f06d34ff6a6f33c22388b9e3b2264c60e7682cfcf8909b78b8a
MD5 92f485f5d2d0acfd012d3bacecb95676
SHA1 5abe92c505076249e34942de4f8c36628a7ab2d0
SHA512 767f5be5518b29dd1c5b61e3a9a4783a3a3f837f7cbc65a724b2d6c952be5c762bf6eb183fe9a6e504fb644b5846d29c7ab43b39ce0a0779b46ea7412698c902
SSDEEP 96:xHyUTUGqGqqfBAi1zS0SSlVYdv9jwDnGHT+Bw88P8L4cnolOKNGS:AhRqfBAi5SS8CBw88R
TLSH
T1ADE1207855088F7F78B6766CAC6888316AB2013BBBBF68D750B95484014CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\prefs-1.js
Size 7KB
SHA256 d9850140097ca09db8e82cec83e29cd4b0bfa07f49a29d2af094256a8f41264e
MD5 2bbe0af56ad9dc639f6733896b5f3449
SHA1 d15bfce83e994e52121aeea4f7abe604a3807bce
SHA512 57cb56a430d5c0f04d4b89f2d16c2a66aaf60c4802514ddb9caf0ef4eef47d7353841ed4ba7b909c64e9af3184a90dcec1cac141ecf33a48d49a398eba3ce9c7
SSDEEP 96:xHyUTU5PqGqqfBAiObzS0SSlVYdv9jwDnGHT+Bw88P8L4cnolOKNGS:ApCRqfBAi6SS8CBw88R
TLSH
T188E1317855088F7F78B6766CAC6888315AB2013BBBBF68D750B954C4014CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\prefs-1.js
Size 7KB
SHA256 ff32c22e01bc6d3f2d8a5b8fcc325abbda902c9b8549988acafaafc4e442f1c5
MD5 d8835b107430a3ec5561eec534520109
SHA1 87ed26e08b02b41fe8739ada148aad60fccd9939
SHA512 c1a5f053d98c9553c3c3db63f2c37ee6bd5fdd4ffa80c4aa031dca004ea813a2f87a6fe8162b74ae0b9e3c986906a7655963aae0eec57d19df0051e11920fb35
SSDEEP 96:xHy9TU5PqGqqfyAiObzS0SSlVYdv9jwDnGHT5Bw88PIq8L4cno7OKNGS:A8CRqfyAi6SS89Bw88z
TLSH
T1A8F12F785508CF7F78B6766CAC2848315AB2023BBABF68D750BA5484014CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k6rjjdvz.default-release\prefs.js
Size 7KB
SHA256 3ec8433a5e308c02adc360ab853e84b6c738b6b300a3c7a0a3f16f5a420b85f4
MD5 de85c44f79a44e85a94c7514518a55d6
SHA1 f97a78651ece4c9a6cebad53d5a69921651d3fc3
SHA512 4a5400d1f0513dff13bedfc7c889a82e15fb966bce3b3a244e5267e8f5b22ec816199ce22534c9c055f5d67056ffb69c053b03eab54548bdc05f0eff76924341
SSDEEP 96:xHyUTUGqGqqfBAiObzS0SSlVYdv9jwDnGHT+Bw88P8L4cnolOKNGS:AhRqfBAi6SS8CBw88R
TLSH
T185E1327855188F7F78B6766CAC6888315AB2013BBBBF68D750B954C4014CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Installer-1.jy89UHg5.0.6.zip.part

Path C:\Users\Admin\Downloads\Installer-1.jy89UHg5.0.6.zip.part
Size 11.9MB
SHA256 834f2cc69e6248f3fa0544a3ae6548453998d74fc25188ffaaf702417b5957ea
MD5 bf3c2fe3f9cdacc82e94528abbcb338d
SHA1 61dd46c7cd01c541ce4dafdf0493d5fcfeedbc9e
SHA512 1aabcb8434c5acef4c30ef2d5080d9fbdd487711e6b962d1147fa08649050cd81c5530cb6000c1208f194f912f16c1b99a1f40b30fba6b06d467b0f664b37959
SSDEEP 196608:QWnHIXxdEKz0p1QAQdgL9l3FIxpiMXSwupIivuW7xwPe0ZmVKO08VMZjxHbs9djT:THIArMgv+2MCLuivvxSe/0+MZto9djpB
TLSH
T165C6333290BAA8367FADA2B77220F150C457D35E791BC3EE350E6CA1446B9DD0F06A47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DirectX.log

Path C:\Windows\Logs\DirectX.log
Size 475B
SHA256 563d037e4c4394af48ed950cdc2265d94c89af1cbdc8bfdbd6cf859b1e17ea50
MD5 a2f12bb29c8ed8396cdfb46d550e68c0
SHA1 b99b0f13bab2192251d0bc4cd7671866531bcdec
SHA512 163295c9d58a7f70469d4d0d6f8d332cf9c616294f62caa618e8544f1759ed2f60e234cb9e53798c8949e37eb35bb8af630ecdee36879d4208a8ef435c57eeaa
TLSH
T12BF030A429FF84C9750565179B6F94509CFE223FBDFE50FE32741A90A10261D4D85A0E
MD5 SHA1 SHA512 TLSH

Submit Download

DirectX.log

Path C:\Windows\Logs\DirectX.log
Size 5KB
SHA256 4e9bcec77b2638a853eddc60835d90ae6d3e49a34a3d918258d91dfb13dda2b4
MD5 f87c7a8b6f352efebee75b7dfa96645e
SHA1 186c71267f9da45503035e1e23f403beb890b24a
SHA512 33793dab8801420000b8db748fea0a4082c927cf3228957aed592ad83ac15941b2773185815cca49884746376b9144a3b67fceccf7a8f603ab292b7a3101c8b5
SSDEEP 96:ho0N5elehWbLIbM/yOXUO6RjRgRMAOQOD8LNtOpUikeLpDxLpvxLSxLSxL9xLgxP:gmgV
TLSH
T10AC135BC78D7CCF0A810508B635E58C0CB9B025F6E6D82BC93A90A847207F5F596E55D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1680-1029-0x0000020163B30000-0x0000020163B52000-memory.dmp

Download

memory/1680-1031-0x0000020164120000-0x0000020164132000-memory.dmp

Download

memory/1680-1032-0x0000020164100000-0x000002016410A000-memory.dmp

Download

memory/4828-1087-0x00000125D6980000-0x00000125D6A00000-memory.dmp

Download

memory/4828-1083-0x00000125D6300000-0x00000125D6859000-memory.dmp

Download

memory/4828-1081-0x00000125D6300000-0x00000125D6859000-memory.dmp

Download

memory/4828-1080-0x00000125D2A80000-0x00000125D2A81000-memory.dmp

Download

memory/4828-1088-0x00000125D6980000-0x00000125D6A00000-memory.dmp

Download

memory/4828-1084-0x00000125D2A90000-0x00000125D2A91000-memory.dmp

Download

memory/4828-1082-0x00000125D6300000-0x00000125D6859000-memory.dmp

Download

memory/4908-1108-0x0000012677F00000-0x0000012677F80000-memory.dmp

Download

memory/4908-1109-0x0000012677F00000-0x0000012677F80000-memory.dmp

Download