Analysis

  • user interaction
    yes
  • max time kernel
    461s
  • max time network
    464s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    09/08/2026, 06:20

Errors

Reason
Machine shutdown

General

  • Target
    VMAX spoofer (CRACKED)/Original.exe
  • Size 5.3MB
  • Sample260809-g3w33ssckb
  • SHA256 8c361fd1870f3ab37be1229ca34d7f1d9d52049cf0a755f396dcc02de1a7009d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops desktop.ini file(s) 2 IoCs
  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Detected potential entity reuse from brand MICROSOFT. 2 IoCs
  • Drops file in System32 directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 2 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 11 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 56 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 26 IoCs
  • Modifies registry class 64 IoCs
  • NTFS ADS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of SetWindowsHookEx 18 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\VMAX spoofer (CRACKED)\Original.exe
    "C:\Users\Admin\AppData\Local\Temp\VMAX spoofer (CRACKED)\Original.exe"
    1⤵
      PID:3352
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:2568
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffe769cc728,0x7ffe769cc734,0x7ffe769cc740
        2⤵
          PID:540
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1808,i,7661110623895703096,5517004909884443696,262144 --field-trial-handle=2052,i,6103992513572912796,5262018069377721101,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2040 /prefetch:2
          2⤵
            PID:2672
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1656,i,10561475514408896606,8519441437248287088,524288 --field-trial-handle=2052,i,6103992513572912796,5262018069377721101,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2216 /prefetch:3
            2⤵
            • System Time Discovery
            PID:4704
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2436,i,17469915781209568956,15597601239417917146,524288 --field-trial-handle=2052,i,6103992513572912796,5262018069377721101,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2600 /prefetch:8
            2⤵
              PID:3460
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3272,i,16346661408078762650,8152487901778628077,2097152 --field-trial-handle=2052,i,6103992513572912796,5262018069377721101,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3284 /prefetch:1
              2⤵
                PID:2868
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3476,i,14403771132566100005,4805038342447803839,2097152 --field-trial-handle=2052,i,6103992513572912796,5262018069377721101,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3492 /prefetch:1
                2⤵
                  PID:1880
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4612,i,14238655015764293984,480866614372304396,2097152 --field-trial-handle=2052,i,6103992513572912796,5262018069377721101,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4508 /prefetch:1
                  2⤵
                    PID:1160
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5344,i,13596457005253983799,7347468403356969900,524288 --field-trial-handle=2052,i,6103992513572912796,5262018069377721101,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5352 /prefetch:8
                    2⤵
                      PID:2508
                  • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                    "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                    1⤵
                      PID:3508
                    • C:\Windows\system32\svchost.exe
                      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                      1⤵
                        PID:5104
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe"
                        1⤵
                        • Suspicious use of WriteProcessMemory
                        PID:4724
                        • C:\Program Files\Mozilla Firefox\firefox.exe
                          "C:\Program Files\Mozilla Firefox\firefox.exe"
                          2⤵
                          • Downloads MZ/PE file
                          • Detected potential entity reuse from brand MICROSOFT.
                          • Subvert Trust Controls: Mark-of-the-Web Bypass
                          • Checks processor information in registry
                          • NTFS ADS
                          • Suspicious use of AdjustPrivilegeToken
                          • Suspicious use of FindShellTrayWindow
                          • Suspicious use of SetWindowsHookEx
                          • Suspicious use of WriteProcessMemory
                          PID:4260
                          • C:\Program Files\Mozilla Firefox\firefox.exe
                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1996 -prefsLen 27099 -prefMapHandle 2000 -prefMapSize 270279 -ipcHandle 2088 -initialChannelId {c9e3c227-42c7-4ac2-8d3a-ac88cf85bdb1} -parentPid 4260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4260" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
                            3⤵
                              PID:1688
                            • C:\Program Files\Mozilla Firefox\firefox.exe
                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2464 -prefsLen 27135 -prefMapHandle 2468 -prefMapSize 270279 -ipcHandle 2476 -initialChannelId {bf0348bc-bb98-4cf3-bdd3-c0fbfe201fad} -parentPid 4260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
                              3⤵
                              • Checks processor information in registry
                              PID:4828
                            • C:\Program Files\Mozilla Firefox\firefox.exe
                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3816 -prefsLen 27276 -prefMapHandle 3820 -prefMapSize 270279 -jsInitHandle 3824 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3828 -initialChannelId {27578c05-e49a-44f4-af6c-e29770a857f6} -parentPid 4260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
                              3⤵
                              • Checks processor information in registry
                              PID:3092
                            • C:\Program Files\Mozilla Firefox\firefox.exe
                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4000 -prefsLen 27276 -prefMapHandle 4004 -prefMapSize 270279 -ipcHandle 3816 -initialChannelId {45eaf9cd-a71b-4ab4-b96d-57c7caecbb9d} -parentPid 4260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4260" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
                              3⤵
                                PID:1792
                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2500 -prefsLen 34775 -prefMapHandle 3372 -prefMapSize 270279 -jsInitHandle 976 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4364 -initialChannelId {540d7b84-ad0a-48ee-a345-283c741fd03e} -parentPid 4260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
                                3⤵
                                • Checks processor information in registry
                                PID:3964
                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4980 -prefsLen 35091 -prefMapHandle 4984 -prefMapSize 270279 -ipcHandle 4996 -initialChannelId {330385d0-2869-45af-a443-492566515bc0} -parentPid 4260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
                                3⤵
                                • Checks processor information in registry
                                PID:5804
                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5164 -prefsLen 32979 -prefMapHandle 5168 -prefMapSize 270279 -jsInitHandle 5172 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5232 -initialChannelId {933cd93b-19df-49c4-b2d2-a827cc900da1} -parentPid 4260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
                                3⤵
                                • Checks processor information in registry
                                PID:5844
                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5496 -prefsLen 33031 -prefMapHandle 5492 -prefMapSize 270279 -jsInitHandle 5408 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5304 -initialChannelId {b349e287-1753-4cdd-a471-75271d990b4a} -parentPid 4260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
                                3⤵
                                • Checks processor information in registry
                                PID:5948
                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5744 -prefsLen 33031 -prefMapHandle 5748 -prefMapSize 270279 -jsInitHandle 5752 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5532 -initialChannelId {3a7023a9-1d28-45a8-b773-9cb98cf623e4} -parentPid 4260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
                                3⤵
                                • Checks processor information in registry
                                PID:5956
                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6164 -prefsLen 33071 -prefMapHandle 6168 -prefMapSize 270279 -jsInitHandle 6184 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6192 -initialChannelId {f9df4e91-9895-47e9-8347-71a262e91f4a} -parentPid 4260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
                                3⤵
                                • Checks processor information in registry
                                PID:1804
                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6172 -prefsLen 37103 -prefMapHandle 7048 -prefMapSize 270279 -jsInitHandle 5640 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4832 -initialChannelId {fc10379b-7c85-4c65-92d3-a6e9be5614cd} -parentPid 4260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
                                3⤵
                                • Checks processor information in registry
                                PID:5372
                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4660 -prefsLen 37103 -prefMapHandle 4628 -prefMapSize 270279 -jsInitHandle 5320 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2840 -initialChannelId {8bd12caa-e6ea-4fd2-9de6-908144126d0b} -parentPid 4260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
                                3⤵
                                • Checks processor information in registry
                                PID:2644
                              • C:\Users\Admin\Downloads\VC_redist.x64.exe
                                "C:\Users\Admin\Downloads\VC_redist.x64.exe"
                                3⤵
                                • Executes dropped EXE
                                • System Location Discovery: System Language Discovery
                                • Suspicious use of WriteProcessMemory
                                PID:5040
                                • C:\Windows\Temp\{0035ADB5-EA3D-4C8F-B530-F19BAE38E723}\.cr\VC_redist.x64.exe
                                  "C:\Windows\Temp\{0035ADB5-EA3D-4C8F-B530-F19BAE38E723}\.cr\VC_redist.x64.exe" -burn.clean.room="C:\Users\Admin\Downloads\VC_redist.x64.exe" -burn.filehandle.attached=716 -burn.filehandle.self=584
                                  4⤵
                                  • Checks computer location settings
                                  • Executes dropped EXE
                                  • Loads dropped DLL
                                  • System Location Discovery: System Language Discovery
                                  • Suspicious use of WriteProcessMemory
                                  PID:3400
                                  • C:\Windows\Temp\{0DB308C6-0321-44D9-B1FE-D2441445F5DA}\.be\VC_redist.x64.exe
                                    "C:\Windows\Temp\{0DB308C6-0321-44D9-B1FE-D2441445F5DA}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{37751538-BB79-45FD-9F9A-9DBDC03BB6E7} {8E605BCA-5458-41E7-A4D0-E3C00491241C} 3400
                                    5⤵
                                    • Executes dropped EXE
                                    • Adds Run key to start application
                                    • System Location Discovery: System Language Discovery
                                    • Suspicious use of AdjustPrivilegeToken
                                    PID:4412
                                    • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                                      "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={0e3bb569-69d6-4c34-bff9-c2f81db5e5f0} -burn.filehandle.self=1408 -burn.embedded BurnPipe.{197ED84A-708A-4B62-B2CC-B028574FC91E} {D468947A-37C5-45BC-9F08-748541CC311B} 4412
                                      6⤵
                                      • System Location Discovery: System Language Discovery
                                      PID:4032
                                      • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                                        "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.filehandle.attached=544 -burn.filehandle.self=564 -uninstall -quiet -burn.related.upgrade -burn.ancestors={0e3bb569-69d6-4c34-bff9-c2f81db5e5f0} -burn.filehandle.self=1408 -burn.embedded BurnPipe.{197ED84A-708A-4B62-B2CC-B028574FC91E} {D468947A-37C5-45BC-9F08-748541CC311B} 4412
                                        7⤵
                                        • Loads dropped DLL
                                        • System Location Discovery: System Language Discovery
                                        PID:2868
                                        • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                                          "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{4AF19289-A359-45AA-8FAC-B31719B4BF7C} {40F685F4-593F-4806-91AB-0ADBE0067D33} 2868
                                          8⤵
                                          • System Location Discovery: System Language Discovery
                                          • Modifies registry class
                                          PID:2144
                          • C:\Windows\system32\vssvc.exe
                            C:\Windows\system32\vssvc.exe
                            1⤵
                            • Suspicious use of AdjustPrivilegeToken
                            PID:2652
                          • C:\Windows\system32\msiexec.exe
                            C:\Windows\system32\msiexec.exe /V
                            1⤵
                            • Enumerates connected drives
                            • Drops file in System32 directory
                            • Drops file in Windows directory
                            • Modifies data under HKEY_USERS
                            • Modifies registry class
                            • Suspicious behavior: EnumeratesProcesses
                            • Suspicious use of AdjustPrivilegeToken
                            PID:5360
                          • C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe
                            "C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe" /burn.runonce
                            1⤵
                            • Executes dropped EXE
                            • System Location Discovery: System Language Discovery
                            PID:3772
                            • C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe
                              "C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260809072301.log"
                              2⤵
                              • Executes dropped EXE
                              • System Location Discovery: System Language Discovery
                              PID:5792
                              • C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe
                                "C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe" -burn.filehandle.attached=520 -burn.filehandle.self=544 /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260809072301.log"
                                3⤵
                                • Executes dropped EXE
                                • Loads dropped DLL
                                • System Location Discovery: System Language Discovery
                                PID:5904
                          • C:\Windows\System32\rundll32.exe
                            C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                            1⤵
                              PID:1868
                            • C:\Users\Admin\Desktop\VMAX spoofer (CRACKED)\Cracked.exe
                              "C:\Users\Admin\Desktop\VMAX spoofer (CRACKED)\Cracked.exe"
                              1⤵
                              • Loads dropped DLL
                              PID:4168
                            • C:\Users\Admin\Desktop\VMAX spoofer (CRACKED)\Cracked.exe
                              "C:\Users\Admin\Desktop\VMAX spoofer (CRACKED)\Cracked.exe"
                              1⤵
                              • Loads dropped DLL
                              PID:4816
                            • C:\Users\Admin\Desktop\VMAX spoofer (CRACKED)\Cracked.exe
                              "C:\Users\Admin\Desktop\VMAX spoofer (CRACKED)\Cracked.exe"
                              1⤵
                              • Loads dropped DLL
                              PID:2380
                            • C:\Program Files\Mozilla Firefox\firefox.exe
                              "C:\Program Files\Mozilla Firefox\firefox.exe"
                              1⤵
                                PID:5692
                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                  "C:\Program Files\Mozilla Firefox\firefox.exe"
                                  2⤵
                                  • Downloads MZ/PE file
                                  • Loads dropped DLL
                                  • Subvert Trust Controls: Mark-of-the-Web Bypass
                                  • Checks processor information in registry
                                  • NTFS ADS
                                  • Suspicious use of SetWindowsHookEx
                                  PID:5404
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2060 -prefsLen 31571 -prefMapHandle 2064 -prefMapSize 270978 -ipcHandle 2124 -initialChannelId {2774129a-7bdc-4d26-95d8-1ab99e4468e6} -parentPid 5404 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5404" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
                                    3⤵
                                    • Loads dropped DLL
                                    PID:5712
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2388 -prefsLen 31571 -prefMapHandle 2392 -prefMapSize 270978 -ipcHandle 2400 -initialChannelId {510c2f8b-3f55-4bc1-ad80-574444b4ce67} -parentPid 5404 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5404" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
                                    3⤵
                                    • Loads dropped DLL
                                    • Checks processor information in registry
                                    PID:4532
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3820 -prefsLen 32130 -prefMapHandle 3824 -prefMapSize 270978 -jsInitHandle 3828 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3836 -initialChannelId {49e6d506-e9e7-48aa-969f-2c595b242c53} -parentPid 5404 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5404" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
                                    3⤵
                                    • Loads dropped DLL
                                    • Checks processor information in registry
                                    PID:1484
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4012 -prefsLen 32130 -prefMapHandle 4016 -prefMapSize 270978 -ipcHandle 4024 -initialChannelId {5682e963-ffb6-4d3c-acac-989c688c3668} -parentPid 5404 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5404" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
                                    3⤵
                                    • Loads dropped DLL
                                    PID:3180
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4592 -prefsLen 39643 -prefMapHandle 4596 -prefMapSize 270978 -jsInitHandle 4600 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4608 -initialChannelId {573abaf9-00b0-4caf-897a-cb7680f8457e} -parentPid 5404 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5404" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
                                    3⤵
                                    • Loads dropped DLL
                                    • Checks processor information in registry
                                    PID:4628
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4908 -prefsLen 39697 -prefMapHandle 4912 -prefMapSize 270978 -ipcHandle 4924 -initialChannelId {6527d8ba-c00b-4fcb-a4c2-983e5dc1ab84} -parentPid 5404 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5404" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
                                    3⤵
                                    • Loads dropped DLL
                                    • Checks processor information in registry
                                    PID:880
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5332 -prefsLen 36517 -prefMapHandle 5336 -prefMapSize 270978 -jsInitHandle 5340 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5348 -initialChannelId {5e616362-9e9d-40c2-8b12-18ab2f49e59e} -parentPid 5404 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5404" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
                                    3⤵
                                    • Loads dropped DLL
                                    • Checks processor information in registry
                                    PID:5456
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5524 -prefsLen 36517 -prefMapHandle 5528 -prefMapSize 270978 -jsInitHandle 5532 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5272 -initialChannelId {f326e14a-ef1a-45cc-aa22-3a8c759ed31f} -parentPid 5404 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5404" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
                                    3⤵
                                    • Loads dropped DLL
                                    • Checks processor information in registry
                                    PID:5460
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5708 -prefsLen 36517 -prefMapHandle 5712 -prefMapSize 270978 -jsInitHandle 5716 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5724 -initialChannelId {d342f800-ce0f-4fd3-ae15-2279524bc59d} -parentPid 5404 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5404" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
                                    3⤵
                                    • Loads dropped DLL
                                    • Checks processor information in registry
                                    PID:4324
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6088 -prefsLen 36557 -prefMapHandle 6104 -prefMapSize 270978 -jsInitHandle 6040 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6092 -initialChannelId {d85af0a7-21e7-4e61-ad71-3a3fa13f4077} -parentPid 5404 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5404" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
                                    3⤵
                                    • Loads dropped DLL
                                    • Checks processor information in registry
                                    PID:2800
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6960 -prefsLen 36557 -prefMapHandle 6952 -prefMapSize 270978 -jsInitHandle 6956 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2984 -initialChannelId {2ee53026-dc00-4619-a6ab-49b87bf5d55d} -parentPid 5404 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5404" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
                                    3⤵
                                    • Loads dropped DLL
                                    • Checks processor information in registry
                                    PID:2100
                                  • C:\Users\Admin\Downloads\dxwebsetup.exe
                                    "C:\Users\Admin\Downloads\dxwebsetup.exe"
                                    3⤵
                                    • Executes dropped EXE
                                    • Adds Run key to start application
                                    • System Location Discovery: System Language Discovery
                                    PID:1532
                                    • C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe
                                      C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe
                                      4⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Drops desktop.ini file(s)
                                      • Enumerates connected drives
                                      • Drops file in System32 directory
                                      • Drops file in Windows directory
                                      • System Location Discovery: System Language Discovery
                                      • Modifies registry class
                                      PID:3612
                                      • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                        C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx9_24_x64.inf
                                        5⤵
                                        • Executes dropped EXE
                                        • Drops file in System32 directory
                                        • Drops file in Windows directory
                                        PID:7068
                                      • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                        C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx9_25_x64.inf
                                        5⤵
                                        • Executes dropped EXE
                                        PID:4040
                                      • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                        C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx9_26_x64.inf
                                        5⤵
                                        • Executes dropped EXE
                                        PID:4524
                                      • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                        C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx9_27_x64.inf
                                        5⤵
                                        • Executes dropped EXE
                                        PID:6040
                                      • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                        C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx9_28_x64.inf
                                        5⤵
                                        • Executes dropped EXE
                                        • Drops file in Windows directory
                                        PID:4340
                                      • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                        C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx9_29_x64.inf
                                        5⤵
                                        • Executes dropped EXE
                                        • Drops file in System32 directory
                                        • Drops file in Windows directory
                                        PID:8988
                                      • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                        C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XACT_x64.inf
                                        5⤵
                                        • Executes dropped EXE
                                        • Drops file in Windows directory
                                        PID:10500
                                      • C:\Windows\system32\regsvr32.exe
                                        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_0.dll
                                        5⤵
                                        • Modifies registry class
                                        PID:10624
                                      • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                        C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx9_30_x64.inf
                                        5⤵
                                        • Executes dropped EXE
                                        • Drops file in System32 directory
                                        PID:6332
                                      • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                        C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XACT2_1_x64.inf
                                        5⤵
                                        • Executes dropped EXE
                                        • Drops file in System32 directory
                                        PID:10360
                                      • C:\Windows\system32\regsvr32.exe
                                        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_1.dll
                                        5⤵
                                          PID:12700
                                        • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                          C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe xinput1_1_x64.inf, Install_Driver
                                          5⤵
                                          • Executes dropped EXE
                                          PID:13448
                                        • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                          C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XACT2_2_x64.inf
                                          5⤵
                                          • Executes dropped EXE
                                          PID:13008
                                        • C:\Windows\system32\regsvr32.exe
                                          C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_2.dll
                                          5⤵
                                            PID:3632
                                          • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                            C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe xinput1_2_x64.inf, Install_Driver
                                            5⤵
                                            • Executes dropped EXE
                                            • Drops file in System32 directory
                                            PID:13156
                                          • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                            C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XACT2_3_x64.inf
                                            5⤵
                                            • Executes dropped EXE
                                            PID:11832
                                          • C:\Windows\system32\regsvr32.exe
                                            C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_3.dll
                                            5⤵
                                              PID:6148
                                            • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                              C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx9_31_x64.inf
                                              5⤵
                                              • Executes dropped EXE
                                              PID:6208
                                            • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                              C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XACT2_4_x64.inf
                                              5⤵
                                              • Executes dropped EXE
                                              • Drops file in Windows directory
                                              PID:11628
                                            • C:\Windows\system32\regsvr32.exe
                                              C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_4.dll
                                              5⤵
                                                PID:7664
                                              • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx9_32_x64.inf
                                                5⤵
                                                • Executes dropped EXE
                                                • Drops file in Windows directory
                                                PID:7768
                                              • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx10_00_x64.inf
                                                5⤵
                                                • Executes dropped EXE
                                                PID:8160
                                              • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XACT2_5_x64.inf
                                                5⤵
                                                • Executes dropped EXE
                                                • Drops file in Windows directory
                                                PID:4788
                                              • C:\Windows\system32\regsvr32.exe
                                                C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_5.dll
                                                5⤵
                                                • Modifies registry class
                                                PID:2584
                                              • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XACT2_6_x64.inf
                                                5⤵
                                                • Executes dropped EXE
                                                • Drops file in System32 directory
                                                PID:8524
                                              • C:\Windows\system32\regsvr32.exe
                                                C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_6.dll
                                                5⤵
                                                  PID:5544
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx9_33_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Drops file in System32 directory
                                                  PID:8660
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx10_33_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Drops file in Windows directory
                                                  PID:9344
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XACT2_7_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  PID:9276
                                                • C:\Windows\system32\regsvr32.exe
                                                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_7.dll
                                                  5⤵
                                                  • Modifies registry class
                                                  PID:11080
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe xinput1_3_x64.inf, Install_Driver
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Drops file in Windows directory
                                                  PID:9428
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx9_34_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Drops file in Windows directory
                                                  PID:10396
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx10_34_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Drops file in Windows directory
                                                  PID:12088
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XACT2_8_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Drops file in Windows directory
                                                  PID:7060
                                                • C:\Windows\system32\regsvr32.exe
                                                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_8.dll
                                                  5⤵
                                                  • Modifies registry class
                                                  PID:7128
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx9_35_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  PID:3088
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx10_35_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Drops file in Windows directory
                                                  PID:2848
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XACT2_9_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Drops file in Windows directory
                                                  PID:14236
                                                • C:\Windows\system32\regsvr32.exe
                                                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_9.dll
                                                  5⤵
                                                  • Modifies registry class
                                                  PID:2880
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx9_36_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Drops file in System32 directory
                                                  • Drops file in Windows directory
                                                  PID:10688
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx10_36_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  PID:10608
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe X3DAudio1_2_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Drops file in Windows directory
                                                  PID:6300
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XACT2_10_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Drops file in System32 directory
                                                  • Drops file in Windows directory
                                                  PID:12312
                                                • C:\Windows\system32\regsvr32.exe
                                                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_10.dll
                                                  5⤵
                                                  • Modifies registry class
                                                  PID:1688
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe D3DX9_37_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Drops file in Windows directory
                                                  PID:9756
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx10_37_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Drops file in System32 directory
                                                  • Drops file in Windows directory
                                                  PID:10176
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe X3DAudio1_3_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  PID:12952
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XACT3_0_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Drops file in Windows directory
                                                  PID:13064
                                                • C:\Windows\system32\regsvr32.exe
                                                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_0.dll
                                                  5⤵
                                                  • Modifies registry class
                                                  PID:12988
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XAudio2_0_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  PID:13292
                                                • C:\Windows\system32\regsvr32.exe
                                                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_0.dll
                                                  5⤵
                                                  • Modifies registry class
                                                  PID:11848
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe D3DX9_38_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Drops file in Windows directory
                                                  PID:11764
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx10_38_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  PID:6252
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe X3DAudio1_4_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  PID:7836
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XACT3_1_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Drops file in System32 directory
                                                  PID:2872
                                                • C:\Windows\system32\regsvr32.exe
                                                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_1.dll
                                                  5⤵
                                                  • Modifies registry class
                                                  PID:6504
                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XAudio2_1_x64.inf
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Drops file in System32 directory
                                                  PID:4028
                                                • C:\Windows\system32\regsvr32.exe
                                                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_1.dll
                                                  5⤵
                                                    PID:5740
                                                  • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                    C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe D3DX9_39_x64.inf
                                                    5⤵
                                                    • Executes dropped EXE
                                                    • Drops file in System32 directory
                                                    • Drops file in Windows directory
                                                    PID:5468
                                                  • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                    C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx10_39_x64.inf
                                                    5⤵
                                                    • Executes dropped EXE
                                                    PID:5080
                                                  • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                    C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XACT3_2_x64.inf
                                                    5⤵
                                                    • Executes dropped EXE
                                                    • Drops file in System32 directory
                                                    PID:5188
                                                  • C:\Windows\system32\regsvr32.exe
                                                    C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_2.dll
                                                    5⤵
                                                    • Modifies registry class
                                                    PID:8596
                                                  • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                    C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XAudio2_2_x64.inf
                                                    5⤵
                                                    • Executes dropped EXE
                                                    • Drops file in System32 directory
                                                    PID:12180
                                                  • C:\Windows\system32\regsvr32.exe
                                                    C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_2.dll
                                                    5⤵
                                                    • Modifies registry class
                                                    PID:9928
                                                  • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                    C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe X3DAudio1_5_x64.inf
                                                    5⤵
                                                    • Executes dropped EXE
                                                    • Drops file in System32 directory
                                                    PID:11900
                                                  • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                    C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XACT3_3_x64.inf
                                                    5⤵
                                                    • Executes dropped EXE
                                                    • Drops file in Windows directory
                                                    PID:9204
                                                  • C:\Windows\system32\regsvr32.exe
                                                    C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_3.dll
                                                    5⤵
                                                      PID:9796
                                                    • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                      C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XAudio2_3_x64.inf
                                                      5⤵
                                                      • Executes dropped EXE
                                                      • Drops file in Windows directory
                                                      PID:10972
                                                    • C:\Windows\system32\regsvr32.exe
                                                      C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_3.dll
                                                      5⤵
                                                      • Modifies registry class
                                                      PID:11352
                                                    • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                      C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe D3DX9_40_x64.inf
                                                      5⤵
                                                      • Executes dropped EXE
                                                      • Drops file in System32 directory
                                                      PID:9720
                                                    • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                      C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx10_40_x64.inf
                                                      5⤵
                                                      • Executes dropped EXE
                                                      • Drops file in Windows directory
                                                      PID:2456
                                                    • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                      C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe X3DAudio1_6_x64.inf
                                                      5⤵
                                                      • Executes dropped EXE
                                                      PID:968
                                                    • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                      C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XACT3_4_x64.inf
                                                      5⤵
                                                      • Executes dropped EXE
                                                      PID:916
                                                    • C:\Windows\system32\regsvr32.exe
                                                      C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_4.dll
                                                      5⤵
                                                        PID:5748
                                                      • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                        C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XAudio2_4_x64.inf
                                                        5⤵
                                                        • Executes dropped EXE
                                                        • Drops file in Windows directory
                                                        PID:14112
                                                      • C:\Windows\system32\regsvr32.exe
                                                        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_4.dll
                                                        5⤵
                                                        • Modifies registry class
                                                        PID:14220
                                                      • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                        C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe D3DX9_41_x64.inf
                                                        5⤵
                                                        • Executes dropped EXE
                                                        • Drops file in Windows directory
                                                        PID:8828
                                                      • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                        C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx10_41_x64.inf
                                                        5⤵
                                                        • Drops file in System32 directory
                                                        • Drops file in Windows directory
                                                        PID:10800
                                                      • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                        C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe D3DX9_42_x64.inf
                                                        5⤵
                                                          PID:6480
                                                        • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                          C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx10_42_x64.inf
                                                          5⤵
                                                          • Drops file in System32 directory
                                                          PID:4584
                                                        • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                          C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx11_42_x64.inf
                                                          5⤵
                                                            PID:12680
                                                          • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                            C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dcsx_42_x64.inf
                                                            5⤵
                                                            • Drops file in System32 directory
                                                            PID:4480
                                                          • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                            C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe D3DCompiler_42_x64.inf
                                                            5⤵
                                                            • Drops file in Windows directory
                                                            PID:10132
                                                          • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                            C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XACT3_5_x64.inf
                                                            5⤵
                                                            • Drops file in Windows directory
                                                            PID:13676
                                                          • C:\Windows\system32\regsvr32.exe
                                                            C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_5.dll
                                                            5⤵
                                                              PID:13584
                                                            • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                              C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XAudio2_5_x64.inf
                                                              5⤵
                                                                PID:13088
                                                              • C:\Windows\system32\regsvr32.exe
                                                                C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_5.dll
                                                                5⤵
                                                                • Modifies registry class
                                                                PID:13464
                                                              • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe X3DAudio1_7_x64.inf
                                                                5⤵
                                                                  PID:13844
                                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XACT3_6_x64.inf
                                                                  5⤵
                                                                  • Drops file in Windows directory
                                                                  PID:7636
                                                                • C:\Windows\system32\regsvr32.exe
                                                                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_6.dll
                                                                  5⤵
                                                                  • Modifies registry class
                                                                  PID:7500
                                                                • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                  C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XAudio2_6_x64.inf
                                                                  5⤵
                                                                  • Drops file in System32 directory
                                                                  PID:13856
                                                                • C:\Windows\system32\regsvr32.exe
                                                                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_6.dll
                                                                  5⤵
                                                                    PID:7712
                                                                  • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                    C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe D3DX9_43_x64.inf
                                                                    5⤵
                                                                      PID:7692
                                                                    • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                      C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx10_43_x64.inf
                                                                      5⤵
                                                                      • Drops file in Windows directory
                                                                      PID:6612
                                                                    • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                      C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dx11_43_x64.inf
                                                                      5⤵
                                                                        PID:4028
                                                                      • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                        C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe d3dcsx_43_x64.inf
                                                                        5⤵
                                                                        • Drops file in System32 directory
                                                                        • Drops file in Windows directory
                                                                        PID:5784
                                                                      • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                        C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe D3DCompiler_43_x64.inf
                                                                        5⤵
                                                                          PID:5864
                                                                        • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                          C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XACT3_7_x64.inf
                                                                          5⤵
                                                                          • Drops file in Windows directory
                                                                          PID:5760
                                                                        • C:\Windows\system32\regsvr32.exe
                                                                          C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_7.dll
                                                                          5⤵
                                                                            PID:8644
                                                                          • C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                            C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe XAudio2_7_x64.inf
                                                                            5⤵
                                                                            • Drops file in Windows directory
                                                                            PID:9372
                                                                          • C:\Windows\system32\regsvr32.exe
                                                                            C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_7.dll
                                                                            5⤵
                                                                              PID:12164
                                                                    • C:\Windows\system32\vssvc.exe
                                                                      C:\Windows\system32\vssvc.exe
                                                                      1⤵
                                                                        PID:4608
                                                                      • C:\Windows\system32\LogonUI.exe
                                                                        "LogonUI.exe" /flags:0x4 /state0:0xa3934855 /state1:0x41c64e6d
                                                                        1⤵
                                                                        • Modifies data under HKEY_USERS
                                                                        • Suspicious use of SetWindowsHookEx
                                                                        PID:1732

                                                                      Network

                                                                            MITRE ATT&CK Enterprise v16

                                                                            Replay Monitor

                                                                            Loading Replay Monitor...

                                                                            Downloads

                                                                            e5a8a64.rbs

                                                                            • Path C:\Config.Msi\e5a8a64.rbs
                                                                            • Size 19KB
                                                                            • SHA256 53ac79aeca937de5207cf20ea9167c58f1877f0c23311c6a653251993d07c6c9
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            e5a8a70.rbs

                                                                            • Path C:\Config.Msi\e5a8a70.rbs
                                                                            • Size 19KB
                                                                            • SHA256 7b9d4b0645d1fe6d3a8ce5286d50c0d5c4aa4d76456c3b6e4bded6000f060a18
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            e5a8a77.rbs

                                                                            • Path C:\Config.Msi\e5a8a77.rbs
                                                                            • Size 21KB
                                                                            • SHA256 b9f135d8740331614fa28dc339188cf3cdff03cf2aea472c5f4595b609ae8657
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            e5a8a86.rbs

                                                                            • Path C:\Config.Msi\e5a8a86.rbs
                                                                            • Size 21KB
                                                                            • SHA256 0c9f5b266a34fbc6cf4dce7f30db785bf03724ae092373bf674d56d8fcc99fa0
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            state.rsm

                                                                            • Path C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\state.rsm
                                                                            • Size 876B
                                                                            • SHA256 0b9efdb076ac691370eb985fc15e3b6366e67671683d490643bf23685cef0017
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            BookmarkMergedSurfaceOrdering

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                            • Size 6B
                                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                            • MD5 SHA1 SHA512

                                                                            BrowsingTopicsState

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                            • Size 414B
                                                                            • SHA256 a660a3b2bc3d24b3cd38ef56c68eaff8a9638b3406b48c4e21ca77d04df51bfc
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Network Persistent State

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                            • Size 1KB
                                                                            • SHA256 294d59f326a1d859d43e94aaf31d4b839fc93953c36cb1949dd126aa3db455bd
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            SCT Auditing Pending Reports

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                            • Size 2B
                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                            • MD5 SHA1 SHA512

                                                                            TransportSecurity

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                            • Size 523B
                                                                            • SHA256 b0d0d45d0dd21d1bb1619247ac5e34b924493ca4fc646d339ce3bd106976befc
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Preferences

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                            • Size 12KB
                                                                            • SHA256 6b3af7f80441bd5ada845aaa50ea16964360c9ad4db923fa6fe359e7cd18a0cd
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Secure Preferences

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                            • Size 13KB
                                                                            • SHA256 3426e293396fa1424a09f9423424627a398157ab7bfc3ec06964ae1df493a1c5
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Local State

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                            • Size 115KB
                                                                            • SHA256 ef25d1cb326db5caa328b82329c2dbb5c358cbcd70618850f6ba303dd633d339
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Local State

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                            • Size 235KB
                                                                            • SHA256 9fe77e0e5a07d67858ad6df5c97c2300a9648fab80d2e36fc01a513a6164e714
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            data_1

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
                                                                            • Size 264KB
                                                                            • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            activity-stream.contile.json

                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\activity-stream.contile.json
                                                                            • Size 5KB
                                                                            • SHA256 a25b950d5be5af54ab4c76ff0ef6efaed42d89fd5e504abd77b9df1a98ba1b61
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            activity-stream.discovery_stream.json

                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\activity-stream.discovery_stream.json
                                                                            • Size 76KB
                                                                            • SHA256 8f738931bbcacb90e3893bc6f122ae26fd2728a11bf07299d09b351a7ff7c1ca
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            activity-stream.weather_feed.json

                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\activity-stream.weather_feed.json
                                                                            • Size 14B
                                                                            • SHA256 1bead770ec2d7afc6ec1e9d35383f40ef676591e079dece21c38db17c5c24a20
                                                                            • MD5 SHA1 SHA512

                                                                            14411

                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\doomed\14411
                                                                            • Size 17KB
                                                                            • SHA256 f992d0244ff2cd692f72cf40eefc223756ab15d52d8c2d20378ab70a9c2f0c47
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            03B387DD5227D25C8A44D9A38353738B96619415

                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\03B387DD5227D25C8A44D9A38353738B96619415
                                                                            • Size 408KB
                                                                            • SHA256 cd4380a330d49d991f6cae2669863d0fa9bb8be510b586fc3f0a44910112b35b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
                                                                            • Size 16KB
                                                                            • SHA256 b479858ef9770dc6aac405a50f161960339c859802fdec498403f864189bb0b0
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            86DDBDE5E1EAFC4C588EE71FB531985C95CCC542

                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\86DDBDE5E1EAFC4C588EE71FB531985C95CCC542
                                                                            • Size 16KB
                                                                            • SHA256 ebe736e27324ce9a840eea47bb62e6bcf35e02657d83f7737a2d5c25f2a2bd3f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            D0F48A0632B6C451791F4257697E861961F06A6F

                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\D0F48A0632B6C451791F4257697E861961F06A6F
                                                                            • Size 263KB
                                                                            • SHA256 8b699efc6d44b21f19638bc486aa7c01bd4e85a591905a163c0c9ad005670fe6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            scriptCache-child.bin

                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\startupCache\scriptCache-child.bin
                                                                            • Size 540KB
                                                                            • SHA256 0c6f2e5e71aa1e544e569711c29c14ec142f87799b07f2e40a032e60aa1b52fc
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            scriptCache.bin

                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\startupCache\scriptCache.bin
                                                                            • Size 10.1MB
                                                                            • SHA256 1f2a37012072b5f44235c6c078c147a743c1d2e2fe29d0227b96e473b706fb03
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            startupCache.8.little

                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\startupCache\startupCache.8.little
                                                                            • Size 9.4MB
                                                                            • SHA256 7a5f85cab133706bd0c74d75ab9d8ec8b49d16ca0c8e676433cae2ea57b430e9
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            urlCache.bin

                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\startupCache\urlCache.bin
                                                                            • Size 3KB
                                                                            • SHA256 da534ed4aad18d746fa39567af261f7263e188df2d516ea3b3c35da1acf27b5a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            webext.sc.lz4

                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\startupCache\webext.sc.lz4
                                                                            • Size 105KB
                                                                            • SHA256 b54bae47e276b4ee937f3524ffd8bac1b1692e54b395599df32d4ea68afab56b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            AUG2009_D3DCompiler_42_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\AUG2009_D3DCompiler_42_x64.inf
                                                                            • Size 830B
                                                                            • SHA256 8977772e5392b8e79364b3b8d97300e97ad891f38d5a2dd306549401e46b05ff
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            AUG2009_D3DCompiler_42_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\AUG2009_D3DCompiler_42_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 bb8834d2366f6899c507bae176a13dadbd44488451a263eac830be95f4bad43f
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            AUG2009_XACT_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\AUG2009_XACT_x64.inf
                                                                            • Size 920B
                                                                            • SHA256 5d57466af1801ff3a92b1540907f0e4b91d90189177d68c6b4c8833e5d57dec3
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            AUG2009_XACT_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\AUG2009_XACT_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 1eb88b5460824fd32eec9b90e7ef5cb529f51215046e539d39fa27a409709766
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            AUG2009_XAudio_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\AUG2009_XAudio_x64.inf
                                                                            • Size 923B
                                                                            • SHA256 4348663aa7cfe22916fb13d93307e7384376fad9d6fa34c6196f80df42c61a33
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            AUG2009_XAudio_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\AUG2009_XAudio_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 842cc52100b5774bcda19e40837bd552b308e74829d5b35a505822c7436892e1
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            AUG2009_d3dcsx_42_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\AUG2009_d3dcsx_42_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 f7a5a84bb654837193e0f40b579777f5c6cc2c7341cf90503d6a6709d319797f
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            AUG2009_d3dcsx_42_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\AUG2009_d3dcsx_42_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 ff9da1b0328fd918cf9558ee57387a4865afe98db1410cc16b1e921c5a744c48
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            AUG2009_d3dx10_42_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\AUG2009_d3dx10_42_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 2bfdd3d3bf485439013045b3a08942f457385bb89ab76d9479fbdd85f09e9d96
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            AUG2009_d3dx10_42_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\AUG2009_d3dx10_42_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 a80a00464775da82c02f628c5bc13cab0d0643ec2a44b28d2acf7c77d467becf
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            AUG2009_d3dx11_42_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\AUG2009_d3dx11_42_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 f9c13939779d4526107cf7d3554c122efb564cff02228d02b0b6ff211904f5dd
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            AUG2009_d3dx11_42_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\AUG2009_d3dx11_42_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 edf6764083b47c04fda52b149f565587c6a07d4455357fe3c27c9e56cc57a94d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            AUG2009_d3dx9_42_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\AUG2009_d3dx9_42_x64.inf
                                                                            • Size 812B
                                                                            • SHA256 4887cbec8545b02152eb16f6296987a43a256b69b408330eaee362184f298d98
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            AUG2009_d3dx9_42_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\AUG2009_d3dx9_42_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 5989dc367a8f84815bcfa1c46ff756527c6250c62973220d1af354b70027eaf2
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Aug2008_XACT_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Aug2008_XACT_x64.inf
                                                                            • Size 920B
                                                                            • SHA256 cf09d632a4b2cc670d435f356f309dc58359735834baed10343fdfbf37eddaa1
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Aug2008_XACT_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Aug2008_XACT_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 f1daaa8d96108a4a338f62a4a1339143ddc566e194ca00dde5427136bfccb0af
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Aug2008_XAudio_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Aug2008_XAudio_x64.inf
                                                                            • Size 923B
                                                                            • SHA256 311bd58ed7437a1cc79692ae360a02efbc8ec51194abcb80bad78b2208a94d58
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Aug2008_XAudio_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Aug2008_XAudio_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 f211a7d99b3ffa0180bd91f68b2c285564227e075d499e950e76fde04e7707e3
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Aug2008_d3dx10_39_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Aug2008_d3dx10_39_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 a5eab981c313538afcd7abc7742854d251c736835ffc1f549a4768fdf49c3e71
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Aug2008_d3dx10_39_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Aug2008_d3dx10_39_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 e83f8d48323887af89648c5bd7af713b42d20ccb757be34675f1fa527e6cc33f
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Aug2008_d3dx9_39_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Aug2008_d3dx9_39_x64.inf
                                                                            • Size 812B
                                                                            • SHA256 4cbb1c6804b9c76bba4e41f0d2a45f1daba7350af9da4ae6966651f7f4da041a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Aug2008_d3dx9_39_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Aug2008_d3dx9_39_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 8a23d386626328f9519076f33d5c3b71c639f2347741442c3374974e6f61bd53
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            D3DCompiler_37.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\D3DCompiler_37.dll
                                                                            • Size 1.4MB
                                                                            • SHA256 715876d15b590936e4d32602a764d810650eec134922b32eea742e2fa71791c1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            D3DCompiler_38.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\D3DCompiler_38.dll
                                                                            • Size 1.4MB
                                                                            • SHA256 ddcaadbdd47bcba02c8d1880d456acc20732d21554977338ae507987ed04046e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            D3DCompiler_39.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\D3DCompiler_39.dll
                                                                            • Size 1.4MB
                                                                            • SHA256 b99b655abc4ec45851cc2acdb7a348e739687200a4fe3be9c35d6738dd61112f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            D3DCompiler_40.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\D3DCompiler_40.dll
                                                                            • Size 1.9MB
                                                                            • SHA256 f0a6f156d13150de6ebb094233e5ff78581fbdb77bd0ff8d083698c42bc8e13b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            D3DCompiler_41.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\D3DCompiler_41.dll
                                                                            • Size 1.8MB
                                                                            • SHA256 69ddadf8f5be24f10382706480b55e2492008d102001779f976608e880c65aab
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            D3DCompiler_42.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\D3DCompiler_42.dll
                                                                            • Size 1.9MB
                                                                            • SHA256 6c976311406c23aa71018d274da0ecdef43b6e3a3b0b01e941a5e8e4e974386c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            D3DCompiler_43.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\D3DCompiler_43.dll
                                                                            • Size 2.0MB
                                                                            • SHA256 2f23182ec6f4889397ac4bf03d62536136c5bdba825c7d2c4ef08c827f3a8a1c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            FEB2010_X3DAudio_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\FEB2010_X3DAudio_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 68351f03f4ef83e4b8c359e3e130441081690a1866b838a1b35d64674ef3abbf
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            FEB2010_X3DAudio_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\FEB2010_X3DAudio_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 d4da3e530982812d1e2a31570b80af541fac1b13c72997d2aad7ea3bfeaf4a4a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            FEB2010_XACT_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\FEB2010_XACT_x64.inf
                                                                            • Size 920B
                                                                            • SHA256 c7efd1ec4e4d31644a5054d32cc1e6795464472c05439573ae93e1727a5eea4a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            FEB2010_XACT_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\FEB2010_XACT_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 e850fdb84bcac0f667927e53fee943efd3f43be6c6a0ae1e17f3fff83ddb2635
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            FEB2010_XAudio_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\FEB2010_XAudio_x64.inf
                                                                            • Size 923B
                                                                            • SHA256 da63330fd2a1538b714ee6cf2e09256446a04a55f866b3f70237d8a7165cb3e3
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            FEB2010_XAudio_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\FEB2010_XAudio_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 74c827ef94881099761e04397ef8f162fd0ccaf4876a5503c4b53a5216d2acca
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            JUN2010_D3DCompiler_43_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\JUN2010_D3DCompiler_43_x64.inf
                                                                            • Size 830B
                                                                            • SHA256 3e779533a273e3395109c7efac13ba1c804c01b3ddb16938406fbdf90d851216
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            JUN2010_D3DCompiler_43_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\JUN2010_D3DCompiler_43_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 5dd568919e1b3cbcb23ab21d0f2d6c1a065070848aba5d2a896da39e55c6cbbf
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            JUN2010_XACT_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\JUN2010_XACT_x64.inf
                                                                            • Size 920B
                                                                            • SHA256 f3c288d84db29f7bc4d2c771341f765b5e1940a4827fcb55a65b48eec83c71d3
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            JUN2010_XACT_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\JUN2010_XACT_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 ca604ce9d2ee43a09b39b23a6a2a048b1a79d85c7d78679cc73aacc75cf7a62e
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            JUN2010_XAudio_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\JUN2010_XAudio_x64.inf
                                                                            • Size 923B
                                                                            • SHA256 1a0f1b929724f8b71d5ce922f19b9d539d2d804c89af947d5927b049ef0fd3d8
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            JUN2010_XAudio_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\JUN2010_XAudio_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 d786d06a709d5dc26067132b9735fc317763fcf8064442d6f77f65012ba179da
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            JUN2010_d3dcsx_43_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\JUN2010_d3dcsx_43_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 5289b5ad22146d7cc0c35cdb2c9662742693550de8f013d1ec40e944288d155a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            JUN2010_d3dcsx_43_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\JUN2010_d3dcsx_43_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 d5200b332caf4fff25eb3d224527a3944878c5c3849512779a2afcfeae4c3ca1
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            JUN2010_d3dx10_43_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\JUN2010_d3dx10_43_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 a65f370a741d62c2be0ca588758d089dd976092cb910bb6b1b7d008741e18377
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            JUN2010_d3dx10_43_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\JUN2010_d3dx10_43_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 4d4263cbb11858c727824c4a071f992909675719be3076b4a47852bf6affd862
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            JUN2010_d3dx11_43_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\JUN2010_d3dx11_43_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 2c4cf75b76203cba6378693668c8c00b564871c8bfd7fbda01e1e841477b2a3b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            JUN2010_d3dx11_43_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\JUN2010_d3dx11_43_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 3925c924eb4ec4f5a643b2d14d2eda603341fbbd22118cdd8ae04aaa96f443c0
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            JUN2010_d3dx9_43_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\JUN2010_d3dx9_43_x64.inf
                                                                            • Size 812B
                                                                            • SHA256 272650a2d9b1cfea17021f4bf941b21f2206791e279070d4e906ce0ce56ac16f
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            JUN2010_d3dx9_43_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\JUN2010_d3dx9_43_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 6b33d32da02f664092d44b05237990f825b4062c105a063badcf978648b5e95b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Jun2008_X3DAudio_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Jun2008_X3DAudio_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 f4526ad18f081b84a139e6d98923569fc8ffc7644e20499e2f68abfb3e87753e
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Jun2008_X3DAudio_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Jun2008_X3DAudio_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 0064b7db5bfe52b6f40f61d962901c7baa116abbc72328f50586b6fa65f894bd
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Jun2008_XACT_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Jun2008_XACT_x64.inf
                                                                            • Size 920B
                                                                            • SHA256 90577c4c3d5d0de80c805caf0cc713582698ef7224fecf4ff911ba6309c5c920
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Jun2008_XACT_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Jun2008_XACT_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 79cb10222e466d54908d30ee433830e9673d5a538fabc5f4568521c2aff66eb1
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Jun2008_XAudio_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Jun2008_XAudio_x64.inf
                                                                            • Size 923B
                                                                            • SHA256 9ce21064f2feed9bc9426a6e92e9c850aae31abeb80c7906ff917fbf4cc03913
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Jun2008_XAudio_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Jun2008_XAudio_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 e5e435c4536f987e1087218b025e6dc66c24c3e300e839391891f1b3bfd360dd
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Jun2008_d3dx10_38_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Jun2008_d3dx10_38_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 0de0ada970774620c0905227666fc30910e64f3cfa4b99e4c5481685d12e3ded
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Jun2008_d3dx10_38_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Jun2008_d3dx10_38_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 f5f54664ec67f6333a9f0607d891bd0dc2acfee8cce09ac4ee0372b5d0aa12fd
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Jun2008_d3dx9_38_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Jun2008_d3dx9_38_x64.inf
                                                                            • Size 812B
                                                                            • SHA256 ddad68974990a21a8d4a91c47ef1034ddf0475551586f04e86b8cd2f0c990d6f
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Jun2008_d3dx9_38_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Jun2008_d3dx9_38_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 06faf7f7ea5503dcece13d6537e57cd2581d5188a5d839fe7f118298a721b51a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2008_X3DAudio_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2008_X3DAudio_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 b7dba312a71ed109c9c54cc5cc096096eb8cf0962396e8dc996f8fa28307547c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2008_X3DAudio_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2008_X3DAudio_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 0b6e28f00364a9ff436c3d99f0d4e80bf615f1450f420122324853cc0b88b16c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2008_XACT_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2008_XACT_x64.inf
                                                                            • Size 920B
                                                                            • SHA256 1038a41e63ee8abbc8be85a86fafb2ac1d03defa6b88deb270f96a6ed1a97122
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2008_XACT_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2008_XACT_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 6b0cc0dc993e172855864fa078c4e5c8f2f46bfc3200bf2ccdf3292931ee3cb2
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2008_XAudio_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2008_XAudio_x64.inf
                                                                            • Size 923B
                                                                            • SHA256 10a2db49dd3bea59133bbd82b3fc0f8a959b65b0c250c11a9a6f3123b961e6e9
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2008_XAudio_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2008_XAudio_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 472bcfb54b5d63377da128596dfb30c8f200f79edaaf6d29de1afcdb71a3413d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2008_d3dx10_37_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2008_d3dx10_37_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 f37681f4d49f71d48b1960c3efac74f28af9fa764b29ed3a40b5f424fc8f60c9
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2008_d3dx10_37_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2008_d3dx10_37_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 bae3bc2b7071d2d1c657a87a8c8af6c0fb5373f11c9aa5f61b406924717d0792
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2008_d3dx9_37_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2008_d3dx9_37_x64.inf
                                                                            • Size 812B
                                                                            • SHA256 a4fda3373241c2748a969ddeeb6ef41b3cc1bca6608362ba87db75f69023fe9c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2008_d3dx9_37_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2008_d3dx9_37_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 d55858e166a2fe00d4acc30da756f0ab2c4dd5a79a9874eab3100722c74a1b75
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2009_X3DAudio_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2009_X3DAudio_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 4da1a6bbcb7e84073dcd1898f854702ec32f5324478b2fa39c4a9868abeecd3b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2009_X3DAudio_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2009_X3DAudio_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 aabd029d75f25244bae4ca17dbf9c4feebec0d5f121fcd388c175c3360be1bac
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2009_XACT_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2009_XACT_x64.inf
                                                                            • Size 920B
                                                                            • SHA256 9369fb0a9d3353627c097fc19780e5e7126af47766ef6a4a95ff3ddcca56691e
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2009_XACT_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2009_XACT_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 764c3caeb1725a11701ca7119fdc49b3219553b79f9a5c1a02b20991391e5a21
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2009_XAudio_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2009_XAudio_x64.inf
                                                                            • Size 923B
                                                                            • SHA256 4a554d09934581a87a4cc98749b525b6794947b64b8414d380edfd502713f9b6
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2009_XAudio_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2009_XAudio_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 1b66e4d80f9843fc73b0a6097fb8ed5f3d2cfd5cfb5c328904d2c370bd87bb3e
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2009_d3dx10_41_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2009_d3dx10_41_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 53dc284b87f5787804823977d2fbb528e393829367db5d2ac5dd79c581a27616
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2009_d3dx10_41_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2009_d3dx10_41_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 0170a4b551b58d92a753e86793bf3af762fe3f8d781512f710a4d661aec8d626
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2009_d3dx9_41_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2009_d3dx9_41_x64.inf
                                                                            • Size 812B
                                                                            • SHA256 12fe918aeb224a9bd4d2a8142f97c95d58a9a69e591e7e4f95014c155bb03519
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Mar2009_d3dx9_41_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Mar2009_d3dx9_41_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 bd29711cc2ecd924990167ffa95f48842e24aeed3acef1023717040240b4bbb6
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Nov2008_X3DAudio_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Nov2008_X3DAudio_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 d04d052fa3065cdf00e96bcdd7dabf3583ef10b6d80fd67cb03c32f09f2e602d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Nov2008_X3DAudio_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Nov2008_X3DAudio_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 d0361ffe046b7a7a374a4938d419e4121365892e4f2138899f670619ab34ac6a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Nov2008_XACT_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Nov2008_XACT_x64.inf
                                                                            • Size 920B
                                                                            • SHA256 2d8a68e726728e4f4be05e35fca812b855046ce4bf697f0dea14094dbd7e1d79
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Nov2008_XACT_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Nov2008_XACT_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 31680e7a90d24eda04c910e1f3e6c02774cfc5c36ae08e7ac043665264702f83
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Nov2008_XAudio_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Nov2008_XAudio_x64.inf
                                                                            • Size 923B
                                                                            • SHA256 ed20b160dd26a5ed3c220a1fd9b5fc880b3280ebf56c2f73e76b6d4da5ef82bd
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Nov2008_XAudio_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Nov2008_XAudio_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 950b5aef596fc5048732f6cf263dfca5bcc25df7dc17df91efcbc3551751a3b3
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Nov2008_d3dx10_40_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Nov2008_d3dx10_40_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 7f902d9ce6f6d71be1d16997ffc9661be2540522c73cc185516415a52dced2a5
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Nov2008_d3dx10_40_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Nov2008_d3dx10_40_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 a4eed39cf36adccac4317e5822b30aa37ac5b001bcf4a24f7b5ccac6b8b71e9d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Nov2008_d3dx9_40_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Nov2008_d3dx9_40_x64.inf
                                                                            • Size 812B
                                                                            • SHA256 d071b30f56763506da0c939b8d35b0540bef3ef0d51a5cfbc45816ca91f891a3
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Nov2008_d3dx9_40_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\Nov2008_d3dx9_40_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 955637638635025f01f82febab4a4977252a765439d90ce940fba752723b9db6
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            X3DAudio1_3.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\X3DAudio1_3.dll
                                                                            • Size 25KB
                                                                            • SHA256 74ec3e6b253af1b68252e62a5c08479453b3341d49c606adcf36913fe9ed9717
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            X3DAudio1_4.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\X3DAudio1_4.dll
                                                                            • Size 25KB
                                                                            • SHA256 799b38139523a3b30d26e21798ee705375c61eed8ae2434fddb52fde51f4bb78
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            X3DAudio1_5.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\X3DAudio1_5.dll
                                                                            • Size 22KB
                                                                            • SHA256 315944bb2a1959c8a4bd2677ed415363e1611c7351ce55319dc98fd2aac83f87
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            X3DAudio1_6.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\X3DAudio1_6.dll
                                                                            • Size 21KB
                                                                            • SHA256 574d14ab9a641c6cbadd78f2cd6c088b64b59c3646057952e63cad7d2778e1c3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            X3DAudio1_7.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\X3DAudio1_7.dll
                                                                            • Size 21KB
                                                                            • SHA256 288c701bdedf1d45c63dd0b7d424a752f8819f90feb5088c582f76bc98970ba3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            XAPOFX1_0.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\XAPOFX1_0.dll
                                                                            • Size 63KB
                                                                            • SHA256 8b396d275de2550af8ada6a1ff71f0f4870b51c8407e44044c2dde7ad6b754cc
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            XAPOFX1_1.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\XAPOFX1_1.dll
                                                                            • Size 67KB
                                                                            • SHA256 5ab63c0f040fdf65e681eba4daa55ed83e89ea10c426dc2fc763da0fc94f3ace
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            XAPOFX1_2.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\XAPOFX1_2.dll
                                                                            • Size 69KB
                                                                            • SHA256 d1a55061bcb42f69b7cf35e2985d48e30c7a90f0bc668e90390f465b36bd0161
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            XAPOFX1_3.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\XAPOFX1_3.dll
                                                                            • Size 67KB
                                                                            • SHA256 c6956ac2ee59f71e86784138b5443de6970a1274ac161945b8a44dc1d535db84
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            XAPOFX1_3.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\XAPOFX1_3.dll
                                                                            • Size 67KB
                                                                            • SHA256 b05ad9417028b9777f69422caa01ae9fd22c7bfe542bc6e7de2649e28a4ea643
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            XAPOFX1_4.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\XAPOFX1_4.dll
                                                                            • Size 72KB
                                                                            • SHA256 0aee44b12913a95840ee6431d90518b0d72c54a27392e21ee6995e2151554a06
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            XAPOFX1_5.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\XAPOFX1_5.dll
                                                                            • Size 72KB
                                                                            • SHA256 becfdcd6b16523573cb52df87aa7d993f1b345ba903d0618c3b36535c3800197
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            XAudio2_0.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\XAudio2_0.dll
                                                                            • Size 468KB
                                                                            • SHA256 e435b73193bdf651f7ae564eba05266595ac672db45e0e22dce92d0bcb3c6513
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            XAudio2_1.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\XAudio2_1.dll
                                                                            • Size 495KB
                                                                            • SHA256 32a7c6a4edef46f025a4a5c64b892e29baaae948e86d9ed49e82014eec1441de
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            XAudio2_2.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\XAudio2_2.dll
                                                                            • Size 497KB
                                                                            • SHA256 9c7897b4ee1bcd190b1c0b7b77e64ee731d234764683a1e2286af70d86b62753
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            XAudio2_3.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\XAudio2_3.dll
                                                                            • Size 502KB
                                                                            • SHA256 04dec9d7c68962e01efec0aac0ef7a3499bc4c16e8a41bd61fe6641da48d7dcc
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            XAudio2_4.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\XAudio2_4.dll
                                                                            • Size 505KB
                                                                            • SHA256 bcde4317debd0052b1436a6fda60e1dcb1e308979498117fa0cb50061f38101c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            XAudio2_5.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\XAudio2_5.dll
                                                                            • Size 503KB
                                                                            • SHA256 c596de2ab8394fb62538fef0b4657317f4ead50a6d798c5d066e25e334576c27
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            XAudio2_6.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\XAudio2_6.dll
                                                                            • Size 515KB
                                                                            • SHA256 61b57170f7c6365714396072d22cb98746718c0f44c9f0d5c62fdb1b218639c7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            XAudio2_7.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\XAudio2_7.dll
                                                                            • Size 514KB
                                                                            • SHA256 d1690b602cb317f7f1e1e13e3fc5819ad8b5b38a92d812078afb1b408ccc4b69
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            apr2005_d3dx9_25_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\apr2005_d3dx9_25_x64.inf
                                                                            • Size 806B
                                                                            • SHA256 3d97810d00ceb3e7674a2ef81427d4180f77f93f9454837c5933fbc6a1ad5c1d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            apr2005_d3dx9_25_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\apr2005_d3dx9_25_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 f484ef48e0c6e2be8207d8c8c7308dd966d52bea1fde221b927d3e49f1cab0b7
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            apr2006_d3dx9_30_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\apr2006_d3dx9_30_x64.inf
                                                                            • Size 806B
                                                                            • SHA256 b70b8f62a2459580d22999301f1823bcb8a9bef54bd33b38e0af274a3a12e010
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            apr2006_d3dx9_30_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\apr2006_d3dx9_30_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 373cca07c0ceffa72901441219a4457de9ff110aededae5e4818588da39cd344
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            apr2006_mdx1_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\apr2006_mdx1_x86.inf
                                                                            • Size 2KB
                                                                            • SHA256 2546a1875bf868edc621a1cd0ee262151faa08762bcced0117e1304eace0c04d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            apr2006_xact_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\apr2006_xact_x64.inf
                                                                            • Size 908B
                                                                            • SHA256 d9c3216ada5dd7791ca852a8ea97765f94a7b56fed27b20916b5067eb82b14d0
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            apr2006_xact_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\apr2006_xact_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 037db252501fd0e30303c11706d804d9eabbf319d0b4e88181ef8f297b4fef8e
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            apr2006_xinput_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\apr2006_xinput_x64.inf
                                                                            • Size 854B
                                                                            • SHA256 f9d01e93e547045e1d232242c900530dfdfa54698586c7049281965e3bd01ca2
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            apr2006_xinput_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\apr2006_xinput_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 b604779115d32d439f77b33257c96f928ec4ce564189f7d0d357099c1da140c4
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            apr2007_d3dx10_33_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\apr2007_d3dx10_33_x64.inf
                                                                            • Size 844B
                                                                            • SHA256 3e61c4d723d282c36c5493d82644ea96715b7b548e50494d22b4a83d4e2b8237
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            apr2007_d3dx10_33_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\apr2007_d3dx10_33_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 3286ba521fda888b1808f12955a58d7da4df7d2fdb472c7837a1e0e1a6317a06
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            apr2007_d3dx9_33_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\apr2007_d3dx9_33_x64.inf
                                                                            • Size 812B
                                                                            • SHA256 2d87efca75d8b9aeab3262841d52a7c56bad34ac6b9691f4df2d89b14c950f8d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            apr2007_d3dx9_33_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\apr2007_d3dx9_33_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 349a09a2791d697bffffc61410a536cdcf258f0d7c86dda44a297e8aec4bdf00
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            apr2007_xact_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\apr2007_xact_x64.inf
                                                                            • Size 920B
                                                                            • SHA256 bf6ca1165632efccb0292ae8b739ce68d78ebb95dd39b8e4c1717d78a026db10
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            apr2007_xact_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\apr2007_xact_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 008db10780aa8fb6f20b7aa5f5d513ca77efb36c8dddfb9ad89173ecaf700af5
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            apr2007_xinput_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\apr2007_xinput_x64.inf
                                                                            • Size 860B
                                                                            • SHA256 0d6e1c0e961d878b319ac30d3439056883448dcf26774003b73920f3377ecac8
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            apr2007_xinput_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\apr2007_xinput_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 1c798cb80e9e46ce03356ea7316e1eff5d3a88ccdd7cbfbfcdce73cded23b4e5
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            aug2005_d3dx9_27_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\aug2005_d3dx9_27_x64.inf
                                                                            • Size 806B
                                                                            • SHA256 0a8ffec8d7ef3a0aa005f604a045dcf80cf5b6473b4f26e30c58eee23e253fae
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            aug2005_d3dx9_27_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\aug2005_d3dx9_27_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 d02232a6587c460c026601517178318bab2ac29c59d269c6e3d1a3a993a9a1c4
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            aug2006_xact_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\aug2006_xact_x64.inf
                                                                            • Size 908B
                                                                            • SHA256 6fe310a67227203bbca3389dfe3403fa268cb424f4b525cca2d5407ed26670a5
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            aug2006_xact_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\aug2006_xact_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 34e7227e03812fce5415b0a4c3d15a9e9b259350ac9873db2a98b2ea76ae2284
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            aug2006_xinput_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\aug2006_xinput_x64.inf
                                                                            • Size 854B
                                                                            • SHA256 35f25b9538e55172cf36729519581444e26b38a9dae5cccc4ad75dfa34ea08e7
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            aug2006_xinput_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\aug2006_xinput_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 cc66d67daa1f4c31ff5e59c2606c3930f72204a5057c29b9d58dde37a47b1cb7
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            aug2007_d3dx10_35_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\aug2007_d3dx10_35_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 af4bdfeb4283f04e24475279931e042f17052224cf708f0c444fba2f2e221289
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            aug2007_d3dx10_35_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\aug2007_d3dx10_35_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 7987e2c475705bf8f049a15af946ec0cb5ccddf27c0b5c8126694421df601770
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            aug2007_d3dx9_35_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\aug2007_d3dx9_35_x64.inf
                                                                            • Size 812B
                                                                            • SHA256 e34ad9e49f31cb9211e0f350405c344d93fc65075e470c8fe09dd78af68f2c80
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            aug2007_d3dx9_35_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\aug2007_d3dx9_35_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 c0d87c1b079b54b75b86939199ca5ee1f796ae3de9c4ed0ae074a4fa01823c73
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            aug2007_xact_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\aug2007_xact_x64.inf
                                                                            • Size 920B
                                                                            • SHA256 2fcc4bdc6516418d3b4935c301e14f30e3bbd0adfd264bc34067b27b0b266b8e
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            aug2007_xact_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\aug2007_xact_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 c246c38e41ed71bde4b3cce4fe337826173896a04c26f8b2a00b06bb0cec024d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            d3dcompiler_33.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dcompiler_33.dll
                                                                            • Size 1.1MB
                                                                            • SHA256 12e238af4b4edc1f774213709a87a91b77b2c9d2d18fe475b027872923b6fa17
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dcompiler_34.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dcompiler_34.dll
                                                                            • Size 1.1MB
                                                                            • SHA256 5044a5810fd931339933a8d0c56115a5a5c27d8c0d8e348977e2724a032accf0
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dcompiler_35.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dcompiler_35.dll
                                                                            • Size 1.3MB
                                                                            • SHA256 5a866cdf74f981e783624dafb0e72f133ad9f9b293856d7a18c7558fa357beb1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dcompiler_36.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dcompiler_36.dll
                                                                            • Size 1.3MB
                                                                            • SHA256 f15efcab1780fe7d784a3cd3798f147fa249e81b7ef9a494b85dc7fdab084734
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dcsx_42.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dcsx_42.dll
                                                                            • Size 5.2MB
                                                                            • SHA256 e462eb3d41db54988ce3be46ced60b0073f8d939a9946cda67fb1df3c8afe0a1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dcsx_43.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dcsx_43.dll
                                                                            • Size 1.8MB
                                                                            • SHA256 b46a44b6fce8f141c9e02798645db2ee0da5c69ea71195e29f83a91a355fa2ca
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx10.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx10.dll
                                                                            • Size 429KB
                                                                            • SHA256 fd2caa28493ea76021b93641958238b7a933f4f6db1a2070be03cc81d87d8307
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx10_33.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx10_33.dll
                                                                            • Size 433KB
                                                                            • SHA256 b04e2b089656eae01a0071359f9d7fb040dea804c1b9d2379431864174259c2d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx10_34.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx10_34.dll
                                                                            • Size 433KB
                                                                            • SHA256 330e120d745e1132252df81800362a7ae0b61a9060afc800165ba8a1d55d3fb3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx10_35.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx10_35.dll
                                                                            • Size 434KB
                                                                            • SHA256 db775655fd923e29509402556f86002dd9aea062cdcdba7073e1057a67b5ce50
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx10_36.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx10_36.dll
                                                                            • Size 434KB
                                                                            • SHA256 aee0248f18dfef8194451a22c69adda1cca38c03ae9aa776114da9d8851d4c38
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx10_37.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx10_37.dll
                                                                            • Size 452KB
                                                                            • SHA256 61aaf973712f848b24c3e769e3252248ece96db63f206de0ca7ff43d9ed87a51
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx10_38.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx10_38.dll
                                                                            • Size 457KB
                                                                            • SHA256 bf463b7ee2235f351309b5fd790f514acf2b55a4a1f90222f7479024cc28fc34
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx10_39.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx10_39.dll
                                                                            • Size 457KB
                                                                            • SHA256 613afdb8b44bb3bed945279229d9604a3cd553f8c2b9b091235cbab8cd00de61
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx10_40.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx10_40.dll
                                                                            • Size 441KB
                                                                            • SHA256 c05787cbf3aa4527baae96a425ceac910090ef48809990a450c33f3cda0e4767
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx10_41.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx10_41.dll
                                                                            • Size 442KB
                                                                            • SHA256 9f4c15e1f68795727eded4737acc5a1aa85f896cd9e6924fddc9128b48f1bbd6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx10_42.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx10_42.dll
                                                                            • Size 442KB
                                                                            • SHA256 46429c4affe041b08a7acfda0e9162ba42de966acb2cbcaf09ef976232073b51
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx10_43.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx10_43.dll
                                                                            • Size 459KB
                                                                            • SHA256 56fcd13650fd1f075743154e8c48465dd68a236ab8960667d75373139d2631bf
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx11_42.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx11_42.dll
                                                                            • Size 229KB
                                                                            • SHA256 8c8fa8dce19e2f43e82cecd73a268e831a5ce0a16023845f7fa7fcb597772e85
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx11_43.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx11_43.dll
                                                                            • Size 242KB
                                                                            • SHA256 492e960cb3ccfc8c25fc83f7c464ba77c86a20411347a1a9b3e5d3e8c9180a8d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_24.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_24.dll
                                                                            • Size 2.1MB
                                                                            • SHA256 94ec67763f67932dd4273ef5cc12889a5cef090ffea3ee78a80c7b530272b1b5
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_25.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_25.dll
                                                                            • Size 2.2MB
                                                                            • SHA256 4c54df27ce84d21b2924e64ff79b13e7876ce85d8e0c9c1d0abd8da73888187a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_26.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_26.dll
                                                                            • Size 2.2MB
                                                                            • SHA256 8ea96fe01c3c86a36fcb3795ae03eb12034003e335ef475571efaeda17c5bc78
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_27.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_27.dll
                                                                            • Size 2.2MB
                                                                            • SHA256 a70d571cd675c97c9eeb4a234dba1d667ffb54ec3bb14defb36b3e2f605ae257
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_28.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_28.dll
                                                                            • Size 2.2MB
                                                                            • SHA256 f3e391b5f1c1f9637cabf2b812b6f5d65e4776c89d779f506f6b643cc563176d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_29.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_29.dll
                                                                            • Size 2.2MB
                                                                            • SHA256 c5e21c18f8c79bc517da59e3192c39ea73bdcaf85867628187f6b3cca07dd21f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_30.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_30.dll
                                                                            • Size 2.3MB
                                                                            • SHA256 5edeed79f2359527a55b8189cfa8b9b121cd608d44eead905a0f3436938ad532
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_31.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_31.dll
                                                                            • Size 2.3MB
                                                                            • SHA256 e2065619fe6eb0034833b1dc0369deb4a6edc3110e38a1132eeafcf430c578a5
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_32.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_32.dll
                                                                            • Size 3.3MB
                                                                            • SHA256 e96693794daa05a75a83c11df2e7b42f2de61567c6ad0b69e353b50f6c88119f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_33.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_33.dll
                                                                            • Size 3.3MB
                                                                            • SHA256 c6b7b2ad7742dde5dd8d1a35fdc1c185e586e551ad9c74d3fb21759cd8ca4da8
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_34.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_34.dll
                                                                            • Size 3.3MB
                                                                            • SHA256 b6f77f06518d35345fb61172b6a13159125ed60c469d28b1a2e07970e9ddf81d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_35.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_35.dll
                                                                            • Size 3.6MB
                                                                            • SHA256 2198022938156b790e9cfb0f7997494b66a11a1ad49b395be58251d635b66b26
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_36.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_36.dll
                                                                            • Size 3.6MB
                                                                            • SHA256 c12f0ab0338eb5031d3d04beaf7208ac848f7e037d21ff963d2af90221cbe935
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_37.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_37.dll
                                                                            • Size 3.6MB
                                                                            • SHA256 c2ccb84c672a9d8966e82a28005a4269886ee304972ac3590c0b8a9c1622a3d8
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_38.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_38.dll
                                                                            • Size 3.7MB
                                                                            • SHA256 743e77a228e7d75442263ad70051e44534f7972c6326fd34b505a9c2c245894b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_39.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_39.dll
                                                                            • Size 3.7MB
                                                                            • SHA256 5d29988cad858f754ecc62c3d30de555f82cc21b5b26c448b890295e9b7bee82
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_40.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_40.dll
                                                                            • Size 4.2MB
                                                                            • SHA256 16fd909aeb68d0d1aca8529dc7f78880b97d6649d70ce8d03a2c858bc28e216b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_41.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_41.dll
                                                                            • Size 4.0MB
                                                                            • SHA256 6ac4df203af419d3f3b7d9a99e14a3490ea3ad307c474bfe36baea642b1421f6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_42.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_42.dll
                                                                            • Size 1.8MB
                                                                            • SHA256 f8b9cfab7fffbc8f98e41aa439d72921dc180634a1febca2a9d41a0df35d3472
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d3dx9_43.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\d3dx9_43.dll
                                                                            • Size 1.9MB
                                                                            • SHA256 0b28546be22c71834501f7d7185ede5d79742457331c7ee09efc14490dd64f5f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            dec2005_d3dx9_28_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\dec2005_d3dx9_28_x64.inf
                                                                            • Size 806B
                                                                            • SHA256 510b6d528be3f2997b8bd811486dc3c13eb27a9de22d1bf030e6db0e632cca4d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            dec2005_d3dx9_28_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\dec2005_d3dx9_28_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 d4d03c4ab3c8486d6331548e967ee17e011fdac90f63c0a9a44a744815a7da7a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            dec2006_d3dx10_00_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\dec2006_d3dx10_00_x64.inf
                                                                            • Size 426B
                                                                            • SHA256 2a43ac72ab9a6f4771c02b6e10884921b733b86dbd7ebdfc5502d011cd5c8d05
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            dec2006_d3dx10_00_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\dec2006_d3dx10_00_x86.inf
                                                                            • Size 673B
                                                                            • SHA256 33291a47388edecc059f1825c1979142d7a9cd4a850716f9dce687deba1fa750
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            dec2006_d3dx9_32_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\dec2006_d3dx9_32_x64.inf
                                                                            • Size 806B
                                                                            • SHA256 ff00313af4a90f426492d72969f5efc6c56a17f2dd91f20cb5c0a38d9f1f2b6b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            dec2006_d3dx9_32_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\dec2006_d3dx9_32_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 ef09d783bf5cff2cfba99946e5e71fda577b196a49c88bed1c51b5fd29cecf94
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            dec2006_xact_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\dec2006_xact_x64.inf
                                                                            • Size 908B
                                                                            • SHA256 f2f2040b8d13705f00d8e20a53f22093aa0f8c8d6aa6224992ba727ace7b75f6
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            dec2006_xact_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\dec2006_xact_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 4c0a40094228a51f567bec65c2cdf289d268812c1af579e3c6b76cd3adb77e12
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            dxupdate.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\dxupdate.inf
                                                                            • Size 12KB
                                                                            • SHA256 93f5589499ee4ee2812d73c0d8feacbbcfe8c47b6d98572486bc0eff3c5906ca
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            feb2006_d3dx9_29_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\feb2006_d3dx9_29_x64.inf
                                                                            • Size 806B
                                                                            • SHA256 ef36ece1a6bd8af3b0b9247b081d28ed511b7e18c43eb3aff364c9ce8d3a06c3
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            feb2006_d3dx9_29_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\feb2006_d3dx9_29_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 f12f4bd86d5cd748b0fcf7106e9dff333c27c0886541339ba1f40c443bdc61cd
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            feb2006_xact_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\feb2006_xact_x64.inf
                                                                            • Size 890B
                                                                            • SHA256 b7ca1a4942057592c5b83b4425350da41c61779dcae608112141d727091842d4
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            feb2006_xact_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\feb2006_xact_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 45146fd446fc8533dc5f97d88bee9ae220161f24797114d0bf3afc7c479ed69b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            feb2007_xact_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\feb2007_xact_x64.inf
                                                                            • Size 908B
                                                                            • SHA256 184c1684c57de07983edaaa1ae2751b263497673ee8418af023a63fa03553f53
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            feb2007_xact_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\feb2007_xact_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 64b6020f43bbab7f7c2368fcfe7224165fef555b2bef813aa13b2d9f6295d46c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            infinst.exe

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                            • Size 65KB
                                                                            • SHA256 300ed1a4ef37c8d5f13d67a5daabd46bcdd9ad9da4fe6283f20d7d38f72caaf5
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            infinst.exe

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                            • Size 65KB
                                                                            • SHA256 76eed293cdcdf17942acc313366b22b55ad78ee0389989438e63ab7ae145167d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            infinst.exe

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                            • Size 68KB
                                                                            • SHA256 34ab99536ea59ad60ba6efda3ea6d18291ef096a0bab3664248d6045805da0ec
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            infinst.exe

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                            • Size 68KB
                                                                            • SHA256 d4e57566914f1d36f4ebfb6e164ce2170f1d5e6392189d0ad6de3ef3b0a9aad3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            infinst.exe

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                            • Size 68KB
                                                                            • SHA256 fbe2e9cf7e400537a4871218113df178f70501ffeea59a8f0f721927124d6d46
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            infinst.exe

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                            • Size 68KB
                                                                            • SHA256 e0838d8d562ed4683bc06ecdbc46fe19dcddf711a0c7909dabf62da572035dcf
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            infinst.exe

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                            • Size 73KB
                                                                            • SHA256 de817d92db706f329d50567221c42110ae781d679ef853cc684aec779ab51ccf
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            infinst.exe

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                            • Size 74KB
                                                                            • SHA256 ea31341129f7558d34fc2fcae9e715343aaadfc57f06a33a6da18448bd71b77d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            infinst.exe

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                            • Size 74KB
                                                                            • SHA256 4c8befaece0c58eb75c38e2347db04557c1bd2a4a269282c3769d6bcccf50395
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            infinst.exe

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                            • Size 74KB
                                                                            • SHA256 1707a6644d66406a9ac149b8fc959d964dce5c028ca3e1d0d5052e70f80515e2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            infinst.exe

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                            • Size 74KB
                                                                            • SHA256 3a07c2436d3fd2473e15518a53262d4f0fb7f2a05589437cc5668f929063e782
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            infinst.exe

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                            • Size 74KB
                                                                            • SHA256 d808bb408a4bd695a9793e70b1c61637e008ac11174dbe1373481e2bdb0c9299
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            infinst.exe

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\infinst.exe
                                                                            • Size 81KB
                                                                            • SHA256 8c62fe8466d9a24a0f1924de37b05d672a826454804086cddc7ed87c020e67ff
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            jun2005_d3dx9_26_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\jun2005_d3dx9_26_x64.inf
                                                                            • Size 806B
                                                                            • SHA256 addafcf0cfd36587c12eb2692922f0fb134874d11005a0544cc054546a493933
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            jun2005_d3dx9_26_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\jun2005_d3dx9_26_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 262ed4a65dd45e19f196cb2d9946326693ee31a86b51bf77116dec2727971cb6
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            jun2006_xact_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\jun2006_xact_x64.inf
                                                                            • Size 908B
                                                                            • SHA256 fe9caa55be17684622fd7339b1b96e1f0d107dc33c065706d24a435d523c6e12
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            jun2006_xact_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\jun2006_xact_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 6bdce6f6779712e38c6d9e6e5961217e417254089f096c719f25566e952cb257
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            jun2007_d3dx10_34_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\jun2007_d3dx10_34_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 0f75b7ef71e183476ec938705024eb8a10a77d7602a336be876c7f5d17429725
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            jun2007_d3dx10_34_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\jun2007_d3dx10_34_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 808983dfd3db7c3452589ea4e14ab4af8ef47dbad3b639f9a3c55685c9b73867
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            jun2007_d3dx9_34_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\jun2007_d3dx9_34_x64.inf
                                                                            • Size 812B
                                                                            • SHA256 77f3fa1756181a90d2ee63c26cddfdaba0d720c9a49121db28746cd02b3e071d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            jun2007_d3dx9_34_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\jun2007_d3dx9_34_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 a568b7b8a0360ad94b1ed6388eca6ca9d8770937360a426a0fdadef9a4019bba
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            jun2007_xact_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\jun2007_xact_x64.inf
                                                                            • Size 920B
                                                                            • SHA256 405d8cbe3c87b16afac2a9254497412a42de4ae2d8fb470a1234dc3260e0b90f
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            jun2007_xact_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\jun2007_xact_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 33b980fb973394d9d8cb4645914d4cf6793bf92bd311e0431ce9cacc59fdcbc5
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            mdx_1.0.2902.0_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\mdx_1.0.2902.0_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 3bd14cf2a96544ece692e1911500f7196370a111017fb6b0e23db0f0d0f40dfa
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            microsoft.directx.diagnostics.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\microsoft.directx.diagnostics.dll
                                                                            • Size 12KB
                                                                            • SHA256 8c9685959706750091b0094522cec8644de1d1c6309e7a2fe02cef130d3a2b9c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            microsoft.directx.direct3d.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\microsoft.directx.direct3d.dll
                                                                            • Size 462KB
                                                                            • SHA256 f3359d5e41b1d4fec7230579a593e40fe44f6afdfacd1e2bbe52ee06d84686fb
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            microsoft.directx.direct3dx.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\microsoft.directx.direct3dx.dll
                                                                            • Size 2.6MB
                                                                            • SHA256 7986e3fbe05418fe5d8425f2f1b76b7a7b09952f3ec560b286dd744bf7178059
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            microsoft.directx.direct3dx.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\microsoft.directx.direct3dx.dll
                                                                            • Size 563KB
                                                                            • SHA256 c29d337bf7639fbf424b34cc0409d2715762e1b4d82881fb524a2508381c9f62
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            microsoft.directx.direct3dx.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\microsoft.directx.direct3dx.dll
                                                                            • Size 565KB
                                                                            • SHA256 78d85f0e2cb7d7bde534222f4ebfea1c9e06d37ecd3bb7ebd59e35f00b94b11d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            microsoft.directx.direct3dx.xml

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\microsoft.directx.direct3dx.xml
                                                                            • Size 1.4MB
                                                                            • SHA256 c3cc575c93690ddf44fd71fdeaff3d61552e9d4eafbef77840e4208522d81fb7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            microsoft.directx.direct3dx.xml

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\microsoft.directx.direct3dx.xml
                                                                            • Size 1.3MB
                                                                            • SHA256 7b38e6dd8c567d17d94f595c33fb234284abe884a1148025f59c8e426ec30c03
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            microsoft.directx.directinput.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\microsoft.directx.directinput.dll
                                                                            • Size 155KB
                                                                            • SHA256 0ee2a2c371a918cabc85143202864d0c3a4abf1b93a5029081a622e0acf17ab7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            microsoft.directx.directplay.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\microsoft.directx.directplay.dll
                                                                            • Size 356KB
                                                                            • SHA256 489f65e1e00534835486e9255eec92b83edae4dade6dff867a380859ae53006a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            microsoft.directx.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\microsoft.directx.dll
                                                                            • Size 218KB
                                                                            • SHA256 942e98f142373547493f13b14e1603b2420851aff013d3085bada7b6b2214d9c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            nov2007_d3dx10_36_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\nov2007_d3dx10_36_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 7a49ae818e199cf9f9bd831f94cb6d03a1e72a141d76546261979b30642757b7
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            nov2007_d3dx10_36_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\nov2007_d3dx10_36_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 96f48bb810055699d37e9e27a65947483a0b4df304870e3b5448d3051b3e4926
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            nov2007_d3dx9_36_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\nov2007_d3dx9_36_x64.inf
                                                                            • Size 812B
                                                                            • SHA256 d1b544b3912e73e5984cd759096120febe6f17e41a3cf920ef82431b9b569c1d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            nov2007_d3dx9_36_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\nov2007_d3dx9_36_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 843764f70f56d430c0695e263c895a135a631f793213d1005fafcf9c210d1ac9
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            nov2007_x3daudio_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\nov2007_x3daudio_x64.inf
                                                                            • Size 815B
                                                                            • SHA256 1cc72ca78433fbb72ee6b654c908748ea846c87c80424816745f285ed3bc910b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            nov2007_x3daudio_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\nov2007_x3daudio_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 f882bdbc8230d24b24e20f9d0db447586e9493801900a8ba381eb493bd41f5d5
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            nov2007_xact_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\nov2007_xact_x64.inf
                                                                            • Size 926B
                                                                            • SHA256 841d579573afd51499c7cd8ee986a41db63cedb722e8fac351d3632ff470c161
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            nov2007_xact_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\nov2007_xact_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 24714f229e479338ed89bdd6143140505fd63f517b7e71170ea6c072a1748b06
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            oct2006_d3dx9_31_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\oct2006_d3dx9_31_x64.inf
                                                                            • Size 806B
                                                                            • SHA256 c031987e68e476365cd885e41a072f85fdfc9e480c93871d024a5ccf26d17118
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            oct2006_d3dx9_31_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\oct2006_d3dx9_31_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 a1c61096019a6ae1a9f31e3fe67aa2bb7e9e451967959d7088344f3f20ab572e
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            oct2006_xact_x64.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\oct2006_xact_x64.inf
                                                                            • Size 908B
                                                                            • SHA256 4c388e9eaf3c39e75d003a58020e491b675b3a6054c702062a9c90e86f691d96
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            oct2006_xact_x86.inf

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\oct2006_xact_x86.inf
                                                                            • Size 1KB
                                                                            • SHA256 66998b21cbe6f05b12cdb4bb45549dcb1b4a92f8a1b910334150a8d767fa39e9
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            x3daudio1_0.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\x3daudio1_0.dll
                                                                            • Size 13KB
                                                                            • SHA256 228dfece2b4555a243a73e7bf461036f1e53951977625651ff5a59deaeaf4b88
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            x3daudio1_0.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\x3daudio1_0.dll
                                                                            • Size 16KB
                                                                            • SHA256 77cc09cea6de69f12106e6dd9df1c0446a525a54c3953d69d64711b9394cc38f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            x3daudio1_1.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\x3daudio1_1.dll
                                                                            • Size 14KB
                                                                            • SHA256 ff15f14174a5543f028fa49cca745582fe4cacf3bbe490749cf43444690ab359
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            x3daudio1_1.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\x3daudio1_1.dll
                                                                            • Size 17KB
                                                                            • SHA256 fac23787e7c199c1969806850b5a9652f66f6dcac86f48f6f834abc253848a55
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            x3daudio1_2.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\x3daudio1_2.dll
                                                                            • Size 17KB
                                                                            • SHA256 7c06bb70d12cf78de9c6a12a53c95f9dba41c140a48bccd500483e5b87795a8c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            x3daudio1_2.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\x3daudio1_2.dll
                                                                            • Size 17KB
                                                                            • SHA256 1ae37d90d39c36c142a51ab9fef7230788ff95080f2bc47734737bf82d3c2c9b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            x3daudio1_2.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\x3daudio1_2.dll
                                                                            • Size 17KB
                                                                            • SHA256 4c448c7f77e3b4385d2cd35d0c470589cdf0524e532f9cf7ae084a8f88aa949a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xactengine2_0.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xactengine2_0.dll
                                                                            • Size 224KB
                                                                            • SHA256 cfd1c2d34feb7d94f282e97bf762a99bfa7309dc7353d96dfe4aadc187d26c67
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xactengine2_1.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xactengine2_1.dll
                                                                            • Size 224KB
                                                                            • SHA256 666cef7d27a38f709063c9c581fd95e6b3fa27167bff4beff484dba2dc922a2b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xactengine2_10.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xactengine2_10.dll
                                                                            • Size 261KB
                                                                            • SHA256 113640ae8cf78caa7cface2f906f9e6b60809906f5c26e08b2e90fc48430f3b7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xactengine2_2.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xactengine2_2.dll
                                                                            • Size 224KB
                                                                            • SHA256 4f996edb65022e33ae9c9f7acf7232c8d444f75c50c72894f6d3173b55404ebe
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xactengine2_3.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xactengine2_3.dll
                                                                            • Size 231KB
                                                                            • SHA256 ca20cf8e4034719a46bf67c6009486c2c1cfc2da10ffed3a67dcae677b4f6793
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xactengine2_4.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xactengine2_4.dll
                                                                            • Size 232KB
                                                                            • SHA256 1e0e09fc077bdeee3de065c663b83f6717d39d56778833f030955077d490d000
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xactengine2_5.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xactengine2_5.dll
                                                                            • Size 245KB
                                                                            • SHA256 ec68b5163cbb5f15e2fbe37fdf5fcb0d01dffbe53a460cb2cf668f31f0127ad5
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xactengine2_6.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xactengine2_6.dll
                                                                            • Size 249KB
                                                                            • SHA256 be45aef0889b03e2243282a912f41580e8566db666a782c26a1d4d7988799d03
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xactengine2_7.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xactengine2_7.dll
                                                                            • Size 255KB
                                                                            • SHA256 a43c92af3fbe91dfe2a1d415342631fe64e18c7dd3e16e93b6c78947b68e7bd6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xactengine2_8.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xactengine2_8.dll
                                                                            • Size 259KB
                                                                            • SHA256 15d82e89bea30bf82de6ba0cfbe97eeaf05d1e06bc0133f0d1ee8d0cc41f51f6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xactengine2_9.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xactengine2_9.dll
                                                                            • Size 260KB
                                                                            • SHA256 93a0d8fc38e4e9a301d9e721afbeedc5af40becc0b11a6e7e8e38f08f366ff6e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xactengine3_0.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xactengine3_0.dll
                                                                            • Size 232KB
                                                                            • SHA256 887329745c479ce8d3023c969adf66780dd7e51ab536f0a08550ba4c77066c20
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xactengine3_1.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xactengine3_1.dll
                                                                            • Size 232KB
                                                                            • SHA256 088999560171c60129c95f9b541852392602561dce43e4c61a453d48065f52ca
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xactengine3_2.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xactengine3_2.dll
                                                                            • Size 232KB
                                                                            • SHA256 e6a34c1f068f89d6515cb460eed3b4dbb53522c5579e6c75741482f0d40d9f99
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xactengine3_3.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xactengine3_3.dll
                                                                            • Size 230KB
                                                                            • SHA256 ef052bc9b7fde596fff3ea2d9c8fc994f3282953dead1b7f5477e7154af67245
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xactengine3_4.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xactengine3_4.dll
                                                                            • Size 229KB
                                                                            • SHA256 d3bad7995b998f2c95dbb33020a198ef5a248825321032f051619f353d46182b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xactengine3_5.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xactengine3_5.dll
                                                                            • Size 233KB
                                                                            • SHA256 1d37ab9b90372eaaafb5055401449dc3184428fed559baaf36fbcccd2479611a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xactengine3_6.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xactengine3_6.dll
                                                                            • Size 233KB
                                                                            • SHA256 8a7e7c5ac2e6230f0249d46751522e7ecf85e7490cf7491ab73bf2e7e59e4c0f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xactengine3_7.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xactengine3_7.dll
                                                                            • Size 234KB
                                                                            • SHA256 d7b1cf58898046c430d49cf8f778e4898280f4709340c3938d3139894166fe8d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xinput1_1.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xinput1_1.dll
                                                                            • Size 61KB
                                                                            • SHA256 69cd725c53e0302e75db20e9a3e4b33f58dceaa2e6ea4938b2733df8bc289a71
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xinput1_2.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xinput1_2.dll
                                                                            • Size 61KB
                                                                            • SHA256 9714d146a785d458f0de8fef387d82c9f8e101c02407a0cbeb06f02a69518eec
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xinput1_3.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX5003.tmp\xinput1_3.dll
                                                                            • Size 79KB
                                                                            • SHA256 8d540d484ea41e374fd0107d55d253f87ded4ce780d515d8fd59bbe8c98970a7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            dxupdate.cif

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxupdate.cif
                                                                            • Size 65KB
                                                                            • SHA256 c6c5e877e92d387e977c135765075b7610df2500e21c16e106a225216e6442ae
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            dxupdate.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxupdate.dll
                                                                            • Size 173KB
                                                                            • SHA256 fb4f297e295c802b1377c6684734b7249d55743dfb7c14807bef59a1b5db63a2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            dxwsetup.cif

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.cif
                                                                            • Size 56KB
                                                                            • SHA256 ed710d035ccaab0914810becf2f5db2816dba3a351f3666a38a903c80c16997a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            dd_vcredist_amd64_20260809072301_000_vcRuntimeMinimum_x64.log

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260809072301_000_vcRuntimeMinimum_x64.log
                                                                            • Size 3KB
                                                                            • SHA256 52412e6ee981bfe9c1f19c40e68633c3381712a0fe53112606ca678b32ad3808
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            dd_vcredist_amd64_20260809072301_001_vcRuntimeAdditional_x64.log

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260809072301_001_vcRuntimeAdditional_x64.log
                                                                            • Size 2KB
                                                                            • SHA256 1f2984a5e202b30a249ce6fd1d3263b8121a6978ac2f46dfb79a7797dbc99860
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            tmpaddon

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                                                            • Size 502KB
                                                                            • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            tmpaddon

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                                                            • Size 11KB
                                                                            • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            SiteSecurityServiceState.bin

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\SiteSecurityServiceState.bin
                                                                            • Size 4KB
                                                                            • SHA256 393314edde6a26541864525e76b946c37cc766d894012ea8e69e5d5dc51fa87c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            addonStartup.json.lz4

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\addonStartup.json.lz4
                                                                            • Size 4KB
                                                                            • SHA256 7e3df2ef834779611ca9e912905f55c6dcb44e375c0ef7da65f1c22843f41bee
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            compatibility.ini

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\compatibility.ini
                                                                            • Size 198B
                                                                            • SHA256 252b7fff962848c61092e82a3d87adca163849767713a93ab533bb397f1f53bb
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            cookies.sqlite

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\cookies.sqlite
                                                                            • Size 512KB
                                                                            • SHA256 39d7439d562708e55758d06044a50ee692e9ca27bda5b4f628c1c663a616744b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            data.safe.tmp

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
                                                                            • Size 7KB
                                                                            • SHA256 710b870639724543a15691fca36e7260b78b24742218fa1f71b674f0d3a09405
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            data.safe.tmp

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
                                                                            • Size 7KB
                                                                            • SHA256 1feb945c51c7df588183899a265532d42837151a0ec4d7ea07861d1290a807c2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            data.safe.tmp

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
                                                                            • Size 7KB
                                                                            • SHA256 14b32dd3df909cd8382095ed8b11af4dcf0d24c309f6d59dbd0603b9f64e72e2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            data.safe.tmp

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
                                                                            • Size 57KB
                                                                            • SHA256 d6eaaa09947813280654b27a71f2f890b36213e254029adf5c2e8c050e7d6cd9
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            data.safe.tmp

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
                                                                            • Size 5KB
                                                                            • SHA256 0d4f75bd6951493af5f40acc743d22b79accd257f71afaaf7f209c76d19d34e1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            data.safe.tmp

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
                                                                            • Size 6KB
                                                                            • SHA256 500c4b138cb6e57cacbe12eb46580353b1fddfc827b8ed14a8883e62408db20d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            data.safe.tmp

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
                                                                            • Size 105KB
                                                                            • SHA256 ed090c9a578f13c8bb2e559770b3468ec7c0977958b442b563e0f6c886c76772
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            events

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\events\events
                                                                            • Size 1KB
                                                                            • SHA256 7c4ca07ce6de787f92e0b0f591866a1256e249e7762968c8a471474b75f0b797
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            events

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\events\events
                                                                            • Size 1KB
                                                                            • SHA256 11f643f4ce2bce5241fbc8556ec66033dca011df77448ff3ed8e12f5c763f5fc
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            events

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\events\events
                                                                            • Size 4KB
                                                                            • SHA256 323e6b02fc662501dd7b0bbd7e0230e5e603253ad0a51b9cdab59b0b28e4fe6a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            0acb9f7d-1849-4366-8967-9d265f6e6fad

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\0acb9f7d-1849-4366-8967-9d265f6e6fad
                                                                            • Size 281B
                                                                            • SHA256 ffc138e680b84195c23b53ef3a38276b4e7eb8d255eba02bf904250a24a15d8e
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            38aebedf-f7b9-4124-8aee-7d8bca86a8d2

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\38aebedf-f7b9-4124-8aee-7d8bca86a8d2
                                                                            • Size 16KB
                                                                            • SHA256 cc516ffea86d8ee43770e50d3ef1b3a387a7cd588f7b843a4e85b4a0f3806ed0
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            4389727b-1cab-44fc-a125-91e15ee0edb6

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\4389727b-1cab-44fc-a125-91e15ee0edb6
                                                                            • Size 886B
                                                                            • SHA256 cc732566ad3c292f403f5140107c8347220779aea1329898c16aba105fec2524
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            516c8650-2d68-4dd6-8bb0-422af3834610

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\516c8650-2d68-4dd6-8bb0-422af3834610
                                                                            • Size 235B
                                                                            • SHA256 c7a9a05d5cc1cffa968e107b88e1e7ba45f62319f2f3d97220fd33f66407965c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            8d621c4b-4298-456e-88e6-a31a4bf7d919

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\8d621c4b-4298-456e-88e6-a31a4bf7d919
                                                                            • Size 1KB
                                                                            • SHA256 22bd205353b1093c13f48590ea4afb4a06fdfda022c92f3d181c04ccb180f346
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            a76b085b-7894-45d0-a00d-16a0a54171a1

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\a76b085b-7894-45d0-a00d-16a0a54171a1
                                                                            • Size 973B
                                                                            • SHA256 9029ec9ecf4409fdc4c24ba16e893c6111a0cb56d68daa2308d64f3dab4bf1f1
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            a973012b-6f4b-4503-b7ff-6020f15ef195

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\a973012b-6f4b-4503-b7ff-6020f15ef195
                                                                            • Size 15KB
                                                                            • SHA256 af76617b4e0c4f79bde0b5be6e57fb5d80de17530bc72b4d0e2dc42a9aa45d77
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            b99272fa-9405-413d-9523-32bc836b6d5e

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\b99272fa-9405-413d-9523-32bc836b6d5e
                                                                            • Size 2KB
                                                                            • SHA256 0c4de820c6ebb5fd2ee3898c2de1171c698fdc98c4e82b811ff2936bac429225
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            c1c2ea2e-5163-4557-9699-37a5951b5f47

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\c1c2ea2e-5163-4557-9699-37a5951b5f47
                                                                            • Size 7KB
                                                                            • SHA256 d7994e8bd8d4278502b7f8a777a1fb75328854da9c5886efe26987ea9c61ddaf
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f12dffdd-9d10-44fa-8bd0-b70e55684035

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\f12dffdd-9d10-44fa-8bd0-b70e55684035
                                                                            • Size 883B
                                                                            • SHA256 e7f2d740f67906139c8b58290c10d042a85c2fe32cce31abbc7a9a05c79ec814
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            fb706719-2787-4eb8-b488-c03c98cd30b0

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\fb706719-2787-4eb8-b488-c03c98cd30b0
                                                                            • Size 235B
                                                                            • SHA256 f36e97fa49fe14b7ba6f921c4a238a03f632784cbf3cdbbc80fe19f1a5563133
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            extensions.json

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\extensions.json
                                                                            • Size 16KB
                                                                            • SHA256 d207477a1ac12c5041de4d7692163c1eca238fcdab8d044b2e9fca16d8caa40a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            gmpopenh264.dll

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                                                                            • Size 1.1MB
                                                                            • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            gmpopenh264.info

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                                                                            • Size 116B
                                                                            • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            manifest.json

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                                                                            • Size 1002B
                                                                            • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            widevinecdm.dll

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                                                                            • Size 21.6MB
                                                                            • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            permissions.sqlite

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\permissions.sqlite
                                                                            • Size 96KB
                                                                            • SHA256 e3ee445b44be17f300eca18b23a0dc0716863999ef834a6034add687943336df
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            places.sqlite

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\places.sqlite
                                                                            • Size 5.0MB
                                                                            • SHA256 7649ba780f8a5908407ea0ae779458c7ce8c5b110f562ef83c3bffc13796df11
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            prefs-1.js

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs-1.js
                                                                            • Size 10KB
                                                                            • SHA256 892505329e836ba4ce216e5238b02c0fe10c8f8aad7a151872b162192fcbdb7d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            prefs-1.js

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs-1.js
                                                                            • Size 8KB
                                                                            • SHA256 88edc1c354d49cdccb3db60a7892c82717b5befdc6febda82f3a82a94ce39253
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            prefs-1.js

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs-1.js
                                                                            • Size 6KB
                                                                            • SHA256 906e1493a2dc7c5d6959f9779484d5069822d9fd22959afb2398ff6eac9d01c1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            prefs-1.js

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs-1.js
                                                                            • Size 12KB
                                                                            • SHA256 a96b4a7c9d5b7f50d354bead46b735e9ed2bc63e9c1cd77807886ae1912c8a4c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            prefs-1.js

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs-1.js
                                                                            • Size 12KB
                                                                            • SHA256 43dad09800e4cdda476182da23d745733409cf3fb4552da954921191c40a99b1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            prefs-1.js

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs-1.js
                                                                            • Size 7KB
                                                                            • SHA256 904b4c6926aa056e20e945a1b25d11cd934d6a1fddc3d523669457b781d6b436
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            prefs-1.js

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs-1.js
                                                                            • Size 12KB
                                                                            • SHA256 38e4851416d16bbd06d63059fe7199d7352abad7e3ce5024dcbbf0766fe4e226
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            prefs-1.js

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs-1.js
                                                                            • Size 6KB
                                                                            • SHA256 966e0cf0b886899bebcfcbd33f241363d60cb80fbd0e9db1c34dbce9b454931a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            prefs.js

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs.js
                                                                            • Size 7KB
                                                                            • SHA256 35c5e63fc314cde3fd84dff16ada0f28b31fbdead28856c77d1d879cc05c9c44
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            prefs.js

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs.js
                                                                            • Size 6KB
                                                                            • SHA256 d1abd9285cf04cee2bd15abd3c751fd00e9ec04093a34efc1c853fc7967f55e7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            prefs.js

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs.js
                                                                            • Size 12KB
                                                                            • SHA256 be180b511b62fda916ba07f6eadbff30864488c40724b820a8dfbb5b5e07b0e1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            sessionCheckpoints.json

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionCheckpoints.json
                                                                            • Size 90B
                                                                            • SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            sessionCheckpoints.json

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionCheckpoints.json
                                                                            • Size 288B
                                                                            • SHA256 2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            sessionCheckpoints.json

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionCheckpoints.json
                                                                            • Size 122B
                                                                            • SHA256 72d74b596f7fc079d15431b51ce565a6465a40f5897682a94a3f1dd19b07959a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            sessionCheckpoints.json.tmp

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionCheckpoints.json.tmp
                                                                            • Size 53B
                                                                            • SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            recovery.baklz4

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
                                                                            • Size 5KB
                                                                            • SHA256 957f62523e7101c6eedd9dd055218b366f071949b6d66c20fd2e95edf70b7f0c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            recovery.baklz4

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
                                                                            • Size 3KB
                                                                            • SHA256 1b70803f48d423527d1e7f745fd83c888b1ed4e3862a22e1ec4310a72d00f964
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            recovery.baklz4

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
                                                                            • Size 10KB
                                                                            • SHA256 6dce9c1a2933530047eaf3a7ce42a5c6f96343bc64ed09af47625f4d55a5a47a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            recovery.baklz4

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
                                                                            • Size 2KB
                                                                            • SHA256 438123c427978fe5c8e7c301ed89edbf0c5b58d934512fe27c64102e9e46a8c0
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            sessionstore.jsonlz4

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore.jsonlz4
                                                                            • Size 5KB
                                                                            • SHA256 3647d0c379f92611f96d69ae333a4bcebca36d65a85cf0fbbed2024eeeb9c16f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            3870112724rsegmnoittet-es.sqlite

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                                                            • Size 4.2MB
                                                                            • SHA256 feb52de2eb49b7e3b2a6715e23dab04eefa66d229ff2676add8ffaef27955de9
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            xulstore.json

                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\xulstore.json
                                                                            • Size 138B
                                                                            • SHA256 81ef165ad53b66d069fb647f3b801e9de87b7b09b37201943949ceba3e65bbea
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            VC_redist.x64.exe

                                                                            • Path C:\Users\Admin\Downloads\VC_redist.x64.exe
                                                                            • Size 17.9MB
                                                                            • SHA256 843068991daaa1f73ad9f6239bce4d0f6a07a51f18c37ea2a867e9beca71295c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            dxwebsetup.exe

                                                                            • Path C:\Users\Admin\Downloads\dxwebsetup.exe
                                                                            • Size 288KB
                                                                            • SHA256 2cf71d098c608c56e07f4655855a886c3102553f648df88458df616b26fd612f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            DirectX.log

                                                                            • Path C:\Windows\DirectX.log
                                                                            • Size 4KB
                                                                            • SHA256 507b9ddbe85a865a528b92a62f41a798f99497972ea18a6daf7d8437aa2c13e0
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            DirectX.log

                                                                            • Path C:\Windows\Logs\DirectX.log
                                                                            • Size 1KB
                                                                            • SHA256 ec50f45d9c932342029f624e8ca1a150e37be5b845ee596e3b46991a50b2fe50
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            DirectX.log

                                                                            • Path C:\Windows\Logs\DirectX.log
                                                                            • Size 3KB
                                                                            • SHA256 24353f448396603d0db2683987fbf7e3c0ae31b77b69afc995110b173f353e3b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            DirectX.log

                                                                            • Path C:\Windows\Logs\DirectX.log
                                                                            • Size 95KB
                                                                            • SHA256 db171b7672b893c2dca0c51a012cb34501dda6afce7d88d7928db0008723aecc
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Apr2005_d3dx9_25_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Apr2005_d3dx9_25_x64.cab
                                                                            • Size 1.3MB
                                                                            • SHA256 a239e99d02fbfc9d30d5b705aa743fc070386faea1a66b3d67099ab446568a12
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Apr2005_d3dx9_25_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Apr2005_d3dx9_25_x86.cab
                                                                            • Size 1.0MB
                                                                            • SHA256 5487ed4e969a822e5c481cefb1d4da3066b1d5ec8c55798b246915ecb58a8665
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Apr2006_MDX1_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Apr2006_MDX1_x86.cab
                                                                            • Size 898KB
                                                                            • SHA256 90e08fc3b98267756c6017f4d37b157eba3586c262474d1556b21d9c35d84da2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Apr2006_d3dx9_30_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Apr2006_d3dx9_30_x64.cab
                                                                            • Size 1.3MB
                                                                            • SHA256 27d99894e2a68601f46487c9999723dc83bcc9c6f903f2e2622d05668035b015
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Apr2006_d3dx9_30_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Apr2006_d3dx9_30_x86.cab
                                                                            • Size 1.1MB
                                                                            • SHA256 ca7b9c6a49e986c350147f00a6c95c5b577847b5667b75681a1ee15e3a189106
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Apr2006_xact_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Apr2006_xact_x64.cab
                                                                            • Size 178KB
                                                                            • SHA256 f82b2043b470bf0e711c3d05d758a379920340212437917b5d98af0c14e7bfe0
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Apr2006_xact_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Apr2006_xact_x86.cab
                                                                            • Size 133KB
                                                                            • SHA256 52c71c89ccc22fed3d7c985a22c464451af34b63b3a26a3799bc25d881221ebc
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Apr2006_xinput_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Apr2006_xinput_x64.cab
                                                                            • Size 88KB
                                                                            • SHA256 e63a67783ef7624559f95ab697bf8afbdab7ace31200283ef840e6b94aa16e5a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Apr2006_xinput_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Apr2006_xinput_x86.cab
                                                                            • Size 48KB
                                                                            • SHA256 3fdf63211b0dd38069a9c1df74d7bc42742de003cef72ad1486aaa92d74546fa
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Apr2007_d3dx10_33_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Apr2007_d3dx10_33_x64.cab
                                                                            • Size 685KB
                                                                            • SHA256 1a37565c5b868b6a5c67f3e24b8af547506799444cb77c7086e7b0cec852f239
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Apr2007_d3dx10_33_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Apr2007_d3dx10_33_x86.cab
                                                                            • Size 682KB
                                                                            • SHA256 949068035ce57bbb3658217ec04f8de7a122c6e7857b6f8b0ca002eb573df553
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Apr2007_d3dx9_33_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Apr2007_d3dx9_33_x64.cab
                                                                            • Size 1.5MB
                                                                            • SHA256 3ca2acf6b952d6438b91e540f39abcb93ee12e340ba1302f7406f01568e5cf91
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Apr2007_d3dx9_33_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Apr2007_d3dx9_33_x86.cab
                                                                            • Size 1.5MB
                                                                            • SHA256 efa2e6de548401376a575e83a79de019aa38f191d63fdef3bd2b07d8cb33e3d7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Apr2007_xact_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Apr2007_xact_x64.cab
                                                                            • Size 194KB
                                                                            • SHA256 7781f0494648989583d4ac7695b9c5310eea76b6a102e15ea0fc7376250e4584
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Apr2007_xact_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Apr2007_xact_x86.cab
                                                                            • Size 150KB
                                                                            • SHA256 39f970bf4cc42e9325ada84a603c6c691bf94921385a52325f402f7432ace697
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Apr2007_xinput_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Apr2007_xinput_x64.cab
                                                                            • Size 97KB
                                                                            • SHA256 86ee073c199b5080fe4f5be6ac24bb1117fea42e4bbcd828b4f0ec26c669b22c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Apr2007_xinput_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Apr2007_xinput_x86.cab
                                                                            • Size 55KB
                                                                            • SHA256 b6c1166c57d91afeeeaa745238d0d6465ff2084f0606fd29faf1bfa9e008a6c5
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2005_d3dx9_27_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2005_d3dx9_27_x64.cab
                                                                            • Size 1.3MB
                                                                            • SHA256 3500c1a7cfb5594521338d1c29946d1e4ffa44d5b6bc6cf347c5bbbde18e94dc
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2005_d3dx9_27_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2005_d3dx9_27_x86.cab
                                                                            • Size 1.0MB
                                                                            • SHA256 8c062b22dc2814d4f426827b4bf8cfd95989fd986fb3aaa23438a485ee748d6d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2006_xact_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2006_xact_x64.cab
                                                                            • Size 181KB
                                                                            • SHA256 13e7eb934a7596e7c3b7d8a0962e68da841d9c73d154825dc982ff6d05cff221
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2006_xact_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2006_xact_x86.cab
                                                                            • Size 137KB
                                                                            • SHA256 31b16f93be7f5f9bb78e9ece6da96565d50a0bc1f66b206b7a21c601a308dc53
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2006_xinput_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2006_xinput_x64.cab
                                                                            • Size 88KB
                                                                            • SHA256 c26633d38e0a91b9be70382e916a83d50e219609f7e05cfb2d27dfafbe480b43
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2006_xinput_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2006_xinput_x86.cab
                                                                            • Size 48KB
                                                                            • SHA256 6dd7c0abe37d3df7aa6db7bb352260f4a15dc965ff9d30aa32fe9595c1a18300
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2007_d3dx10_35_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2007_d3dx10_35_x64.cab
                                                                            • Size 835KB
                                                                            • SHA256 c97275f60e2f25732b3b264b8bdf9cfdaa39d6e5b189c08fab5cd7a04fae9bf7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2007_d3dx10_35_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2007_d3dx10_35_x86.cab
                                                                            • Size 781KB
                                                                            • SHA256 9536166ee7cc1100cfe24e01532e8e4deed6baa838b4c025581f2ca046a25915
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2007_d3dx9_35_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2007_d3dx9_35_x64.cab
                                                                            • Size 1.7MB
                                                                            • SHA256 28b6ff092de67717c47649c87e7114c34325edda199ce2943403c4f3f4c3e0b2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2007_d3dx9_35_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2007_d3dx9_35_x86.cab
                                                                            • Size 1.6MB
                                                                            • SHA256 4914d2b5c3251b00c0cc236f51afe469728d92b50c953c66d213f079ac928eac
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2007_xact_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2007_xact_x64.cab
                                                                            • Size 196KB
                                                                            • SHA256 e8ef9c88a6b958916c1959d1c6c7f1666d22e0f70ce8a8c83183f49ed71f6287
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2007_xact_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2007_xact_x86.cab
                                                                            • Size 152KB
                                                                            • SHA256 c35652b18c6a2d108812f415ddd435ce0eef5489e37142300ba67d66986ef43c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2008_d3dx10_39_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2008_d3dx10_39_x64.cab
                                                                            • Size 850KB
                                                                            • SHA256 c6602fb00efe93ea7875e29974c073b4f83991bfc064470de94a95dbacd51712
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2008_d3dx10_39_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2008_d3dx10_39_x86.cab
                                                                            • Size 832KB
                                                                            • SHA256 84800c55f773d5d6913e344e41baba58cf07cec2e6c7114ca3bf48e8f355419f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2008_d3dx9_39_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2008_d3dx9_39_x64.cab
                                                                            • Size 1.7MB
                                                                            • SHA256 03f30dd485a82b6505a881f525e432bb84447e108bf086ef341a39951a1863ed
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2008_d3dx9_39_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2008_d3dx9_39_x86.cab
                                                                            • Size 1.4MB
                                                                            • SHA256 61e703e8d231412f135b4aba629122d9cb69ac9ee39fa3cbbe6b95de05097a8b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2008_xact_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2008_xact_x64.cab
                                                                            • Size 122KB
                                                                            • SHA256 1b640b0022c876f74a41db17672bb0685b74d3759a7818f84c8ffc51a9aa0d51
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2008_xact_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2008_xact_x86.cab
                                                                            • Size 93KB
                                                                            • SHA256 736b3c20aa536c1569465badec5bffda858978b2d9ec1e48ad639ccde301d6f6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2008_xaudio_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2008_xaudio_x64.cab
                                                                            • Size 268KB
                                                                            • SHA256 42807ba4736a40b7bb9b4b558c0daffd2ca75987dafe47a6571f3c45f178d29e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2008_xaudio_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2008_xaudio_x86.cab
                                                                            • Size 267KB
                                                                            • SHA256 a1550abc06e39ca576d24efd2801d139c64c7dce643246a7ddf2de2d03a7ba23
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2009_D3DCompiler_42_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2009_D3DCompiler_42_x64.cab
                                                                            • Size 900KB
                                                                            • SHA256 ac103963d4ab1846c4a6d5bc042ed2fa543f88424e37e05af5165ee62989b503
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2009_D3DCompiler_42_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2009_D3DCompiler_42_x86.cab
                                                                            • Size 882KB
                                                                            • SHA256 6bd32337826f5a5141fc06391919a249e984150905c2546dc8bfc33d41a24e82
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2009_d3dcsx_42_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dcsx_42_x64.cab
                                                                            • Size 3.0MB
                                                                            • SHA256 23d902f8b95dbd5ac925e7d1bd4952eeac762e11e209be973fd438396a1e6e50
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2009_d3dcsx_42_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dcsx_42_x86.cab
                                                                            • Size 3.2MB
                                                                            • SHA256 a9a704b73531d6bf59a421ab5c046c19a16d2b0b07f09816dbe9da4550a24b17
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2009_d3dx10_42_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx10_42_x64.cab
                                                                            • Size 230KB
                                                                            • SHA256 98ca8f4d1c6cd13fa721a35a23992d9edd14cc7465d3752e5978d89c9bc91960
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2009_d3dx10_42_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx10_42_x86.cab
                                                                            • Size 190KB
                                                                            • SHA256 bb46189eb8cb7769eb7be00cfbc35902072fa9408313ef53f423e5ae5c728f61
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2009_d3dx11_42_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx11_42_x64.cab
                                                                            • Size 136KB
                                                                            • SHA256 f2f4753e201d6e7f40f4011cc4b4fa95f4519da0481d98cb24dbb6679518ca93
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2009_d3dx11_42_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx11_42_x86.cab
                                                                            • Size 105KB
                                                                            • SHA256 39ff69ba9161d376c035d31023d2fdeecb9148a2439abe3afd8f608f7e05e09b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2009_d3dx9_42_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx9_42_x64.cab
                                                                            • Size 911KB
                                                                            • SHA256 54a61b655ca36f76a489b46c6174dd601a831210f16ecb9d839cdb7e19d47904
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2009_d3dx9_42_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx9_42_x86.cab
                                                                            • Size 714KB
                                                                            • SHA256 9c96b6fc4df5c0efca9f0d653976772b2b964243214f99066e4ca4aa6df791dd
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2009_xact_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2009_xact_x64.cab
                                                                            • Size 122KB
                                                                            • SHA256 34d922a89d6b354572c17b890b0efc21bea237b94859010278fc1a4435ae7724
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2009_xact_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2009_xact_x86.cab
                                                                            • Size 94KB
                                                                            • SHA256 1520e988f112dde8ea11794e4b6dc9bc6ccb2ae7e0be7342d4696b719e5a86d0
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2009_xaudio_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2009_xaudio_x64.cab
                                                                            • Size 269KB
                                                                            • SHA256 348bcd596d4b3f1e10059a0ce3c4383d383c4964c00a77ae7281e3472f6b8b25
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Aug2009_xaudio_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Aug2009_xaudio_x86.cab
                                                                            • Size 269KB
                                                                            • SHA256 68785e0781b43c34cb184ae167363c23d5b9d18ddaf8474a5f1d6b90a939e8b7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Dec2005_d3dx9_28_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Dec2005_d3dx9_28_x64.cab
                                                                            • Size 1.3MB
                                                                            • SHA256 daf10a54089755f9a8aceff0c7695f1aa42d35e3179da5b9bb91e409036ae547
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Dec2005_d3dx9_28_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Dec2005_d3dx9_28_x86.cab
                                                                            • Size 1.0MB
                                                                            • SHA256 645f8d90b07c69330a8c7c8912d70538411c9a6b2813048da8ad3c3119487f93
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Dec2006_d3dx10_00_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Dec2006_d3dx10_00_x64.cab
                                                                            • Size 210KB
                                                                            • SHA256 f9bd5bb083bd55d1d2a690bc66d6d9da0b1a8b49f09e811e788c030669121118
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Dec2006_d3dx10_00_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Dec2006_d3dx10_00_x86.cab
                                                                            • Size 190KB
                                                                            • SHA256 02daa8b5ac3752f76c3bfd9a505ebf22b1b4b41e44eb92ce2799033b2330d186
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Dec2006_d3dx9_32_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Dec2006_d3dx9_32_x64.cab
                                                                            • Size 1.5MB
                                                                            • SHA256 da1ce01be39f41f967282849715e8310dc1887bfeb92c4e0166d2c31f00647f7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Dec2006_d3dx9_32_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Dec2006_d3dx9_32_x86.cab
                                                                            • Size 1.5MB
                                                                            • SHA256 a1cc7603302ee53d54f4353c223d95e223706924d99b864220b13814ef93eefb
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Dec2006_xact_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Dec2006_xact_x64.cab
                                                                            • Size 191KB
                                                                            • SHA256 bdaf9c41f83e65de2b73aaca2002541d48c65f551cfa0578b3259d3bfca54ead
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Dec2006_xact_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Dec2006_xact_x86.cab
                                                                            • Size 145KB
                                                                            • SHA256 b98e55c654b9ee6f6d040665d932bea7a1299c56cc9996eea900ac4f5649c7d3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Feb2005_d3dx9_24_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Feb2005_d3dx9_24_x64.cab
                                                                            • Size 1.2MB
                                                                            • SHA256 be3de63f136a2b41d3229e477ce2cd7f67ded031b4b370e640c39b80368238cf
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Feb2005_d3dx9_24_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Feb2005_d3dx9_24_x86.cab
                                                                            • Size 992KB
                                                                            • SHA256 3d4e48874bddcd739cf79bf2b3fd195d7c3e861f738dc2eab19f347545f83068
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Feb2006_d3dx9_29_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Feb2006_d3dx9_29_x64.cab
                                                                            • Size 1.3MB
                                                                            • SHA256 a5ffaf9d58da5d79402c4dc93e79960f971d2701d4651bb33d18925af641f11d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Feb2006_d3dx9_29_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Feb2006_d3dx9_29_x86.cab
                                                                            • Size 1.0MB
                                                                            • SHA256 4114e76799af3da9db3dae51305dad70a05b757e506e4a327092d536cca7ee75
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Feb2006_xact_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Feb2006_xact_x64.cab
                                                                            • Size 177KB
                                                                            • SHA256 c91a6380c65853e41e2f9593b954f3b5af49bcc894476d8eb78cd9f8b6dd7da4
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Feb2006_xact_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Feb2006_xact_x86.cab
                                                                            • Size 132KB
                                                                            • SHA256 6456fc26622f3a72b9449ed0e61874cf1adba23cccbfcda1324f033fe0788fda
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Feb2007_xact_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Feb2007_xact_x64.cab
                                                                            • Size 193KB
                                                                            • SHA256 3454d5101716a5c17bcdee8632668d981f99e8558d8d05e20a33ed718ed8c2ac
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Feb2007_xact_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Feb2007_xact_x86.cab
                                                                            • Size 147KB
                                                                            • SHA256 0e3655490667ddf17150aec089889268bdd7f1e8367d2bed6f3eb68a5ff28288
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Feb2010_x3daudio_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Feb2010_x3daudio_x64.cab
                                                                            • Size 56KB
                                                                            • SHA256 a46a4b55659921966428301c02409c32a642ff7699419f71ce8775944117ec41
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Feb2010_x3daudio_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Feb2010_x3daudio_x86.cab
                                                                            • Size 23KB
                                                                            • SHA256 3cdd51afca42c61a7fcf0e7348ee4f2095d1bb9deba31f7c09f5694a028b0d35
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Feb2010_xact_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Feb2010_xact_x64.cab
                                                                            • Size 122KB
                                                                            • SHA256 dc678bde00cc64b91d29c5d98be82b19de00518d1706643e8eb8ddd4ec577327
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Feb2010_xact_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Feb2010_xact_x86.cab
                                                                            • Size 94KB
                                                                            • SHA256 d5a7cb9a858e3dc2fa875c8aa915b6999137b616327aa79d382379a1ce3974b5
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Feb2010_xaudio_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Feb2010_xaudio_x86.cab
                                                                            • Size 273KB
                                                                            • SHA256 738f0ca04f3f568eb5c1a4d8f1af30e4930e4f7950e96776a5b8adea16efc8f1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2005_d3dx9_26_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2005_d3dx9_26_x64.cab
                                                                            • Size 1.3MB
                                                                            • SHA256 794e23d8b08f88bb0d339825b3628c24cd0297195657f9871ee6324786fada36
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2006_xact_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2006_xact_x64.cab
                                                                            • Size 179KB
                                                                            • SHA256 5163afa067fe2f076ab428dd368ba0a2cf6470457ba528a35e97be40737a03c0
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2006_xact_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2006_xact_x86.cab
                                                                            • Size 133KB
                                                                            • SHA256 23495764aba10ff35cf9d23aeeffdf38716219d8a155ae29162f01f7fe6a30cf
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2007_d3dx10_34_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2007_d3dx10_34_x86.cab
                                                                            • Size 685KB
                                                                            • SHA256 8ec971c91040618338ac2369188f3e5d7c85a5b1e3b9fc8e752dd845d295cdba
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2007_d3dx9_34_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2007_d3dx9_34_x64.cab
                                                                            • Size 1.5MB
                                                                            • SHA256 fe4b15931e048c97cbbc26f753093e7d41eccf174402542631284f8bdb9ee692
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2007_d3dx9_34_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2007_d3dx9_34_x86.cab
                                                                            • Size 1.5MB
                                                                            • SHA256 1c1e1c6f68ba556a0af09a38c32eb421c543a4848c4b42d25867c98dab3b3a50
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2007_xact_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2007_xact_x64.cab
                                                                            • Size 195KB
                                                                            • SHA256 3f2ca0accef2594fb014296f4111b7fbb59729c5d928b22f7283c392494fee7c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2007_xact_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2007_xact_x86.cab
                                                                            • Size 152KB
                                                                            • SHA256 245b0c554cbe2677939a70e5c4c6666b1b43d10d47980223f8cdeadb2d0eb76b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2008_d3dx10_38_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2008_d3dx10_38_x64.cab
                                                                            • Size 850KB
                                                                            • SHA256 a75a8109e3b4ce2a805555577d45853bc2e67451ba287b45aa3ce4ca14ce87b7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2008_d3dx10_38_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2008_d3dx10_38_x86.cab
                                                                            • Size 833KB
                                                                            • SHA256 e8dc1063c9434eed8d633741b19cdfa1889581041e2214b87b5159e3ea087f3c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2008_d3dx9_38_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2008_d3dx9_38_x64.cab
                                                                            • Size 1.7MB
                                                                            • SHA256 f33a6b6ef55bd4e75a2e67d269b917fa6113f2b1c9b745b19d3ce6a6365d1cfc
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2008_d3dx9_38_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2008_d3dx9_38_x86.cab
                                                                            • Size 1.4MB
                                                                            • SHA256 57e57a6348e55aaaca6bed5e27bbdd0a4bd0dde69c77f4d26c805be6384be927
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2008_x3daudio_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2008_x3daudio_x64.cab
                                                                            • Size 56KB
                                                                            • SHA256 7363590b33717a0c2e07f3b2dceb3689a526b255f29c84092022a37bf6e9b9c1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2008_x3daudio_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2008_x3daudio_x86.cab
                                                                            • Size 24KB
                                                                            • SHA256 75f048bc8261c1877126a82d3e7983f22f830596eefeaffb799947d9a13afd51
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2008_xact_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2008_xact_x64.cab
                                                                            • Size 121KB
                                                                            • SHA256 09e15921b2a8204235c7128b804f26e72599f05f55005bd29fdb05da8c812460
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2008_xact_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2008_xact_x86.cab
                                                                            • Size 94KB
                                                                            • SHA256 fa86c9d133cc5ca499b1f57d52a6024cae3f5605ff0e5bc466f07e3f7bac121c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2008_xaudio_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2008_xaudio_x64.cab
                                                                            • Size 266KB
                                                                            • SHA256 7679e7b1e03399a5d0d7b802308ee1503a9c5c59935d16c330db760876bfb37c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2008_xaudio_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2008_xaudio_x86.cab
                                                                            • Size 265KB
                                                                            • SHA256 6d128830655e6cc400c1677ad91341e7b69f3d3f5acf32bc44ed2a32b5e776eb
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2010_D3DCompiler_43_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2010_D3DCompiler_43_x64.cab
                                                                            • Size 925KB
                                                                            • SHA256 9b56aba20f49739cde64f07ec317b6e20b0713fb9ae697318d811a0f103a6dbb
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2010_D3DCompiler_43_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2010_D3DCompiler_43_x86.cab
                                                                            • Size 912KB
                                                                            • SHA256 293ced557ad732abd2737333df39b08216f31601d7ab65b743fe51b4efb8b6f0
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2010_d3dcsx_43_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dcsx_43_x86.cab
                                                                            • Size 747KB
                                                                            • SHA256 799b517227812252481c9c9b22cf16ff185ffc20b9273612c8a37153b53aad93
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2010_d3dx10_43_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx10_43_x64.cab
                                                                            • Size 233KB
                                                                            • SHA256 c689eea749f1ad76a162d1c6dff31dd92d0ebf85f5b539c4c953d55bbb921b57
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2010_d3dx10_43_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx10_43_x86.cab
                                                                            • Size 195KB
                                                                            • SHA256 f0bc06ceb484d97cf01526f9223df7b4357d166c4391869f2e7d514dc1fe769b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2010_d3dx11_43_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx11_43_x64.cab
                                                                            • Size 138KB
                                                                            • SHA256 37ae82574cbbfe2cae6019a168a6d1bde38f88f8e51f13335001943980a665e1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2010_d3dx11_43_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx11_43_x86.cab
                                                                            • Size 110KB
                                                                            • SHA256 b80db68cd82caf8bedaee62808171b20c546a76499c3ad53014e3bd2fbd2918d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2010_d3dx9_43_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx9_43_x86.cab
                                                                            • Size 753KB
                                                                            • SHA256 457c5ce48eaa0fe551b46dffc1e4dca985d261686d8d4e6bced533ee1f682fce
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2010_xact_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2010_xact_x64.cab
                                                                            • Size 124KB
                                                                            • SHA256 3e8fcc374e84e1170067a057acfa3b5464220d6bf5324566a05242e8208799b2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2010_xact_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2010_xact_x86.cab
                                                                            • Size 94KB
                                                                            • SHA256 fb320286968952ae93c7cdb4078bd99e689a0946157574760b844f7bf39c7ea0
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2010_xaudio_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2010_xaudio_x64.cab
                                                                            • Size 273KB
                                                                            • SHA256 7cce405577fae04e58fe31a099febba96d3ea7cb94ed2184b6bfba32d9f20acc
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2010_xaudio_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Jun2010_xaudio_x86.cab
                                                                            • Size 274KB
                                                                            • SHA256 c364833271396d78811a9a3388341cb9e1cf5e6e0fe2d7986cb4dd2f931a0dae
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            MDX_1.0.2902.0_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2902.0_x86.cab
                                                                            • Size 1.2MB
                                                                            • SHA256 afa44ed18e3217892499062db4337b94025726df991a0bd4dcc3a9f8c27c41b9
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            MDX_1.0.2903.0_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2903.0_x86.cab
                                                                            • Size 1.2MB
                                                                            • SHA256 84e240f8813bacb2fe0f20081ca20cd0fed4b9e10c96aded8516b25375c407aa
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            MDX_1.0.2904.0_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2904.0_x86.cab
                                                                            • Size 242KB
                                                                            • SHA256 cadffad57691af14fdc0f41250e644257a3068da134a5922f343f2e69b1b5441
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            MDX_1.0.2905.0_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2905.0_x86.cab
                                                                            • Size 244KB
                                                                            • SHA256 f10aee00b78b734acb3bfdd81ce0ac22648376486d0c308f9975b05181ecbe13
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            MDX_1.0.2906.0_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2906.0_x86.cab
                                                                            • Size 248KB
                                                                            • SHA256 bcfd420ecb20116a78b54678cbb04204e76368809aee1e1bb36810a4d433de2f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            MDX_1.0.2907.0_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2907.0_x86.cab
                                                                            • Size 248KB
                                                                            • SHA256 b185fce1d25a4411c1a2f53ec1e4232de9a3078d7db7aa469d53c5fb041f792e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            MDX_1.0.2908.0_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2908.0_x86.cab
                                                                            • Size 248KB
                                                                            • SHA256 fd1c15037800a0a689126b09f29a6329452cbaf42508242d9cc185f557f04954
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            MDX_1.0.2909.0_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2909.0_x86.cab
                                                                            • Size 248KB
                                                                            • SHA256 1e9c063428322da24df17c5d49c63a53e0f0751d26f741d90216b9c4ff1a9136
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            MDX_1.0.2910.0_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2910.0_x86.cab
                                                                            • Size 248KB
                                                                            • SHA256 1829a24a8ed3a2496ce92aa0c5142d8f512b11cdf23eda5e579edb5b11e2b589
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2008_d3dx10_37_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2008_d3dx10_37_x64.cab
                                                                            • Size 828KB
                                                                            • SHA256 6aff708a5bc25b4ecee972f930293324f86bc45dc97d687dab782108606c5902
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2008_d3dx10_37_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2008_d3dx10_37_x86.cab
                                                                            • Size 802KB
                                                                            • SHA256 6a2727269e6cac7c4d2e316333d29bac0dc1cd7f51c36c0c08b0388203dedad2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2008_d3dx9_37_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2008_d3dx9_37_x64.cab
                                                                            • Size 1.7MB
                                                                            • SHA256 7ef2e2a5d4843f58b3eaca34f5a9c63e9abfa726a3244b762a6de70bb9a95123
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2008_d3dx9_37_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2008_d3dx9_37_x86.cab
                                                                            • Size 1.4MB
                                                                            • SHA256 91a50d9efcdfbcdf22a91d6fbb0f50d3c2aa75f926d05cc166020bf7aaf30e28
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2008_x3daudio_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2008_x3daudio_x64.cab
                                                                            • Size 56KB
                                                                            • SHA256 312c2dfd80126d25a1cfab0fadf5c99bf1f81b404e121afec908f5b5d04529a2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2008_x3daudio_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2008_x3daudio_x86.cab
                                                                            • Size 24KB
                                                                            • SHA256 1ababdfd6ca26f1c56f618f8c9f90dbc063d964bfa31caa787b0a8a1bee519be
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2008_xact_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2008_xact_x64.cab
                                                                            • Size 122KB
                                                                            • SHA256 b6f81e365b7fc224f66bd6560e5040dabc9370b3f21f9bd85728349200dd7632
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2008_xact_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2008_xact_x86.cab
                                                                            • Size 94KB
                                                                            • SHA256 d2140d9b4420b022d6e6135a67029033b5b0ec083893eceadd1007eee41ef4cd
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2008_xaudio_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2008_xaudio_x64.cab
                                                                            • Size 248KB
                                                                            • SHA256 e9a2e00f9c96bd5c91c4ae069c1c2ef6451e0207e8c18074f14d0d0ac08301fa
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2008_xaudio_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2008_xaudio_x86.cab
                                                                            • Size 224KB
                                                                            • SHA256 bce9c695d24972eacef357da0f83ab9d9cce2ee9a46176ffffad3a0abd64f48f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2009_d3dx10_41_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2009_d3dx10_41_x64.cab
                                                                            • Size 1.0MB
                                                                            • SHA256 25ef5135a88061ede0c4fde037be62e3a11701748ff83eda1aa9cc496687265d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2009_d3dx10_41_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2009_d3dx10_41_x86.cab
                                                                            • Size 1019KB
                                                                            • SHA256 b7da29103cdf374de0c09713cb985035eac45fb8b394d3b8157d8a7562a89899
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2009_d3dx9_41_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2009_d3dx9_41_x64.cab
                                                                            • Size 1.9MB
                                                                            • SHA256 53da650f9aad168fe8034da45abbabc950729780ecc4f645f1470e851fd67ac3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2009_d3dx9_41_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2009_d3dx9_41_x86.cab
                                                                            • Size 1.5MB
                                                                            • SHA256 32356344aeddf709c9d5302d8f3fcc1ff1be2e82d8d17833a2086400af248794
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2009_x3daudio_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2009_x3daudio_x64.cab
                                                                            • Size 56KB
                                                                            • SHA256 53a41f2989a2f68e4e927c89b2e38bbfcee7a2182ec588db233f26292f9d7911
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2009_x3daudio_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2009_x3daudio_x86.cab
                                                                            • Size 23KB
                                                                            • SHA256 2984d216a782ca017243f4685ba592801b1ac3ccac2bf20a8a134fecaff03510
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2009_xact_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2009_xact_x64.cab
                                                                            • Size 121KB
                                                                            • SHA256 19890202eaec445617d364ffbde498e8eff48ebe5112a42fb4b99b4258aa0757
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2009_xact_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2009_xact_x86.cab
                                                                            • Size 93KB
                                                                            • SHA256 250c430741fc09d74ef6f43559a365ee908f52d96cfdacc7b6d8bf5e1bd3e5e1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2009_xaudio_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2009_xaudio_x64.cab
                                                                            • Size 271KB
                                                                            • SHA256 2c1610997f383e55d5e264b3cc52d9bc5262ea72bad6116a0d84e623f61b0361
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Mar2009_xaudio_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Mar2009_xaudio_x86.cab
                                                                            • Size 269KB
                                                                            • SHA256 e7aacd3af1c4e2031e4e4365d47e8af1023272c795f823b41f1728d48d127b67
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Nov2007_d3dx10_36_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Nov2007_d3dx10_36_x64.cab
                                                                            • Size 847KB
                                                                            • SHA256 bee9bec21771bc5365847be692e785ea619d625df629981a167429df6f0cc9cc
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Nov2007_d3dx10_36_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Nov2007_d3dx10_36_x86.cab
                                                                            • Size 788KB
                                                                            • SHA256 bdf7fb01c02783a4f8c9f5e7911f5cae3e2a7cbc425b90b36f9ea6eef2c27de3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Nov2007_d3dx9_36_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Nov2007_d3dx9_36_x64.cab
                                                                            • Size 1.7MB
                                                                            • SHA256 23ad953d03c9da720002834eddabe71bd649dc9cd31abc7a09a8e77a948414c5
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Nov2007_d3dx9_36_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Nov2007_d3dx9_36_x86.cab
                                                                            • Size 1.6MB
                                                                            • SHA256 f52cc1304b533083b3fc5553c49433c0e4e46d66d567b9de0b558ca518db1544
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Nov2007_x3daudio_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Nov2007_x3daudio_x64.cab
                                                                            • Size 48KB
                                                                            • SHA256 122e09bbf46b3c3edae6c28ad060482dac24d4331c682fe0231cc5b6fb53c5e8
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Nov2007_x3daudio_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Nov2007_x3daudio_x86.cab
                                                                            • Size 21KB
                                                                            • SHA256 90f472ed8b0beeea5db1b462da44577160337c767b27ce70ed58d68d0a03e7a8
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Nov2007_xact_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Nov2007_xact_x64.cab
                                                                            • Size 195KB
                                                                            • SHA256 9fa6f4116a4eb1e72f75cbdcb2e34198a243d169276d4f493ecb8a9dff3722d4
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Nov2007_xact_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Nov2007_xact_x86.cab
                                                                            • Size 147KB
                                                                            • SHA256 6dcb9461eab4aceb999784ecd74d985b3543899542ffd66203929f409c70c8d8
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Nov2008_d3dx10_40_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Nov2008_d3dx10_40_x64.cab
                                                                            • Size 973KB
                                                                            • SHA256 86f96aed9c4e381623a6476bdeb375c3f49eb0f252301ad4db2f7974362790b1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Nov2008_d3dx10_40_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Nov2008_d3dx10_40_x86.cab
                                                                            • Size 945KB
                                                                            • SHA256 ec52b075a3e9c7fe468b317e0ff977964b1003d560065128741f4392bf47c49a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Nov2008_d3dx9_40_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Nov2008_d3dx9_40_x64.cab
                                                                            • Size 1.8MB
                                                                            • SHA256 9499871ec59f7f115f51399f21730734fa1037eb0c1ef9f1bd12c0479b216a6c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Nov2008_d3dx9_40_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Nov2008_d3dx9_40_x86.cab
                                                                            • Size 1.5MB
                                                                            • SHA256 863ac3438f57158d4f53900c6924bfdc132ab43a5af57d4658e65842836b4fa1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Nov2008_x3daudio_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Nov2008_x3daudio_x64.cab
                                                                            • Size 56KB
                                                                            • SHA256 4da03f7a174d276dbbbe469c12670fa85fe247428fd5033e93ccc3ae4d5f84da
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Nov2008_x3daudio_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Nov2008_x3daudio_x86.cab
                                                                            • Size 24KB
                                                                            • SHA256 8fbe56582e93b3277caf8660f689cc9e9fa6a33056d40a88d48f669a005430cb
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Nov2008_xact_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Nov2008_xact_x64.cab
                                                                            • Size 122KB
                                                                            • SHA256 636f4829ebbf2e9a1ebe572a0f0b7f8289089339cc38c7075f48fe4930134cc2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Nov2008_xact_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Nov2008_xact_x86.cab
                                                                            • Size 93KB
                                                                            • SHA256 3e804174d83cf4908cce7aac97756541a58c16372368904a253d10d64fb4d2a2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Nov2008_xaudio_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Nov2008_xaudio_x64.cab
                                                                            • Size 270KB
                                                                            • SHA256 63229aa8bd8e675b292c263fcad6b7868394ad29987d3f4db55f618359cb0681
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Nov2008_xaudio_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Nov2008_xaudio_x86.cab
                                                                            • Size 269KB
                                                                            • SHA256 cad128dc2e64a47f65bb44f43a5a0650b045a5dae34ce13f34817642c56e4721
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Oct2006_d3dx9_31_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Oct2006_d3dx9_31_x64.cab
                                                                            • Size 1.4MB
                                                                            • SHA256 4f5cffa56fd44f7775f12fc511a1e3f030c05ac78484f6866b12b82979067c22
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Oct2006_d3dx9_31_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Oct2006_d3dx9_31_x86.cab
                                                                            • Size 1.1MB
                                                                            • SHA256 4891e2dea9d1798f6a89308e58c61a38e612f8433301ea2376ae14c3dfcb3021
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Oct2006_xact_x64.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Oct2006_xact_x64.cab
                                                                            • Size 181KB
                                                                            • SHA256 662d4e5d005cdba02fabb0d7a68a7b48ecafdebe21718d892833d5c482e5add7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Oct2006_xact_x86.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\Oct2006_xact_x86.cab
                                                                            • Size 137KB
                                                                            • SHA256 f6b6ebc9c239c5263aafaa63fd691da5aa715e9c794d5fd663e86559d5c6ae56
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            dsetup.dll

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\dsetup.dll
                                                                            • Size 93KB
                                                                            • SHA256 57bc22850bb8e0bcc511a9b54cd3da18eec61f3088940c07d63b9b74e7fe2308
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            dsetup32.dll

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\dsetup32.dll
                                                                            • Size 1.5MB
                                                                            • SHA256 8a011da043a4b81e2b3d41a332e0ff23a65d546bd7636e8bc74885e8746927d6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            dxupdate.cab

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\dxupdate.cab
                                                                            • Size 98KB
                                                                            • SHA256 6e39b3fdb6722ea8aa0dc8f46ae0d8bd6496dd0f5f56bac618a0a7dd22d6cfb2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 111B
                                                                            • SHA256 e60413bec64775bf1933ef4f9673c8bcfbe0ce71e950fd589bbd14c0f9a00359
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 137B
                                                                            • SHA256 f960075a7b1c2590e18700f3230f7baea9aced3e6ba5dc93dac193027b5cec48
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 243B
                                                                            • SHA256 c9ebd0c038382084726724ee5203e547bb79c34a99e95bb4e1e9b4bfd8def35d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 384B
                                                                            • SHA256 df533eb9e0dbc2d1822963a5de20a7fecf8539e7308eb542653e6dcae9c82bb9
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 525B
                                                                            • SHA256 97d97b1c7f27857c71ad255d8127d6aee07ac9d9ff89cf26122d2b67725245dd
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 701B
                                                                            • SHA256 feb3c1ea7c6485de137868ae7c3959dc88a16982d3c7ae59c1e0cb654d68db5a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 846B
                                                                            • SHA256 f3b914fc3e918ae6f11f166cc1b4f9612d92d4dfc92603e617204b0a7feafc63
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 991B
                                                                            • SHA256 9190532c4c161017909da814751fe14ba1b750529c055e8db2d5630554c0e596
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 1KB
                                                                            • SHA256 54105c40e60d076517bc71a5594ce0adb7ad155c3eb9ea4baef272c3daf414fa
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 1KB
                                                                            • SHA256 39b61c1336e7bb95487dccaad47d33cff953589c17f51496a95342fcb17f148e
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 1KB
                                                                            • SHA256 f064b65618e11a6fef9253c955c36c8af441113aa7609822f2a02bf48c0ee3ff
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 1KB
                                                                            • SHA256 82cc97bae6609440ac13a3ea1d322213e157994e34ae69b007a84415f05500f7
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 1KB
                                                                            • SHA256 101654a7dcc364b91670353a4cd396204207866229ab9be7a648b5f66f9d9fff
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 1KB
                                                                            • SHA256 7c9f53aecd03fceab89cd51734197fb3d77b819c99a6af0fd9f8f5f9baa1e785
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 2KB
                                                                            • SHA256 13f74a30aba7102226de97797839832b44d9987ce7d23c2c711903a5709b25d4
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 2KB
                                                                            • SHA256 a8d4f0c54e8af1e6e537f0510983cd2cf477a698c84e270b1a778aa5093be456
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 2KB
                                                                            • SHA256 830f7d089d575cbfc227a0db375196a7d8d5078af42884e4582660bb2a4bb767
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 2KB
                                                                            • SHA256 36a9f0b234a4b274ad23d470224dcdab49a81a7f54bea7df9f0247a33a3ebf87
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 2KB
                                                                            • SHA256 6a19ec15b0a4911b2647f240bc43ad7d0b861d131acae2bb8f0eea2c94249399
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 2KB
                                                                            • SHA256 58fad17da80f0ab474f029b87f3b02d33876d4f098a9aa4f0923af347493c457
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 2KB
                                                                            • SHA256 95c5c1cd8a611b120d9679dee736734d5577f16b55b41de8bff677b5f9bc671a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 2KB
                                                                            • SHA256 f19333bf7528ed3ba989e5275f57d2b606689aeb748efdcdca218753044415fe
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 3KB
                                                                            • SHA256 35b2248915becaea7f1fea2fdde13aa5d71d6e762a7eed1d275f88f8b34449b5
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 3KB
                                                                            • SHA256 8e781f69d16f7836dfadd36f83c68c601580bec6de797d4ee64a48737d31e5ae
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 3KB
                                                                            • SHA256 d3a15b921d27ceb8d84477506f951082fbbd796e0fde794aedf2211628cfa955
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 3KB
                                                                            • SHA256 bc44383f783cede34268bb60584f5bbe3be0d2fbb6ba578f439a698690521af8
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 3KB
                                                                            • SHA256 696b358cad689b95026aedf733f462fdf565e21bb41b23652fba21216ed78d43
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 3KB
                                                                            • SHA256 e2edbf8e8bcf7edbe0671b9731ea75e377157c5fb89bf332aae3882c68647300
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            filelist.dat

                                                                            • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
                                                                            • Size 4KB
                                                                            • SHA256 57bc21b86044daf245e01b6e546994ae1ae05a5d7f9c4bf4f82f6f3435935514
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            SET9A88.tmp

                                                                            • Path C:\Windows\System32\SET9A88.tmp
                                                                            • Size 20KB
                                                                            • SHA256 7a34a7a8af47c6b2cf890ecb56bad2454ba5eb1ef2df6fad9ee53c4770e941cc
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            XAPOFX1_3.dll

                                                                            • Path C:\Windows\System32\XAPOFX1_3.dll
                                                                            • Size 71KB
                                                                            • SHA256 787e10d48d90db50dc155fca53fe8c5c1a383ca24d468733d4b8fe3acf2d0a34
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            msvcp140.dll

                                                                            • Path C:\Windows\System32\msvcp140.dll
                                                                            • Size 628KB
                                                                            • SHA256 7c26614e1d733892c2deac7e245ce115504b1d80592dd0a01b08e3e5a55f89ca
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            vcruntime140.dll

                                                                            • Path C:\Windows\System32\vcruntime140.dll
                                                                            • Size 174KB
                                                                            • SHA256 d1f4225df2cd877dbf130d5668a021dce3f94118455ff5ec952061c30afc9ce7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            vcruntime140_1.dll

                                                                            • Path C:\Windows\System32\vcruntime140_1.dll
                                                                            • Size 48KB
                                                                            • SHA256 a7146c08f89fe5b04541ab507cdb59ff7b44534d4ba3c668a426c6450a03434e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            x3daudio1_2.dll

                                                                            • Path C:\Windows\System32\x3daudio1_2.dll
                                                                            • Size 20KB
                                                                            • SHA256 b822d7de1253c52676f4e20f9c715e92759b43b69978dfef2527b6101e420ee6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            OLD96C0.tmp

                                                                            • Path C:\Windows\Temp\OLD96C0.tmp
                                                                            • Size 20KB
                                                                            • SHA256 9566e346fbf72928e9b48b3408c8336a9e77b331bbc729e8ced9f0670c51c699
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            OLDC179.tmp

                                                                            • Path C:\Windows\Temp\OLDC179.tmp
                                                                            • Size 71KB
                                                                            • SHA256 5f03017d3b51c1dc413952d21bf35ac660693c6f7539e8f8930ddd41d197a495
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            VC_redist.x64.exe

                                                                            • Path C:\Windows\Temp\{0035ADB5-EA3D-4C8F-B530-F19BAE38E723}\.cr\VC_redist.x64.exe
                                                                            • Size 615KB
                                                                            • SHA256 dbcc159853d8b83c1df0a0a698127ab98e926af1b6dee86e96f541dc94b34948
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            logo.png

                                                                            • Path C:\Windows\Temp\{0DB308C6-0321-44D9-B1FE-D2441445F5DA}\.ba\logo.png
                                                                            • Size 1KB
                                                                            • SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            wixstdba.dll

                                                                            • Path C:\Windows\Temp\{0DB308C6-0321-44D9-B1FE-D2441445F5DA}\.ba\wixstdba.dll
                                                                            • Size 215KB
                                                                            • SHA256 e921f69b9fb4b5ad4691809d06896c5f1d655ab75e0ce94a372319c243c56d4e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            cab2C04DDC374BD96EB5C8EB8208F2C7C92

                                                                            • Path C:\Windows\Temp\{0DB308C6-0321-44D9-B1FE-D2441445F5DA}\cab2C04DDC374BD96EB5C8EB8208F2C7C92
                                                                            • Size 5.4MB
                                                                            • SHA256 19c0cdc59ae89d0491c025a966f6d40515adc2449af40f2c6c6f52e2f293ad1c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            cab5046A8AB272BF37297BB7928664C9503

                                                                            • Path C:\Windows\Temp\{0DB308C6-0321-44D9-B1FE-D2441445F5DA}\cab5046A8AB272BF37297BB7928664C9503
                                                                            • Size 1.0MB
                                                                            • SHA256 6e8ee73933678c55973e83366e48e948b394c7a36743a36b7224c95de979b13f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            vcRuntimeAdditional_x64

                                                                            • Path C:\Windows\Temp\{0DB308C6-0321-44D9-B1FE-D2441445F5DA}\vcRuntimeAdditional_x64
                                                                            • Size 208KB
                                                                            • SHA256 476427800c1c958dc4e71d9a0f2f3983b2608da70835db9ee5f3b8ac387e9617
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            vcRuntimeMinimum_x64

                                                                            • Path C:\Windows\Temp\{0DB308C6-0321-44D9-B1FE-D2441445F5DA}\vcRuntimeMinimum_x64
                                                                            • Size 208KB
                                                                            • SHA256 bab5d0257e6a18a4a008e683442e3077b38172dd61af3cb1c588b46724a714e2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            wixstdba.dll

                                                                            • Path C:\Windows\Temp\{2C62EDF3-C792-4E22-A2EE-86F5DC4955C9}\.ba\wixstdba.dll
                                                                            • Size 191KB
                                                                            • SHA256 a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Microsoft.DirectX.AudioVideoPlayback.dll

                                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
                                                                            • Size 52KB
                                                                            • SHA256 406f473429573e9f0084aae125ef8f19f59291aa4c33cf7d40e7d996995a3238
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            __AssemblyInfo__.ini

                                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                            • Size 326B
                                                                            • SHA256 bbb2a2e58b45b65f3d4d9785f31b98ac58b33e3b2056efce68aab256b75d4580
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Microsoft.DirectX.Direct3DX.dll

                                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                            • Size 2.7MB
                                                                            • SHA256 5b70f0ac40a38c903062a12ff7cd71d907e75238a044ded9b34fb51e9a9a2799
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            __AssemblyInfo__.ini

                                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                            • Size 308B
                                                                            • SHA256 a4658455a45c8f3dbe7916b902e16063fe33a6e29498a396fa45430628b50353
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Microsoft.DirectX.Direct3DX.dll

                                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                            • Size 550KB
                                                                            • SHA256 8418941d8f1d4c84288e0bf54392378dd3d87b602bb693ff4f8a633022681c12
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            __AssemblyInfo__.ini

                                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                            • Size 308B
                                                                            • SHA256 5883f54beb17aa488b0c360fe392b44c2001d0be1185f52bf766b4f90d396746
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Microsoft.DirectX.Direct3DX.dll

                                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                            • Size 554KB
                                                                            • SHA256 f500c350dd71df7452b92444e19b4644b04283434a6557123f1e4d9fb078c3f8
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Microsoft.DirectX.Direct3DX.dll

                                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                            • Size 562KB
                                                                            • SHA256 5e90089e69e4f7e2e42ea4a81fb62005c3710d0a4acdf207b97ed03f5641d013
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            __AssemblyInfo__.ini

                                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                            • Size 308B
                                                                            • SHA256 ee54f4bb4c88d47d5af5e62d521368cf49e4a52a7856a035f6c72277658cb1c7
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Microsoft.DirectX.Direct3DX.dll

                                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                            • Size 564KB
                                                                            • SHA256 bebbc40ca25ef22e9d16b0de1123e0cb0444fe7a78b4f0b4395bdfd81618698c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            __AssemblyInfo__.ini

                                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                            • Size 308B
                                                                            • SHA256 db5a5479265e1dd8fe85ecda3d4ec5f4bb6b6545c849f19f9d93c44a79b19e78
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Microsoft.DirectX.Direct3DX.dll

                                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                            • Size 564KB
                                                                            • SHA256 36a21fc4f4c8f6ba4ad900613ee1b08ff43f2545585a2601c9fc4cf083d68a77
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            __AssemblyInfo__.ini

                                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                            • Size 308B
                                                                            • SHA256 cbde4772300555fbe0650b32fd0ddfd0a4b093f9412af2b2e3ddbad92a91f411
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Microsoft.DirectX.Direct3DX.dll

                                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                            • Size 565KB
                                                                            • SHA256 2ee41d4d591a39d648e90db4d47d0fa0557fd68197756ee2ee94fcde4d820cfa
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            __AssemblyInfo__.ini

                                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                            • Size 308B
                                                                            • SHA256 970bdbcdcff54a499e3b7dc277aa38fb5cd351512aa7efa5cb2bc128465b6804
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Microsoft.DirectX.DirectDraw.dll

                                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
                                                                            • Size 142KB
                                                                            • SHA256 ff4c03bbeb292317a77c86c1c81ae9564acb984b352fbef36d66e2d8bcbd79a8
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            __AssemblyInfo__.ini

                                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                            • Size 310B
                                                                            • SHA256 046c994ef6bde76c5423888c05247e4badb456e94da29a42cda35c7216e44b43
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Microsoft.DirectX.DirectSound.dll

                                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
                                                                            • Size 174KB
                                                                            • SHA256 2e28c8fb8b87b5ffd1e0ea27710a2e785ef4741a89e4b3c3af726ec63d15a1fa
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            __AssemblyInfo__.ini

                                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                            • Size 312B
                                                                            • SHA256 4827f3fe9d15c34fae2772a4989771f12d2e94b6abc9933b3dc71b38198286bb
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Jun2005_d3dx9_26_x86.cab

                                                                            • Path F:\msdownld.tmp\AS5D19DA.tmp\Jun2005_d3dx9_26_x86.cab
                                                                            • Size 1.0MB
                                                                            • SHA256 c44eabf5be3b87cd845950670c27f6a1e5d92b7758ba7c39c7849b1ee1c649c0
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2007_d3dx10_34_x64.cab

                                                                            • Path F:\msdownld.tmp\AS5DC31A.tmp\Jun2007_d3dx10_34_x64.cab
                                                                            • Size 685KB
                                                                            • SHA256 02ed1b5a850edb52ec174de177e91842edc7c5f4c06ceda5b16f3427dbcd4c99
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Feb2010_xaudio_x64.cab

                                                                            • Path F:\msdownld.tmp\AS5E30C8.tmp\Feb2010_xaudio_x64.cab
                                                                            • Size 273KB
                                                                            • SHA256 b99380971dccf9500604a39bcdf5db6f5d96b14519ec0bd575587638a0238099
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2010_d3dx9_43_x64.cab

                                                                            • Path F:\msdownld.tmp\AS5E31F1.tmp\Jun2010_d3dx9_43_x64.cab
                                                                            • Size 918KB
                                                                            • SHA256 810a07865b7fcaf0d7abebc86682479a05bccba71c69aa2d4ecbec3c88c8270e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Jun2010_d3dcsx_43_x64.cab

                                                                            • Path F:\msdownld.tmp\AS5E3695.tmp\Jun2010_d3dcsx_43_x64.cab
                                                                            • Size 738KB
                                                                            • SHA256 ca1b0022af12f048586761439e152d1157eddb7153c031e075ab8d946173d31e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            memory/2144-1296-0x0000000000AC0000-0x0000000000B37000-memory.dmp

                                                                            memory/2868-1298-0x0000000000AC0000-0x0000000000B37000-memory.dmp

                                                                            memory/2880-20636-0x0000000000970000-0x00000000009D9000-memory.dmp

                                                                            memory/4032-1299-0x0000000000AC0000-0x0000000000B37000-memory.dmp

                                                                            memory/10624-18235-0x00000000021F0000-0x000000000224C000-memory.dmp