Analysis

  • geolocation tags

    eueuropefrfrance
  • user interaction
    yes
  • max time kernel
    177s
  • max time network
    181s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    09/08/2026, 06:20

General

  • Target
    Installer-1.0.7 (1).exe
  • Size 9.8MB
  • Sample260809-g3wsbascka
  • SHA256 48f359326787a848b89d838a318d797c51fd7feeeee602fff5f46b9d3f7b53ce
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Command and Scripting Interpreter: PowerShell 1 TTPs 3 IoCs

    Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

  • Executes dropped EXE 4 IoCs
  • Loads dropped DLL 4 IoCs
  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies registry key 1 TTPs 7 IoCs
  • Suspicious behavior: EnumeratesProcesses 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 27 IoCs
  • Suspicious use of SetWindowsHookEx 7 IoCs
  • Suspicious use of WriteProcessMemory 16 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Installer-1.0.7 (1).exe
    "C:\Users\Admin\AppData\Local\Temp\Installer-1.0.7 (1).exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3136
    • C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-41A1468E-0F13-4352-95A8-977FC8969962\MadiumInstaller.exe
      "C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-41A1468E-0F13-4352-95A8-977FC8969962\MadiumInstaller.exe" --from-sfx --first-install
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1192
      • C:\Users\Admin\AppData\Local\Madium\Installer\MadiumInstaller.exe
        C:\Users\Admin\AppData\Local\Madium\Installer\MadiumInstaller.exe --installed
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:5520
        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
          "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass -Command "$ErrorActionPreference='Stop'; if ($null -eq (Get-Command Get-MpComputerStatus -ErrorAction SilentlyContinue)) { exit 0 }; $status=Get-MpComputerStatus -ErrorAction SilentlyContinue; if ($null -eq $status -or $status.AntivirusEnabled -ne $true) { exit 0 }; $p='C:\Users\Admin\AppData\Local\Madium'.TrimEnd('\'); $current=@((Get-MpPreference -ErrorAction Stop).ExclusionPath); $has=@($current | Where-Object { $_ -and $_.TrimEnd('\') -ieq $p }).Count -gt 0; if (-not $has) { Add-MpPreference -ExclusionPath $p -ErrorAction Stop; $current=@((Get-MpPreference -ErrorAction Stop).ExclusionPath); $has=@($current | Where-Object { $_ -and $_.TrimEnd('\') -ieq $p }).Count -gt 0; if (-not $has) { throw 'Defender did not save the exclusion.' } }"
          4⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:4312
        • C:\Program Files\dotnet\dotnet.exe
          dotnet.exe --list-runtimes
          4⤵
          • System Time Discovery
          PID:3124
        • C:\Windows\System32\reg.exe
          C:\Windows\System32\reg.exe query HKLM\SOFTWARE\Microsoft\VisualStudio\14.0\VC\Runtimes\x64 /v Installed
          4⤵
          • Modifies registry key
          PID:5012
        • C:\Windows\System32\reg.exe
          C:\Windows\System32\reg.exe query HKLM\SOFTWARE\WOW6432Node\Microsoft\VisualStudio\14.0\VC\Runtimes\x64 /v Installed
          4⤵
          • Modifies registry key
          PID:756
        • C:\Windows\System32\reg.exe
          C:\Windows\System32\reg.exe query HKLM\SOFTWARE\Microsoft\VisualStudio\14.0\VC\Runtimes\x86 /v Installed
          4⤵
          • Modifies registry key
          PID:5812
        • C:\Windows\System32\reg.exe
          C:\Windows\System32\reg.exe query HKLM\SOFTWARE\WOW6432Node\Microsoft\VisualStudio\14.0\VC\Runtimes\x86 /v Installed
          4⤵
          • Modifies registry key
          PID:3156
        • C:\Windows\System32\reg.exe
          C:\Windows\System32\reg.exe query HKLM\SOFTWARE\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} /v pv
          4⤵
          • Modifies registry key
          PID:4052
        • C:\Windows\System32\reg.exe
          C:\Windows\System32\reg.exe query HKLM\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} /v pv
          4⤵
          • Modifies registry key
          PID:5696
        • C:\Windows\System32\reg.exe
          C:\Windows\System32\reg.exe query HKCU\Software\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} /v pv
          4⤵
          • Modifies registry key
          PID:4948
        • C:\Windows\System32\reg.exe
          C:\Windows\System32\reg.exe query "HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full" /v Release
          4⤵
            PID:3108
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -NoLogo -NoProfile -NonInteractive -Command "$sig = Get-AuthenticodeSignature -LiteralPath 'C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-redist.exe'; if ($sig.Status -eq 'Valid') { exit 0 }; exit 1"
            4⤵
            • Command and Scripting Interpreter: PowerShell
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:4140
          • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
            "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\install.ps1"
            4⤵
            • Command and Scripting Interpreter: PowerShell
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of WriteProcessMemory
            PID:5212
            • C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-redist.exe
              "C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-redist.exe" /Q /T:"C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files"
              5⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:3804
            • C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\DXSETUP.exe
              "C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\DXSETUP.exe" /silent
              5⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Drops file in Windows directory
              • System Location Discovery: System Language Discovery
              PID:800
              • C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\infinst.exe
                C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\infinst.exe d3dx9_24_x64.inf
                6⤵
                  PID:4592
                • C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\infinst.exe d3dx9_25_x64.inf
                  6⤵
                    PID:984
                  • C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\infinst.exe
                    C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\infinst.exe d3dx9_26_x64.inf
                    6⤵
                      PID:5616
                    • C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\infinst.exe
                      C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\infinst.exe d3dx9_27_x64.inf
                      6⤵
                        PID:1876
                      • C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\infinst.exe
                        C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\infinst.exe d3dx9_28_x64.inf
                        6⤵
                          PID:4428
                        • C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\infinst.exe
                          C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\infinst.exe d3dx9_29_x64.inf
                          6⤵
                            PID:1348
                          • C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\infinst.exe
                            C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\infinst.exe XACT_x64.inf
                            6⤵
                              PID:4908
                            • C:\Windows\system32\regsvr32.exe
                              C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_0.dll
                              6⤵
                                PID:2768
                    • C:\Windows\system32\svchost.exe
                      C:\Windows\system32\svchost.exe -k GPSvcGroup
                      1⤵
                        PID:3204
                      • C:\Windows\system32\vssvc.exe
                        C:\Windows\system32\vssvc.exe
                        1⤵
                        • Checks SCSI registry key(s)
                        • Suspicious use of AdjustPrivilegeToken
                        PID:3624
                      • C:\Windows\system32\srtasks.exe
                        C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
                        1⤵
                          PID:2608

                        Network

                              MITRE ATT&CK Enterprise v16

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads

                              Madium.exe.download

                              • Path C:\Users\Admin\AppData\Local\Madium\Bin\Madium.exe.download
                              • Size 12.0MB
                              • SHA256 031e36ef302fcfc8527ec40cced1b9b6bfa2508493a8744932fd6403fc0edc51
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Apr2005_d3dx9_25_x64.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2005_d3dx9_25_x64.cab
                              • Size 1.3MB
                              • SHA256 b4188ce988af9c4771ae0abcc7edc42a091133f9f20196564f51755dc55ea85d
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Apr2005_d3dx9_25_x86.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2005_d3dx9_25_x86.cab
                              • Size 1.0MB
                              • SHA256 6ebfb6ed6ac0b69502a5b74e2edca188872fe767269c4ebf62f174157d198de4
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Apr2006_MDX1_x86.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2006_MDX1_x86.cab
                              • Size 894KB
                              • SHA256 0e3b4b9d5a45884620820d0e9cfed852b03dfb44e443179a35e93f3183384db3
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Apr2006_MDX1_x86_Archive.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2006_MDX1_x86_Archive.cab
                              • Size 4.0MB
                              • SHA256 0a051a9b50f58dc631254102ac885942ced67c2911950de0cdd93cd1cd9453ec
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Apr2006_XACT_x64.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2006_XACT_x64.cab
                              • Size 174KB
                              • SHA256 002f45af20e43a24abee7a79c5add11987c88140b84e2ecd33c0c67259c7f71b
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Apr2006_XACT_x86.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2006_XACT_x86.cab
                              • Size 129KB
                              • SHA256 875662d0fc1fe865bf43e7279fd391e88f96b3141c1a829ab3080d547501ff8f
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Apr2006_d3dx9_30_x64.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2006_d3dx9_30_x64.cab
                              • Size 1.3MB
                              • SHA256 079f61e155695a61a0ce009ee00cf76fbf6b2b9b412c1a5b4a2035d4b5c90a5b
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Apr2006_d3dx9_30_x86.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2006_d3dx9_30_x86.cab
                              • Size 1.1MB
                              • SHA256 4b5da79e14ef58f2608fc5ccedfc7c6c6f782291aa5573f36af76f2903173db5
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Apr2006_xinput_x64.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2006_xinput_x64.cab
                              • Size 85KB
                              • SHA256 48da57aa045a877053a481802fdb3ec5782615d9ad85a8c06612bd80272e75d7
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Apr2006_xinput_x86.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2006_xinput_x86.cab
                              • Size 44KB
                              • SHA256 a9b3dd45926364d79b42b75d8064c814ff428437143c59b1c703ec8323305fbb
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Aug2005_d3dx9_27_x64.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Aug2005_d3dx9_27_x64.cab
                              • Size 1.3MB
                              • SHA256 281d20c56caa3a2851199c028d4d20ef0a862cc3f84b165eb200da573d9e4401
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Aug2005_d3dx9_27_x86.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Aug2005_d3dx9_27_x86.cab
                              • Size 1.0MB
                              • SHA256 7a10900872ecd9bdbc8f7beb7869a260fa4b25e34084f237f1b096df5371c273
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Aug2006_XACT_x64.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Aug2006_XACT_x64.cab
                              • Size 178KB
                              • SHA256 beaac99fd17bc9fa85a2a220a13d8c13bd90f66eee595cbd27ab9aaadc234b03
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Aug2006_XACT_x86.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Aug2006_XACT_x86.cab
                              • Size 134KB
                              • SHA256 cd2e1256efa1723eb77c77440f7b72f0eed8c0df17677cd4cc5a95a65a0f4849
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Aug2006_xinput_x64.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Aug2006_xinput_x64.cab
                              • Size 85KB
                              • SHA256 a54c7820f37b5e70068b801263c7efcc26b6404555a968094227e8bbaf5c22c5
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Aug2006_xinput_x86.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Aug2006_xinput_x86.cab
                              • Size 44KB
                              • SHA256 ad2b521d1a7abca6314eaeacb23690b63b2a17adbb2a47d3d69cc4660c7d2152
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Dec2005_d3dx9_28_x64.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Dec2005_d3dx9_28_x64.cab
                              • Size 1.3MB
                              • SHA256 8231b38a0ab70018f15d7239ed96e5f2bc89ddae6cf9650c9d7bd052b96877e3
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Dec2005_d3dx9_28_x86.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Dec2005_d3dx9_28_x86.cab
                              • Size 1.0MB
                              • SHA256 bdee0708db956a4ce59220626106a2df70ede2e1e32f29e432254b04876fa7b9
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Feb2005_d3dx9_24_x64.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2005_d3dx9_24_x64.cab
                              • Size 1.2MB
                              • SHA256 48eeeecd6411039b23f32b7b22c8d40bce45280af5f8b066edd6cf30284b90ca
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Feb2005_d3dx9_24_x86.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2005_d3dx9_24_x86.cab
                              • Size 989KB
                              • SHA256 12e2aab3dbaee503724a5505a6f6951f07306578801a4b5b6b9b54514275ce79
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Feb2006_XACT_x64.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2006_XACT_x64.cab
                              • Size 174KB
                              • SHA256 ea39caab8e071df53c2f44c19fb2ff6e2f6af4ef47f0c66d8e7b1b0918d6745f
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Feb2006_XACT_x86.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2006_XACT_x86.cab
                              • Size 129KB
                              • SHA256 633a1fe357e57bbb8e058e1e029f61f379ab936a85c5d30ee442d804a1806868
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Feb2006_d3dx9_29_x64.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2006_d3dx9_29_x64.cab
                              • Size 1.3MB
                              • SHA256 405bd17fe25128a91693807a6008031d87c005ba93d016cbab6276891d3bc6bb
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Feb2006_d3dx9_29_x86.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2006_d3dx9_29_x86.cab
                              • Size 1.0MB
                              • SHA256 20231448d5d74b7df1e43d796d76381d563699f81944c7ad9ccbcc1a77a5591e
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Jun2005_d3dx9_26_x64.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Jun2005_d3dx9_26_x64.cab
                              • Size 1.3MB
                              • SHA256 7237630b897ce760948d9144151ef27c0699fb76150b5f157676fa2d220a236f
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Jun2005_d3dx9_26_x86.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Jun2005_d3dx9_26_x86.cab
                              • Size 1.0MB
                              • SHA256 b448d7ba5b6fe1dc27639d42eb6ba0a997a793135678c729ba6756cfe4efc38b
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Jun2006_XACT_x64.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Jun2006_XACT_x64.cab
                              • Size 176KB
                              • SHA256 e7bddd9db994cbb19671d45216edf40ffb3a77068cc97fbeb4c4e41e0d073501
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Jun2006_XACT_x86.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Jun2006_XACT_x86.cab
                              • Size 130KB
                              • SHA256 c1a1348611259756b5921d43f9fd9f2a5b40a48af88ea679a40263a2aca029ec
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Oct2005_xinput_x64.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Oct2005_xinput_x64.cab
                              • Size 84KB
                              • SHA256 10f2bcfcc38d3150bc80eb0030a1cd40084f1ec028dc927543c485d54ec35022
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Oct2005_xinput_x86.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Oct2005_xinput_x86.cab
                              • Size 44KB
                              • SHA256 f2d475864e34409fb586093f92390e1f47403867c39ac30918941f19f3fccb0f
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Oct2006_XACT_x86.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Oct2006_XACT_x86.cab
                              • Size 134KB
                              • SHA256 65916ca9db2d3eeb6a44f19a19c4254ca4fc1795bad81fda35e028d9b62e1d3d
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Oct2006_d3dx9_31_x64.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Oct2006_d3dx9_31_x64.cab
                              • Size 1.3MB
                              • SHA256 3cf78eeedcddddaf131af35cc68c218685c133326ff2876cb821096ed7ebf0c8
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Oct2006_d3dx9_31_x86.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Oct2006_d3dx9_31_x86.cab
                              • Size 1.1MB
                              • SHA256 fd8c9c23aea007aa92eca130446913ef04d9fc78e0e6fc3c49c25d210889de61
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              dxdllreg_x86.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\dxdllreg_x86.cab
                              • Size 43KB
                              • SHA256 4afe0249a13868b7c4a92b4d53c998adf6053eb5e2c47fd81020fd8d4bb11150
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              dxupdate.cab

                              • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\dxupdate.cab
                              • Size 94KB
                              • SHA256 e18a5404b612e88fa8b403c9b33f064c0a89528db7ef9a79aa116908d0e6afed
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              DSETUP32.DLL

                              • Path C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\DSETUP32.DLL
                              • Size 1.5MB
                              • SHA256 fb0e534f9b0926e518f1c2980640dfd29f14217cdfa37cf3a0c13349127ed9a8
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              DXSETUP.exe

                              • Path C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\DXSETUP.exe
                              • Size 505KB
                              • SHA256 8f47d7121ef6532ad9ad9901e44e237f5c30448b752028c58a9d19521414e40d
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              dsetup.dll

                              • Path C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\dsetup.dll
                              • Size 93KB
                              • SHA256 2a61679eeedabf7d0d0ac14e5447486575622d6b7cfa56f136c1576ff96da21f
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              install.ps1

                              • Path C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\install.ps1
                              • Size 2KB
                              • SHA256 7f7eb8cf4fba079948705a83f968f52937c9f1733e752eda436ba6319cd5bece
                              • MD5 SHA1 SHA512 TLSH

                              StartupProfileData-NonInteractive

                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                              • Size 1KB
                              • SHA256 d59cebc39773c3dbf04604beacacc2fc7ba26a712c80dd120c038b2cd57ae4e5
                              • MD5 SHA1 SHA512 TLSH

                              StartupProfileData-NonInteractive

                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                              • Size 1KB
                              • SHA256 6ded12af55f8651130087324838242ea40ee2e5c4fd4cda091a79fc95906ee99
                              • MD5 SHA1 SHA512 TLSH

                              AUG2009_D3DCompiler_42_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\AUG2009_D3DCompiler_42_x64.inf
                              • Size 830B
                              • SHA256 8977772e5392b8e79364b3b8d97300e97ad891f38d5a2dd306549401e46b05ff
                              • MD5 SHA1 SHA512 TLSH

                              AUG2009_D3DCompiler_42_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\AUG2009_D3DCompiler_42_x86.inf
                              • Size 1KB
                              • SHA256 bb8834d2366f6899c507bae176a13dadbd44488451a263eac830be95f4bad43f
                              • MD5 SHA1 SHA512 TLSH

                              AUG2009_XACT_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\AUG2009_XACT_x64.inf
                              • Size 920B
                              • SHA256 5d57466af1801ff3a92b1540907f0e4b91d90189177d68c6b4c8833e5d57dec3
                              • MD5 SHA1 SHA512 TLSH

                              AUG2009_XACT_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\AUG2009_XACT_x86.inf
                              • Size 1KB
                              • SHA256 1eb88b5460824fd32eec9b90e7ef5cb529f51215046e539d39fa27a409709766
                              • MD5 SHA1 SHA512 TLSH

                              AUG2009_XAudio_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\AUG2009_XAudio_x64.inf
                              • Size 923B
                              • SHA256 4348663aa7cfe22916fb13d93307e7384376fad9d6fa34c6196f80df42c61a33
                              • MD5 SHA1 SHA512 TLSH

                              AUG2009_XAudio_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\AUG2009_XAudio_x86.inf
                              • Size 1KB
                              • SHA256 842cc52100b5774bcda19e40837bd552b308e74829d5b35a505822c7436892e1
                              • MD5 SHA1 SHA512 TLSH

                              AUG2009_d3dcsx_42_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\AUG2009_d3dcsx_42_x64.inf
                              • Size 815B
                              • SHA256 f7a5a84bb654837193e0f40b579777f5c6cc2c7341cf90503d6a6709d319797f
                              • MD5 SHA1 SHA512 TLSH

                              AUG2009_d3dcsx_42_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\AUG2009_d3dcsx_42_x86.inf
                              • Size 1KB
                              • SHA256 ff9da1b0328fd918cf9558ee57387a4865afe98db1410cc16b1e921c5a744c48
                              • MD5 SHA1 SHA512 TLSH

                              AUG2009_d3dx10_42_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\AUG2009_d3dx10_42_x64.inf
                              • Size 815B
                              • SHA256 2bfdd3d3bf485439013045b3a08942f457385bb89ab76d9479fbdd85f09e9d96
                              • MD5 SHA1 SHA512 TLSH

                              AUG2009_d3dx10_42_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\AUG2009_d3dx10_42_x86.inf
                              • Size 1KB
                              • SHA256 a80a00464775da82c02f628c5bc13cab0d0643ec2a44b28d2acf7c77d467becf
                              • MD5 SHA1 SHA512 TLSH

                              AUG2009_d3dx11_42_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\AUG2009_d3dx11_42_x64.inf
                              • Size 815B
                              • SHA256 f9c13939779d4526107cf7d3554c122efb564cff02228d02b0b6ff211904f5dd
                              • MD5 SHA1 SHA512 TLSH

                              AUG2009_d3dx11_42_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\AUG2009_d3dx11_42_x86.inf
                              • Size 1KB
                              • SHA256 edf6764083b47c04fda52b149f565587c6a07d4455357fe3c27c9e56cc57a94d
                              • MD5 SHA1 SHA512 TLSH

                              AUG2009_d3dx9_42_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\AUG2009_d3dx9_42_x64.inf
                              • Size 812B
                              • SHA256 4887cbec8545b02152eb16f6296987a43a256b69b408330eaee362184f298d98
                              • MD5 SHA1 SHA512 TLSH

                              AUG2009_d3dx9_42_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\AUG2009_d3dx9_42_x86.inf
                              • Size 1KB
                              • SHA256 5989dc367a8f84815bcfa1c46ff756527c6250c62973220d1af354b70027eaf2
                              • MD5 SHA1 SHA512 TLSH

                              Aug2008_XACT_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Aug2008_XACT_x64.inf
                              • Size 920B
                              • SHA256 cf09d632a4b2cc670d435f356f309dc58359735834baed10343fdfbf37eddaa1
                              • MD5 SHA1 SHA512 TLSH

                              Aug2008_XACT_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Aug2008_XACT_x86.inf
                              • Size 1KB
                              • SHA256 f1daaa8d96108a4a338f62a4a1339143ddc566e194ca00dde5427136bfccb0af
                              • MD5 SHA1 SHA512 TLSH

                              Aug2008_XAudio_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Aug2008_XAudio_x64.inf
                              • Size 923B
                              • SHA256 311bd58ed7437a1cc79692ae360a02efbc8ec51194abcb80bad78b2208a94d58
                              • MD5 SHA1 SHA512 TLSH

                              Aug2008_XAudio_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Aug2008_XAudio_x86.inf
                              • Size 1KB
                              • SHA256 f211a7d99b3ffa0180bd91f68b2c285564227e075d499e950e76fde04e7707e3
                              • MD5 SHA1 SHA512 TLSH

                              Aug2008_d3dx10_39_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Aug2008_d3dx10_39_x64.inf
                              • Size 815B
                              • SHA256 a5eab981c313538afcd7abc7742854d251c736835ffc1f549a4768fdf49c3e71
                              • MD5 SHA1 SHA512 TLSH

                              Aug2008_d3dx10_39_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Aug2008_d3dx10_39_x86.inf
                              • Size 1KB
                              • SHA256 e83f8d48323887af89648c5bd7af713b42d20ccb757be34675f1fa527e6cc33f
                              • MD5 SHA1 SHA512 TLSH

                              Aug2008_d3dx9_39_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Aug2008_d3dx9_39_x64.inf
                              • Size 812B
                              • SHA256 4cbb1c6804b9c76bba4e41f0d2a45f1daba7350af9da4ae6966651f7f4da041a
                              • MD5 SHA1 SHA512 TLSH

                              Aug2008_d3dx9_39_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Aug2008_d3dx9_39_x86.inf
                              • Size 1KB
                              • SHA256 8a23d386626328f9519076f33d5c3b71c639f2347741442c3374974e6f61bd53
                              • MD5 SHA1 SHA512 TLSH

                              FEB2010_X3DAudio_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\FEB2010_X3DAudio_x64.inf
                              • Size 815B
                              • SHA256 68351f03f4ef83e4b8c359e3e130441081690a1866b838a1b35d64674ef3abbf
                              • MD5 SHA1 SHA512 TLSH

                              FEB2010_X3DAudio_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\FEB2010_X3DAudio_x86.inf
                              • Size 1KB
                              • SHA256 d4da3e530982812d1e2a31570b80af541fac1b13c72997d2aad7ea3bfeaf4a4a
                              • MD5 SHA1 SHA512 TLSH

                              FEB2010_XACT_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\FEB2010_XACT_x64.inf
                              • Size 920B
                              • SHA256 c7efd1ec4e4d31644a5054d32cc1e6795464472c05439573ae93e1727a5eea4a
                              • MD5 SHA1 SHA512 TLSH

                              FEB2010_XACT_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\FEB2010_XACT_x86.inf
                              • Size 1KB
                              • SHA256 e850fdb84bcac0f667927e53fee943efd3f43be6c6a0ae1e17f3fff83ddb2635
                              • MD5 SHA1 SHA512 TLSH

                              FEB2010_XAudio_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\FEB2010_XAudio_x64.inf
                              • Size 923B
                              • SHA256 da63330fd2a1538b714ee6cf2e09256446a04a55f866b3f70237d8a7165cb3e3
                              • MD5 SHA1 SHA512 TLSH

                              FEB2010_XAudio_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\FEB2010_XAudio_x86.inf
                              • Size 1KB
                              • SHA256 74c827ef94881099761e04397ef8f162fd0ccaf4876a5503c4b53a5216d2acca
                              • MD5 SHA1 SHA512 TLSH

                              JUN2010_D3DCompiler_43_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\JUN2010_D3DCompiler_43_x64.inf
                              • Size 830B
                              • SHA256 3e779533a273e3395109c7efac13ba1c804c01b3ddb16938406fbdf90d851216
                              • MD5 SHA1 SHA512 TLSH

                              JUN2010_D3DCompiler_43_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\JUN2010_D3DCompiler_43_x86.inf
                              • Size 1KB
                              • SHA256 5dd568919e1b3cbcb23ab21d0f2d6c1a065070848aba5d2a896da39e55c6cbbf
                              • MD5 SHA1 SHA512 TLSH

                              JUN2010_XACT_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\JUN2010_XACT_x64.inf
                              • Size 920B
                              • SHA256 f3c288d84db29f7bc4d2c771341f765b5e1940a4827fcb55a65b48eec83c71d3
                              • MD5 SHA1 SHA512 TLSH

                              JUN2010_XACT_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\JUN2010_XACT_x86.inf
                              • Size 1KB
                              • SHA256 ca604ce9d2ee43a09b39b23a6a2a048b1a79d85c7d78679cc73aacc75cf7a62e
                              • MD5 SHA1 SHA512 TLSH

                              JUN2010_XAudio_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\JUN2010_XAudio_x64.inf
                              • Size 923B
                              • SHA256 1a0f1b929724f8b71d5ce922f19b9d539d2d804c89af947d5927b049ef0fd3d8
                              • MD5 SHA1 SHA512 TLSH

                              JUN2010_XAudio_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\JUN2010_XAudio_x86.inf
                              • Size 1KB
                              • SHA256 d786d06a709d5dc26067132b9735fc317763fcf8064442d6f77f65012ba179da
                              • MD5 SHA1 SHA512 TLSH

                              JUN2010_d3dcsx_43_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\JUN2010_d3dcsx_43_x64.inf
                              • Size 815B
                              • SHA256 5289b5ad22146d7cc0c35cdb2c9662742693550de8f013d1ec40e944288d155a
                              • MD5 SHA1 SHA512 TLSH

                              JUN2010_d3dcsx_43_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\JUN2010_d3dcsx_43_x86.inf
                              • Size 1KB
                              • SHA256 d5200b332caf4fff25eb3d224527a3944878c5c3849512779a2afcfeae4c3ca1
                              • MD5 SHA1 SHA512 TLSH

                              JUN2010_d3dx10_43_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\JUN2010_d3dx10_43_x64.inf
                              • Size 815B
                              • SHA256 a65f370a741d62c2be0ca588758d089dd976092cb910bb6b1b7d008741e18377
                              • MD5 SHA1 SHA512 TLSH

                              JUN2010_d3dx10_43_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\JUN2010_d3dx10_43_x86.inf
                              • Size 1KB
                              • SHA256 4d4263cbb11858c727824c4a071f992909675719be3076b4a47852bf6affd862
                              • MD5 SHA1 SHA512 TLSH

                              JUN2010_d3dx11_43_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\JUN2010_d3dx11_43_x64.inf
                              • Size 815B
                              • SHA256 2c4cf75b76203cba6378693668c8c00b564871c8bfd7fbda01e1e841477b2a3b
                              • MD5 SHA1 SHA512 TLSH

                              JUN2010_d3dx11_43_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\JUN2010_d3dx11_43_x86.inf
                              • Size 1KB
                              • SHA256 3925c924eb4ec4f5a643b2d14d2eda603341fbbd22118cdd8ae04aaa96f443c0
                              • MD5 SHA1 SHA512 TLSH

                              JUN2010_d3dx9_43_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\JUN2010_d3dx9_43_x64.inf
                              • Size 812B
                              • SHA256 272650a2d9b1cfea17021f4bf941b21f2206791e279070d4e906ce0ce56ac16f
                              • MD5 SHA1 SHA512 TLSH

                              JUN2010_d3dx9_43_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\JUN2010_d3dx9_43_x86.inf
                              • Size 1KB
                              • SHA256 6b33d32da02f664092d44b05237990f825b4062c105a063badcf978648b5e95b
                              • MD5 SHA1 SHA512 TLSH

                              Jun2008_X3DAudio_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Jun2008_X3DAudio_x64.inf
                              • Size 815B
                              • SHA256 f4526ad18f081b84a139e6d98923569fc8ffc7644e20499e2f68abfb3e87753e
                              • MD5 SHA1 SHA512 TLSH

                              Jun2008_X3DAudio_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Jun2008_X3DAudio_x86.inf
                              • Size 1KB
                              • SHA256 0064b7db5bfe52b6f40f61d962901c7baa116abbc72328f50586b6fa65f894bd
                              • MD5 SHA1 SHA512 TLSH

                              Jun2008_XACT_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Jun2008_XACT_x64.inf
                              • Size 920B
                              • SHA256 90577c4c3d5d0de80c805caf0cc713582698ef7224fecf4ff911ba6309c5c920
                              • MD5 SHA1 SHA512 TLSH

                              Jun2008_XACT_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Jun2008_XACT_x86.inf
                              • Size 1KB
                              • SHA256 79cb10222e466d54908d30ee433830e9673d5a538fabc5f4568521c2aff66eb1
                              • MD5 SHA1 SHA512 TLSH

                              Jun2008_XAudio_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Jun2008_XAudio_x64.inf
                              • Size 923B
                              • SHA256 9ce21064f2feed9bc9426a6e92e9c850aae31abeb80c7906ff917fbf4cc03913
                              • MD5 SHA1 SHA512 TLSH

                              Jun2008_XAudio_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Jun2008_XAudio_x86.inf
                              • Size 1KB
                              • SHA256 e5e435c4536f987e1087218b025e6dc66c24c3e300e839391891f1b3bfd360dd
                              • MD5 SHA1 SHA512 TLSH

                              Jun2008_d3dx10_38_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Jun2008_d3dx10_38_x64.inf
                              • Size 815B
                              • SHA256 0de0ada970774620c0905227666fc30910e64f3cfa4b99e4c5481685d12e3ded
                              • MD5 SHA1 SHA512 TLSH

                              Jun2008_d3dx10_38_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Jun2008_d3dx10_38_x86.inf
                              • Size 1KB
                              • SHA256 f5f54664ec67f6333a9f0607d891bd0dc2acfee8cce09ac4ee0372b5d0aa12fd
                              • MD5 SHA1 SHA512 TLSH

                              Jun2008_d3dx9_38_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Jun2008_d3dx9_38_x64.inf
                              • Size 812B
                              • SHA256 ddad68974990a21a8d4a91c47ef1034ddf0475551586f04e86b8cd2f0c990d6f
                              • MD5 SHA1 SHA512 TLSH

                              Jun2008_d3dx9_38_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Jun2008_d3dx9_38_x86.inf
                              • Size 1KB
                              • SHA256 06faf7f7ea5503dcece13d6537e57cd2581d5188a5d839fe7f118298a721b51a
                              • MD5 SHA1 SHA512 TLSH

                              Mar2008_X3DAudio_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2008_X3DAudio_x64.inf
                              • Size 815B
                              • SHA256 b7dba312a71ed109c9c54cc5cc096096eb8cf0962396e8dc996f8fa28307547c
                              • MD5 SHA1 SHA512 TLSH

                              Mar2008_X3DAudio_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2008_X3DAudio_x86.inf
                              • Size 1KB
                              • SHA256 0b6e28f00364a9ff436c3d99f0d4e80bf615f1450f420122324853cc0b88b16c
                              • MD5 SHA1 SHA512 TLSH

                              Mar2008_XACT_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2008_XACT_x64.inf
                              • Size 920B
                              • SHA256 1038a41e63ee8abbc8be85a86fafb2ac1d03defa6b88deb270f96a6ed1a97122
                              • MD5 SHA1 SHA512 TLSH

                              Mar2008_XACT_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2008_XACT_x86.inf
                              • Size 1KB
                              • SHA256 6b0cc0dc993e172855864fa078c4e5c8f2f46bfc3200bf2ccdf3292931ee3cb2
                              • MD5 SHA1 SHA512 TLSH

                              Mar2008_XAudio_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2008_XAudio_x64.inf
                              • Size 923B
                              • SHA256 10a2db49dd3bea59133bbd82b3fc0f8a959b65b0c250c11a9a6f3123b961e6e9
                              • MD5 SHA1 SHA512 TLSH

                              Mar2008_XAudio_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2008_XAudio_x86.inf
                              • Size 1KB
                              • SHA256 472bcfb54b5d63377da128596dfb30c8f200f79edaaf6d29de1afcdb71a3413d
                              • MD5 SHA1 SHA512 TLSH

                              Mar2008_d3dx10_37_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2008_d3dx10_37_x64.inf
                              • Size 815B
                              • SHA256 f37681f4d49f71d48b1960c3efac74f28af9fa764b29ed3a40b5f424fc8f60c9
                              • MD5 SHA1 SHA512 TLSH

                              Mar2008_d3dx10_37_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2008_d3dx10_37_x86.inf
                              • Size 1KB
                              • SHA256 bae3bc2b7071d2d1c657a87a8c8af6c0fb5373f11c9aa5f61b406924717d0792
                              • MD5 SHA1 SHA512 TLSH

                              Mar2008_d3dx9_37_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2008_d3dx9_37_x64.inf
                              • Size 812B
                              • SHA256 a4fda3373241c2748a969ddeeb6ef41b3cc1bca6608362ba87db75f69023fe9c
                              • MD5 SHA1 SHA512 TLSH

                              Mar2008_d3dx9_37_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2008_d3dx9_37_x86.inf
                              • Size 1KB
                              • SHA256 d55858e166a2fe00d4acc30da756f0ab2c4dd5a79a9874eab3100722c74a1b75
                              • MD5 SHA1 SHA512 TLSH

                              Mar2009_X3DAudio_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2009_X3DAudio_x64.inf
                              • Size 815B
                              • SHA256 4da1a6bbcb7e84073dcd1898f854702ec32f5324478b2fa39c4a9868abeecd3b
                              • MD5 SHA1 SHA512 TLSH

                              Mar2009_X3DAudio_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2009_X3DAudio_x86.inf
                              • Size 1KB
                              • SHA256 aabd029d75f25244bae4ca17dbf9c4feebec0d5f121fcd388c175c3360be1bac
                              • MD5 SHA1 SHA512 TLSH

                              Mar2009_XACT_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2009_XACT_x64.inf
                              • Size 920B
                              • SHA256 9369fb0a9d3353627c097fc19780e5e7126af47766ef6a4a95ff3ddcca56691e
                              • MD5 SHA1 SHA512 TLSH

                              Mar2009_XACT_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2009_XACT_x86.inf
                              • Size 1KB
                              • SHA256 764c3caeb1725a11701ca7119fdc49b3219553b79f9a5c1a02b20991391e5a21
                              • MD5 SHA1 SHA512 TLSH

                              Mar2009_XAudio_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2009_XAudio_x64.inf
                              • Size 923B
                              • SHA256 4a554d09934581a87a4cc98749b525b6794947b64b8414d380edfd502713f9b6
                              • MD5 SHA1 SHA512 TLSH

                              Mar2009_XAudio_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2009_XAudio_x86.inf
                              • Size 1KB
                              • SHA256 1b66e4d80f9843fc73b0a6097fb8ed5f3d2cfd5cfb5c328904d2c370bd87bb3e
                              • MD5 SHA1 SHA512 TLSH

                              Mar2009_d3dx10_41_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2009_d3dx10_41_x64.inf
                              • Size 815B
                              • SHA256 53dc284b87f5787804823977d2fbb528e393829367db5d2ac5dd79c581a27616
                              • MD5 SHA1 SHA512 TLSH

                              Mar2009_d3dx10_41_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2009_d3dx10_41_x86.inf
                              • Size 1KB
                              • SHA256 0170a4b551b58d92a753e86793bf3af762fe3f8d781512f710a4d661aec8d626
                              • MD5 SHA1 SHA512 TLSH

                              Mar2009_d3dx9_41_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2009_d3dx9_41_x64.inf
                              • Size 812B
                              • SHA256 12fe918aeb224a9bd4d2a8142f97c95d58a9a69e591e7e4f95014c155bb03519
                              • MD5 SHA1 SHA512 TLSH

                              Mar2009_d3dx9_41_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Mar2009_d3dx9_41_x86.inf
                              • Size 1KB
                              • SHA256 bd29711cc2ecd924990167ffa95f48842e24aeed3acef1023717040240b4bbb6
                              • MD5 SHA1 SHA512 TLSH

                              Nov2008_X3DAudio_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Nov2008_X3DAudio_x64.inf
                              • Size 815B
                              • SHA256 d04d052fa3065cdf00e96bcdd7dabf3583ef10b6d80fd67cb03c32f09f2e602d
                              • MD5 SHA1 SHA512 TLSH

                              Nov2008_X3DAudio_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Nov2008_X3DAudio_x86.inf
                              • Size 1KB
                              • SHA256 d0361ffe046b7a7a374a4938d419e4121365892e4f2138899f670619ab34ac6a
                              • MD5 SHA1 SHA512 TLSH

                              Nov2008_XACT_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Nov2008_XACT_x64.inf
                              • Size 920B
                              • SHA256 2d8a68e726728e4f4be05e35fca812b855046ce4bf697f0dea14094dbd7e1d79
                              • MD5 SHA1 SHA512 TLSH

                              Nov2008_XACT_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Nov2008_XACT_x86.inf
                              • Size 1KB
                              • SHA256 31680e7a90d24eda04c910e1f3e6c02774cfc5c36ae08e7ac043665264702f83
                              • MD5 SHA1 SHA512 TLSH

                              Nov2008_XAudio_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Nov2008_XAudio_x64.inf
                              • Size 923B
                              • SHA256 ed20b160dd26a5ed3c220a1fd9b5fc880b3280ebf56c2f73e76b6d4da5ef82bd
                              • MD5 SHA1 SHA512 TLSH

                              Nov2008_XAudio_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Nov2008_XAudio_x86.inf
                              • Size 1KB
                              • SHA256 950b5aef596fc5048732f6cf263dfca5bcc25df7dc17df91efcbc3551751a3b3
                              • MD5 SHA1 SHA512 TLSH

                              Nov2008_d3dx10_40_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Nov2008_d3dx10_40_x64.inf
                              • Size 815B
                              • SHA256 7f902d9ce6f6d71be1d16997ffc9661be2540522c73cc185516415a52dced2a5
                              • MD5 SHA1 SHA512 TLSH

                              Nov2008_d3dx10_40_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Nov2008_d3dx10_40_x86.inf
                              • Size 1KB
                              • SHA256 a4eed39cf36adccac4317e5822b30aa37ac5b001bcf4a24f7b5ccac6b8b71e9d
                              • MD5 SHA1 SHA512 TLSH

                              Nov2008_d3dx9_40_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Nov2008_d3dx9_40_x64.inf
                              • Size 812B
                              • SHA256 d071b30f56763506da0c939b8d35b0540bef3ef0d51a5cfbc45816ca91f891a3
                              • MD5 SHA1 SHA512 TLSH

                              Nov2008_d3dx9_40_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\Nov2008_d3dx9_40_x86.inf
                              • Size 1KB
                              • SHA256 955637638635025f01f82febab4a4977252a765439d90ce940fba752723b9db6
                              • MD5 SHA1 SHA512 TLSH

                              apr2005_d3dx9_25_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\apr2005_d3dx9_25_x64.inf
                              • Size 806B
                              • SHA256 3d97810d00ceb3e7674a2ef81427d4180f77f93f9454837c5933fbc6a1ad5c1d
                              • MD5 SHA1 SHA512 TLSH

                              apr2005_d3dx9_25_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\apr2005_d3dx9_25_x86.inf
                              • Size 1KB
                              • SHA256 f484ef48e0c6e2be8207d8c8c7308dd966d52bea1fde221b927d3e49f1cab0b7
                              • MD5 SHA1 SHA512 TLSH

                              apr2006_d3dx9_30_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\apr2006_d3dx9_30_x64.inf
                              • Size 806B
                              • SHA256 b70b8f62a2459580d22999301f1823bcb8a9bef54bd33b38e0af274a3a12e010
                              • MD5 SHA1 SHA512 TLSH

                              apr2006_d3dx9_30_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\apr2006_d3dx9_30_x86.inf
                              • Size 1KB
                              • SHA256 373cca07c0ceffa72901441219a4457de9ff110aededae5e4818588da39cd344
                              • MD5 SHA1 SHA512 TLSH

                              apr2006_mdx1_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\apr2006_mdx1_x86.inf
                              • Size 2KB
                              • SHA256 2546a1875bf868edc621a1cd0ee262151faa08762bcced0117e1304eace0c04d
                              • MD5 SHA1 SHA512 TLSH

                              apr2006_mdx1_x86_archive.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\apr2006_mdx1_x86_archive.inf
                              • Size 1KB
                              • SHA256 80d44f16d81ae8bdb1ef8f0efdf53911523280723bab4392285cbd33a0fc633c
                              • MD5 SHA1 SHA512 TLSH

                              apr2006_xact_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\apr2006_xact_x64.inf
                              • Size 908B
                              • SHA256 d9c3216ada5dd7791ca852a8ea97765f94a7b56fed27b20916b5067eb82b14d0
                              • MD5 SHA1 SHA512 TLSH

                              apr2006_xact_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\apr2006_xact_x86.inf
                              • Size 1KB
                              • SHA256 037db252501fd0e30303c11706d804d9eabbf319d0b4e88181ef8f297b4fef8e
                              • MD5 SHA1 SHA512 TLSH

                              apr2006_xinput_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\apr2006_xinput_x64.inf
                              • Size 854B
                              • SHA256 f9d01e93e547045e1d232242c900530dfdfa54698586c7049281965e3bd01ca2
                              • MD5 SHA1 SHA512 TLSH

                              apr2006_xinput_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\apr2006_xinput_x86.inf
                              • Size 1KB
                              • SHA256 b604779115d32d439f77b33257c96f928ec4ce564189f7d0d357099c1da140c4
                              • MD5 SHA1 SHA512 TLSH

                              apr2007_d3dx10_33_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\apr2007_d3dx10_33_x64.inf
                              • Size 844B
                              • SHA256 3e61c4d723d282c36c5493d82644ea96715b7b548e50494d22b4a83d4e2b8237
                              • MD5 SHA1 SHA512 TLSH

                              apr2007_d3dx10_33_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\apr2007_d3dx10_33_x86.inf
                              • Size 1KB
                              • SHA256 3286ba521fda888b1808f12955a58d7da4df7d2fdb472c7837a1e0e1a6317a06
                              • MD5 SHA1 SHA512 TLSH

                              apr2007_d3dx9_33_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\apr2007_d3dx9_33_x64.inf
                              • Size 812B
                              • SHA256 2d87efca75d8b9aeab3262841d52a7c56bad34ac6b9691f4df2d89b14c950f8d
                              • MD5 SHA1 SHA512 TLSH

                              apr2007_d3dx9_33_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\apr2007_d3dx9_33_x86.inf
                              • Size 1KB
                              • SHA256 349a09a2791d697bffffc61410a536cdcf258f0d7c86dda44a297e8aec4bdf00
                              • MD5 SHA1 SHA512 TLSH

                              apr2007_xact_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\apr2007_xact_x64.inf
                              • Size 920B
                              • SHA256 bf6ca1165632efccb0292ae8b739ce68d78ebb95dd39b8e4c1717d78a026db10
                              • MD5 SHA1 SHA512 TLSH

                              apr2007_xact_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\apr2007_xact_x86.inf
                              • Size 1KB
                              • SHA256 008db10780aa8fb6f20b7aa5f5d513ca77efb36c8dddfb9ad89173ecaf700af5
                              • MD5 SHA1 SHA512 TLSH

                              apr2007_xinput_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\apr2007_xinput_x64.inf
                              • Size 860B
                              • SHA256 0d6e1c0e961d878b319ac30d3439056883448dcf26774003b73920f3377ecac8
                              • MD5 SHA1 SHA512 TLSH

                              apr2007_xinput_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\apr2007_xinput_x86.inf
                              • Size 1KB
                              • SHA256 1c798cb80e9e46ce03356ea7316e1eff5d3a88ccdd7cbfbfcdce73cded23b4e5
                              • MD5 SHA1 SHA512 TLSH

                              aug2005_d3dx9_27_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\aug2005_d3dx9_27_x64.inf
                              • Size 806B
                              • SHA256 0a8ffec8d7ef3a0aa005f604a045dcf80cf5b6473b4f26e30c58eee23e253fae
                              • MD5 SHA1 SHA512 TLSH

                              aug2005_d3dx9_27_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\aug2005_d3dx9_27_x86.inf
                              • Size 1KB
                              • SHA256 d02232a6587c460c026601517178318bab2ac29c59d269c6e3d1a3a993a9a1c4
                              • MD5 SHA1 SHA512 TLSH

                              aug2006_xact_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\aug2006_xact_x64.inf
                              • Size 908B
                              • SHA256 6fe310a67227203bbca3389dfe3403fa268cb424f4b525cca2d5407ed26670a5
                              • MD5 SHA1 SHA512 TLSH

                              aug2006_xact_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\aug2006_xact_x86.inf
                              • Size 1KB
                              • SHA256 34e7227e03812fce5415b0a4c3d15a9e9b259350ac9873db2a98b2ea76ae2284
                              • MD5 SHA1 SHA512 TLSH

                              aug2006_xinput_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\aug2006_xinput_x64.inf
                              • Size 854B
                              • SHA256 35f25b9538e55172cf36729519581444e26b38a9dae5cccc4ad75dfa34ea08e7
                              • MD5 SHA1 SHA512 TLSH

                              aug2006_xinput_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\aug2006_xinput_x86.inf
                              • Size 1KB
                              • SHA256 cc66d67daa1f4c31ff5e59c2606c3930f72204a5057c29b9d58dde37a47b1cb7
                              • MD5 SHA1 SHA512 TLSH

                              aug2007_d3dx10_35_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\aug2007_d3dx10_35_x64.inf
                              • Size 815B
                              • SHA256 af4bdfeb4283f04e24475279931e042f17052224cf708f0c444fba2f2e221289
                              • MD5 SHA1 SHA512 TLSH

                              aug2007_d3dx10_35_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\aug2007_d3dx10_35_x86.inf
                              • Size 1KB
                              • SHA256 7987e2c475705bf8f049a15af946ec0cb5ccddf27c0b5c8126694421df601770
                              • MD5 SHA1 SHA512 TLSH

                              aug2007_d3dx9_35_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\aug2007_d3dx9_35_x64.inf
                              • Size 812B
                              • SHA256 e34ad9e49f31cb9211e0f350405c344d93fc65075e470c8fe09dd78af68f2c80
                              • MD5 SHA1 SHA512 TLSH

                              aug2007_d3dx9_35_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\aug2007_d3dx9_35_x86.inf
                              • Size 1KB
                              • SHA256 c0d87c1b079b54b75b86939199ca5ee1f796ae3de9c4ed0ae074a4fa01823c73
                              • MD5 SHA1 SHA512 TLSH

                              aug2007_xact_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\aug2007_xact_x64.inf
                              • Size 920B
                              • SHA256 2fcc4bdc6516418d3b4935c301e14f30e3bbd0adfd264bc34067b27b0b266b8e
                              • MD5 SHA1 SHA512 TLSH

                              aug2007_xact_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\aug2007_xact_x86.inf
                              • Size 1KB
                              • SHA256 c246c38e41ed71bde4b3cce4fe337826173896a04c26f8b2a00b06bb0cec024d
                              • MD5 SHA1 SHA512 TLSH

                              d3dx9_24.dll

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\d3dx9_24.dll
                              • Size 2.1MB
                              • SHA256 94ec67763f67932dd4273ef5cc12889a5cef090ffea3ee78a80c7b530272b1b5
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              d3dx9_25.dll

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\d3dx9_25.dll
                              • Size 2.2MB
                              • SHA256 4c54df27ce84d21b2924e64ff79b13e7876ce85d8e0c9c1d0abd8da73888187a
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              d3dx9_26.dll

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\d3dx9_26.dll
                              • Size 2.2MB
                              • SHA256 8ea96fe01c3c86a36fcb3795ae03eb12034003e335ef475571efaeda17c5bc78
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              d3dx9_27.dll

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\d3dx9_27.dll
                              • Size 2.2MB
                              • SHA256 a70d571cd675c97c9eeb4a234dba1d667ffb54ec3bb14defb36b3e2f605ae257
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              d3dx9_28.dll

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\d3dx9_28.dll
                              • Size 2.2MB
                              • SHA256 f3e391b5f1c1f9637cabf2b812b6f5d65e4776c89d779f506f6b643cc563176d
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              d3dx9_29.dll

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\d3dx9_29.dll
                              • Size 2.2MB
                              • SHA256 c5e21c18f8c79bc517da59e3192c39ea73bdcaf85867628187f6b3cca07dd21f
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              d3dx9_30.dll

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\d3dx9_30.dll
                              • Size 128KB
                              • SHA256 d1c746ca5e25205bf930bb54e5e754a95b910e5103aa4865a0fd88462f6077b2
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              dec2005_d3dx9_28_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\dec2005_d3dx9_28_x64.inf
                              • Size 806B
                              • SHA256 510b6d528be3f2997b8bd811486dc3c13eb27a9de22d1bf030e6db0e632cca4d
                              • MD5 SHA1 SHA512 TLSH

                              dec2005_d3dx9_28_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\dec2005_d3dx9_28_x86.inf
                              • Size 1KB
                              • SHA256 d4d03c4ab3c8486d6331548e967ee17e011fdac90f63c0a9a44a744815a7da7a
                              • MD5 SHA1 SHA512 TLSH

                              dec2006_d3dx10_00_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\dec2006_d3dx10_00_x64.inf
                              • Size 426B
                              • SHA256 2a43ac72ab9a6f4771c02b6e10884921b733b86dbd7ebdfc5502d011cd5c8d05
                              • MD5 SHA1 SHA512 TLSH

                              dec2006_d3dx10_00_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\dec2006_d3dx10_00_x86.inf
                              • Size 673B
                              • SHA256 33291a47388edecc059f1825c1979142d7a9cd4a850716f9dce687deba1fa750
                              • MD5 SHA1 SHA512 TLSH

                              dec2006_d3dx9_32_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\dec2006_d3dx9_32_x64.inf
                              • Size 806B
                              • SHA256 ff00313af4a90f426492d72969f5efc6c56a17f2dd91f20cb5c0a38d9f1f2b6b
                              • MD5 SHA1 SHA512 TLSH

                              dec2006_d3dx9_32_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\dec2006_d3dx9_32_x86.inf
                              • Size 1KB
                              • SHA256 ef09d783bf5cff2cfba99946e5e71fda577b196a49c88bed1c51b5fd29cecf94
                              • MD5 SHA1 SHA512 TLSH

                              dec2006_xact_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\dec2006_xact_x64.inf
                              • Size 908B
                              • SHA256 f2f2040b8d13705f00d8e20a53f22093aa0f8c8d6aa6224992ba727ace7b75f6
                              • MD5 SHA1 SHA512 TLSH

                              dec2006_xact_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\dec2006_xact_x86.inf
                              • Size 1KB
                              • SHA256 4c0a40094228a51f567bec65c2cdf289d268812c1af579e3c6b76cd3adb77e12
                              • MD5 SHA1 SHA512 TLSH

                              dxupdate.dll

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\dxupdate.dll
                              • Size 173KB
                              • SHA256 fb4f297e295c802b1377c6684734b7249d55743dfb7c14807bef59a1b5db63a2
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              dxupdate.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\dxupdate.inf
                              • Size 12KB
                              • SHA256 93f5589499ee4ee2812d73c0d8feacbbcfe8c47b6d98572486bc0eff3c5906ca
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              feb2006_d3dx9_29_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\feb2006_d3dx9_29_x64.inf
                              • Size 806B
                              • SHA256 ef36ece1a6bd8af3b0b9247b081d28ed511b7e18c43eb3aff364c9ce8d3a06c3
                              • MD5 SHA1 SHA512 TLSH

                              feb2006_d3dx9_29_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\feb2006_d3dx9_29_x86.inf
                              • Size 1KB
                              • SHA256 f12f4bd86d5cd748b0fcf7106e9dff333c27c0886541339ba1f40c443bdc61cd
                              • MD5 SHA1 SHA512 TLSH

                              feb2006_xact_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\feb2006_xact_x64.inf
                              • Size 890B
                              • SHA256 b7ca1a4942057592c5b83b4425350da41c61779dcae608112141d727091842d4
                              • MD5 SHA1 SHA512 TLSH

                              feb2006_xact_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\feb2006_xact_x86.inf
                              • Size 1KB
                              • SHA256 45146fd446fc8533dc5f97d88bee9ae220161f24797114d0bf3afc7c479ed69b
                              • MD5 SHA1 SHA512 TLSH

                              feb2007_xact_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\feb2007_xact_x64.inf
                              • Size 908B
                              • SHA256 184c1684c57de07983edaaa1ae2751b263497673ee8418af023a63fa03553f53
                              • MD5 SHA1 SHA512 TLSH

                              feb2007_xact_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\feb2007_xact_x86.inf
                              • Size 1KB
                              • SHA256 64b6020f43bbab7f7c2368fcfe7224165fef555b2bef813aa13b2d9f6295d46c
                              • MD5 SHA1 SHA512 TLSH

                              infinst.exe

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\infinst.exe
                              • Size 65KB
                              • SHA256 5ec466d86f7205e7a99985f0be8cacd0494454780c28ac90ff5d4b906b9dc5e5
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              jun2005_d3dx9_26_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\jun2005_d3dx9_26_x64.inf
                              • Size 806B
                              • SHA256 addafcf0cfd36587c12eb2692922f0fb134874d11005a0544cc054546a493933
                              • MD5 SHA1 SHA512 TLSH

                              jun2005_d3dx9_26_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\jun2005_d3dx9_26_x86.inf
                              • Size 1KB
                              • SHA256 262ed4a65dd45e19f196cb2d9946326693ee31a86b51bf77116dec2727971cb6
                              • MD5 SHA1 SHA512 TLSH

                              jun2006_xact_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\jun2006_xact_x64.inf
                              • Size 908B
                              • SHA256 fe9caa55be17684622fd7339b1b96e1f0d107dc33c065706d24a435d523c6e12
                              • MD5 SHA1 SHA512 TLSH

                              jun2006_xact_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\jun2006_xact_x86.inf
                              • Size 1KB
                              • SHA256 6bdce6f6779712e38c6d9e6e5961217e417254089f096c719f25566e952cb257
                              • MD5 SHA1 SHA512 TLSH

                              jun2007_d3dx10_34_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\jun2007_d3dx10_34_x64.inf
                              • Size 815B
                              • SHA256 0f75b7ef71e183476ec938705024eb8a10a77d7602a336be876c7f5d17429725
                              • MD5 SHA1 SHA512 TLSH

                              jun2007_d3dx10_34_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\jun2007_d3dx10_34_x86.inf
                              • Size 1KB
                              • SHA256 808983dfd3db7c3452589ea4e14ab4af8ef47dbad3b639f9a3c55685c9b73867
                              • MD5 SHA1 SHA512 TLSH

                              jun2007_d3dx9_34_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\jun2007_d3dx9_34_x64.inf
                              • Size 812B
                              • SHA256 77f3fa1756181a90d2ee63c26cddfdaba0d720c9a49121db28746cd02b3e071d
                              • MD5 SHA1 SHA512 TLSH

                              jun2007_d3dx9_34_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\jun2007_d3dx9_34_x86.inf
                              • Size 1KB
                              • SHA256 a568b7b8a0360ad94b1ed6388eca6ca9d8770937360a426a0fdadef9a4019bba
                              • MD5 SHA1 SHA512 TLSH

                              jun2007_xact_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\jun2007_xact_x64.inf
                              • Size 920B
                              • SHA256 405d8cbe3c87b16afac2a9254497412a42de4ae2d8fb470a1234dc3260e0b90f
                              • MD5 SHA1 SHA512 TLSH

                              jun2007_xact_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\jun2007_xact_x86.inf
                              • Size 1KB
                              • SHA256 33b980fb973394d9d8cb4645914d4cf6793bf92bd311e0431ce9cacc59fdcbc5
                              • MD5 SHA1 SHA512 TLSH

                              nov2007_d3dx10_36_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\nov2007_d3dx10_36_x64.inf
                              • Size 815B
                              • SHA256 7a49ae818e199cf9f9bd831f94cb6d03a1e72a141d76546261979b30642757b7
                              • MD5 SHA1 SHA512 TLSH

                              nov2007_d3dx10_36_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\nov2007_d3dx10_36_x86.inf
                              • Size 1KB
                              • SHA256 96f48bb810055699d37e9e27a65947483a0b4df304870e3b5448d3051b3e4926
                              • MD5 SHA1 SHA512 TLSH

                              nov2007_d3dx9_36_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\nov2007_d3dx9_36_x64.inf
                              • Size 812B
                              • SHA256 d1b544b3912e73e5984cd759096120febe6f17e41a3cf920ef82431b9b569c1d
                              • MD5 SHA1 SHA512 TLSH

                              nov2007_d3dx9_36_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\nov2007_d3dx9_36_x86.inf
                              • Size 1KB
                              • SHA256 843764f70f56d430c0695e263c895a135a631f793213d1005fafcf9c210d1ac9
                              • MD5 SHA1 SHA512 TLSH

                              nov2007_x3daudio_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\nov2007_x3daudio_x64.inf
                              • Size 815B
                              • SHA256 1cc72ca78433fbb72ee6b654c908748ea846c87c80424816745f285ed3bc910b
                              • MD5 SHA1 SHA512 TLSH

                              nov2007_x3daudio_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\nov2007_x3daudio_x86.inf
                              • Size 1KB
                              • SHA256 f882bdbc8230d24b24e20f9d0db447586e9493801900a8ba381eb493bd41f5d5
                              • MD5 SHA1 SHA512 TLSH

                              nov2007_xact_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\nov2007_xact_x64.inf
                              • Size 926B
                              • SHA256 841d579573afd51499c7cd8ee986a41db63cedb722e8fac351d3632ff470c161
                              • MD5 SHA1 SHA512 TLSH

                              nov2007_xact_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\nov2007_xact_x86.inf
                              • Size 1KB
                              • SHA256 24714f229e479338ed89bdd6143140505fd63f517b7e71170ea6c072a1748b06
                              • MD5 SHA1 SHA512 TLSH

                              oct2006_d3dx9_31_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\oct2006_d3dx9_31_x64.inf
                              • Size 806B
                              • SHA256 c031987e68e476365cd885e41a072f85fdfc9e480c93871d024a5ccf26d17118
                              • MD5 SHA1 SHA512 TLSH

                              oct2006_d3dx9_31_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\oct2006_d3dx9_31_x86.inf
                              • Size 1KB
                              • SHA256 a1c61096019a6ae1a9f31e3fe67aa2bb7e9e451967959d7088344f3f20ab572e
                              • MD5 SHA1 SHA512 TLSH

                              oct2006_xact_x64.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\oct2006_xact_x64.inf
                              • Size 908B
                              • SHA256 4c388e9eaf3c39e75d003a58020e491b675b3a6054c702062a9c90e86f691d96
                              • MD5 SHA1 SHA512 TLSH

                              oct2006_xact_x86.inf

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\oct2006_xact_x86.inf
                              • Size 1KB
                              • SHA256 66998b21cbe6f05b12cdb4bb45549dcb1b4a92f8a1b910334150a8d767fa39e9
                              • MD5 SHA1 SHA512 TLSH

                              x3daudio1_0.dll

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\x3daudio1_0.dll
                              • Size 13KB
                              • SHA256 228dfece2b4555a243a73e7bf461036f1e53951977625651ff5a59deaeaf4b88
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              xactengine2_0.dll

                              • Path C:\Users\Admin\AppData\Local\Temp\DX44D.tmp\xactengine2_0.dll
                              • Size 224KB
                              • SHA256 cfd1c2d34feb7d94f282e97bf762a99bfa7309dc7353d96dfe4aadc187d26c67
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              MadiumInstaller.exe

                              • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-41A1468E-0F13-4352-95A8-977FC8969962\MadiumInstaller.exe
                              • Size 201KB
                              • SHA256 6fd337856b578dcd62a24c5247ca5ba92de246acc0a2d95e03400dc954a97f1c
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              app.so

                              • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-41A1468E-0F13-4352-95A8-977FC8969962\data\app.so
                              • Size 5.3MB
                              • SHA256 0f6f8ad3b139c34d223f57f799a84065ce42530de7d87a9123a62169d3eb04a4
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              AssetManifest.bin

                              • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-41A1468E-0F13-4352-95A8-977FC8969962\data\flutter_assets\AssetManifest.bin
                              • Size 2B
                              • SHA256 f566cc6fccc657365c0197accf3a7d6f80f85209ff666ff774f4dcbc524aa842
                              • MD5 SHA1 SHA512

                              FontManifest.json

                              • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-41A1468E-0F13-4352-95A8-977FC8969962\data\flutter_assets\FontManifest.json
                              • Size 82B
                              • SHA256 28b1eb2b3d2e1ad60b8c8b0f9100b1ccbf492f7fa97f5bebb51ea97e73926e7d
                              • MD5 SHA1 SHA512 TLSH

                              NOTICES.Z

                              • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-41A1468E-0F13-4352-95A8-977FC8969962\data\flutter_assets\NOTICES.Z
                              • Size 102KB
                              • SHA256 bdb492de2b031ec16101eede4cd2f26feefcd75c16a09239fa471a9cc552fcca
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              MaterialIcons-Regular.otf

                              • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-41A1468E-0F13-4352-95A8-977FC8969962\data\flutter_assets\fonts\MaterialIcons-Regular.otf
                              • Size 1.6MB
                              • SHA256 d9865b671a09d683d13a863089d8825e0f61a37696ce5d7d448bc8023aa62453
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              ink_sparkle.frag

                              • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-41A1468E-0F13-4352-95A8-977FC8969962\data\flutter_assets\shaders\ink_sparkle.frag
                              • Size 21KB
                              • SHA256 1fe8436a743884cb65078fe8c7b38e18f5365f2a2961270916f426fd13c604af
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              stretch_effect.frag

                              • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-41A1468E-0F13-4352-95A8-977FC8969962\data\flutter_assets\shaders\stretch_effect.frag
                              • Size 17KB
                              • SHA256 62a899ff4e168ac6ca888ce7c2f40e5d3fbf8ca20a1c3ded781a116a6d7907e2
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              icudtl.dat

                              • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-41A1468E-0F13-4352-95A8-977FC8969962\data\icudtl.dat
                              • Size 842KB
                              • SHA256 998367809a821d595928089c197b3f7959f0420f81f79d4d0daee53378492ed5
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              flutter_windows.dll

                              • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-41A1468E-0F13-4352-95A8-977FC8969962\flutter_windows.dll
                              • Size 20.3MB
                              • SHA256 a5c880a4218a04cfb3e58b103160334658122c5e43d3b818b3d9af5ab3e1fc0e
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              native_assets.json

                              • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-41A1468E-0F13-4352-95A8-977FC8969962\native_assets.json
                              • Size 45B
                              • SHA256 9548a31e4a048135c1d94f919328bfb62ae2c7bb3cab96557c7941daa97776cb
                              • MD5 SHA1 SHA512

                              __PSScriptPolicyTest_hiplee5h.25w.ps1

                              • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_hiplee5h.25w.ps1
                              • Size 60B
                              • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                              • MD5 SHA1 SHA512 TLSH

                              DirectX.log

                              • Path C:\Windows\Logs\DirectX.log
                              • Size 475B
                              • SHA256 ac40205d3b79b18d8c9b4ebd403a7ce44654879f69952a0965b5282667d23935
                              • MD5 SHA1 SHA512 TLSH

                              DirectX.log

                              • Path C:\Windows\Logs\DirectX.log
                              • Size 1KB
                              • SHA256 3e3831e7dae6c7adf580022dd18306a4db754dca616b58b45e0a33293c7a5277
                              • MD5 SHA1 SHA512 TLSH

                              DirectX.log

                              • Path C:\Windows\Logs\DirectX.log
                              • Size 5KB
                              • SHA256 31861614e5ee7623c751a971d2d0772ff681639dfcd302424ecb6897b6e958b5
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              memory/1192-24-0x0000024C71910000-0x0000024C71E69000-memory.dmp

                              memory/1192-29-0x0000024C71F80000-0x0000024C72000000-memory.dmp

                              memory/1192-21-0x0000024C71900000-0x0000024C71901000-memory.dmp

                              memory/1192-22-0x0000024C71910000-0x0000024C71E69000-memory.dmp

                              memory/1192-28-0x0000024C71F80000-0x0000024C72000000-memory.dmp

                              memory/1192-25-0x0000024C71E70000-0x0000024C71E71000-memory.dmp

                              memory/1192-23-0x0000024C71910000-0x0000024C71E69000-memory.dmp

                              memory/2768-3546-0x0000000000840000-0x000000000089C000-memory.dmp

                              memory/4140-79-0x0000021160920000-0x000002116093E000-memory.dmp

                              memory/4140-78-0x0000021178AA0000-0x0000021178B52000-memory.dmp

                              memory/4312-54-0x00000196FF570000-0x00000196FF58E000-memory.dmp

                              memory/4312-55-0x00000196FF590000-0x00000196FF642000-memory.dmp

                              memory/4312-56-0x00000196FF650000-0x00000196FF65A000-memory.dmp

                              memory/4312-51-0x00000196FF2B0000-0x00000196FF2D2000-memory.dmp

                              memory/5520-46-0x000001968DF00000-0x000001968DF80000-memory.dmp

                              memory/5520-47-0x000001968DF00000-0x000001968DF80000-memory.dmp