Analysis

  • max time kernel
    102s
  • max time network
    141s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/08/2026, 05:40

General

  • Target
    2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
  • Size 32.5MB
  • Sample260810-gc9aqaec87
  • SHA256 07bb5bb098ec70073ddb8c7209c4d5d8b28b8935ca7210b9b9cad0de11a36e50
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 4 IoCs
  • Loads dropped DLL 8 IoCs
  • Adds Run key to start application 2 TTPs 4 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 64 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 10 IoCs
  • Drops file in Program Files directory 8 IoCs
  • Drops file in Windows directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 43 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 22 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 20 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 27 IoCs
  • Suspicious use of SetWindowsHookEx 14 IoCs
  • Suspicious use of WriteProcessMemory 38 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:3944
    • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x64\vcredist.msi" /qb /norestart MSIFASTINSTALL=7
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3540
      • C:\Windows\SysWOW64\msiexec.exe
        "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x64\vcredist.msi" /qb /norestart MSIFASTINSTALL=7
        3⤵
        • Enumerates connected drives
        • System Location Discovery: System Language Discovery
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        PID:2408
    • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\vcredist.msi" /qb /norestart MSIFASTINSTALL=7
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:5928
      • C:\Windows\SysWOW64\msiexec.exe
        "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\vcredist.msi" /qb /norestart MSIFASTINSTALL=7
        3⤵
        • Enumerates connected drives
        • System Location Discovery: System Language Discovery
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        PID:2892
    • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x64\vc_red.msi" /qb /norestart MSIFASTINSTALL=7
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:5772
      • C:\Windows\SysWOW64\msiexec.exe
        "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x64\vc_red.msi" /qb /norestart MSIFASTINSTALL=7
        3⤵
        • Enumerates connected drives
        • System Location Discovery: System Language Discovery
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        PID:5732
    • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\vc_red.msi" /qb /norestart MSIFASTINSTALL=7
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:768
      • C:\Windows\SysWOW64\msiexec.exe
        "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\vc_red.msi" /qb /norestart MSIFASTINSTALL=7
        3⤵
        • Enumerates connected drives
        • System Location Discovery: System Language Discovery
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        PID:2096
    • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2010\x64\vc_red.msi" /qb /norestart MSIFASTINSTALL=7
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3504
      • C:\Windows\SysWOW64\msiexec.exe
        "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2010\x64\vc_red.msi" /qb /norestart MSIFASTINSTALL=7
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        PID:4512
    • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2010\x86\vc_red.msi" /qb /norestart MSIFASTINSTALL=7
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2440
      • C:\Windows\SysWOW64\msiexec.exe
        "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2010\x86\vc_red.msi" /qb /norestart MSIFASTINSTALL=7
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        PID:2672
    • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2012\x64\vc_runtimeMinimum_x64.msi" /qb /norestart MSIFASTINSTALL=7
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:1424
      • C:\Windows\SysWOW64\msiexec.exe
        "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2012\x64\vc_runtimeMinimum_x64.msi" /qb /norestart MSIFASTINSTALL=7
        3⤵
        • Enumerates connected drives
        • System Location Discovery: System Language Discovery
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        PID:1548
    • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2012\x64\vc_runtimeAdditional_x64.msi" /qb /norestart MSIFASTINSTALL=7
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:5796
      • C:\Windows\SysWOW64\msiexec.exe
        "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2012\x64\vc_runtimeAdditional_x64.msi" /qb /norestart MSIFASTINSTALL=7
        3⤵
        • Enumerates connected drives
        • System Location Discovery: System Language Discovery
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        PID:4916
    • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "2012\x64\vc_redist.x64.exe" /install /passive /norestart
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4496
      • C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2012\x64\vc_redist.x64.exe
        "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2012\x64\vc_redist.x64.exe" /install /passive /norestart
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1280
        • C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2012\x64\vc_redist.x64.exe
          "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2012\x64\vc_redist.x64.exe" /install /passive /norestart -burn.unelevated BurnPipe.{1190A5A6-18A0-4D4A-8B4B-92F5D9731481} {D7A99E7A-4D60-4044-839D-D8E59A2811DA} 1280
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          PID:4484
    • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2012\x86\vc_runtimeMinimum_x86.msi" /qb /norestart MSIFASTINSTALL=7
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:5488
      • C:\Windows\SysWOW64\msiexec.exe
        "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2012\x86\vc_runtimeMinimum_x86.msi" /qb /norestart MSIFASTINSTALL=7
        3⤵
        • Enumerates connected drives
        • System Location Discovery: System Language Discovery
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        PID:2972
    • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2012\x86\vc_runtimeAdditional_x86.msi" /qb /norestart MSIFASTINSTALL=7
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:5556
      • C:\Windows\SysWOW64\msiexec.exe
        "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2012\x86\vc_runtimeAdditional_x86.msi" /qb /norestart MSIFASTINSTALL=7
        3⤵
        • Enumerates connected drives
        • System Location Discovery: System Language Discovery
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        PID:4716
    • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "2012\x86\vc_redist.x86.exe" /install /passive /norestart
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2524
      • C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2012\x86\vc_redist.x86.exe
        "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2012\x86\vc_redist.x86.exe" /install /passive /norestart
        3⤵
        • Executes dropped EXE
        • Adds Run key to start application
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:6108
        • C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2012\x86\vc_redist.x86.exe
          "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2012\x86\vc_redist.x86.exe" /install /passive /norestart -burn.unelevated BurnPipe.{7494515F-B572-4AC2-ACD4-371CC3578EF9} {2C9183DD-BEA2-4A0F-913E-EC56D2C01514} 6108
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          PID:1796
    • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2013\x64\vc_runtimeMinimum_x64.msi" /qb /norestart MSIFASTINSTALL=7
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:6120
      • C:\Windows\SysWOW64\msiexec.exe
        "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2013\x64\vc_runtimeMinimum_x64.msi" /qb /norestart MSIFASTINSTALL=7
        3⤵
        • Enumerates connected drives
        • System Location Discovery: System Language Discovery
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        PID:1376
    • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2013\x64\vc_runtimeAdditional_x64.msi" /qb /norestart MSIFASTINSTALL=7
      2⤵
        PID:4616
        • C:\Windows\SysWOW64\msiexec.exe
          "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2013\x64\vc_runtimeAdditional_x64.msi" /qb /norestart MSIFASTINSTALL=7
          3⤵
            PID:3428
        • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
          "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "2013\x64\vc_redist.x64.exe" /install /passive /norestart
          2⤵
            PID:3488
            • C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2013\x64\vc_redist.x64.exe
              "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2013\x64\vc_redist.x64.exe" /install /passive /norestart
              3⤵
                PID:1628
                • C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2013\x64\vc_redist.x64.exe
                  "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2013\x64\vc_redist.x64.exe" /install /passive /norestart -burn.unelevated BurnPipe.{E586EB0E-9FB8-40BB-A4B0-4410967F6200} {438AEC8B-E742-428F-8D9A-49703F3B6596} 1628
                  4⤵
                    PID:1056
                  • C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\vcredist_x64.exe
                    "C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\vcredist_x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={042d26ef-3dbe-4c25-95d3-4c1b11b235a7} -burn.embedded BurnPipe.{FC46B5FD-DFB8-4003-88B4-04E4BE265DE5} {F2670003-CAC1-4080-8CF2-14195EE361D3} 1628
                    4⤵
                      PID:5956
                      • C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\vcredist_x64.exe
                        "C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\vcredist_x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={042d26ef-3dbe-4c25-95d3-4c1b11b235a7} -burn.embedded BurnPipe.{FC46B5FD-DFB8-4003-88B4-04E4BE265DE5} {F2670003-CAC1-4080-8CF2-14195EE361D3} 1628 -burn.unelevated BurnPipe.{B2411D8C-5C23-4F5E-95B4-E743D27C5041} {DE8AE576-9635-4AD7-90B1-CDAC7DC3FA5F} 5956
                        5⤵
                          PID:4936
                  • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
                    "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2013\x86\vc_runtimeMinimum_x86.msi" /qb /norestart MSIFASTINSTALL=7
                    2⤵
                      PID:1324
                      • C:\Windows\SysWOW64\msiexec.exe
                        "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2013\x86\vc_runtimeMinimum_x86.msi" /qb /norestart MSIFASTINSTALL=7
                        3⤵
                          PID:3356
                      • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
                        "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2013\x86\vc_runtimeAdditional_x86.msi" /qb /norestart MSIFASTINSTALL=7
                        2⤵
                          PID:3036
                          • C:\Windows\SysWOW64\msiexec.exe
                            "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2013\x86\vc_runtimeAdditional_x86.msi" /qb /norestart MSIFASTINSTALL=7
                            3⤵
                              PID:5884
                          • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
                            "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "2013\x86\vc_redist.x86.exe" /install /passive /norestart
                            2⤵
                              PID:4344
                              • C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2013\x86\vc_redist.x86.exe
                                "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2013\x86\vc_redist.x86.exe" /install /passive /norestart
                                3⤵
                                  PID:760
                                  • C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2013\x86\vc_redist.x86.exe
                                    "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2013\x86\vc_redist.x86.exe" /install /passive /norestart -burn.unelevated BurnPipe.{B46D09A1-1F0E-4479-ABFB-457201844CA6} {ECFC8D38-8F5B-41D9-8BC5-842051B2C2FB} 760
                                    4⤵
                                      PID:2976
                                      • C:\Windows\SysWOW64\WerFault.exe
                                        C:\Windows\SysWOW64\WerFault.exe -u -p 2976 -s 952
                                        5⤵
                                        • Program crash
                                        PID:4240
                                    • C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe
                                      "C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={9dff3540-fc85-4ed5-ac84-9e3c7fd8bece} -burn.embedded BurnPipe.{8230A929-17CF-4CF6-86ED-4C09AF00DC5C} {4AD1B2D5-825F-4919-AA09-B181EF823287} 760
                                      4⤵
                                        PID:4220
                                        • C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe
                                          "C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={9dff3540-fc85-4ed5-ac84-9e3c7fd8bece} -burn.embedded BurnPipe.{8230A929-17CF-4CF6-86ED-4C09AF00DC5C} {4AD1B2D5-825F-4919-AA09-B181EF823287} 760 -burn.unelevated BurnPipe.{21615A9B-0A9E-48BF-A78D-14C11D275FE8} {EF2F8228-3A26-4AC1-AED7-776A3E33FAB1} 4220
                                          5⤵
                                            PID:2332
                                    • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
                                      "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2022\x64\vc_runtimeMinimum_x64.msi" /qb /norestart MSIFASTINSTALL=7
                                      2⤵
                                        PID:1840
                                        • C:\Windows\SysWOW64\msiexec.exe
                                          "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2022\x64\vc_runtimeMinimum_x64.msi" /qb /norestart MSIFASTINSTALL=7
                                          3⤵
                                            PID:3088
                                        • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
                                          "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2022\x64\vc_runtimeAdditional_x64.msi" /qb /norestart MSIFASTINSTALL=7
                                          2⤵
                                            PID:4212
                                            • C:\Windows\SysWOW64\msiexec.exe
                                              "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2022\x64\vc_runtimeAdditional_x64.msi" /qb /norestart MSIFASTINSTALL=7
                                              3⤵
                                                PID:1036
                                            • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
                                              "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "2022\x64\vcredist_x64.exe" /install /passive /norestart
                                              2⤵
                                                PID:1172
                                                • C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2022\x64\vcredist_x64.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2022\x64\vcredist_x64.exe" /install /passive /norestart
                                                  3⤵
                                                    PID:3384
                                                    • C:\Windows\Temp\{FBA06CED-2712-4190-AC31-E98E3697789C}\.cr\vcredist_x64.exe
                                                      "C:\Windows\Temp\{FBA06CED-2712-4190-AC31-E98E3697789C}\.cr\vcredist_x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2022\x64\vcredist_x64.exe" -burn.filehandle.attached=752 -burn.filehandle.self=748 /install /passive /norestart
                                                      4⤵
                                                        PID:2528
                                                        • C:\Windows\Temp\{64EBE78D-B9BC-4002-941F-6F1A45ACB962}\.be\vcredist_x64.exe
                                                          "C:\Windows\Temp\{64EBE78D-B9BC-4002-941F-6F1A45ACB962}\.be\vcredist_x64.exe" -q -burn.elevated BurnPipe.{6BBE5574-F528-49EC-AF0A-C2936EFCA0A7} {B6128FCD-E842-484B-863C-30B81F23BD63} 2528
                                                          5⤵
                                                            PID:4176
                                                            • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                                                              "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} -burn.filehandle.self=1012 -burn.embedded BurnPipe.{5283F3B4-37EB-4E5C-89D8-80716EEE8BB8} {E735D20F-5AC4-4A52-AC57-4A5BD9D5E115} 4176
                                                              6⤵
                                                                PID:1384
                                                                • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                                                                  "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.filehandle.attached=560 -burn.filehandle.self=580 -uninstall -quiet -burn.related.upgrade -burn.ancestors={d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} -burn.filehandle.self=1012 -burn.embedded BurnPipe.{5283F3B4-37EB-4E5C-89D8-80716EEE8BB8} {E735D20F-5AC4-4A52-AC57-4A5BD9D5E115} 4176
                                                                  7⤵
                                                                    PID:3232
                                                                    • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                                                                      "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{EF5745BB-D112-4BA4-8D7C-8258E89CD547} {EF56F551-3070-47BF-98CA-A227B0BDAD17} 3232
                                                                      8⤵
                                                                        PID:4792
                                                          • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2022\x86\vc_runtimeMinimum_x86.msi" /qb /norestart MSIFASTINSTALL=7
                                                            2⤵
                                                              PID:2792
                                                              • C:\Windows\SysWOW64\msiexec.exe
                                                                "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2022\x86\vc_runtimeMinimum_x86.msi" /qb /norestart MSIFASTINSTALL=7
                                                                3⤵
                                                                  PID:1196
                                                              • C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe
                                                                "C:\Users\Admin\AppData\Local\Temp\2026-08-10_fa4e0c9fbc8fe9839ec960f726c3238e_elex_wannacry.exe" -sfxwaitall:0 "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2022\x86\vc_runtimeAdditional_x86.msi" /qb /norestart MSIFASTINSTALL=7
                                                                2⤵
                                                                  PID:5380
                                                                  • C:\Windows\SysWOW64\msiexec.exe
                                                                    "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2022\x86\vc_runtimeAdditional_x86.msi" /qb /norestart MSIFASTINSTALL=7
                                                                    3⤵
                                                                      PID:5148
                                                                • C:\Windows\system32\msiexec.exe
                                                                  C:\Windows\system32\msiexec.exe /V
                                                                  1⤵
                                                                  • Enumerates connected drives
                                                                  • Drops file in System32 directory
                                                                  • Drops file in Program Files directory
                                                                  • Drops file in Windows directory
                                                                  • Modifies data under HKEY_USERS
                                                                  • Modifies registry class
                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                  • Suspicious use of SetWindowsHookEx
                                                                  • Suspicious use of WriteProcessMemory
                                                                  PID:2640
                                                                  • C:\Windows\syswow64\MsiExec.exe
                                                                    C:\Windows\syswow64\MsiExec.exe -Embedding 9BED512EC10F39E72028796AC030635F
                                                                    2⤵
                                                                    • Loads dropped DLL
                                                                    • System Location Discovery: System Language Discovery
                                                                    • Suspicious use of SetWindowsHookEx
                                                                    PID:4540
                                                                  • C:\Windows\syswow64\MsiExec.exe
                                                                    C:\Windows\syswow64\MsiExec.exe -Embedding 5CE7D4F054A7FA66AA8ACA9DF65369EB
                                                                    2⤵
                                                                    • Loads dropped DLL
                                                                    • System Location Discovery: System Language Discovery
                                                                    • Suspicious use of SetWindowsHookEx
                                                                    PID:5900
                                                                • C:\Windows\system32\vssvc.exe
                                                                  C:\Windows\system32\vssvc.exe
                                                                  1⤵
                                                                  • Checks SCSI registry key(s)
                                                                  PID:3332
                                                                • C:\Windows\system32\srtasks.exe
                                                                  C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
                                                                  1⤵
                                                                    PID:3412
                                                                  • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                    "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored /install /burn.runonce
                                                                    1⤵
                                                                    • System Location Discovery: System Language Discovery
                                                                    • Suspicious use of WriteProcessMemory
                                                                    PID:2852
                                                                    • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                      "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored /install
                                                                      2⤵
                                                                      • Adds Run key to start application
                                                                      • System Location Discovery: System Language Discovery
                                                                      • Suspicious use of WriteProcessMemory
                                                                      PID:3464
                                                                      • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                        "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored /install -burn.unelevated BurnPipe.{C3EA2C9F-85B4-4517-ABB0-DDBDF1632659} {2C10D5D1-071E-48C1-B3AC-DD3208E59D9F} 3464
                                                                        3⤵
                                                                        • Loads dropped DLL
                                                                        • System Location Discovery: System Language Discovery
                                                                        • Suspicious use of FindShellTrayWindow
                                                                        PID:2600
                                                                  • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                    "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored /install /burn.runonce
                                                                    1⤵
                                                                    • System Location Discovery: System Language Discovery
                                                                    • Suspicious use of WriteProcessMemory
                                                                    PID:3532
                                                                    • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                      "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored /install
                                                                      2⤵
                                                                      • Adds Run key to start application
                                                                      • System Location Discovery: System Language Discovery
                                                                      • Suspicious use of WriteProcessMemory
                                                                      PID:6024
                                                                      • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                        "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored /install -burn.unelevated BurnPipe.{3342BC4B-6243-4BDF-BC44-D5062B71E514} {62CB1807-1976-4371-AF41-DB464EC3CADB} 6024
                                                                        3⤵
                                                                        • Loads dropped DLL
                                                                        • System Location Discovery: System Language Discovery
                                                                        • Suspicious use of FindShellTrayWindow
                                                                        PID:5352
                                                                  • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                    "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored /install /burn.runonce
                                                                    1⤵
                                                                    • System Location Discovery: System Language Discovery
                                                                    • Suspicious use of WriteProcessMemory
                                                                    PID:4328
                                                                    • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                      "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored /install
                                                                      2⤵
                                                                      • Adds Run key to start application
                                                                      • System Location Discovery: System Language Discovery
                                                                      • Suspicious use of WriteProcessMemory
                                                                      PID:3908
                                                                      • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                        "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored /install -burn.unelevated BurnPipe.{26F337D8-5785-465E-BD4E-18064177FDD0} {C6521CE7-669E-4C35-A147-84264F164BFD} 3908
                                                                        3⤵
                                                                        • Loads dropped DLL
                                                                        • System Location Discovery: System Language Discovery
                                                                        • Suspicious use of FindShellTrayWindow
                                                                        PID:716
                                                                  • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                    "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored /install /burn.runonce
                                                                    1⤵
                                                                    • System Location Discovery: System Language Discovery
                                                                    • Suspicious use of WriteProcessMemory
                                                                    PID:3348
                                                                    • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                      "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored /install
                                                                      2⤵
                                                                      • System Location Discovery: System Language Discovery
                                                                      • Suspicious use of WriteProcessMemory
                                                                      PID:3288
                                                                      • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                        "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{FFE620F3-7453-4EC0-B5EB-5B92CB0DD05B} {B6E91C33-F757-4264-B869-06A120BF495A} 3288
                                                                        3⤵
                                                                        • System Location Discovery: System Language Discovery
                                                                        PID:6068
                                                                  • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                    "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored /install /burn.runonce
                                                                    1⤵
                                                                      PID:928
                                                                      • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                        "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored /install
                                                                        2⤵
                                                                          PID:1264
                                                                          • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                            "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{0133C515-5C0F-4531-A688-12CCABA90E63} {156A6BA5-5367-4862-8649-DA1ABC1C89F1} 1264
                                                                            3⤵
                                                                              PID:1940
                                                                        • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                          "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                          1⤵
                                                                            PID:1100
                                                                            • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                              "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored /install
                                                                              2⤵
                                                                                PID:4580
                                                                                • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                  "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{C6A95C60-3F1C-4E3D-93D5-9A2B28DA725C} {59860657-19F8-4B7E-89A7-9802459DF063} 4580
                                                                                  3⤵
                                                                                    PID:304
                                                                              • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                1⤵
                                                                                  PID:1072
                                                                                  • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                    "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored /install
                                                                                    2⤵
                                                                                      PID:2592
                                                                                      • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                        "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{9F3A49D2-6C6B-486F-8FE8-A584EFB717B6} {277186C9-F9F8-4BFE-93AA-1A0276A7C46A} 2592
                                                                                        3⤵
                                                                                          PID:3680
                                                                                    • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                      "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                      1⤵
                                                                                        PID:716
                                                                                        • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                          "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                          2⤵
                                                                                            PID:2240
                                                                                            • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                              "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{52D30AD5-38FF-400B-B519-8C186EDCCEE6} {BD5DF3B6-70D5-4792-9289-ACD6556BC8F9} 2240
                                                                                              3⤵
                                                                                                PID:1444
                                                                                          • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                            "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                            1⤵
                                                                                              PID:4612
                                                                                              • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                2⤵
                                                                                                  PID:4476
                                                                                                  • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                    "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{996E0BA8-AADC-4E90-BA18-FFBA87D77053} {43A27A43-966F-463E-B779-45930CA3EEE8} 4476
                                                                                                    3⤵
                                                                                                      PID:5276
                                                                                                • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                  "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                  1⤵
                                                                                                    PID:4772
                                                                                                    • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                      "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                      2⤵
                                                                                                        PID:2696
                                                                                                        • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                          "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{6F25F54B-0FE7-41F9-B521-3211E332EEFA} {5CE3853D-C7A5-4EC0-A5A3-13BCC45921EB} 2696
                                                                                                          3⤵
                                                                                                            PID:1416
                                                                                                      • C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe
                                                                                                        "C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe" /burn.runonce
                                                                                                        1⤵
                                                                                                          PID:1852
                                                                                                          • C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe
                                                                                                            "C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe" /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260810064245.log" /install
                                                                                                            2⤵
                                                                                                              PID:1460
                                                                                                              • C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe
                                                                                                                "C:\ProgramData\Package Cache\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\vcredist_x64.exe" /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260810064245.log" /install -burn.unelevated BurnPipe.{6A471BB1-622B-446F-8166-C4ECD1E563B5} {1F291085-7837-49D5-A768-477C51B2FF0D} 1460
                                                                                                                3⤵
                                                                                                                  PID:4720
                                                                                                            • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                              "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                              1⤵
                                                                                                                PID:2688
                                                                                                                • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                  "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                  2⤵
                                                                                                                    PID:4516
                                                                                                                    • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                      "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{74B5F71A-EFC0-4188-900A-B44B959AC521} {7AFABA5D-70FB-479E-983A-0528A04AE73D} 4516
                                                                                                                      3⤵
                                                                                                                        PID:5544
                                                                                                                  • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                    "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                    1⤵
                                                                                                                      PID:4932
                                                                                                                      • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                        "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                        2⤵
                                                                                                                          PID:1360
                                                                                                                          • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                            "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{7D6CB481-48E0-4BBF-BA8C-32C8BA4D65B1} {48C13CE7-A5BE-4E79-8253-C3863F643FCF} 1360
                                                                                                                            3⤵
                                                                                                                              PID:1172
                                                                                                                        • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                          "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                          1⤵
                                                                                                                            PID:4088
                                                                                                                            • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                              "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                              2⤵
                                                                                                                                PID:1868
                                                                                                                                • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                  "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{F4F4D2DE-A978-44F0-9FAA-5BFEF93BAF40} {45BB8523-7C5A-49F9-832F-6C9FA0458B02} 1868
                                                                                                                                  3⤵
                                                                                                                                    PID:5760
                                                                                                                              • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                                1⤵
                                                                                                                                  PID:5524
                                                                                                                                  • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                    "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                                    2⤵
                                                                                                                                      PID:5644
                                                                                                                                      • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                        "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{108AE531-39DB-4A7B-9016-F3503799CC52} {3ECD256A-4BFD-4E8D-A3AE-B00BC495C858} 5644
                                                                                                                                        3⤵
                                                                                                                                          PID:4532
                                                                                                                                    • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                      "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                                      1⤵
                                                                                                                                        PID:5420
                                                                                                                                        • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                          "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                                          2⤵
                                                                                                                                            PID:2992
                                                                                                                                            • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                              "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{8F233A17-2F05-4D20-BC19-A805A46232E5} {525270CB-6C08-4161-AA44-9E87052A4BC7} 2992
                                                                                                                                              3⤵
                                                                                                                                                PID:2380
                                                                                                                                          • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                            "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                                            1⤵
                                                                                                                                              PID:3408
                                                                                                                                              • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                                                2⤵
                                                                                                                                                  PID:5204
                                                                                                                                                  • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                    "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{93F67E42-F8E8-4497-89E8-330176DFD308} {61230FED-464F-4976-8588-406C066ACB70} 5204
                                                                                                                                                    3⤵
                                                                                                                                                      PID:4444
                                                                                                                                                • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                  "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                                                  1⤵
                                                                                                                                                    PID:4552
                                                                                                                                                    • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                      "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                                                      2⤵
                                                                                                                                                        PID:1444
                                                                                                                                                        • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                          "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{B531DFF3-A8EA-45A6-8596-299E808D2405} {F731C7FF-54CB-48F9-A9C1-6DC64BA49F88} 1444
                                                                                                                                                          3⤵
                                                                                                                                                            PID:1112
                                                                                                                                                      • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                        "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                                                        1⤵
                                                                                                                                                          PID:4332
                                                                                                                                                          • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                            "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                                                            2⤵
                                                                                                                                                              PID:1932
                                                                                                                                                              • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{A8292358-55DB-4902-BA99-4223DC8145C7} {A365DF5A-48DA-451C-9935-045D0A75158C} 1932
                                                                                                                                                                3⤵
                                                                                                                                                                  PID:3724
                                                                                                                                                            • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                              "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                                                              1⤵
                                                                                                                                                                PID:5872
                                                                                                                                                                • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                  "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:2736
                                                                                                                                                                    • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                      "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{30D03227-0AA9-45A9-B966-3BBE70090222} {23424299-085C-4106-A0DB-6630272F50B1} 2736
                                                                                                                                                                      3⤵
                                                                                                                                                                        PID:1988
                                                                                                                                                                  • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                    "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                                                                    1⤵
                                                                                                                                                                      PID:4400
                                                                                                                                                                      • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                        "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:5544
                                                                                                                                                                          • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                            "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{D132CAAF-7B34-4351-A35E-9BA22017BBBB} {A49BB108-5ADA-4005-AE69-7EBB59513C87} 5544
                                                                                                                                                                            3⤵
                                                                                                                                                                              PID:4232
                                                                                                                                                                        • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                          "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                                                                          1⤵
                                                                                                                                                                            PID:6088
                                                                                                                                                                            • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                              "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                                                                              2⤵
                                                                                                                                                                                PID:2412
                                                                                                                                                                                • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                  "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{77532306-6888-4331-BC88-4B12C5A15AF9} {7408F416-007C-421F-9E52-685CE38C71AB} 2412
                                                                                                                                                                                  3⤵
                                                                                                                                                                                    PID:6008
                                                                                                                                                                              • C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcredist_x86.exe
                                                                                                                                                                                "C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcredist_x86.exe" /burn.runonce
                                                                                                                                                                                1⤵
                                                                                                                                                                                  PID:5360
                                                                                                                                                                                  • C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcredist_x86.exe
                                                                                                                                                                                    "C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcredist_x86.exe" /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064300.log" /install
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:4356
                                                                                                                                                                                      • C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcredist_x86.exe
                                                                                                                                                                                        "C:\ProgramData\Package Cache\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}\vcredist_x86.exe" /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064300.log" /install -burn.unelevated BurnPipe.{C5BD00BB-9A65-40F7-AA22-36625C172837} {2BBEABD7-0557-416E-AFCF-F0C676582D75} 4356
                                                                                                                                                                                        3⤵
                                                                                                                                                                                          PID:5336
                                                                                                                                                                                        • C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe
                                                                                                                                                                                          "C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={9dff3540-fc85-4ed5-ac84-9e3c7fd8bece} -burn.embedded BurnPipe.{E4332958-B4F5-4A6C-AC30-7DC2D66F3C93} {919C4734-B615-4858-80CC-75A207E2E0D2} 4356
                                                                                                                                                                                          3⤵
                                                                                                                                                                                            PID:4148
                                                                                                                                                                                            • C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe
                                                                                                                                                                                              "C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={9dff3540-fc85-4ed5-ac84-9e3c7fd8bece} -burn.embedded BurnPipe.{E4332958-B4F5-4A6C-AC30-7DC2D66F3C93} {919C4734-B615-4858-80CC-75A207E2E0D2} 4356 -burn.unelevated BurnPipe.{FF68AD13-6F27-466E-9C5C-C8396F98CEAE} {23FCD5D0-4C4B-494A-8876-D9A016C4E60B} 4148
                                                                                                                                                                                              4⤵
                                                                                                                                                                                                PID:368
                                                                                                                                                                                        • C:\Windows\SysWOW64\WerFault.exe
                                                                                                                                                                                          C:\Windows\SysWOW64\WerFault.exe -pss -s 396 -p 2976 -ip 2976
                                                                                                                                                                                          1⤵
                                                                                                                                                                                            PID:848
                                                                                                                                                                                          • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                            "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                                                                                            1⤵
                                                                                                                                                                                              PID:2244
                                                                                                                                                                                              • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                  PID:3020
                                                                                                                                                                                                  • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                    "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{48D1C89C-8733-4704-A6F1-669019135DC0} {B6A6A125-2434-4A30-B865-34A139A11767} 3020
                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                      PID:5864
                                                                                                                                                                                                • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                  "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                    PID:4556
                                                                                                                                                                                                    • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                      "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                        PID:5756
                                                                                                                                                                                                        • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                          "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{05D99DFD-6F22-4159-AE8F-42A0B92683A9} {B3A51BEF-8C8C-4BCC-9095-D6F4EAC2640C} 5756
                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                            PID:1428
                                                                                                                                                                                                      • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                        "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                          PID:5896
                                                                                                                                                                                                          • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                            "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                              PID:2056
                                                                                                                                                                                                              • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{49403893-A146-4F23-85B0-95DBF470E27A} {4C19A5D3-039B-4579-A568-B7EE26B3DDE3} 2056
                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                  PID:2684
                                                                                                                                                                                                            • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                              "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                PID:1580
                                                                                                                                                                                                                • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                  "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                    PID:5760
                                                                                                                                                                                                                    • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                      "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{7477A70B-5001-4DBD-8F6E-074A33EB8EB4} {8FCFAB1B-C129-4F84-B392-DEE60059238B} 5760
                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                        PID:3360
                                                                                                                                                                                                                  • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                    "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                      PID:2340
                                                                                                                                                                                                                      • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                        "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                          PID:1456
                                                                                                                                                                                                                          • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                            "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{021D5293-4DD2-46C8-9E35-3AD89A5CB3C6} {46063520-ABCA-4EFE-A4F7-BC127389C752} 1456
                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                              PID:4936
                                                                                                                                                                                                                        • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                          "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                            PID:1976
                                                                                                                                                                                                                            • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                              "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                PID:1860
                                                                                                                                                                                                                                • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                                  "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{A9BC3AF1-77D8-4F65-BD9D-B166B2D4375F} {7CC9997F-F550-4DCC-ADE8-7BD487A06CB4} 1860
                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                    PID:2092
                                                                                                                                                                                                                              • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                                "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                  PID:5064
                                                                                                                                                                                                                                  • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                                    "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                      PID:5132
                                                                                                                                                                                                                                      • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                                        "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{13400731-CE2D-4E38-A1F3-046F500D26B4} {A80C42EB-9C48-4E88-8493-62C9B35945C9} 5132
                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                          PID:4536
                                                                                                                                                                                                                                    • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                                      "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                        PID:1956
                                                                                                                                                                                                                                        • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                                          "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                            PID:2276
                                                                                                                                                                                                                                            • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                                              "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{1B020F7A-7A65-49D0-8B4F-8CB638270A22} {639A8783-3075-4529-A3FD-CC20BC9166C6} 2276
                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                PID:4316
                                                                                                                                                                                                                                          • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                                            "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                              PID:3596
                                                                                                                                                                                                                                              • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                                                "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                  PID:3708
                                                                                                                                                                                                                                                  • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                                                    "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{C31383CF-F793-4867-9713-C8AE37BDFBF6} {FBF28E04-1C2F-43CC-A1D6-280F1E436F1B} 3708
                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                      PID:6136
                                                                                                                                                                                                                                                • C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\vcredist_x64.exe
                                                                                                                                                                                                                                                  "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\vcredist_x64.exe" /burn.runonce
                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                    PID:3468
                                                                                                                                                                                                                                                    • C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\vcredist_x64.exe
                                                                                                                                                                                                                                                      "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\vcredist_x64.exe" /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x64_20260810064316.log" /install
                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                        PID:4128
                                                                                                                                                                                                                                                        • C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\vcredist_x64.exe
                                                                                                                                                                                                                                                          "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\vcredist_x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\vcredist_x64.exe" -burn.filehandle.attached=560 -burn.filehandle.self=580 /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x64_20260810064316.log" /install
                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                            PID:4964
                                                                                                                                                                                                                                                      • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                                                        "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                          PID:2836
                                                                                                                                                                                                                                                          • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                                                            "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                              PID:2780
                                                                                                                                                                                                                                                              • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                                                                "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{5BC0FAAE-BF62-46DA-B9E9-8D4FF52C07F6} {CE8E1888-178C-4F94-A335-79C0692729B8} 2780
                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                  PID:5044
                                                                                                                                                                                                                                                            • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                                                              "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log" /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install /burn.runonce
                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                PID:960
                                                                                                                                                                                                                                                                • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                                                                  "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install
                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                    PID:2120
                                                                                                                                                                                                                                                                    • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
                                                                                                                                                                                                                                                                      "C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /burn.log.append C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log /passive /norestart ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored ignored /install -burn.unelevated BurnPipe.{E10D3958-B3AD-4EDC-B979-874EAE2A784F} {4BC29BF9-2651-4D7A-BD89-A1FC3BCD3A27} 2120
                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                        PID:4144

                                                                                                                                                                                                                                                                  Network

                                                                                                                                                                                                                                                                        MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                        Replay Monitor

                                                                                                                                                                                                                                                                        Loading Replay Monitor...

                                                                                                                                                                                                                                                                        Downloads

                                                                                                                                                                                                                                                                        e59852e.rbs

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e59852e.rbs
                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                        • SHA256 2c8a713b5604ee7c80da5515799e9ff6c091e95ae4f467e314d284b96525192d
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        e598531.rbs

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598531.rbs
                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                        • SHA256 35ad14de1f0af469fce04a4796423868dbf51436fe0e7b953d3cc2fb62de73ef
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        e598534.rbs

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598534.rbs
                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                        • SHA256 a7e83f7d6244bb55141e7f1e67ccadd97c8a4fb998db708b45789920eb17b892
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        e598537.rbs

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598537.rbs
                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                        • SHA256 ac83eeec7a107b570ec76feecfb923ebd03db25db6d7132c8beed3896e02bcfe
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        e59853b.rbs

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e59853b.rbs
                                                                                                                                                                                                                                                                        • Size 17KB
                                                                                                                                                                                                                                                                        • SHA256 4b10cce55c08f5ebf8061b4f9392bc345836ca4a3fc586b794beb4240a63b511
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598544.rbs

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598544.rbs
                                                                                                                                                                                                                                                                        • Size 14KB
                                                                                                                                                                                                                                                                        • SHA256 bafe3d8dfaee571e254defcad6491831f76fef7978a86657650eb01c35b3646c
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598545.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598545.rbf
                                                                                                                                                                                                                                                                        • Size 644KB
                                                                                                                                                                                                                                                                        • SHA256 92faedd18a29e1bd2dd27a1d805ea5aa3e73b954a625af45a74f49d49506d20f
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598546.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598546.rbf
                                                                                                                                                                                                                                                                        • Size 940KB
                                                                                                                                                                                                                                                                        • SHA256 d28c7ab34842b6149609bd4e6b566ddab8b891f0d5062480a253ef20a6a2caaa
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598547.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598547.rbf
                                                                                                                                                                                                                                                                        • Size 470KB
                                                                                                                                                                                                                                                                        • SHA256 88a5ed51a7be4ff7ebded0c107fafda6ace3801877216c0bb6cbb458ae054a7b
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598548.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598548.rbf
                                                                                                                                                                                                                                                                        • Size 348KB
                                                                                                                                                                                                                                                                        • SHA256 1b296bd172332d3b2253bdcb6ecac46afef883f75c13c361632ff40fec743fcc
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598549.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598549.rbf
                                                                                                                                                                                                                                                                        • Size 134KB
                                                                                                                                                                                                                                                                        • SHA256 22d14e004ba4b78a9143257399dc40ef4d0e8f2cdb9127e1ba2638f54cce5c70
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e59854a.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e59854a.rbf
                                                                                                                                                                                                                                                                        • Size 3B
                                                                                                                                                                                                                                                                        • SHA256 13bf7b3039c63bf5a50491fa3cfd8eb4e699d1ba1436315aef9cbe5711530354
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                        e59854e.rbs

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e59854e.rbs
                                                                                                                                                                                                                                                                        • Size 27KB
                                                                                                                                                                                                                                                                        • SHA256 d54d4f8809786f289626bf3deade69835eda38d4a56714ca56e687687d4ed189
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598560.rbs

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598560.rbs
                                                                                                                                                                                                                                                                        • Size 22KB
                                                                                                                                                                                                                                                                        • SHA256 be1393a35e0896d75d42251bcbf80846324ba2fe8edc992af806b7af1da3c0cb
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598561.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598561.rbf
                                                                                                                                                                                                                                                                        • Size 45KB
                                                                                                                                                                                                                                                                        • SHA256 cb531679be2881677a93d11067c71274ec30b30aadf1cdcf1543dddd6b1d7b61
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598562.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598562.rbf
                                                                                                                                                                                                                                                                        • Size 45KB
                                                                                                                                                                                                                                                                        • SHA256 0301c5dc6e762788891356987e9c8cd0d40b262df06e8384bf5796b1f20f083e
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598563.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598563.rbf
                                                                                                                                                                                                                                                                        • Size 73KB
                                                                                                                                                                                                                                                                        • SHA256 80e0f29ff6b7ada892f23927f17021783575ad80f9f6c8a268a6c2a7ce35e5d6
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598564.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598564.rbf
                                                                                                                                                                                                                                                                        • Size 63KB
                                                                                                                                                                                                                                                                        • SHA256 e463f38fa6b6157398ad224a462538bd8e36b75031fa711e567c5505a9092df6
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598565.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598565.rbf
                                                                                                                                                                                                                                                                        • Size 72KB
                                                                                                                                                                                                                                                                        • SHA256 db4fc3652d24224d5375d1a5696144ac8881332cc20f5992ed1488236e64c120
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598566.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598566.rbf
                                                                                                                                                                                                                                                                        • Size 73KB
                                                                                                                                                                                                                                                                        • SHA256 e7cb6c2818ca27c864bda635d5b5d9f7bdb308f4b5d4bbc206ee1e135b7dbbf7
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598567.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598567.rbf
                                                                                                                                                                                                                                                                        • Size 71KB
                                                                                                                                                                                                                                                                        • SHA256 9cfc5985440df4e70b57869b32c8ee69eb6fc570a98cc94a53141a0dc7535e10
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598568.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598568.rbf
                                                                                                                                                                                                                                                                        • Size 52KB
                                                                                                                                                                                                                                                                        • SHA256 83fb72fd2142d54bff6280e7c4d4ff22d43c3a81fa4ff8881003abbe5e21ec3b
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598569.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598569.rbf
                                                                                                                                                                                                                                                                        • Size 52KB
                                                                                                                                                                                                                                                                        • SHA256 b2c7fc2c95b13bac36316d298c94d842dd2574f78e9c22e4d4e4af1c3fcc0fd9
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e59856a.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e59856a.rbf
                                                                                                                                                                                                                                                                        • Size 69KB
                                                                                                                                                                                                                                                                        • SHA256 3238676035d9c1595248ef65ef5b044384b473ab9bdfe8d1077e10e4fe7bc983
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e59856b.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e59856b.rbf
                                                                                                                                                                                                                                                                        • Size 5.4MB
                                                                                                                                                                                                                                                                        • SHA256 75497de4aec4b5f0f258164672db2eb55eef5138c028317860e05f11030f7b7c
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e59856c.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e59856c.rbf
                                                                                                                                                                                                                                                                        • Size 5.3MB
                                                                                                                                                                                                                                                                        • SHA256 950ff7746d747de51cc09c1aaaf88fbc2fc97c59865f574cc3fb10243ae7b906
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e59856d.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e59856d.rbf
                                                                                                                                                                                                                                                                        • Size 89KB
                                                                                                                                                                                                                                                                        • SHA256 a78e7988c9f99bcbe02d29441b0dcbdebafa616d2a4652aad867b81f554a0476
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e59856e.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e59856e.rbf
                                                                                                                                                                                                                                                                        • Size 89KB
                                                                                                                                                                                                                                                                        • SHA256 864958960b8dd2890d47f2774ba836954f2c4f5ad6e4d529b13138caefcce73e
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598573.rbs

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598573.rbs
                                                                                                                                                                                                                                                                        • Size 16KB
                                                                                                                                                                                                                                                                        • SHA256 c07fec84c1718d52dae78c56cdfab07941b8732285a8071e2bb9f4b829d59277
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e59857c.rbs

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e59857c.rbs
                                                                                                                                                                                                                                                                        • Size 13KB
                                                                                                                                                                                                                                                                        • SHA256 aebdcabdf8e1595d9ec26d0b6214740e4e36bbf457c40358243ad0046ee7c88d
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e59857d.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e59857d.rbf
                                                                                                                                                                                                                                                                        • Size 444KB
                                                                                                                                                                                                                                                                        • SHA256 d672fb07a05fb53cc821da0fde823fdfd46071854fe8c6c5ea83d7450b978ecb
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e59857e.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e59857e.rbf
                                                                                                                                                                                                                                                                        • Size 948KB
                                                                                                                                                                                                                                                                        • SHA256 e0305aa54823e6f39d847f8b651b7bd08c085f1dbbcb5c3c1ce1942c0fa1e9fa
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e59857f.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e59857f.rbf
                                                                                                                                                                                                                                                                        • Size 331KB
                                                                                                                                                                                                                                                                        • SHA256 c1b61dd24dc2dd5efd5cd548c0cd74fac112358e9e580df4d780d2c125474dad
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598580.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598580.rbf
                                                                                                                                                                                                                                                                        • Size 242KB
                                                                                                                                                                                                                                                                        • SHA256 1d67a8464991a03fc190d87b43591764f231d7a7a71a72ffc51d982b26691153
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598581.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598581.rbf
                                                                                                                                                                                                                                                                        • Size 117KB
                                                                                                                                                                                                                                                                        • SHA256 62287589fc0b577398005f7ac07256d9fe671cdd3e5369faf74b9f64cb572317
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598586.rbs

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598586.rbs
                                                                                                                                                                                                                                                                        • Size 25KB
                                                                                                                                                                                                                                                                        • SHA256 804b71d7d567cb8f48a2733f4c0c821575223f3ef5349c0a06f322ed2997726d
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598598.rbs

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598598.rbs
                                                                                                                                                                                                                                                                        • Size 22KB
                                                                                                                                                                                                                                                                        • SHA256 a27f0f60db7088c9dd99d836ca2c7a03e10eb1f8ae2c19753f4a25e3e6d1dafc
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e598599.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e598599.rbf
                                                                                                                                                                                                                                                                        • Size 45KB
                                                                                                                                                                                                                                                                        • SHA256 5e7331a6adeb9d4252531ade800d47b8ddf020b97cfedc58de85386b3ae64e76
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e59859a.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e59859a.rbf
                                                                                                                                                                                                                                                                        • Size 45KB
                                                                                                                                                                                                                                                                        • SHA256 9eec79bd4af04bba1e11fc24c64d94f30c22985c8ebbce3e0b411a61a1edbabe
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e59859b.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e59859b.rbf
                                                                                                                                                                                                                                                                        • Size 73KB
                                                                                                                                                                                                                                                                        • SHA256 550f6c9f16fe85a8338b04f1bec43de3babeac60ff257197625f2802907007b8
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e59859c.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e59859c.rbf
                                                                                                                                                                                                                                                                        • Size 63KB
                                                                                                                                                                                                                                                                        • SHA256 d1dbc7677010f9af7b680ea2efa28c964154997bddbf6c8d9d65ea225a5ec613
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e59859d.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e59859d.rbf
                                                                                                                                                                                                                                                                        • Size 72KB
                                                                                                                                                                                                                                                                        • SHA256 87e5c496e038c337ca1acee52c145d8f4bdb3e74261b13e1feb740c4e2124e0a
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e59859e.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e59859e.rbf
                                                                                                                                                                                                                                                                        • Size 73KB
                                                                                                                                                                                                                                                                        • SHA256 b098ed9a5f44052b9ab5ceee82ab4cea5c6d9a14a61816882ef996a0599838b2
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e59859f.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e59859f.rbf
                                                                                                                                                                                                                                                                        • Size 71KB
                                                                                                                                                                                                                                                                        • SHA256 271abe43d14cbd8c80b85ec804787272522bc06c45b7f93244b718ab0c08a289
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e5985a0.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e5985a0.rbf
                                                                                                                                                                                                                                                                        • Size 52KB
                                                                                                                                                                                                                                                                        • SHA256 43cd9fdf714b7dfca4b2a8f54bc25ceeddc7a6212ba59233d89a03c650053407
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e5985a1.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e5985a1.rbf
                                                                                                                                                                                                                                                                        • Size 52KB
                                                                                                                                                                                                                                                                        • SHA256 32dfe0f26b5024ec900a31f0dde736ca62769dc5de48238b485f4322cd367e7d
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e5985a2.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e5985a2.rbf
                                                                                                                                                                                                                                                                        • Size 69KB
                                                                                                                                                                                                                                                                        • SHA256 1154c537bd700ebbda599a5c2923e73d098c3eaa930fd0f4d415583ff90eea67
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e5985a3.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e5985a3.rbf
                                                                                                                                                                                                                                                                        • Size 4.2MB
                                                                                                                                                                                                                                                                        • SHA256 6130ad7d21a492cd3f3924bed43d954f80b6b6920374934b9eed057f27130e15
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e5985a4.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e5985a4.rbf
                                                                                                                                                                                                                                                                        • Size 4.2MB
                                                                                                                                                                                                                                                                        • SHA256 68df186e26151313a0df2adb0ef5f3a45ebba3cb02229bd8723a29dee60e278d
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e5985a5.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e5985a5.rbf
                                                                                                                                                                                                                                                                        • Size 81KB
                                                                                                                                                                                                                                                                        • SHA256 8c82f149507c3415250e52bf4c7fe937946a60d51f07492a1e36ab3e14482187
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e5985a6.rbf

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e5985a6.rbf
                                                                                                                                                                                                                                                                        • Size 81KB
                                                                                                                                                                                                                                                                        • SHA256 d6d2ba4ac1606e825216a25ab401d26d77c4300299e957cfadab3b0b945d065a
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e5985ad.rbs

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e5985ad.rbs
                                                                                                                                                                                                                                                                        • Size 19KB
                                                                                                                                                                                                                                                                        • SHA256 06eae0b5e812e9ca0954d799fc45b0cb806fc3a7770a4c1237e0d05396b70cc1
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e5985b9.rbs

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e5985b9.rbs
                                                                                                                                                                                                                                                                        • Size 19KB
                                                                                                                                                                                                                                                                        • SHA256 ab12eb7e635a765e2640cb4c0dba0a965f159cc5133315e4a07297b611b6c9ed
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e5985c0.rbs

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e5985c0.rbs
                                                                                                                                                                                                                                                                        • Size 21KB
                                                                                                                                                                                                                                                                        • SHA256 f89f70bc525de818918b3fa23a65288152b0775e22d221219d3aaa5ab69e6d9b
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e5985cf.rbs

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e5985cf.rbs
                                                                                                                                                                                                                                                                        • Size 21KB
                                                                                                                                                                                                                                                                        • SHA256 788b036bc3d0ee7dda57d107927221cb42845cce815a6a765d03a17558cd4094
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e5985d6.rbs

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e5985d6.rbs
                                                                                                                                                                                                                                                                        • Size 16KB
                                                                                                                                                                                                                                                                        • SHA256 eeb7e22f564492c6fb5b6f28d9c99c126d0a6292f0feda2ce6e7eb5c63112d97
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        e5985db.rbs

                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e5985db.rbs
                                                                                                                                                                                                                                                                        • Size 18KB
                                                                                                                                                                                                                                                                        • SHA256 57db1bbe518bbc183eb359346d5609af1ff32a068f3cb7d41f8afc8dd8fb5ba4
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        msdia90.dll

                                                                                                                                                                                                                                                                        • Path C:\Program Files (x86)\Common Files\Microsoft Shared\VC\msdia90.dll
                                                                                                                                                                                                                                                                        • Size 655KB
                                                                                                                                                                                                                                                                        • SHA256 348f0db7310626284e6992be0f5eebedeb2d3accf82063e3bd93d4d871aa1e04
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        msdia90.dll

                                                                                                                                                                                                                                                                        • Path C:\Program Files\Common Files\microsoft shared\VC\msdia90.dll
                                                                                                                                                                                                                                                                        • Size 836KB
                                                                                                                                                                                                                                                                        • SHA256 25f0c8551579c4c4ad5db2644bdfd278dc3503fecc461aca2c8e969b151531a7
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        state.rsm

                                                                                                                                                                                                                                                                        • Path C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm
                                                                                                                                                                                                                                                                        • Size 618B
                                                                                                                                                                                                                                                                        • SHA256 681e5d2538121181b115f90693cfedccc860571ca0e58277d2997ff73c021fbe
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        msdia80.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x64\Program Files\Common Files\Microsoft Shared\VC\amd64\msdia80.dll
                                                                                                                                                                                                                                                                        • Size 893KB
                                                                                                                                                                                                                                                                        • SHA256 226923acb7a70e49eb14b0d836b304247ddbced4bcb0028483b8c1cc5aaedfef
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        ATL80.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x64\Windows\winsxs\nvdlei3o.taa\ATL80.dll
                                                                                                                                                                                                                                                                        • Size 111KB
                                                                                                                                                                                                                                                                        • SHA256 f7c0045ddaf80a41e9633a29195d4990af1bf7c5f58301be5ba350abb7522458
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_d7470ca6.cat

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x64\Windows\winsxs\nvdlei3o.taa\amd64_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_d7470ca6.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 fd27faa8acceaf501f9b457358afd9d85009745ca793aad7c5bc7830c61dab29
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_d7470ca6.manifest

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x64\Windows\winsxs\nvdlei3o.taa\amd64_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_d7470ca6.manifest
                                                                                                                                                                                                                                                                        • Size 468B
                                                                                                                                                                                                                                                                        • SHA256 48284e25a4cfafcc107598d07cedb8f00cdce18e81604e9ce2766bfe7f4ae025
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_76a71f32.cat

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x64\Windows\winsxs\vlv6b2rp.6fi\amd64_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_76a71f32.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 26b7d3183af0487b86d77bdc775af8d73408585b28fd083456715af7586d5b51
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_76a71f32.manifest

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x64\Windows\winsxs\vlv6b2rp.6fi\amd64_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_76a71f32.manifest
                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                        • SHA256 bf96b10c59ca14fcdf38be66cad5ff1e5bf7ab86cfd8d4d5109f74bb9d9311f7
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        msvcm80.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x64\Windows\winsxs\vlv6b2rp.6fi\msvcm80.dll
                                                                                                                                                                                                                                                                        • Size 503KB
                                                                                                                                                                                                                                                                        • SHA256 c0a1ec11aa74e8113c08a93144aa357b9f08d1b44b868540752ccd94f7c8b819
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        msvcp80.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x64\Windows\winsxs\vlv6b2rp.6fi\msvcp80.dll
                                                                                                                                                                                                                                                                        • Size 1.0MB
                                                                                                                                                                                                                                                                        • SHA256 bc0326d760ea13ba95eb73edda92c84aa8852a8028517b4a973bd4ebd8770ef8
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        msvcr80.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x64\Windows\winsxs\vlv6b2rp.6fi\msvcr80.dll
                                                                                                                                                                                                                                                                        • Size 778KB
                                                                                                                                                                                                                                                                        • SHA256 922f0b8a53c90c74d546e86513bd1993fff74a5bc0e829a55ad48b10024ee9ba
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        vcredist.msi

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x64\vcredist.msi
                                                                                                                                                                                                                                                                        • Size 524KB
                                                                                                                                                                                                                                                                        • SHA256 079b802f6b0b4c7f74a6afb09512e4efcf2af2f61b7af31c82bc626939ed549e
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        msdia80.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Program Files\Common Files\Microsoft Shared\VC\msdia80.dll
                                                                                                                                                                                                                                                                        • Size 626KB
                                                                                                                                                                                                                                                                        • SHA256 b0defd82a56b61cc5452d2028d5de420f45ec21d41910a799e7826396c334239
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        ATL80.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\73t3z6j5.7ag\ATL80.dll
                                                                                                                                                                                                                                                                        • Size 95KB
                                                                                                                                                                                                                                                                        • SHA256 6715f1b23ecf4ed2e60a2d41230b10314987ecf019a1009b40c35c01572e9599
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_a53d26c6.cat

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\73t3z6j5.7ag\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_a53d26c6.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 490e02ba45467a315596d9441d0997acb19c3482edec18d226d0a26ddda14c86
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_a53d26c6.manifest

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\73t3z6j5.7ag\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_a53d26c6.manifest
                                                                                                                                                                                                                                                                        • Size 466B
                                                                                                                                                                                                                                                                        • SHA256 910a004bb0859dc6bda8ee598de0dfced410ed379f917f4439db00a5b6e7db5d
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        mfc80.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\7z1v718o.6n8\mfc80.dll
                                                                                                                                                                                                                                                                        • Size 1.1MB
                                                                                                                                                                                                                                                                        • SHA256 f0ce4a79e28bef2ac7d926dcc9cc0dee4648647434f7ee61a9816d340b57e59a
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc80u.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\7z1v718o.6n8\mfc80u.dll
                                                                                                                                                                                                                                                                        • Size 1.0MB
                                                                                                                                                                                                                                                                        • SHA256 aaae6e5e2876751b144447ff0fbec12cd4c57b1cfdde0d58470456416f55ca3b
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfcm80.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\7z1v718o.6n8\mfcm80.dll
                                                                                                                                                                                                                                                                        • Size 68KB
                                                                                                                                                                                                                                                                        • SHA256 c51f848eb710ca93cae1759a612de971154dcec0c50cc1de6286e79efa9fb834
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfcm80u.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\7z1v718o.6n8\mfcm80u.dll
                                                                                                                                                                                                                                                                        • Size 56KB
                                                                                                                                                                                                                                                                        • SHA256 8ecb7aa8b92f1f9f754de7fca3e42d1bbaf2584a5613eed01abc80fa41145f1b
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_1583ac57.cat

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\7z1v718o.6n8\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_1583ac57.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 28d59aa6c7c6b7c735bd74ba82b32c7eb3ebcc94b4b4d70e23fefb35afa91575
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_1583ac57.manifest

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\7z1v718o.6n8\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_1583ac57.manifest
                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                        • SHA256 519385c889af36b26f1e6b3553c7a9c4fc7f6a9d8ec41a562ed184a1a7454762
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        msvcm80.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\b2rg91xw.1p4\msvcm80.dll
                                                                                                                                                                                                                                                                        • Size 468KB
                                                                                                                                                                                                                                                                        • SHA256 c61c57a77cf6903c453cb0d06b2eed86b5a4b8fa1fd3de8625a6ac4159adeeb2
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        msvcp80.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\b2rg91xw.1p4\msvcp80.dll
                                                                                                                                                                                                                                                                        • Size 536KB
                                                                                                                                                                                                                                                                        • SHA256 4abb7b40d139d4e25a3c6150a48f935508d22a71cdf6c50029185fcdd79e3671
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        msvcr80.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\b2rg91xw.1p4\msvcr80.dll
                                                                                                                                                                                                                                                                        • Size 612KB
                                                                                                                                                                                                                                                                        • SHA256 0c11873eb674c72e41c9e89c42f5e45bb905bb4417ebbd1b3507355c4042acc6
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_449d3952.cat

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\b2rg91xw.1p4\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_449d3952.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 54d14ac3ecce48096377851d745bd421c885915e7667d8399bf537956688e2c6
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_449d3952.manifest

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\b2rg91xw.1p4\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_449d3952.manifest
                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                        • SHA256 0d669e9ca05a767befc2985b6387ce4cb054b6f7a9c168b5f0463a598ea8bbd5
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        mfc80CHS.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\refn04mk.ve6\mfc80CHS.dll
                                                                                                                                                                                                                                                                        • Size 40KB
                                                                                                                                                                                                                                                                        • SHA256 194d88fc4cc62458f75e3e734c3d44afcc58b4de70a3087c3c434b5a5a51829f
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc80CHT.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\refn04mk.ve6\mfc80CHT.dll
                                                                                                                                                                                                                                                                        • Size 44KB
                                                                                                                                                                                                                                                                        • SHA256 5c764023f97af75714c04ded6c8d05326bf7d9a271c273622c6cb967356633d5
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc80DEU.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\refn04mk.ve6\mfc80DEU.dll
                                                                                                                                                                                                                                                                        • Size 64KB
                                                                                                                                                                                                                                                                        • SHA256 9e7a426942725116e2a4e8a71e259251a2f0c194e3cf4768c49a32ed4a87bf96
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc80ENU.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\refn04mk.ve6\mfc80ENU.dll
                                                                                                                                                                                                                                                                        • Size 56KB
                                                                                                                                                                                                                                                                        • SHA256 f65fe2288573ce967c40cfeb81029376cf81d3bb20513d6578cded26adf233b7
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc80ESP.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\refn04mk.ve6\mfc80ESP.dll
                                                                                                                                                                                                                                                                        • Size 60KB
                                                                                                                                                                                                                                                                        • SHA256 2ccd1e858673de52f607dc16ed54f744beda0e5318820514aaa3b9b879470e63
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc80FRA.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\refn04mk.ve6\mfc80FRA.dll
                                                                                                                                                                                                                                                                        • Size 60KB
                                                                                                                                                                                                                                                                        • SHA256 0a8a1969598453cabe468d75e2350867f7566656ea4effc2a17bd35fdfa4817a
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc80ITA.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\refn04mk.ve6\mfc80ITA.dll
                                                                                                                                                                                                                                                                        • Size 60KB
                                                                                                                                                                                                                                                                        • SHA256 448c41d2cbae758cf44ce6bcc3abfe57cb297cf6e6a419b39a3daa6b2c5c1899
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc80JPN.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\refn04mk.ve6\mfc80JPN.dll
                                                                                                                                                                                                                                                                        • Size 48KB
                                                                                                                                                                                                                                                                        • SHA256 5f57470c4864e1f2074bbe566790caff8231ee5707bf594b59131501e78238a1
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc80KOR.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\refn04mk.ve6\mfc80KOR.dll
                                                                                                                                                                                                                                                                        • Size 48KB
                                                                                                                                                                                                                                                                        • SHA256 86cfd8fc4ba0a63a6f4539d1a3d42dfb5cb16bb9f4b25da61587374ad1886063
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_6ad2c555.cat

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\refn04mk.ve6\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_6ad2c555.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 20c77e69cf8cf31a7aaaa6651786b652f7018434d760292c47740cb30a19f97b
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_6ad2c555.manifest

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\refn04mk.ve6\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_6ad2c555.manifest
                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                        • SHA256 f03e019da7c2f33643868f0039b073cbcb6c35fbfc11f1d9e6f2711a5adf22da
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        vcomp.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\Windows\winsxs\v9qi6zyr.zqi\vcomp.dll
                                                                                                                                                                                                                                                                        • Size 64KB
                                                                                                                                                                                                                                                                        • SHA256 28e047a15857478264fe2a250d74c735a717a9285c54b9cb841a92d74f0331a1
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        vcredist.msi

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2005\x86\vcredist.msi
                                                                                                                                                                                                                                                                        • Size 500KB
                                                                                                                                                                                                                                                                        • SHA256 5aa2cc5e19114642eaf2684965aca53d9181926afe1c625508d2a84102372681
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        atl90.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulATLx86\atl90.dll
                                                                                                                                                                                                                                                                        • Size 156KB
                                                                                                                                                                                                                                                                        • SHA256 2a35880f2d240510da7bdf1d36c1348cafefdf22b2bfb4b6de7d01b87e0fa0fd
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        msvcm90.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulCRTx86\msvcm90.dll
                                                                                                                                                                                                                                                                        • Size 220KB
                                                                                                                                                                                                                                                                        • SHA256 307b04e884db79da88b167fbf5fb6f8b2fe9fa7eb13f77dfa09340a63dc60abc
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        msvcp90.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulCRTx86\msvcp90.dll
                                                                                                                                                                                                                                                                        • Size 557KB
                                                                                                                                                                                                                                                                        • SHA256 3c83adfb8ea5e52a878c27d600866ed3743b71ea85b91b7a6a94d23ba6a16f04
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        msvcr90.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulCRTx86\msvcr90.dll
                                                                                                                                                                                                                                                                        • Size 638KB
                                                                                                                                                                                                                                                                        • SHA256 49e9824ecb4e3bb6081ed2c1e27269ec7995bec7aa74c12ea4bf680e0ebe3398
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90chs.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulMFCLOCx86\mfc90chs.dll
                                                                                                                                                                                                                                                                        • Size 35KB
                                                                                                                                                                                                                                                                        • SHA256 8f6694d76cbeabfb1aa7aa1ae84c9392c8afe9212f9a7a4cd1f1ed95a859c6b0
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90cht.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulMFCLOCx86\mfc90cht.dll
                                                                                                                                                                                                                                                                        • Size 36KB
                                                                                                                                                                                                                                                                        • SHA256 7e459bfe3937b849c869f6879023a61dab7dfcf7c05438a6aed2023fa56c2dda
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90deu.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulMFCLOCx86\mfc90deu.dll
                                                                                                                                                                                                                                                                        • Size 62KB
                                                                                                                                                                                                                                                                        • SHA256 f5dba4e1fd1467e8a8115349f1f614dda7087420ba16e584ca95e649eb1a7ecc
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90enu.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulMFCLOCx86\mfc90enu.dll
                                                                                                                                                                                                                                                                        • Size 53KB
                                                                                                                                                                                                                                                                        • SHA256 7f67a665be7c736133fe9ecaa2960c069f57a824b071e6a49d6de5673916630d
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90esn.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulMFCLOCx86\mfc90esn.dll
                                                                                                                                                                                                                                                                        • Size 61KB
                                                                                                                                                                                                                                                                        • SHA256 7dc1370b294577e3d006a17b06e84b0fd3985b5d9eeb5d2e88e7286cb26df894
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90esp.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulMFCLOCx86\mfc90esp.dll
                                                                                                                                                                                                                                                                        • Size 61KB
                                                                                                                                                                                                                                                                        • SHA256 0cb5e25176ead12cf0f28f204d092e3b1318a9096fae97e998cb0d90882244a2
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90fra.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulMFCLOCx86\mfc90fra.dll
                                                                                                                                                                                                                                                                        • Size 62KB
                                                                                                                                                                                                                                                                        • SHA256 3bbc6bddab5684347cd544dd06e6a11736460a67f4885d99fdc566aec68b4ad6
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90ita.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulMFCLOCx86\mfc90ita.dll
                                                                                                                                                                                                                                                                        • Size 60KB
                                                                                                                                                                                                                                                                        • SHA256 d7804c01ed4480ed2ba37013c147cc6229d20cdf13a059416182e16dbceba30f
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90jpn.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulMFCLOCx86\mfc90jpn.dll
                                                                                                                                                                                                                                                                        • Size 43KB
                                                                                                                                                                                                                                                                        • SHA256 f26feee28214f9b996870a1bdcf1693e427101e64f59587cb0071516fff7c98a
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90kor.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulMFCLOCx86\mfc90kor.dll
                                                                                                                                                                                                                                                                        • Size 42KB
                                                                                                                                                                                                                                                                        • SHA256 4e9aa496073fd969d0ef6c81238f7ccd9632bd73f98618202dd9453f8cfff74a
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90rus.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulMFCLOCx86\mfc90rus.dll
                                                                                                                                                                                                                                                                        • Size 59KB
                                                                                                                                                                                                                                                                        • SHA256 2b3da04808ca85b0147d11593687d1b4fd7e0ca40082109e3372f94d8b8d0787
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulMFCx86\mfc90.dll
                                                                                                                                                                                                                                                                        • Size 3.6MB
                                                                                                                                                                                                                                                                        • SHA256 15f5fc2344334e5b6e21b08d707403acae57bb08320f544c38eda9f0aa2ea31c
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90u.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulMFCx86\mfc90u.dll
                                                                                                                                                                                                                                                                        • Size 3.6MB
                                                                                                                                                                                                                                                                        • SHA256 f1e222bf56ae8a1028c086d37791e6fe8b8eb0f22c47f78d9284c0da5be116a1
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfcm90.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulMFCx86\mfcm90.dll
                                                                                                                                                                                                                                                                        • Size 58KB
                                                                                                                                                                                                                                                                        • SHA256 b156e8bb5ff5403101583f0e3dda8cd2bbdd91c504712a28da450d6da62d340a
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfcm90u.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulMFCx86\mfcm90u.dll
                                                                                                                                                                                                                                                                        • Size 58KB
                                                                                                                                                                                                                                                                        • SHA256 fddd3a5d053020d228a082f998a8b5d10bd3dfeedc17d65e77ff02d8bd1323e2
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        vcomp90.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\Windows\winsxs\ulOpenMPx86\vcomp90.dll
                                                                                                                                                                                                                                                                        • Size 50KB
                                                                                                                                                                                                                                                                        • SHA256 49495d5b9a51fd13cf6a13d0d4f4feb32ca65efc4fa5f99f91dba1683a5d36b6
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        vc_red.msi

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2008\x86\vc_red.msi
                                                                                                                                                                                                                                                                        • Size 236KB
                                                                                                                                                                                                                                                                        • SHA256 cb139d13a3ad831588d9ee325ed504249ab754f2c74e4609cb0cf6e5a2c696d7
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        vc_runtimeMinimum_x64.msi

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\2022\x64\vc_runtimeMinimum_x64.msi
                                                                                                                                                                                                                                                                        • Size 208KB
                                                                                                                                                                                                                                                                        • SHA256 be3d929d59d15a748191203c57107647399e3e78378a1842f7309eecdbc2c2a5
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        dd_vcredist_x86_20260810064231.log

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_x86_20260810064231.log
                                                                                                                                                                                                                                                                        • Size 24KB
                                                                                                                                                                                                                                                                        • SHA256 832920e8ad54b8821f2ddf9c0d6f229730b5aa314e1467cf41c22b0aabae5769
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        license.rtf

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\.ba2\license.rtf
                                                                                                                                                                                                                                                                        • Size 6KB
                                                                                                                                                                                                                                                                        • SHA256 8518f0420972c1dbe8a323ffc6f57863af0b80c6a3b27fd0c6fc9bdabb7e2d13
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        vcredist_x64.exe

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}\.be\vcredist_x64.exe
                                                                                                                                                                                                                                                                        • Size 436KB
                                                                                                                                                                                                                                                                        • SHA256 d14acca3525eaf28a3b92e0f8158e912ec75054830b8c028b574c498743557a5
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        BootstrapperApplicationData.xml

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\.ba1\BootstrapperApplicationData.xml
                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                        • SHA256 ef0085c0476fbe4d6d170c6909f4ad35762fb05e125e9ed707b3c413ae6bbc74
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        license.rtf

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\.ba1\license.rtf
                                                                                                                                                                                                                                                                        • Size 47KB
                                                                                                                                                                                                                                                                        • SHA256 5b7bd9ad76c8df8e2c496b3dcefc9fe3750dccc48fb416126605ed3fb208f55a
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        thm.wxl

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\.ba1\thm.wxl
                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                        • SHA256 70400f181d00e1769774ff36bcd8b1ab5fbc431418067d31b876d18cc04ef4ce
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        thm.xml

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\.ba1\thm.xml
                                                                                                                                                                                                                                                                        • Size 5KB
                                                                                                                                                                                                                                                                        • SHA256 6b1ba0dea830e556a58c883290faa5d49c064e546cbfcd0451596a10cc693f87
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        wixstdba.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\.ba1\wixstdba.dll
                                                                                                                                                                                                                                                                        • Size 126KB
                                                                                                                                                                                                                                                                        • SHA256 7f5f8fcfd84132579f07e395e65b44e1b031fe01a299bce0e3dd590131c5cb93
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        logo.png

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\.ba1\logo.png
                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                        • SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        vcredist_x64.exe

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\.be\vcredist_x64.exe
                                                                                                                                                                                                                                                                        • Size 428KB
                                                                                                                                                                                                                                                                        • SHA256 402746f4a9e3ab4257dfd4927c3cda4a5f23cd5a1ee1185b46d33ec3e3982fc7
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        wixstdba.dll

                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\.ba1\wixstdba.dll
                                                                                                                                                                                                                                                                        • Size 117KB
                                                                                                                                                                                                                                                                        • SHA256 e7c8e7edd9112137895820e789baaaeca41626b01fb99fede82968ddb66d02cf
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        MSI895A.tmp

                                                                                                                                                                                                                                                                        • Path C:\Windows\Installer\MSI895A.tmp
                                                                                                                                                                                                                                                                        • Size 28KB
                                                                                                                                                                                                                                                                        • SHA256 f6e34a4550e499346f5ab1d245508f16bf765ff24c4988984b89e049ca55737f
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        license.rtf

                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{23ED81AF-A46E-4DCC-BAB3-B099C5473548}\.ba\license.rtf
                                                                                                                                                                                                                                                                        • Size 9KB
                                                                                                                                                                                                                                                                        • SHA256 8099dc3cf9502c335da829e5c755948a12e3e6de490eb492a99deb673d883d8b
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        thm.xml

                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{23ED81AF-A46E-4DCC-BAB3-B099C5473548}\.ba\thm.xml
                                                                                                                                                                                                                                                                        • Size 8KB
                                                                                                                                                                                                                                                                        • SHA256 f13bae0ec08c91b4a315bb2d86ee48fade597e7a5440dce6f751f98a3a4d6916
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        thm.wxl

                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{64EBE78D-B9BC-4002-941F-6F1A45ACB962}\.ba\2052\thm.wxl
                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                        • SHA256 2ac8b7c19a5189662de36a0581c90dbad96df259ec00a28f609b644c3f39f9ca
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        vcredist_x64.exe

                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{FBA06CED-2712-4190-AC31-E98E3697789C}\.cr\vcredist_x64.exe
                                                                                                                                                                                                                                                                        • Size 603KB
                                                                                                                                                                                                                                                                        • SHA256 6af39721ab965eea2f7e6e5f06ef2b8e74d860f6abfd6a2dc2cdfd3790f4cae5
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_478d9237.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118783.0\amd64_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_478d9237.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 2d7658d949cb52ac8d06d98308516de2bd299c984c4b5a1d286e70c095e92c80
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_478d9237.manifest

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118783.0\amd64_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_478d9237.manifest
                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                        • SHA256 bc746ffc9d866e54444cdecd482be1f8f4b090fda18f6b0f5a10992d4da3ee3e
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        mfc80.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118783.0\mfc80.dll
                                                                                                                                                                                                                                                                        • Size 1.6MB
                                                                                                                                                                                                                                                                        • SHA256 78b8aa8cf7b0a1e05ee282fdfe3347c00219df35fee359ffc139ab73d2c538f1
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc80u.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118783.0\mfc80u.dll
                                                                                                                                                                                                                                                                        • Size 1.6MB
                                                                                                                                                                                                                                                                        • SHA256 a34ddd531e07899628dfffb05916b478d5c955527632a99414bfb2e169d72753
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfcm80.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118783.0\mfcm80.dll
                                                                                                                                                                                                                                                                        • Size 63KB
                                                                                                                                                                                                                                                                        • SHA256 23b18be36980b41ed6a5f2fe83dfc1212c8933bf7a9627fdabcfe44c30e93af3
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfcm80u.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118783.0\mfcm80u.dll
                                                                                                                                                                                                                                                                        • Size 62KB
                                                                                                                                                                                                                                                                        • SHA256 157891464d029afec10c86a4cf8e5881730ee4da528d44f2dd6f39463294a2e0
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_9cdcab35.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118835.0\amd64_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_9cdcab35.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 de3f6ad506ef214e0c8ed28ec1c6c6d62796baacbdbd0b236aef0cdd7708caa2
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_9cdcab35.manifest

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118835.0\amd64_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_9cdcab35.manifest
                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                        • SHA256 a08072fa79c5dce607a0368fe67a3f42f7f40968e104c1aa68c902642aa38ac9
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        mfc80CHS.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118835.0\mfc80CHS.dll
                                                                                                                                                                                                                                                                        • Size 32KB
                                                                                                                                                                                                                                                                        • SHA256 853486210bc1cf2bb7f3f98bc75c015e34a43ccd4a8fbe4339f6c6741f3f7567
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc80CHT.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118835.0\mfc80CHT.dll
                                                                                                                                                                                                                                                                        • Size 33KB
                                                                                                                                                                                                                                                                        • SHA256 3eec4802910f5ca54fe78d02ea5a4a75360b92c7a6d91c1ee92b14a843207d79
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc80DEU.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118835.0\mfc80DEU.dll
                                                                                                                                                                                                                                                                        • Size 53KB
                                                                                                                                                                                                                                                                        • SHA256 7c05e32bd80656b2042161961300f8488792332fc875f717261c5e94cd4bfddc
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc80ENU.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118835.0\mfc80ENU.dll
                                                                                                                                                                                                                                                                        • Size 46KB
                                                                                                                                                                                                                                                                        • SHA256 a555429da50f760b9a6dd78bdde25a21306ae4d520ff2b934f7ca41e69f6c9be
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc80ESP.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118835.0\mfc80ESP.dll
                                                                                                                                                                                                                                                                        • Size 50KB
                                                                                                                                                                                                                                                                        • SHA256 5fd9143f39b3f5a29a6620ade30167d6c97e97b4b3af824a1c9432a8f53fe4ff
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc80FRA.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118835.0\mfc80FRA.dll
                                                                                                                                                                                                                                                                        • Size 51KB
                                                                                                                                                                                                                                                                        • SHA256 89524ea6c117cab507f2ba8d7fd5c75e565b09021a5109c0c962a7d8ba10ad32
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc80ITA.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118835.0\mfc80ITA.dll
                                                                                                                                                                                                                                                                        • Size 51KB
                                                                                                                                                                                                                                                                        • SHA256 3a9c893cac9caca027a4fdf503d396b053aa60e0781bc8cbac5e6a55cd773951
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc80JPN.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118835.0\mfc80JPN.dll
                                                                                                                                                                                                                                                                        • Size 38KB
                                                                                                                                                                                                                                                                        • SHA256 11aabb949db1e4c149a98580ca084544b6ecb7ccacb0d658408ff17970202926
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc80KOR.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118835.0\mfc80KOR.dll
                                                                                                                                                                                                                                                                        • Size 37KB
                                                                                                                                                                                                                                                                        • SHA256 7468fe1a5c228e606a8626e0cdf37bcf7d7cf1d40b3f09807d29572a0ac48a08
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_77aceccc.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118909.0\amd64_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_77aceccc.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 c98147c172966b2f75ec75ccd0f6cffa1b28045b9b51c35e5568fe653305a438
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_77aceccc.manifest

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118909.0\amd64_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_77aceccc.manifest
                                                                                                                                                                                                                                                                        • Size 471B
                                                                                                                                                                                                                                                                        • SHA256 713420072458772bf6ce9747b3bbb325323189780e80e26c88b1e01ab3b3d590
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        vcomp.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118909.0\vcomp.dll
                                                                                                                                                                                                                                                                        • Size 85KB
                                                                                                                                                                                                                                                                        • SHA256 3fd51eb66c9c6dc796fa8e238c45294e5ee3ebcbd79fdeb2c592c94e5e8a9e11
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118929.0\8.0.50727.6229.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 1c396094a4035c69092e930ac9c24e416770ee5ccde60a3a674e101333ab4d67
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118929.0\8.0.50727.6229.policy
                                                                                                                                                                                                                                                                        • Size 808B
                                                                                                                                                                                                                                                                        • SHA256 3b528969a9d44d6cbf111d5a12de36bb3ea2dcdf0d29218d55babb8fdc40f7b9
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118942.0\8.0.50727.6229.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 0220f8c1897bf4b664133a6255f40b072a7960f6c0016807277415c653b5c3e0
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118942.0\8.0.50727.6229.policy
                                                                                                                                                                                                                                                                        • Size 808B
                                                                                                                                                                                                                                                                        • SHA256 2cb8fa96ea5764591408a47a304ea2ae5fa1c5f0bfb54c5ee7ad16436895d483
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118954.0\8.0.50727.6229.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 f61d176002244c30b6b1d3845a849bd8967eb204e439d61fc936944eab5690d8
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118954.0\8.0.50727.6229.policy
                                                                                                                                                                                                                                                                        • Size 808B
                                                                                                                                                                                                                                                                        • SHA256 2b5ceef5e3f426d8965a720c882a4f55bd3b24b51554ed6a354e2468fa7a8e4f
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118968.0\8.0.50727.6229.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 9fbeb30e3784c19d71b23f18a0b700d63a924de0277a6677f95a0e5fd88833f1
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118968.0\8.0.50727.6229.policy
                                                                                                                                                                                                                                                                        • Size 814B
                                                                                                                                                                                                                                                                        • SHA256 cb9060e72ee6eb044726c906c3b7909a59fbb06cbcd6ccc4edc4ee182d62bc94
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118980.0\8.0.50727.6229.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 17d929b9c67968ceb1f8e395375876816c8ff1259363951d1c1d28d24658db48
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064118980.0\8.0.50727.6229.policy
                                                                                                                                                                                                                                                                        • Size 814B
                                                                                                                                                                                                                                                                        • SHA256 04f036302344265ed52e9ce4805504258ad68456e4215f561fa6e4e2c901ee4e
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_45a306ec.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064135404.0\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_45a306ec.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 e7ae0277b474070e5c5367269ea7b52a3a42304191fee99a8760910840678644
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_45a306ec.manifest

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064135404.0\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.6229_x-ww_45a306ec.manifest
                                                                                                                                                                                                                                                                        • Size 469B
                                                                                                                                                                                                                                                                        • SHA256 e91aa867f2c5d9f55ff5d07829398cba827e7ac9aee66260a67c3668d7ff59d9
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064135419.0\8.0.50727.6229.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 a6c6b85776b9cb7637ccc1bd3a08e0630a3396dd4b229d0ec6db1eccfb960b16
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064135419.0\8.0.50727.6229.policy
                                                                                                                                                                                                                                                                        • Size 804B
                                                                                                                                                                                                                                                                        • SHA256 1108e4f8961795a5400d1fae01778f3968cbcacbf87ad41c7b9425da92273206
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064135430.0\8.0.50727.6229.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 3af8324145a201c79fb7e959d9d405fb2b992e43378d1511af30c00141313070
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064135430.0\8.0.50727.6229.policy
                                                                                                                                                                                                                                                                        • Size 804B
                                                                                                                                                                                                                                                                        • SHA256 97fa53c1c48aae27e07eaa5e1257d2cdd75cc128b687038876ac40b06897cff9
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064135447.0\8.0.50727.6229.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 6280e005fb901deae3b48e5975ddcc1a6128ba86729441fc7c64bd53f74c5c46
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064135447.0\8.0.50727.6229.policy
                                                                                                                                                                                                                                                                        • Size 804B
                                                                                                                                                                                                                                                                        • SHA256 a9e7bd6219ffe592ba38e4f3023d5d667387be2a0626dfdf0a457d05318f764a
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064135453.0\8.0.50727.6229.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 bb376835dbd7a987770026793a4d40401e6f5b897e79783d99debff160d81a17
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064135453.0\8.0.50727.6229.policy
                                                                                                                                                                                                                                                                        • Size 810B
                                                                                                                                                                                                                                                                        • SHA256 8e8d10274c3453df76aead617eaf67d4c1299be57d5a24ebc43ee1de242edb95
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064135466.0\8.0.50727.6229.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 e52cf4d07b248c3de8b1c6060aa6148fbdd165ced2a83eb0bc51235d967e94a7
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        8.0.50727.6229.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064135466.0\8.0.50727.6229.policy
                                                                                                                                                                                                                                                                        • Size 810B
                                                                                                                                                                                                                                                                        • SHA256 0fb4e62006385502b7a4f45869d4b38abffbab5998d75e93bda323512618d64a
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_f4ca2f60.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138659.0\amd64_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_f4ca2f60.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 d8d34fc121902f45db79e0e7a779961a8a20977c14613e707ada015c9945563c
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_f4ca2f60.manifest

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138659.0\amd64_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_f4ca2f60.manifest
                                                                                                                                                                                                                                                                        • Size 858B
                                                                                                                                                                                                                                                                        • SHA256 78b76e6d3d6880dfaf6469eac6a83f5fa0d3955d77d7f2965cba4668d2eaa332
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        atl90.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138659.0\atl90.dll
                                                                                                                                                                                                                                                                        • Size 173KB
                                                                                                                                                                                                                                                                        • SHA256 4c666350b09f9baae6d969ceed31a7280226c6d1a8c852e95327fc14707a1a2d
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_942a41ec.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138684.0\amd64_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_942a41ec.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 fa172796890d1c49f6763c7f2cc865ad8567f75eb0800cf4cc9a15bc27a44394
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_942a41ec.manifest

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138684.0\amd64_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_942a41ec.manifest
                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                        • SHA256 fb84de25a970914bbc5ae1c21b887b5a779c99315dc1028bd30b906cf5b53731
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        msvcm90.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138684.0\msvcm90.dll
                                                                                                                                                                                                                                                                        • Size 240KB
                                                                                                                                                                                                                                                                        • SHA256 919233e48586f867202ced1b2dac839e8ccf6dded9ca2edf3df3fbb37fae12f1
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        msvcp90.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138684.0\msvcp90.dll
                                                                                                                                                                                                                                                                        • Size 834KB
                                                                                                                                                                                                                                                                        • SHA256 574e00b56218bbe225f3d323e5902a3bc3422aa43fb264edb9519965ee772de1
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        msvcr90.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138684.0\msvcr90.dll
                                                                                                                                                                                                                                                                        • Size 627KB
                                                                                                                                                                                                                                                                        • SHA256 d4228163ebe222d6b613bc021b56356f87c094e2a0cc601ecb764a24a0eddeda
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_6510b4f1.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138689.0\amd64_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_6510b4f1.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 4d8b52366acc16a66c0aab3840be7cc3b42708c886b7786fec52f9e2ffffc0c9
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_6510b4f1.manifest

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138689.0\amd64_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_6510b4f1.manifest
                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                        • SHA256 3633ea188829a4d7057f0bbcd4b063e8c6981f122e1886b8664a5749d7fe2e07
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        mfc90.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138689.0\mfc90.dll
                                                                                                                                                                                                                                                                        • Size 4.9MB
                                                                                                                                                                                                                                                                        • SHA256 55899b63781de635f48da6cffc5719a1fb12bd4561bae4e664a12e2bf7e55e9c
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90u.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138689.0\mfc90u.dll
                                                                                                                                                                                                                                                                        • Size 4.9MB
                                                                                                                                                                                                                                                                        • SHA256 31f0dc8599ba72e67bbeaea050a342707db958a47186c346ea1bb9902e2081fb
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfcm90.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138689.0\mfcm90.dll
                                                                                                                                                                                                                                                                        • Size 65KB
                                                                                                                                                                                                                                                                        • SHA256 699e2b1862cefb026cba80e672ea59f41182d29ac368b85979dea888c28f394f
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfcm90u.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138689.0\mfcm90u.dll
                                                                                                                                                                                                                                                                        • Size 65KB
                                                                                                                                                                                                                                                                        • SHA256 7b4fa129f6e2e9e789d30633bc8efb5bd8eb3e33b6251ebc02820d8f41e7931e
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_d59128b1.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138696.0\amd64_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_d59128b1.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 a76048660368dc2554e3683d260ca848a54e7b557f5cb9051e871e36db52c099
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_d59128b1.manifest

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138696.0\amd64_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_d59128b1.manifest
                                                                                                                                                                                                                                                                        • Size 5KB
                                                                                                                                                                                                                                                                        • SHA256 e4d241228d5500a84be7699b1cec04630c9c1d52b9da3fa3202a7bc3b0ece55f
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90chs.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138696.0\mfc90chs.dll
                                                                                                                                                                                                                                                                        • Size 35KB
                                                                                                                                                                                                                                                                        • SHA256 75516ba8780058d50e6187ae640d1f40d9b148b1d6eead6f10054ac6ba07668a
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90cht.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138696.0\mfc90cht.dll
                                                                                                                                                                                                                                                                        • Size 36KB
                                                                                                                                                                                                                                                                        • SHA256 724836c3b1eb4abb9064781a909482afb3cea06423e1bc44561d94b185136e12
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90deu.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138696.0\mfc90deu.dll
                                                                                                                                                                                                                                                                        • Size 62KB
                                                                                                                                                                                                                                                                        • SHA256 c5d9c1348df791837da7a48b872b5a098ab5647ac05b1b8f270b80dac0978d94
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90enu.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138696.0\mfc90enu.dll
                                                                                                                                                                                                                                                                        • Size 53KB
                                                                                                                                                                                                                                                                        • SHA256 234d9a5bac8cca6ba6ca92bd705f91a06424614e497530b85d5270b485583d02
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90esn.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138696.0\mfc90esn.dll
                                                                                                                                                                                                                                                                        • Size 61KB
                                                                                                                                                                                                                                                                        • SHA256 98ccd0ec0a057e22ff8ef7caca93b93624c02f347b99c3fbf45a4799cf44901c
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90esp.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138696.0\mfc90esp.dll
                                                                                                                                                                                                                                                                        • Size 61KB
                                                                                                                                                                                                                                                                        • SHA256 9664a93635384d58542063723fa130657c111ec4b62612555029388bc7c94f3f
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90fra.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138696.0\mfc90fra.dll
                                                                                                                                                                                                                                                                        • Size 62KB
                                                                                                                                                                                                                                                                        • SHA256 80e525d93a211eaf7b03f1d401da6f08312d711992b465c1a9d3ff129b885f47
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90ita.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138696.0\mfc90ita.dll
                                                                                                                                                                                                                                                                        • Size 60KB
                                                                                                                                                                                                                                                                        • SHA256 73641c821083ff4d8aadee70c26e0fa7cd543718c8b91419f651ec83d42b619e
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90jpn.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138696.0\mfc90jpn.dll
                                                                                                                                                                                                                                                                        • Size 43KB
                                                                                                                                                                                                                                                                        • SHA256 bc9051076951245412cb182de79d304e64a1af760ab74c9fa0fadc4fe989f713
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90kor.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138696.0\mfc90kor.dll
                                                                                                                                                                                                                                                                        • Size 42KB
                                                                                                                                                                                                                                                                        • SHA256 2aeac6e01503cf616244595d580cb943a1503f01bda34a604f9d849b8a49e17b
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        mfc90rus.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138696.0\mfc90rus.dll
                                                                                                                                                                                                                                                                        • Size 59KB
                                                                                                                                                                                                                                                                        • SHA256 2057d59728c8dfd8d97885f8fbc0298edd04520bd7599048bf94f1deeb323913
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_b0616a48.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138703.0\amd64_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_b0616a48.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 163d858111352df5eb0126d8cf8c188485c7b0cc9ce940acf9e325de0dea66f1
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        amd64_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_b0616a48.manifest

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138703.0\amd64_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_b0616a48.manifest
                                                                                                                                                                                                                                                                        • Size 863B
                                                                                                                                                                                                                                                                        • SHA256 262ac92661fd46689ba22a5846fc9f19b3988481193208349ae88c373785d136
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        vcomp90.dll

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138703.0\vcomp90.dll
                                                                                                                                                                                                                                                                        • Size 56KB
                                                                                                                                                                                                                                                                        • SHA256 4826fc62e4bd15149e5f1f94a56c8f5dac3f407b2669e0551accef5d0a0d33e7
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138708.0\9.0.30729.7523.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 28975aa1dc97e5c822a4f32e4378b537ad605cf33ddd24a01802ed16701116ec
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138708.0\9.0.30729.7523.policy
                                                                                                                                                                                                                                                                        • Size 768B
                                                                                                                                                                                                                                                                        • SHA256 00cb8230cdb90ad4f74cb6e9e7ce958194979571039d5f0161f401019f4d2b6c
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138717.0\9.0.30729.7523.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 51cbc68bd30c29cc4646c50b2879d5c477e21a852293e2ee5f5373ee3cf33e4a
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138717.0\9.0.30729.7523.policy
                                                                                                                                                                                                                                                                        • Size 768B
                                                                                                                                                                                                                                                                        • SHA256 8715381a28423e26278a4e05f3aa034da4a8ea9d3dab8d81627a49df34b1394e
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138722.0\9.0.30729.7523.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 a885333be8a20871724ab8f0191b55f3ab6005034dd92c1d8108fe9ce29e2437
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138722.0\9.0.30729.7523.policy
                                                                                                                                                                                                                                                                        • Size 768B
                                                                                                                                                                                                                                                                        • SHA256 696a81951d41178c079a899755238cc0c16865c5fa55d65322a5e1a324e823a2
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138731.0\9.0.30729.7523.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 367c51a18c413c5ea6abb0dd5c437868b881d3c072aa12cb31867571b62bbe6e
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138731.0\9.0.30729.7523.policy
                                                                                                                                                                                                                                                                        • Size 774B
                                                                                                                                                                                                                                                                        • SHA256 3c0e2ac1261b11ab8543229e99fb4e53cd8bbe923b581589d56e25cf1870ab47
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138740.0\9.0.30729.7523.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 d8013efd4b88ae35c1929871971c003fa1e1824d1f8302c4448426840f2536b8
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064138740.0\9.0.30729.7523.policy
                                                                                                                                                                                                                                                                        • Size 774B
                                                                                                                                                                                                                                                                        • SHA256 4bb73cd8eae0641d3acda9fd74c6d43d46ec8f78087789674409a64e349b5d19
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_c2c04980.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145136.0\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_c2c04980.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 d60ea184fd2f47c3cc4d7fea5722ebcbc2c07da41093cdb5484f0f530418a0f4
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_c2c04980.manifest

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145136.0\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_c2c04980.manifest
                                                                                                                                                                                                                                                                        • Size 856B
                                                                                                                                                                                                                                                                        • SHA256 b4ac2f0588b6d462ba306291644b976aa13799a9c5b2131ebd2607b1ae69ade9
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_62205c0c.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145150.0\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_62205c0c.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 2f0cb77328ba07610da5fb6232ab12778211e89b63af1ada04f2546e2fed242f
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_62205c0c.manifest

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145150.0\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_62205c0c.manifest
                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                        • SHA256 78dab909b055487776a4e44f8ab8094508a1ea301c717acf7c02ea25492587c8
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_3306cf11.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145158.0\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_3306cf11.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 c4833c9b218a4dd8be327c7597f6f5cd3c5b519a76355ca1866a0253c78392b5
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_3306cf11.manifest

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145158.0\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_3306cf11.manifest
                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                        • SHA256 3e05580e06ce991a2a4b09fa7440c0930dfba2111bd065ae4c6db470bf96dea5
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_a38742d1.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145165.0\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_a38742d1.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 3662fec2209632b71b8e32afee3f5d01d7ac2fcd6f53520f1a42e4ea96dd50f3
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_a38742d1.manifest

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145165.0\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_a38742d1.manifest
                                                                                                                                                                                                                                                                        • Size 5KB
                                                                                                                                                                                                                                                                        • SHA256 9e43297fbecfaaaf338e23640583908c0a8951cd5fd03ff187d0ecb6fa61ea42
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_7e578468.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145171.0\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_7e578468.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 be8cd35780ea6caa5f0140818a87232e90b8d5695f9d2f424bc1374f29272b6c
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_7e578468.manifest

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145171.0\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.7523_x-ww_7e578468.manifest
                                                                                                                                                                                                                                                                        • Size 861B
                                                                                                                                                                                                                                                                        • SHA256 cc1057e389c555454741be5581a9ee3b50f55ffd5089d959e6822ea5f452485d
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145178.0\9.0.30729.7523.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 80da91daa3247e3d45bdd1f92fe4e147581076109a5b4f1d72542ddc0f5be5f7
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145178.0\9.0.30729.7523.policy
                                                                                                                                                                                                                                                                        • Size 764B
                                                                                                                                                                                                                                                                        • SHA256 a892c7371b445949012cf2a20c42a7c52ab56b3c700a53cc581c20f536ed85fd
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145185.0\9.0.30729.7523.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 b4adc7c1f834acf80456248d80a1fb7050779fdc9009fd6fc08f12f229cab104
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145185.0\9.0.30729.7523.policy
                                                                                                                                                                                                                                                                        • Size 764B
                                                                                                                                                                                                                                                                        • SHA256 d9842d47ff567bb8e826f110f306c9360e3a2987e7adc0d56069007062fb5b0e
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145191.0\9.0.30729.7523.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 9bd6c7173fc412b376cf6ba45d63e0da39f9e3b229cd44d404663d6858a05022
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145191.0\9.0.30729.7523.policy
                                                                                                                                                                                                                                                                        • Size 764B
                                                                                                                                                                                                                                                                        • SHA256 ba764710aeb745f810b78ff6dc78c6f75302c5fd1458e677938b00c9cc82b042
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145198.0\9.0.30729.7523.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 09c2a695e6844d8f718ecb919630d15a56af60e6e5adff578a768de7d022aada
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145198.0\9.0.30729.7523.policy
                                                                                                                                                                                                                                                                        • Size 770B
                                                                                                                                                                                                                                                                        • SHA256 ecf948625081c48515b01817951a8bc9c67897a2c4c079500eba94e5e02f31f8
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.cat

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145205.0\9.0.30729.7523.cat
                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                        • SHA256 6a53207094aff4ee2c302346db0dd1020914667669f38f4ea216ee32ba550c0c
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                        9.0.30729.7523.policy

                                                                                                                                                                                                                                                                        • Path C:\Windows\WinSxS\InstallTemp\20260810064145205.0\9.0.30729.7523.policy
                                                                                                                                                                                                                                                                        • Size 770B
                                                                                                                                                                                                                                                                        • SHA256 ff4ddaaa9d8645247a47eea4cc16e165457ce6292cd51bc7ca650a87bab834ff
                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                        memory/368-2804-0x0000000000470000-0x00000000004D5000-memory.dmp

                                                                                                                                                                                                                                                                        memory/1384-2971-0x0000000000E40000-0x0000000000EB7000-memory.dmp

                                                                                                                                                                                                                                                                        memory/2640-1346-0x00000198650D0000-0x0000019865A74000-memory.dmp

                                                                                                                                                                                                                                                                        memory/2640-1803-0x00000198650D0000-0x0000019865A74000-memory.dmp

                                                                                                                                                                                                                                                                        memory/2640-2745-0x00000198650D0000-0x0000019865A74000-memory.dmp

                                                                                                                                                                                                                                                                        memory/2640-1331-0x00000198650D0000-0x0000019865A74000-memory.dmp

                                                                                                                                                                                                                                                                        memory/2640-2163-0x00000198650D0000-0x0000019865A74000-memory.dmp

                                                                                                                                                                                                                                                                        memory/2640-2980-0x00000198650D0000-0x0000019865A74000-memory.dmp

                                                                                                                                                                                                                                                                        memory/2640-1531-0x00000198650D0000-0x0000019865A74000-memory.dmp

                                                                                                                                                                                                                                                                        memory/2640-1537-0x00000198650D0000-0x0000019865A74000-memory.dmp

                                                                                                                                                                                                                                                                        memory/2640-1576-0x00000198650D0000-0x0000019865A74000-memory.dmp

                                                                                                                                                                                                                                                                        memory/2640-1589-0x00000198650D0000-0x0000019865A74000-memory.dmp

                                                                                                                                                                                                                                                                        memory/2640-1460-0x00000198650D0000-0x0000019865A74000-memory.dmp

                                                                                                                                                                                                                                                                        memory/2640-2554-0x00000198650D0000-0x0000019865A74000-memory.dmp

                                                                                                                                                                                                                                                                        memory/3232-2970-0x0000000000E40000-0x0000000000EB7000-memory.dmp

                                                                                                                                                                                                                                                                        memory/4148-2805-0x0000000000470000-0x00000000004D5000-memory.dmp

                                                                                                                                                                                                                                                                        memory/4792-2968-0x0000000000E40000-0x0000000000EB7000-memory.dmp

                                                                                                                                                                                                                                                                        memory/4936-2101-0x00000000001D0000-0x0000000000235000-memory.dmp

                                                                                                                                                                                                                                                                        memory/5956-2104-0x00000000001D0000-0x0000000000235000-memory.dmp