Analysis

  • user interaction
    yes
  • max time kernel
    96s
  • max time network
    77s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    25/09/2026, 15:01

General

  • Target
    Installer-1.1.0.exe
  • Size 9.8MB
  • Sample260925-sd4meavtct
  • SHA256 7d369ef21a49e0bcfd7875d2e000a5c6bb592e00f305e139a188f40b3dc32249
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Signatures

  • Command and Scripting Interpreter: PowerShell 1 TTPs 3 IoCs

    Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates connected drives 3 TTPs 1 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Modifies registry key 1 TTPs 7 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Installer-1.1.0.exe
    "C:\Users\Admin\AppData\Local\Temp\Installer-1.1.0.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2820
    • C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-ABFB2613-0195-4BD7-B9DA-68AAC4C3F08E\MadiumInstaller.exe
      "C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-ABFB2613-0195-4BD7-B9DA-68AAC4C3F08E\MadiumInstaller.exe" --from-sfx --first-install
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Reads the TCP/IP host and domain name from the registry
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:5344
      • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
        "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass -Command "$ErrorActionPreference='Stop'; if ($null -eq (Get-Command Get-MpComputerStatus -ErrorAction SilentlyContinue)) { exit 0 }; $status=Get-MpComputerStatus -ErrorAction SilentlyContinue; if ($null -eq $status -or $status.AntivirusEnabled -ne $true) { exit 0 }; $p='C:\Users\Admin\AppData\Local\Madium'.TrimEnd('\'); $current=@((Get-MpPreference -ErrorAction Stop).ExclusionPath); $has=@($current | Where-Object { $_ -and $_.TrimEnd('\') -ieq $p }).Count -gt 0; if (-not $has) { Add-MpPreference -ExclusionPath $p -ErrorAction Stop; $current=@((Get-MpPreference -ErrorAction Stop).ExclusionPath); $has=@($current | Where-Object { $_ -and $_.TrimEnd('\') -ieq $p }).Count -gt 0; if (-not $has) { throw 'Defender did not save the exclusion.' } }"
        3⤵
        • Command and Scripting Interpreter: PowerShell
        • Enumerates connected drives
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:1608
      • C:\Program Files\dotnet\dotnet.exe
        dotnet.exe --list-runtimes
        3⤵
        • System Time Discovery
        PID:2312
      • C:\Windows\System32\reg.exe
        C:\Windows\System32\reg.exe query HKLM\SOFTWARE\Microsoft\VisualStudio\14.0\VC\Runtimes\x64 /v Installed
        3⤵
        • Modifies registry key
        PID:968
      • C:\Windows\System32\reg.exe
        C:\Windows\System32\reg.exe query HKLM\SOFTWARE\WOW6432Node\Microsoft\VisualStudio\14.0\VC\Runtimes\x64 /v Installed
        3⤵
        • Modifies registry key
        PID:3584
      • C:\Windows\System32\reg.exe
        C:\Windows\System32\reg.exe query HKLM\SOFTWARE\Microsoft\VisualStudio\14.0\VC\Runtimes\x86 /v Installed
        3⤵
        • Modifies registry key
        PID:5836
      • C:\Windows\System32\reg.exe
        C:\Windows\System32\reg.exe query HKLM\SOFTWARE\WOW6432Node\Microsoft\VisualStudio\14.0\VC\Runtimes\x86 /v Installed
        3⤵
        • Modifies registry key
        PID:1456
      • C:\Windows\System32\reg.exe
        C:\Windows\System32\reg.exe query HKLM\SOFTWARE\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} /v pv
        3⤵
        • Modifies registry key
        PID:4784
      • C:\Windows\System32\reg.exe
        C:\Windows\System32\reg.exe query HKLM\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} /v pv
        3⤵
        • Modifies registry key
        PID:4028
      • C:\Windows\System32\reg.exe
        C:\Windows\System32\reg.exe query HKCU\Software\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} /v pv
        3⤵
        • Modifies registry key
        PID:5296
      • C:\Windows\System32\reg.exe
        C:\Windows\System32\reg.exe query "HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full" /v Release
        3⤵
          PID:4588
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -NoLogo -NoProfile -NonInteractive -Command "$sig = Get-AuthenticodeSignature -LiteralPath 'C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-redist.exe'; if ($sig.Status -eq 'Valid') { exit 0 }; exit 1"
          3⤵
          • Command and Scripting Interpreter: PowerShell
          PID:2044
        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
          "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\install.ps1"
          3⤵
          • Command and Scripting Interpreter: PowerShell
          PID:1856
          • C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-redist.exe
            "C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-redist.exe" /Q /T:"C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files"
            4⤵
              PID:1328
            • C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\DXSETUP.exe
              "C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\DXSETUP.exe" /silent
              4⤵
                PID:5836
                • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe d3dx9_24_x64.inf
                  5⤵
                    PID:6100
                  • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                    C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe d3dx9_25_x64.inf
                    5⤵
                      PID:4360
                    • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                      C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe d3dx9_26_x64.inf
                      5⤵
                        PID:1424
                      • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                        C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe d3dx9_27_x64.inf
                        5⤵
                          PID:2560
                        • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                          C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe d3dx9_28_x64.inf
                          5⤵
                            PID:3172
                          • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                            C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe d3dx9_29_x64.inf
                            5⤵
                              PID:2060
                            • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                              C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe XACT_x64.inf
                              5⤵
                                PID:3448
                              • C:\Windows\system32\regsvr32.exe
                                C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_0.dll
                                5⤵
                                  PID:4732
                                • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                                  C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe d3dx9_30_x64.inf
                                  5⤵
                                    PID:5080
                                  • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                                    C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe XACT2_1_x64.inf
                                    5⤵
                                      PID:4520
                                    • C:\Windows\system32\regsvr32.exe
                                      C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_1.dll
                                      5⤵
                                        PID:2156
                                      • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                                        C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe xinput1_1_x64.inf, Install_Driver
                                        5⤵
                                          PID:4536
                                        • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                                          C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe XACT2_2_x64.inf
                                          5⤵
                                            PID:764
                                          • C:\Windows\system32\regsvr32.exe
                                            C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_2.dll
                                            5⤵
                                              PID:824
                                            • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                                              C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe xinput1_2_x64.inf, Install_Driver
                                              5⤵
                                                PID:5248
                                              • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                                                C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe XACT2_3_x64.inf
                                                5⤵
                                                  PID:5324
                                                • C:\Windows\system32\regsvr32.exe
                                                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_3.dll
                                                  5⤵
                                                    PID:5116
                                                  • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                                                    C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe d3dx9_31_x64.inf
                                                    5⤵
                                                      PID:4124
                                                    • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                                                      C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe XACT2_4_x64.inf
                                                      5⤵
                                                        PID:3476
                                                      • C:\Windows\system32\regsvr32.exe
                                                        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_4.dll
                                                        5⤵
                                                          PID:5652
                                                        • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                                                          C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe d3dx9_32_x64.inf
                                                          5⤵
                                                            PID:3200
                                                          • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                                                            C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe d3dx10_00_x64.inf
                                                            5⤵
                                                              PID:5888
                                                            • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                                                              C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe XACT2_5_x64.inf
                                                              5⤵
                                                                PID:5956
                                                              • C:\Windows\system32\regsvr32.exe
                                                                C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_5.dll
                                                                5⤵
                                                                  PID:1992
                                                                • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                                                                  C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe XACT2_6_x64.inf
                                                                  5⤵
                                                                    PID:4564
                                                                  • C:\Windows\system32\regsvr32.exe
                                                                    C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_6.dll
                                                                    5⤵
                                                                      PID:3588
                                                                    • C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                                                                      C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe d3dx9_33_x64.inf
                                                                      5⤵
                                                                        PID:4364
                                                              • C:\Windows\system32\vssvc.exe
                                                                C:\Windows\system32\vssvc.exe
                                                                1⤵
                                                                  PID:696
                                                                • C:\Windows\system32\srtasks.exe
                                                                  C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
                                                                  1⤵
                                                                    PID:3740

                                                                  Network

                                                                        MITRE ATT&CK Enterprise v16

                                                                        Replay Monitor

                                                                        Loading Replay Monitor...

                                                                        Downloads

                                                                        Madium.exe.download

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\Bin\Madium.exe.download
                                                                        • Size 11.6MB
                                                                        • SHA256 a9879b2e55b71864410f58098897071430349451fde1b2ed840270d439ee2c7e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Apr2005_d3dx9_25_x64.cab

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2005_d3dx9_25_x64.cab
                                                                        • Size 1.3MB
                                                                        • SHA256 b4188ce988af9c4771ae0abcc7edc42a091133f9f20196564f51755dc55ea85d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Apr2006_MDX1_x86_Archive.cab

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2006_MDX1_x86_Archive.cab
                                                                        • Size 1.8MB
                                                                        • SHA256 c190fa6f1c5d8ecb87496525b1dec8db813c359d048d5b643cf2ab77e73f03bd
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Apr2006_d3dx9_30_x64.cab

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2006_d3dx9_30_x64.cab
                                                                        • Size 1.3MB
                                                                        • SHA256 079f61e155695a61a0ce009ee00cf76fbf6b2b9b412c1a5b4a2035d4b5c90a5b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Apr2006_xinput_x86.cab

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Apr2006_xinput_x86.cab
                                                                        • Size 44KB
                                                                        • SHA256 a9b3dd45926364d79b42b75d8064c814ff428437143c59b1c703ec8323305fbb
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Aug2005_d3dx9_27_x64.cab

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Aug2005_d3dx9_27_x64.cab
                                                                        • Size 1.3MB
                                                                        • SHA256 281d20c56caa3a2851199c028d4d20ef0a862cc3f84b165eb200da573d9e4401
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Aug2005_d3dx9_27_x86.cab

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Aug2005_d3dx9_27_x86.cab
                                                                        • Size 1.0MB
                                                                        • SHA256 7a10900872ecd9bdbc8f7beb7869a260fa4b25e34084f237f1b096df5371c273
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Dec2005_d3dx9_28_x86.cab

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Dec2005_d3dx9_28_x86.cab
                                                                        • Size 1.0MB
                                                                        • SHA256 bdee0708db956a4ce59220626106a2df70ede2e1e32f29e432254b04876fa7b9
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Dec2006_d3dx9_32_x86.cab

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Dec2006_d3dx9_32_x86.cab
                                                                        • Size 1.5MB
                                                                        • SHA256 81251ebd8ee94f108807e32e04dea544c3937a5f870bc6ccb917d059e70b1838
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Feb2005_d3dx9_24_x64.cab

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2005_d3dx9_24_x64.cab
                                                                        • Size 1.2MB
                                                                        • SHA256 48eeeecd6411039b23f32b7b22c8d40bce45280af5f8b066edd6cf30284b90ca
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Feb2005_d3dx9_24_x86.cab

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2005_d3dx9_24_x86.cab
                                                                        • Size 989KB
                                                                        • SHA256 12e2aab3dbaee503724a5505a6f6951f07306578801a4b5b6b9b54514275ce79
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Feb2006_XACT_x64.cab

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2006_XACT_x64.cab
                                                                        • Size 174KB
                                                                        • SHA256 ea39caab8e071df53c2f44c19fb2ff6e2f6af4ef47f0c66d8e7b1b0918d6745f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Feb2006_d3dx9_29_x64.cab

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2006_d3dx9_29_x64.cab
                                                                        • Size 1.3MB
                                                                        • SHA256 405bd17fe25128a91693807a6008031d87c005ba93d016cbab6276891d3bc6bb
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Feb2006_d3dx9_29_x86.cab

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Feb2006_d3dx9_29_x86.cab
                                                                        • Size 1.0MB
                                                                        • SHA256 20231448d5d74b7df1e43d796d76381d563699f81944c7ad9ccbcc1a77a5591e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Jun2005_d3dx9_26_x64.cab

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Jun2005_d3dx9_26_x64.cab
                                                                        • Size 1.3MB
                                                                        • SHA256 7237630b897ce760948d9144151ef27c0699fb76150b5f157676fa2d220a236f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Jun2005_d3dx9_26_x86.cab

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Jun2005_d3dx9_26_x86.cab
                                                                        • Size 1.0MB
                                                                        • SHA256 b448d7ba5b6fe1dc27639d42eb6ba0a997a793135678c729ba6756cfe4efc38b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Oct2005_xinput_x64.cab

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Oct2005_xinput_x64.cab
                                                                        • Size 84KB
                                                                        • SHA256 10f2bcfcc38d3150bc80eb0030a1cd40084f1ec028dc927543c485d54ec35022
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Oct2006_d3dx9_31_x64.cab

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Oct2006_d3dx9_31_x64.cab
                                                                        • Size 1.3MB
                                                                        • SHA256 3cf78eeedcddddaf131af35cc68c218685c133326ff2876cb821096ed7ebf0c8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Oct2006_d3dx9_31_x86.cab

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\Oct2006_d3dx9_31_x86.cab
                                                                        • Size 1.1MB
                                                                        • SHA256 fd8c9c23aea007aa92eca130446913ef04d9fc78e0e6fc3c49c25d210889de61
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        dxupdate.cab

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\INSTAL~1\temp\deps\DIRECT~1\dxupdate.cab
                                                                        • Size 94KB
                                                                        • SHA256 e18a5404b612e88fa8b403c9b33f064c0a89528db7ef9a79aa116908d0e6afed
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        app.so

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\Installer.new\data\app.so
                                                                        • Size 5.4MB
                                                                        • SHA256 d40a6c1b6bb279aa9e9a6ce542aa4f7a160193126b3ad1de0035dd10c4ef2f53
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        DSETUP.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\DSETUP.dll
                                                                        • Size 93KB
                                                                        • SHA256 2a61679eeedabf7d0d0ac14e5447486575622d6b7cfa56f136c1576ff96da21f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        DXSETUP.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\DXSETUP.exe
                                                                        • Size 505KB
                                                                        • SHA256 8f47d7121ef6532ad9ad9901e44e237f5c30448b752028c58a9d19521414e40d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        dsetup32.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\directx-files\dsetup32.dll
                                                                        • Size 1.5MB
                                                                        • SHA256 fb0e534f9b0926e518f1c2980640dfd29f14217cdfa37cf3a0c13349127ed9a8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        install.ps1

                                                                        • Path C:\Users\Admin\AppData\Local\Madium\Installer\temp\deps\install.ps1
                                                                        • Size 2KB
                                                                        • SHA256 7f7eb8cf4fba079948705a83f968f52937c9f1733e752eda436ba6319cd5bece
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        powershell.exe.log

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log
                                                                        • Size 4KB
                                                                        • SHA256 e27390d57580e3dfba07bec3d8e430203bbc91e90f6937079b3fd52abc721bd4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        StartupProfileData-NonInteractive

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                                                        • Size 1KB
                                                                        • SHA256 f66dcfa4d243b9575b66da1fe2c62d2c8e2c4f154a127577be26a96b157180aa
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        StartupProfileData-NonInteractive

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                                                        • Size 1KB
                                                                        • SHA256 3df1aab9d73298f0381265193dac830ea818d910c3eb88a4d1360afcfa895882
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        AUG2009_D3DCompiler_42_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\AUG2009_D3DCompiler_42_x64.inf
                                                                        • Size 830B
                                                                        • SHA256 8977772e5392b8e79364b3b8d97300e97ad891f38d5a2dd306549401e46b05ff
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        AUG2009_D3DCompiler_42_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\AUG2009_D3DCompiler_42_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 bb8834d2366f6899c507bae176a13dadbd44488451a263eac830be95f4bad43f
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        AUG2009_XACT_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\AUG2009_XACT_x64.inf
                                                                        • Size 920B
                                                                        • SHA256 5d57466af1801ff3a92b1540907f0e4b91d90189177d68c6b4c8833e5d57dec3
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        AUG2009_XACT_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\AUG2009_XACT_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 1eb88b5460824fd32eec9b90e7ef5cb529f51215046e539d39fa27a409709766
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        AUG2009_XAudio_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\AUG2009_XAudio_x64.inf
                                                                        • Size 923B
                                                                        • SHA256 4348663aa7cfe22916fb13d93307e7384376fad9d6fa34c6196f80df42c61a33
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        AUG2009_XAudio_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\AUG2009_XAudio_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 842cc52100b5774bcda19e40837bd552b308e74829d5b35a505822c7436892e1
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        AUG2009_d3dcsx_42_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\AUG2009_d3dcsx_42_x64.inf
                                                                        • Size 815B
                                                                        • SHA256 f7a5a84bb654837193e0f40b579777f5c6cc2c7341cf90503d6a6709d319797f
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        AUG2009_d3dcsx_42_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\AUG2009_d3dcsx_42_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 ff9da1b0328fd918cf9558ee57387a4865afe98db1410cc16b1e921c5a744c48
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        AUG2009_d3dx10_42_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\AUG2009_d3dx10_42_x64.inf
                                                                        • Size 815B
                                                                        • SHA256 2bfdd3d3bf485439013045b3a08942f457385bb89ab76d9479fbdd85f09e9d96
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        AUG2009_d3dx10_42_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\AUG2009_d3dx10_42_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 a80a00464775da82c02f628c5bc13cab0d0643ec2a44b28d2acf7c77d467becf
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        AUG2009_d3dx11_42_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\AUG2009_d3dx11_42_x64.inf
                                                                        • Size 815B
                                                                        • SHA256 f9c13939779d4526107cf7d3554c122efb564cff02228d02b0b6ff211904f5dd
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        AUG2009_d3dx11_42_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\AUG2009_d3dx11_42_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 edf6764083b47c04fda52b149f565587c6a07d4455357fe3c27c9e56cc57a94d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        AUG2009_d3dx9_42_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\AUG2009_d3dx9_42_x64.inf
                                                                        • Size 812B
                                                                        • SHA256 4887cbec8545b02152eb16f6296987a43a256b69b408330eaee362184f298d98
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        AUG2009_d3dx9_42_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\AUG2009_d3dx9_42_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 5989dc367a8f84815bcfa1c46ff756527c6250c62973220d1af354b70027eaf2
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Aug2008_XACT_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Aug2008_XACT_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 f1daaa8d96108a4a338f62a4a1339143ddc566e194ca00dde5427136bfccb0af
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Aug2008_d3dx10_39_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Aug2008_d3dx10_39_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 e83f8d48323887af89648c5bd7af713b42d20ccb757be34675f1fa527e6cc33f
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Aug2008_d3dx9_39_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Aug2008_d3dx9_39_x64.inf
                                                                        • Size 812B
                                                                        • SHA256 4cbb1c6804b9c76bba4e41f0d2a45f1daba7350af9da4ae6966651f7f4da041a
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Aug2008_d3dx9_39_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Aug2008_d3dx9_39_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 8a23d386626328f9519076f33d5c3b71c639f2347741442c3374974e6f61bd53
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        FEB2010_X3DAudio_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\FEB2010_X3DAudio_x64.inf
                                                                        • Size 815B
                                                                        • SHA256 68351f03f4ef83e4b8c359e3e130441081690a1866b838a1b35d64674ef3abbf
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        FEB2010_X3DAudio_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\FEB2010_X3DAudio_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 d4da3e530982812d1e2a31570b80af541fac1b13c72997d2aad7ea3bfeaf4a4a
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        FEB2010_XACT_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\FEB2010_XACT_x64.inf
                                                                        • Size 920B
                                                                        • SHA256 c7efd1ec4e4d31644a5054d32cc1e6795464472c05439573ae93e1727a5eea4a
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        FEB2010_XACT_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\FEB2010_XACT_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 e850fdb84bcac0f667927e53fee943efd3f43be6c6a0ae1e17f3fff83ddb2635
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        FEB2010_XAudio_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\FEB2010_XAudio_x64.inf
                                                                        • Size 923B
                                                                        • SHA256 da63330fd2a1538b714ee6cf2e09256446a04a55f866b3f70237d8a7165cb3e3
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        FEB2010_XAudio_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\FEB2010_XAudio_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 74c827ef94881099761e04397ef8f162fd0ccaf4876a5503c4b53a5216d2acca
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        JUN2010_D3DCompiler_43_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\JUN2010_D3DCompiler_43_x64.inf
                                                                        • Size 830B
                                                                        • SHA256 3e779533a273e3395109c7efac13ba1c804c01b3ddb16938406fbdf90d851216
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        JUN2010_D3DCompiler_43_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\JUN2010_D3DCompiler_43_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 5dd568919e1b3cbcb23ab21d0f2d6c1a065070848aba5d2a896da39e55c6cbbf
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        JUN2010_XACT_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\JUN2010_XACT_x64.inf
                                                                        • Size 920B
                                                                        • SHA256 f3c288d84db29f7bc4d2c771341f765b5e1940a4827fcb55a65b48eec83c71d3
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        JUN2010_XACT_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\JUN2010_XACT_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 ca604ce9d2ee43a09b39b23a6a2a048b1a79d85c7d78679cc73aacc75cf7a62e
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        JUN2010_XAudio_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\JUN2010_XAudio_x64.inf
                                                                        • Size 923B
                                                                        • SHA256 1a0f1b929724f8b71d5ce922f19b9d539d2d804c89af947d5927b049ef0fd3d8
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        JUN2010_XAudio_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\JUN2010_XAudio_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 d786d06a709d5dc26067132b9735fc317763fcf8064442d6f77f65012ba179da
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        JUN2010_d3dcsx_43_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\JUN2010_d3dcsx_43_x64.inf
                                                                        • Size 815B
                                                                        • SHA256 5289b5ad22146d7cc0c35cdb2c9662742693550de8f013d1ec40e944288d155a
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        JUN2010_d3dcsx_43_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\JUN2010_d3dcsx_43_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 d5200b332caf4fff25eb3d224527a3944878c5c3849512779a2afcfeae4c3ca1
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        JUN2010_d3dx10_43_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\JUN2010_d3dx10_43_x64.inf
                                                                        • Size 815B
                                                                        • SHA256 a65f370a741d62c2be0ca588758d089dd976092cb910bb6b1b7d008741e18377
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        JUN2010_d3dx10_43_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\JUN2010_d3dx10_43_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 4d4263cbb11858c727824c4a071f992909675719be3076b4a47852bf6affd862
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        JUN2010_d3dx11_43_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\JUN2010_d3dx11_43_x64.inf
                                                                        • Size 815B
                                                                        • SHA256 2c4cf75b76203cba6378693668c8c00b564871c8bfd7fbda01e1e841477b2a3b
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        JUN2010_d3dx11_43_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\JUN2010_d3dx11_43_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 3925c924eb4ec4f5a643b2d14d2eda603341fbbd22118cdd8ae04aaa96f443c0
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        JUN2010_d3dx9_43_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\JUN2010_d3dx9_43_x64.inf
                                                                        • Size 812B
                                                                        • SHA256 272650a2d9b1cfea17021f4bf941b21f2206791e279070d4e906ce0ce56ac16f
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        JUN2010_d3dx9_43_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\JUN2010_d3dx9_43_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 6b33d32da02f664092d44b05237990f825b4062c105a063badcf978648b5e95b
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Jun2008_X3DAudio_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Jun2008_X3DAudio_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 0064b7db5bfe52b6f40f61d962901c7baa116abbc72328f50586b6fa65f894bd
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Jun2008_XAudio_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Jun2008_XAudio_x64.inf
                                                                        • Size 923B
                                                                        • SHA256 9ce21064f2feed9bc9426a6e92e9c850aae31abeb80c7906ff917fbf4cc03913
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Jun2008_XAudio_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Jun2008_XAudio_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 e5e435c4536f987e1087218b025e6dc66c24c3e300e839391891f1b3bfd360dd
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Jun2008_d3dx10_38_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Jun2008_d3dx10_38_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 f5f54664ec67f6333a9f0607d891bd0dc2acfee8cce09ac4ee0372b5d0aa12fd
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Jun2008_d3dx9_38_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Jun2008_d3dx9_38_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 06faf7f7ea5503dcece13d6537e57cd2581d5188a5d839fe7f118298a721b51a
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Mar2008_X3DAudio_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Mar2008_X3DAudio_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 0b6e28f00364a9ff436c3d99f0d4e80bf615f1450f420122324853cc0b88b16c
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Mar2008_XACT_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Mar2008_XACT_x64.inf
                                                                        • Size 920B
                                                                        • SHA256 1038a41e63ee8abbc8be85a86fafb2ac1d03defa6b88deb270f96a6ed1a97122
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Mar2008_XAudio_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Mar2008_XAudio_x64.inf
                                                                        • Size 923B
                                                                        • SHA256 10a2db49dd3bea59133bbd82b3fc0f8a959b65b0c250c11a9a6f3123b961e6e9
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Mar2008_d3dx9_37_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Mar2008_d3dx9_37_x64.inf
                                                                        • Size 812B
                                                                        • SHA256 a4fda3373241c2748a969ddeeb6ef41b3cc1bca6608362ba87db75f69023fe9c
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Mar2008_d3dx9_37_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Mar2008_d3dx9_37_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 d55858e166a2fe00d4acc30da756f0ab2c4dd5a79a9874eab3100722c74a1b75
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Mar2009_XACT_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Mar2009_XACT_x64.inf
                                                                        • Size 920B
                                                                        • SHA256 9369fb0a9d3353627c097fc19780e5e7126af47766ef6a4a95ff3ddcca56691e
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Mar2009_XAudio_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Mar2009_XAudio_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 1b66e4d80f9843fc73b0a6097fb8ed5f3d2cfd5cfb5c328904d2c370bd87bb3e
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Mar2009_d3dx10_41_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Mar2009_d3dx10_41_x64.inf
                                                                        • Size 815B
                                                                        • SHA256 53dc284b87f5787804823977d2fbb528e393829367db5d2ac5dd79c581a27616
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Mar2009_d3dx10_41_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Mar2009_d3dx10_41_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 0170a4b551b58d92a753e86793bf3af762fe3f8d781512f710a4d661aec8d626
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Mar2009_d3dx9_41_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Mar2009_d3dx9_41_x64.inf
                                                                        • Size 812B
                                                                        • SHA256 12fe918aeb224a9bd4d2a8142f97c95d58a9a69e591e7e4f95014c155bb03519
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Mar2009_d3dx9_41_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Mar2009_d3dx9_41_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 bd29711cc2ecd924990167ffa95f48842e24aeed3acef1023717040240b4bbb6
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Nov2008_XACT_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Nov2008_XACT_x64.inf
                                                                        • Size 920B
                                                                        • SHA256 2d8a68e726728e4f4be05e35fca812b855046ce4bf697f0dea14094dbd7e1d79
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Nov2008_XACT_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Nov2008_XACT_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 31680e7a90d24eda04c910e1f3e6c02774cfc5c36ae08e7ac043665264702f83
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Nov2008_XAudio_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Nov2008_XAudio_x64.inf
                                                                        • Size 923B
                                                                        • SHA256 ed20b160dd26a5ed3c220a1fd9b5fc880b3280ebf56c2f73e76b6d4da5ef82bd
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Nov2008_d3dx10_40_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Nov2008_d3dx10_40_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 a4eed39cf36adccac4317e5822b30aa37ac5b001bcf4a24f7b5ccac6b8b71e9d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Nov2008_d3dx9_40_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\Nov2008_d3dx9_40_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 955637638635025f01f82febab4a4977252a765439d90ce940fba752723b9db6
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        apr2005_d3dx9_25_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\apr2005_d3dx9_25_x64.inf
                                                                        • Size 806B
                                                                        • SHA256 3d97810d00ceb3e7674a2ef81427d4180f77f93f9454837c5933fbc6a1ad5c1d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        apr2005_d3dx9_25_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\apr2005_d3dx9_25_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 f484ef48e0c6e2be8207d8c8c7308dd966d52bea1fde221b927d3e49f1cab0b7
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        apr2006_d3dx9_30_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\apr2006_d3dx9_30_x64.inf
                                                                        • Size 806B
                                                                        • SHA256 b70b8f62a2459580d22999301f1823bcb8a9bef54bd33b38e0af274a3a12e010
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        apr2006_mdx1_x86_archive.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\apr2006_mdx1_x86_archive.inf
                                                                        • Size 1KB
                                                                        • SHA256 80d44f16d81ae8bdb1ef8f0efdf53911523280723bab4392285cbd33a0fc633c
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        apr2007_d3dx10_33_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\apr2007_d3dx10_33_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 3286ba521fda888b1808f12955a58d7da4df7d2fdb472c7837a1e0e1a6317a06
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        apr2007_xact_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\apr2007_xact_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 008db10780aa8fb6f20b7aa5f5d513ca77efb36c8dddfb9ad89173ecaf700af5
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        apr2007_xinput_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\apr2007_xinput_x64.inf
                                                                        • Size 860B
                                                                        • SHA256 0d6e1c0e961d878b319ac30d3439056883448dcf26774003b73920f3377ecac8
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        apr2007_xinput_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\apr2007_xinput_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 1c798cb80e9e46ce03356ea7316e1eff5d3a88ccdd7cbfbfcdce73cded23b4e5
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        aug2005_d3dx9_27_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\aug2005_d3dx9_27_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 d02232a6587c460c026601517178318bab2ac29c59d269c6e3d1a3a993a9a1c4
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        aug2006_xact_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\aug2006_xact_x64.inf
                                                                        • Size 908B
                                                                        • SHA256 6fe310a67227203bbca3389dfe3403fa268cb424f4b525cca2d5407ed26670a5
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        aug2007_d3dx10_35_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\aug2007_d3dx10_35_x64.inf
                                                                        • Size 815B
                                                                        • SHA256 af4bdfeb4283f04e24475279931e042f17052224cf708f0c444fba2f2e221289
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        aug2007_d3dx9_35_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\aug2007_d3dx9_35_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 c0d87c1b079b54b75b86939199ca5ee1f796ae3de9c4ed0ae074a4fa01823c73
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        aug2007_xact_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\aug2007_xact_x64.inf
                                                                        • Size 920B
                                                                        • SHA256 2fcc4bdc6516418d3b4935c301e14f30e3bbd0adfd264bc34067b27b0b266b8e
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        d3dcompiler_33.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\d3dcompiler_33.dll
                                                                        • Size 64KB
                                                                        • SHA256 e0b3f469a162b3ffaa2d3e1b7fe73338c03733f473634ecb9a984abf330ad1c3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        d3dx10.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\d3dx10.dll
                                                                        • Size 251KB
                                                                        • SHA256 aa8c04120cc205d5c408f881a5d2f4fc4f91444df4697ab0446ac9667294e096
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        d3dx9_24.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\d3dx9_24.dll
                                                                        • Size 1.1MB
                                                                        • SHA256 09e511a39f7181062b91a9c1ce53f69c8a1fa04640abcd57ceeb8a602e921677
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        d3dx9_25.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\d3dx9_25.dll
                                                                        • Size 1.0MB
                                                                        • SHA256 ed4d8655b79e92f49dd46a2522210b170db6c2056773656235ed7c2de1f5d85b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        d3dx9_26.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\d3dx9_26.dll
                                                                        • Size 1.2MB
                                                                        • SHA256 daf53ddf67fadc2191f433e1dda5b25139e54fa779bb69051e10f221bfccf46b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        d3dx9_27.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\d3dx9_27.dll
                                                                        • Size 1007KB
                                                                        • SHA256 145b20033b60378f4a6d2d0b1ded8b56dd120749e1973f1b97396b44df5145a5
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        d3dx9_28.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\d3dx9_28.dll
                                                                        • Size 1.2MB
                                                                        • SHA256 38209752c58c79239cf890984e7bb29e95bcb4c896abe989357900c5e8a7f8f7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        d3dx9_29.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\d3dx9_29.dll
                                                                        • Size 1.1MB
                                                                        • SHA256 459df331fe5a2125ed0e0e99d649f6b87b32b52477be4372d308ef310781aa0c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        d3dx9_30.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\d3dx9_30.dll
                                                                        • Size 1.0MB
                                                                        • SHA256 996589b3f6b6541550ae6f9428c8774baa44045dc34207d32736e886ab9ecc08
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        d3dx9_31.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\d3dx9_31.dll
                                                                        • Size 251KB
                                                                        • SHA256 4a77ce77b0038e239a0dd7d86108035af0c219cfe2762f2eebf0e1cc57533d6a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        d3dx9_32.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\d3dx9_32.dll
                                                                        • Size 443KB
                                                                        • SHA256 81c640759a917d45c33f0dc3b380ad8056bc5af569d9103b2fa2b28ad1b37976
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        d3dx9_33.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\d3dx9_33.dll
                                                                        • Size 187KB
                                                                        • SHA256 804067e03061f97fcd87c085cd4bf92e0f591619cbc18b4c7fb85a6c8fe39355
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        dec2006_d3dx10_00_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\dec2006_d3dx10_00_x86.inf
                                                                        • Size 673B
                                                                        • SHA256 33291a47388edecc059f1825c1979142d7a9cd4a850716f9dce687deba1fa750
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        dec2006_d3dx9_32_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\dec2006_d3dx9_32_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 ef09d783bf5cff2cfba99946e5e71fda577b196a49c88bed1c51b5fd29cecf94
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        dec2006_xact_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\dec2006_xact_x64.inf
                                                                        • Size 908B
                                                                        • SHA256 f2f2040b8d13705f00d8e20a53f22093aa0f8c8d6aa6224992ba727ace7b75f6
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        dxupdate.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\dxupdate.dll
                                                                        • Size 173KB
                                                                        • SHA256 fb4f297e295c802b1377c6684734b7249d55743dfb7c14807bef59a1b5db63a2
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        feb2006_xact_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\feb2006_xact_x64.inf
                                                                        • Size 890B
                                                                        • SHA256 b7ca1a4942057592c5b83b4425350da41c61779dcae608112141d727091842d4
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        feb2007_xact_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\feb2007_xact_x64.inf
                                                                        • Size 908B
                                                                        • SHA256 184c1684c57de07983edaaa1ae2751b263497673ee8418af023a63fa03553f53
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        infinst.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                                                                        • Size 65KB
                                                                        • SHA256 300ed1a4ef37c8d5f13d67a5daabd46bcdd9ad9da4fe6283f20d7d38f72caaf5
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        infinst.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\infinst.exe
                                                                        • Size 65KB
                                                                        • SHA256 76eed293cdcdf17942acc313366b22b55ad78ee0389989438e63ab7ae145167d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        jun2005_d3dx9_26_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\jun2005_d3dx9_26_x64.inf
                                                                        • Size 806B
                                                                        • SHA256 addafcf0cfd36587c12eb2692922f0fb134874d11005a0544cc054546a493933
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        jun2005_d3dx9_26_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\jun2005_d3dx9_26_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 262ed4a65dd45e19f196cb2d9946326693ee31a86b51bf77116dec2727971cb6
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        jun2007_d3dx10_34_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\jun2007_d3dx10_34_x64.inf
                                                                        • Size 815B
                                                                        • SHA256 0f75b7ef71e183476ec938705024eb8a10a77d7602a336be876c7f5d17429725
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        jun2007_d3dx9_34_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\jun2007_d3dx9_34_x64.inf
                                                                        • Size 812B
                                                                        • SHA256 77f3fa1756181a90d2ee63c26cddfdaba0d720c9a49121db28746cd02b3e071d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        jun2007_d3dx9_34_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\jun2007_d3dx9_34_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 a568b7b8a0360ad94b1ed6388eca6ca9d8770937360a426a0fdadef9a4019bba
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        jun2007_xact_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\jun2007_xact_x64.inf
                                                                        • Size 920B
                                                                        • SHA256 405d8cbe3c87b16afac2a9254497412a42de4ae2d8fb470a1234dc3260e0b90f
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        mdx_1.0.2904.0_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\mdx_1.0.2904.0_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 3bd14cf2a96544ece692e1911500f7196370a111017fb6b0e23db0f0d0f40dfa
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        microsoft.directx.direct3dx.xml

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\microsoft.directx.direct3dx.xml
                                                                        • Size 921KB
                                                                        • SHA256 ea1167e94fa4b2f0b0eec54188001b75a0123727ad678d5f6564a3554c3d2489
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        microsoft.directx.direct3dx.xml

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\microsoft.directx.direct3dx.xml
                                                                        • Size 741KB
                                                                        • SHA256 97ce20769ab878fcdc13ce87a4ffae7214549f222d0856fb3877c1039b4d9156
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        nov2007_d3dx10_36_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\nov2007_d3dx10_36_x64.inf
                                                                        • Size 815B
                                                                        • SHA256 7a49ae818e199cf9f9bd831f94cb6d03a1e72a141d76546261979b30642757b7
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        nov2007_d3dx10_36_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\nov2007_d3dx10_36_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 96f48bb810055699d37e9e27a65947483a0b4df304870e3b5448d3051b3e4926
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        nov2007_d3dx9_36_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\nov2007_d3dx9_36_x64.inf
                                                                        • Size 812B
                                                                        • SHA256 d1b544b3912e73e5984cd759096120febe6f17e41a3cf920ef82431b9b569c1d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        nov2007_x3daudio_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\nov2007_x3daudio_x64.inf
                                                                        • Size 815B
                                                                        • SHA256 1cc72ca78433fbb72ee6b654c908748ea846c87c80424816745f285ed3bc910b
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        nov2007_x3daudio_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\nov2007_x3daudio_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 f882bdbc8230d24b24e20f9d0db447586e9493801900a8ba381eb493bd41f5d5
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        nov2007_xact_x64.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\nov2007_xact_x64.inf
                                                                        • Size 926B
                                                                        • SHA256 841d579573afd51499c7cd8ee986a41db63cedb722e8fac351d3632ff470c161
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        nov2007_xact_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\nov2007_xact_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 24714f229e479338ed89bdd6143140505fd63f517b7e71170ea6c072a1748b06
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        oct2006_d3dx9_31_x86.inf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\oct2006_d3dx9_31_x86.inf
                                                                        • Size 1KB
                                                                        • SHA256 a1c61096019a6ae1a9f31e3fe67aa2bb7e9e451967959d7088344f3f20ab572e
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        x3daudio1_0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\x3daudio1_0.dll
                                                                        • Size 13KB
                                                                        • SHA256 228dfece2b4555a243a73e7bf461036f1e53951977625651ff5a59deaeaf4b88
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        x3daudio1_0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\x3daudio1_0.dll
                                                                        • Size 16KB
                                                                        • SHA256 77cc09cea6de69f12106e6dd9df1c0446a525a54c3953d69d64711b9394cc38f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        x3daudio1_1.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\x3daudio1_1.dll
                                                                        • Size 14KB
                                                                        • SHA256 ff15f14174a5543f028fa49cca745582fe4cacf3bbe490749cf43444690ab359
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        x3daudio1_1.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\x3daudio1_1.dll
                                                                        • Size 17KB
                                                                        • SHA256 fac23787e7c199c1969806850b5a9652f66f6dcac86f48f6f834abc253848a55
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        xactengine2_0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\xactengine2_0.dll
                                                                        • Size 224KB
                                                                        • SHA256 cfd1c2d34feb7d94f282e97bf762a99bfa7309dc7353d96dfe4aadc187d26c67
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        xactengine2_1.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\xactengine2_1.dll
                                                                        • Size 224KB
                                                                        • SHA256 666cef7d27a38f709063c9c581fd95e6b3fa27167bff4beff484dba2dc922a2b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        xactengine2_2.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\xactengine2_2.dll
                                                                        • Size 224KB
                                                                        • SHA256 4f996edb65022e33ae9c9f7acf7232c8d444f75c50c72894f6d3173b55404ebe
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        xactengine2_3.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\xactengine2_3.dll
                                                                        • Size 231KB
                                                                        • SHA256 ca20cf8e4034719a46bf67c6009486c2c1cfc2da10ffed3a67dcae677b4f6793
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        xactengine2_4.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\xactengine2_4.dll
                                                                        • Size 232KB
                                                                        • SHA256 1e0e09fc077bdeee3de065c663b83f6717d39d56778833f030955077d490d000
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        xactengine2_5.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\xactengine2_5.dll
                                                                        • Size 245KB
                                                                        • SHA256 ec68b5163cbb5f15e2fbe37fdf5fcb0d01dffbe53a460cb2cf668f31f0127ad5
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        xactengine2_6.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\xactengine2_6.dll
                                                                        • Size 244KB
                                                                        • SHA256 1df0f6940b3ab01eb7b36bb53aa84cc2b60b0676643a1de5e825ae9323431bb3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        xinput1_1.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\xinput1_1.dll
                                                                        • Size 61KB
                                                                        • SHA256 69cd725c53e0302e75db20e9a3e4b33f58dceaa2e6ea4938b2733df8bc289a71
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        xinput1_2.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\DXDECD.tmp\xinput1_2.dll
                                                                        • Size 61KB
                                                                        • SHA256 9714d146a785d458f0de8fef387d82c9f8e101c02407a0cbeb06f02a69518eec
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        MadiumInstaller.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-ABFB2613-0195-4BD7-B9DA-68AAC4C3F08E\MadiumInstaller.exe
                                                                        • Size 204KB
                                                                        • SHA256 4ccd3c14651d1842b201c02084730fcc3b674758a75754c4c69bf64f1a7cda4b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        AssetManifest.bin

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-ABFB2613-0195-4BD7-B9DA-68AAC4C3F08E\data\flutter_assets\AssetManifest.bin
                                                                        • Size 2B
                                                                        • SHA256 f566cc6fccc657365c0197accf3a7d6f80f85209ff666ff774f4dcbc524aa842
                                                                        • MD5 SHA1 SHA512

                                                                        FontManifest.json

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-ABFB2613-0195-4BD7-B9DA-68AAC4C3F08E\data\flutter_assets\FontManifest.json
                                                                        • Size 82B
                                                                        • SHA256 28b1eb2b3d2e1ad60b8c8b0f9100b1ccbf492f7fa97f5bebb51ea97e73926e7d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        NOTICES.Z

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-ABFB2613-0195-4BD7-B9DA-68AAC4C3F08E\data\flutter_assets\NOTICES.Z
                                                                        • Size 102KB
                                                                        • SHA256 bdb492de2b031ec16101eede4cd2f26feefcd75c16a09239fa471a9cc552fcca
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        NativeAssetsManifest.json

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-ABFB2613-0195-4BD7-B9DA-68AAC4C3F08E\data\flutter_assets\NativeAssetsManifest.json
                                                                        • Size 45B
                                                                        • SHA256 9548a31e4a048135c1d94f919328bfb62ae2c7bb3cab96557c7941daa97776cb
                                                                        • MD5 SHA1 SHA512

                                                                        MaterialIcons-Regular.otf

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-ABFB2613-0195-4BD7-B9DA-68AAC4C3F08E\data\flutter_assets\fonts\MaterialIcons-Regular.otf
                                                                        • Size 1.6MB
                                                                        • SHA256 d9865b671a09d683d13a863089d8825e0f61a37696ce5d7d448bc8023aa62453
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ink_sparkle.frag

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-ABFB2613-0195-4BD7-B9DA-68AAC4C3F08E\data\flutter_assets\shaders\ink_sparkle.frag
                                                                        • Size 21KB
                                                                        • SHA256 1fe8436a743884cb65078fe8c7b38e18f5365f2a2961270916f426fd13c604af
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        stretch_effect.frag

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-ABFB2613-0195-4BD7-B9DA-68AAC4C3F08E\data\flutter_assets\shaders\stretch_effect.frag
                                                                        • Size 17KB
                                                                        • SHA256 62a899ff4e168ac6ca888ce7c2f40e5d3fbf8ca20a1c3ded781a116a6d7907e2
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        icudtl.dat

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-ABFB2613-0195-4BD7-B9DA-68AAC4C3F08E\data\icudtl.dat
                                                                        • Size 842KB
                                                                        • SHA256 998367809a821d595928089c197b3f7959f0420f81f79d4d0daee53378492ed5
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        flutter_windows.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-ABFB2613-0195-4BD7-B9DA-68AAC4C3F08E\flutter_windows.dll
                                                                        • Size 20.3MB
                                                                        • SHA256 67db13c69a0ce93242d11c2f99dd86ccbabce18ea9de613f126e9e31817d6de6
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        __PSScriptPolicyTest_x4iavy4z.1eh.ps1

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_x4iavy4z.1eh.ps1
                                                                        • Size 60B
                                                                        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        DirectX.log

                                                                        • Path C:\Windows\DirectX.log
                                                                        • Size 4KB
                                                                        • SHA256 bb0efb53d2b07a25c8855f0b7e41cd9695ba2050d4e2709ed94498ca41359295
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        DirectX.log

                                                                        • Path C:\Windows\Logs\DirectX.log
                                                                        • Size 475B
                                                                        • SHA256 f7accde02095bea1313c4f41ecc226c4ddb3c4279ba58b3650b73885129f8558
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Microsoft.DirectX.AudioVideoPlayback.dll

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
                                                                        • Size 52KB
                                                                        • SHA256 406f473429573e9f0084aae125ef8f19f59291aa4c33cf7d40e7d996995a3238
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        __AssemblyInfo__.ini

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                        • Size 326B
                                                                        • SHA256 47cfa602a21aef317d32fb443c6c668d4cf260d0b1d961cf7ca698f9b23c13af
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Microsoft.DirectX.Diagnostics.dll

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
                                                                        • Size 12KB
                                                                        • SHA256 8c9685959706750091b0094522cec8644de1d1c6309e7a2fe02cef130d3a2b9c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        __AssemblyInfo__.ini

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                        • Size 312B
                                                                        • SHA256 d9c3a01741b83b89dce9ea5fa3cac08d9bcb35c25850846700ad57a636db7d2e
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Microsoft.DirectX.Direct3DX.dll

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                        • Size 758KB
                                                                        • SHA256 49e653034dfccf0847fcae72e99c1632895360dc97b05b37b9b73e12ac3da555
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        __AssemblyInfo__.ini

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                        • Size 308B
                                                                        • SHA256 f9264eb86ba2f3f93f9a9dea962bafc0a60d72173c0803272e16714992b44fd6
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Microsoft.DirectX.Direct3DX.dll

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                        • Size 741KB
                                                                        • SHA256 f99c7df94be0b75c9b00d20e927d999c48a3b8e2cb6d13e1055ff14317809513
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        __AssemblyInfo__.ini

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                        • Size 308B
                                                                        • SHA256 500a17dcb474461bc6451a2248ff711f78485dcbfe0525c110ddc8b73bd58ce1
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Microsoft.DirectX.Direct3DX.dll

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                        • Size 550KB
                                                                        • SHA256 8418941d8f1d4c84288e0bf54392378dd3d87b602bb693ff4f8a633022681c12
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        __AssemblyInfo__.ini

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                        • Size 308B
                                                                        • SHA256 f3313d1b26c0d449484aa2d016d428ed2c2ce869fa7fb9fc7e3bed14fcb01353
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Microsoft.DirectX.Direct3DX.dll

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                        • Size 554KB
                                                                        • SHA256 f500c350dd71df7452b92444e19b4644b04283434a6557123f1e4d9fb078c3f8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        __AssemblyInfo__.ini

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                        • Size 308B
                                                                        • SHA256 9844e5c5e370f682004d712dc32c5dfc4beb160d021700c8f6a2ccd451ef7634
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Microsoft.DirectX.Direct3DX.dll

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                        • Size 562KB
                                                                        • SHA256 5e90089e69e4f7e2e42ea4a81fb62005c3710d0a4acdf207b97ed03f5641d013
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        __AssemblyInfo__.ini

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                        • Size 308B
                                                                        • SHA256 5eba451bfc83a14a0e42aab4b6c953a29ce9ceedc4f7c17ba01323928c3f0167
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Microsoft.DirectX.Direct3DX.dll

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                        • Size 563KB
                                                                        • SHA256 c29d337bf7639fbf424b34cc0409d2715762e1b4d82881fb524a2508381c9f62
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        __AssemblyInfo__.ini

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                        • Size 308B
                                                                        • SHA256 6d2a58a0ef44c494dad0bb7454f21beb1531d5e6dd6ae026fd9d64b901695f37
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Microsoft.DirectX.Direct3DX.dll

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                        • Size 564KB
                                                                        • SHA256 bebbc40ca25ef22e9d16b0de1123e0cb0444fe7a78b4f0b4395bdfd81618698c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        __AssemblyInfo__.ini

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                        • Size 308B
                                                                        • SHA256 4ada06bed3cb025b9615b92b1da4fd557d1c5532d1d4cafa11e3743cfdd9dc0a
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Microsoft.DirectX.Direct3DX.dll

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                        • Size 564KB
                                                                        • SHA256 36a21fc4f4c8f6ba4ad900613ee1b08ff43f2545585a2601c9fc4cf083d68a77
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        __AssemblyInfo__.ini

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                        • Size 308B
                                                                        • SHA256 b9b2732510d99d3df74f7501d1816647fa279a78bce64ee4500b68d7b9cf7803
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Microsoft.DirectX.Direct3DX.dll

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                        • Size 565KB
                                                                        • SHA256 78d85f0e2cb7d7bde534222f4ebfea1c9e06d37ecd3bb7ebd59e35f00b94b11d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        __AssemblyInfo__.ini

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                        • Size 308B
                                                                        • SHA256 05fccabec4e1ffbf49ee211a99fc76ca0cd7540cdf82327c2c3f8fa0072cb2d0
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Microsoft.DirectX.Direct3DX.dll

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                                                                        • Size 565KB
                                                                        • SHA256 2ee41d4d591a39d648e90db4d47d0fa0557fd68197756ee2ee94fcde4d820cfa
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        __AssemblyInfo__.ini

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                        • Size 308B
                                                                        • SHA256 fc75a1efb4a9c2cdb8dc56550f63f9838eba697c66e8a505855aef000ca5101d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Microsoft.DirectX.Direct3D.dll

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
                                                                        • Size 462KB
                                                                        • SHA256 f3359d5e41b1d4fec7230579a593e40fe44f6afdfacd1e2bbe52ee06d84686fb
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        __AssemblyInfo__.ini

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                        • Size 306B
                                                                        • SHA256 e39d250827d7450386ea38c1fffecb2b54e84694488ff708fcf3cac4e47781a5
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Microsoft.DirectX.DirectDraw.dll

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
                                                                        • Size 142KB
                                                                        • SHA256 ff4c03bbeb292317a77c86c1c81ae9564acb984b352fbef36d66e2d8bcbd79a8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        __AssemblyInfo__.ini

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                        • Size 310B
                                                                        • SHA256 325668c9275ffd9df497848fb57ad703834f86dd133fbbe3ad12e6c5bfd7a75c
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Microsoft.DirectX.DirectInput.dll

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
                                                                        • Size 155KB
                                                                        • SHA256 0ee2a2c371a918cabc85143202864d0c3a4abf1b93a5029081a622e0acf17ab7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        __AssemblyInfo__.ini

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                        • Size 312B
                                                                        • SHA256 3d48d34c6b14cc86127400c5ec928b196992a9520046bf24b81fc6ed8a04683e
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Microsoft.DirectX.DirectPlay.dll

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
                                                                        • Size 356KB
                                                                        • SHA256 489f65e1e00534835486e9255eec92b83edae4dade6dff867a380859ae53006a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        __AssemblyInfo__.ini

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                        • Size 310B
                                                                        • SHA256 1bfe8bd30f0d0a2fa008980cb8c99621057c420ea2a3e848c91e3e44f47e18cd
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Microsoft.DirectX.DirectSound.dll

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
                                                                        • Size 174KB
                                                                        • SHA256 2e28c8fb8b87b5ffd1e0ea27710a2e785ef4741a89e4b3c3af726ec63d15a1fa
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        __AssemblyInfo__.ini

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                        • Size 312B
                                                                        • SHA256 05fa82d7c5c5f357a26cb288a9481acdb47064a8309f4bed8718f5a05c8a9616
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Microsoft.DirectX.dll

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
                                                                        • Size 218KB
                                                                        • SHA256 942e98f142373547493f13b14e1603b2420851aff013d3085bada7b6b2214d9c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        __AssemblyInfo__.ini

                                                                        • Path C:\Windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini
                                                                        • Size 288B
                                                                        • SHA256 3fd9859f03878a3d2943a74f8ccb47206745a90f3ba9b76dacbd0cb1d33bc571
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        memory/824-4551-0x00000000021F0000-0x000000000224A000-memory.dmp

                                                                        memory/1608-97-0x000002C95B530000-0x000002C95B53A000-memory.dmp

                                                                        memory/1608-100-0x000002C95B8C0000-0x000002C95B8DA000-memory.dmp

                                                                        memory/1608-98-0x000002C95B8A0000-0x000002C95B8BC000-memory.dmp

                                                                        memory/1608-102-0x000002C95B890000-0x000002C95B896000-memory.dmp

                                                                        memory/1608-95-0x000002C95B550000-0x000002C95B56C000-memory.dmp

                                                                        memory/1608-99-0x000002C95B540000-0x000002C95B54A000-memory.dmp

                                                                        memory/1608-101-0x000002C95B880000-0x000002C95B888000-memory.dmp

                                                                        memory/1608-88-0x000002C943180000-0x000002C9431A2000-memory.dmp

                                                                        memory/1608-96-0x000002C95B570000-0x000002C95B623000-memory.dmp

                                                                        memory/1608-103-0x000002C95B8E0000-0x000002C95B8EA000-memory.dmp

                                                                        memory/1608-106-0x000002C942540000-0x000002C943002000-memory.dmp

                                                                        memory/1856-3609-0x000001B6F6D30000-0x000001B6F77F2000-memory.dmp

                                                                        memory/1856-477-0x000001B6F6D30000-0x000001B6F77F2000-memory.dmp

                                                                        memory/1856-479-0x000001B6F6D30000-0x000001B6F77F2000-memory.dmp

                                                                        memory/2044-135-0x00000210AE050000-0x00000210AEB12000-memory.dmp

                                                                        memory/2044-133-0x00000210C7250000-0x00000210C7303000-memory.dmp

                                                                        memory/2044-137-0x00000210AE050000-0x00000210AEB12000-memory.dmp

                                                                        memory/5344-24-0x0000029A51450000-0x0000029A519B5000-memory.dmp

                                                                        memory/5344-28-0x0000029A51B00000-0x0000029A51B80000-memory.dmp

                                                                        memory/5344-29-0x0000029A51B00000-0x0000029A51B80000-memory.dmp

                                                                        memory/5344-22-0x0000029A51450000-0x0000029A519B5000-memory.dmp

                                                                        memory/5344-25-0x0000029A51400000-0x0000029A51401000-memory.dmp

                                                                        memory/5344-23-0x0000029A51450000-0x0000029A519B5000-memory.dmp

                                                                        memory/5344-21-0x0000029A513F0000-0x0000029A513F1000-memory.dmp

                                                                        memory/5836-5102-0x00000000027C0000-0x0000000002802000-memory.dmp

                                                                        memory/5836-4676-0x00000000027C0000-0x00000000027FE000-memory.dmp

                                                                        memory/5836-3606-0x00000000027C0000-0x00000000027FD000-memory.dmp

                                                                        memory/5836-5225-0x00000000027C0000-0x0000000002802000-memory.dmp

                                                                        memory/5836-4846-0x00000000027C0000-0x00000000027FF000-memory.dmp

                                                                        memory/5836-4334-0x00000000027C0000-0x00000000027FD000-memory.dmp

                                                                        memory/5836-4504-0x00000000027C0000-0x00000000027FD000-memory.dmp