Analysis

  • user interaction
    yes
  • max time kernel
    599s
  • max time network
    595s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260911-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    03/10/2026, 17:41

General

  • Target
    sound-forge-pro.exe
  • Size 5.9MB
  • Sample261003-v9jm8aee47
  • SHA256 7d9222165521f259b0aa69af751b745d02bb4edfbaf6401050c0a51e79d72108
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Downloads MZ/PE file 7 IoCs
  • Enumerates connected drives 3 TTPs 47 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks computer location settings 2 TTPs 5 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops file in System32 directory 27 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Executes dropped EXE 13 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks whether UAC is enabled 1 TTPs 2 IoCs
  • Direct Volume Access: Opens a physical disk for reading 1 TTPs 2 IoCs

    Opens a raw handle to a physical disk, which bypasses file system access controls and is used for disk inspection, anti-VM checks and privilege checks.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 14 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 9 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 2 IoCs
  • Modifies Control Panel 11 IoCs
  • Modifies data under HKEY_USERS 14 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 7 IoCs
  • Suspicious behavior: AddClipboardFormatListener 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 24 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 13 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 36 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\sound-forge-pro.exe
    "C:\Users\Admin\AppData\Local\Temp\sound-forge-pro.exe"
    1⤵
    • Checks computer location settings
    • System Location Discovery: System Language Discovery
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4788
    • C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\MxDownloadManager.exe
      "C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\MxDownloadManager.exe" -m C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\SetupValues.dat -s Sound_Forge_Pro_15_trial -r
      2⤵
      • Downloads MZ/PE file
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Modifies system certificate store
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:5868
      • C:\Users\Admin\Documents\MAGIX Downloads\Installationsmanager\SOUND_FORGE_Pro_15.0.0.161_DLV_US_x64_211216_22-12_DB178E58_15_0_0_161.exe
        "C:\Users\Admin\Documents\MAGIX Downloads\Installationsmanager\SOUND_FORGE_Pro_15.0.0.161_DLV_US_x64_211216_22-12_DB178E58_15_0_0_161.exe" /m:"C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\SetupValues.dat"
        3⤵
        • Executes dropped EXE
        • Reads the TCP/IP host and domain name from the registry
        • Modifies Control Panel
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:5484
        • C:\Windows\SYSTEM32\msiexec.exe
          "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\redist.msi" /quiet /norestart /Liwear "C:\Users\Admin\AppData\Roaming\Sony\msvcrt_redist_03102026-064447.log"
          4⤵
          • Suspicious use of AdjustPrivilegeToken
          PID:4544
      • C:\Users\Admin\Documents\MAGIX Downloads\Installationsmanager\Acoustic_Mirror_Impulse_Files_180323_08-24_1_0_0_0.exe
        "C:\Users\Admin\Documents\MAGIX Downloads\Installationsmanager\Acoustic_Mirror_Impulse_Files_180323_08-24_1_0_0_0.exe" /M="C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\SetupValues.dat" /dlm LW0gQzpcVXNlcnNcQWRtaW5cQXBwRGF0YVxMb2NhbFxUZW1wXG1neDI0aHVw MzhzXFNldHVwVmFsdWVzLmRhdCAtcyBTb3VuZF9Gb3JnZV9Qcm9fMTVfdHJp YWwgLXI=
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        PID:3448
      • C:\Users\Admin\Documents\MAGIX Downloads\Installationsmanager\Noise_Reduction_Pack_2.0.0.1318_INT_x64_180710_10-25_2_0_0_1318.exe
        "C:\Users\Admin\Documents\MAGIX Downloads\Installationsmanager\Noise_Reduction_Pack_2.0.0.1318_INT_x64_180710_10-25_2_0_0_1318.exe" /m:"C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\SetupValues.dat"
        3⤵
        • Executes dropped EXE
        • Reads the TCP/IP host and domain name from the registry
        • Modifies Control Panel
        • Suspicious use of WriteProcessMemory
        PID:1208
        • C:\Windows\SYSTEM32\msiexec.exe
          "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\redist.msi" /quiet /norestart /Liwear "C:\Users\Admin\AppData\Roaming\Sony\msvcrt_redist_03102026-064857.log"
          4⤵
            PID:5416
        • C:\Users\Admin\Documents\MAGIX Downloads\Installationsmanager\iZotope_Ozone_9_Elements_9.11.1_x64_220304_16-12_9_11_1_0.exe
          "C:\Users\Admin\Documents\MAGIX Downloads\Installationsmanager\iZotope_Ozone_9_Elements_9.11.1_x64_220304_16-12_9_11_1_0.exe"
          3⤵
          • Executes dropped EXE
          • Checks whether UAC is enabled
          • System Location Discovery: System Language Discovery
          • Checks processor information in registry
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of SetWindowsHookEx
          PID:2424
        • C:\Users\Admin\Documents\MAGIX Downloads\Installationsmanager\iZotope_RX_8_Elements_8.5.1_220307_11-52_8_5_1_0.exe
          "C:\Users\Admin\Documents\MAGIX Downloads\Installationsmanager\iZotope_RX_8_Elements_8.5.1_220307_11-52_8_5_1_0.exe"
          3⤵
          • Executes dropped EXE
          • Checks whether UAC is enabled
          • System Location Discovery: System Language Discovery
          • Checks processor information in registry
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of SetWindowsHookEx
          PID:2964
        • C:\Users\Admin\Documents\MAGIX Downloads\Installationsmanager\Update_Notifier_3.0.0.74_INT_240424_12-00_C8380445_3_0_0_74.exe
          "C:\Users\Admin\Documents\MAGIX Downloads\Installationsmanager\Update_Notifier_3.0.0.74_INT_240424_12-00_C8380445_3_0_0_74.exe" /M="C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\SetupValues.dat" /dlm LW0gQzpcVXNlcnNcQWRtaW5cQXBwRGF0YVxMb2NhbFxUZW1wXG1neDI0aHVw MzhzXFNldHVwVmFsdWVzLmRhdCAtcyBTb3VuZF9Gb3JnZV9Qcm9fMTVfdHJp YWwgLXI=
          3⤵
          • Checks computer location settings
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:4976
          • C:\Users\Admin\AppData\Local\Temp\mgxz5jd43zo\product\Update_Notifier_setup.exe
            "C:\Users\Admin\AppData\Local\Temp\mgxz5jd43zo\product\Update_Notifier_setup.exe" /M=C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\SetupValues.dat /dlm "LW0gQzpcVXNlcnNcQWRtaW5cQXBwRGF0YVxMb2NhbFxUZW1wXG1neDI0aHVw MzhzXFNldHVwVmFsdWVzLmRhdCAtcyBTb3VuZF9Gb3JnZV9Qcm9fMTVfdHJp YWwgLXI="
            4⤵
            • Enumerates connected drives
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SetWindowsHookEx
            PID:3056
    • C:\Windows\system32\msiexec.exe
      C:\Windows\system32\msiexec.exe /V
      1⤵
      • Enumerates connected drives
      • Drops file in System32 directory
      • Drops file in Program Files directory
      • Drops file in Windows directory
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:5348
      • C:\Windows\syswow64\MsiExec.exe
        C:\Windows\syswow64\MsiExec.exe -Embedding D4DFA248FC955C46F27DDB45AA1A02F9
        2⤵
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        PID:6092
      • C:\Windows\System32\MsiExec.exe
        C:\Windows\System32\MsiExec.exe -Embedding D28D6AB1BDA149F0624DDCC1C4537A55
        2⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:728
      • C:\Windows\System32\MsiExec.exe
        "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\SOUND FORGE Shared Plug-Ins\Pro\Audio_x64\mchammer_x64.dll"
        2⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:5060
      • C:\Windows\System32\MsiExec.exe
        "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\SOUND FORGE Shared Plug-Ins\Pro\Audio_x64\sffrgpnv_x64.dll"
        2⤵
        • Loads dropped DLL
        PID:1156
      • C:\Windows\System32\MsiExec.exe
        "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\SOUND FORGE Shared Plug-Ins\Pro\Audio_x64\sfhammer_x64.dll"
        2⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:2732
      • C:\Windows\System32\MsiExec.exe
        "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\SOUND FORGE Shared Plug-Ins\Pro\Audio_x64\sfmirror_x64.dll"
        2⤵
        • Loads dropped DLL
        PID:5732
      • C:\Windows\System32\MsiExec.exe
        "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\SOUND FORGE Shared Plug-Ins\Pro\Audio_x64\sfppack1_x64.dll"
        2⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:2404
      • C:\Windows\System32\MsiExec.exe
        "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\SOUND FORGE Shared Plug-Ins\Pro\Audio_x64\sfppack2_x64.dll"
        2⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:4028
      • C:\Windows\System32\MsiExec.exe
        "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\SOUND FORGE Shared Plug-Ins\Pro\Audio_x64\sfppack3_x64.dll"
        2⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:2988
      • C:\Windows\System32\MsiExec.exe
        "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\SOUND FORGE Shared Plug-Ins\Pro\Audio_x64\sfresfilter_x64.dll"
        2⤵
        • Loads dropped DLL
        PID:2156
      • C:\Windows\System32\MsiExec.exe
        "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\SOUND FORGE Shared Plug-Ins\Pro\Audio_x64\sfxpfx1_x64.dll"
        2⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:5220
      • C:\Windows\System32\MsiExec.exe
        "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\SOUND FORGE Shared Plug-Ins\Pro\Audio_x64\sfxpfx2_x64.dll"
        2⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:2120
      • C:\Windows\System32\MsiExec.exe
        "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\SOUND FORGE Shared Plug-Ins\Pro\Audio_x64\sfxpfx3_x64.dll"
        2⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:2328
      • C:\Windows\System32\MsiExec.exe
        "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files (x86)\SOUND FORGE Shared Plug-Ins\Pro\Audio_x64\sfzplane_x64.dll"
        2⤵
        • Loads dropped DLL
        PID:3736
      • C:\Windows\syswow64\MsiExec.exe
        "C:\Windows\syswow64\MsiExec.exe" /Y "C:\Windows\SysWOW64\CDDBControl.dll"
        2⤵
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        PID:924
      • C:\Windows\syswow64\MsiExec.exe
        "C:\Windows\syswow64\MsiExec.exe" /Y "C:\Windows\SysWOW64\CDDBUI.dll"
        2⤵
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        PID:5648
      • C:\Windows\syswow64\MsiExec.exe
        "C:\Windows\syswow64\MsiExec.exe" /Y "C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\x86\sfvstproxystubx86.dll"
        2⤵
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        PID:5188
      • C:\Windows\System32\MsiExec.exe
        "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\sfvstwrap.dll"
        2⤵
        • Loads dropped DLL
        PID:4464
      • C:\Windows\System32\MsiExec.exe
        C:\Windows\System32\MsiExec.exe -Embedding 1917E748456F0D0374DF605ED0220744 E Global\MSI0000
        2⤵
        • Loads dropped DLL
        PID:560
      • C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Forge150.exe
        "C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Forge150.exe" /register /user 1085
        2⤵
        • Checks computer location settings
        • Drops file in System32 directory
        • Executes dropped EXE
        • Loads dropped DLL
        • Direct Volume Access: Opens a physical disk for reading
        • Reads the TCP/IP host and domain name from the registry
        • Modifies registry class
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:224
        • C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\UPS\Service_rel_u_x64_vc16.exe
          "C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\UPS\Service_rel_u_x64_vc16.exe" -i F746EE45-D41A-4CAB-B6FF-A3F4746EF98D
          3⤵
          • Executes dropped EXE
          • Reads the TCP/IP host and domain name from the registry
          • Suspicious behavior: AddClipboardFormatListener
          • Suspicious use of SetWindowsHookEx
          PID:4444
      • C:\Windows\System32\MsiExec.exe
        "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files\SOUND FORGE\Noise Reduction Plug-In 2.0\x64\sfnrpack_x64.dll"
        2⤵
        • Modifies registry class
        PID:3936
      • C:\Windows\System32\MsiExec.exe
        C:\Windows\System32\MsiExec.exe -Embedding 428D41437AD571ECF0F39A751605DF36
        2⤵
          PID:2472
        • C:\Windows\syswow64\MsiExec.exe
          C:\Windows\syswow64\MsiExec.exe -Embedding 1032A9B34E3DD16E468820A79B132660
          2⤵
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          PID:5512
        • C:\Windows\syswow64\MsiExec.exe
          C:\Windows\syswow64\MsiExec.exe -Embedding AF6D61172741E1A30A829E7AD70047D3 E Global\MSI0000
          2⤵
          • System Location Discovery: System Language Discovery
          • Modifies data under HKEY_USERS
          PID:1592
          • C:\Program Files\Common Files\MAGIX Services\Update Notifier\QMxNetworkSync.exe
            "C:\Program Files\Common Files\MAGIX Services\Update Notifier\QMxNetworkSync.exe"
            3⤵
            • Adds Run key to start application
            • Checks computer location settings
            • Drops file in Program Files directory
            • Executes dropped EXE
            • Reads the TCP/IP host and domain name from the registry
            • Suspicious behavior: AddClipboardFormatListener
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of SetWindowsHookEx
            PID:5676
      • C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.4467_none_7e0f83e07c8c1985\TiWorker.exe
        C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.4467_none_7e0f83e07c8c1985\TiWorker.exe -Embedding
        1⤵
        • Drops file in System32 directory
        • Drops file in Windows directory
        • Suspicious use of WriteProcessMemory
        PID:5744
        • C:\Windows\system32\wermgr.exe
          "C:\Windows\system32\wermgr.exe" "-outproc" "0" "5744" "1092" "992" "1096" "0" "0" "1100" "1104" "0" "0" "0" "0"
          2⤵
          • Checks processor information in registry
          • Enumerates system info in registry
          PID:3104
      • C:\Program Files\Common Files\MAGIX Services\Update Notifier\QMxNetworkSync.exe
        "C:\Program Files\Common Files\MAGIX Services\Update Notifier\QMxNetworkSync.exe"
        1⤵
        • Executes dropped EXE
        • Suspicious behavior: AddClipboardFormatListener
        • Suspicious use of SetWindowsHookEx
        PID:2660
      • C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Forge150.exe
        "C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Forge150.exe"
        1⤵
        • Executes dropped EXE
        • Direct Volume Access: Opens a physical disk for reading
        • Reads the TCP/IP host and domain name from the registry
        • Modifies registry class
        • Suspicious use of SetWindowsHookEx
        PID:4400

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            e5b66e7.rbs

            • Path C:\Config.Msi\e5b66e7.rbs
            • Size 167KB
            • SHA256 ebcb2531396f25a0db08d43ac36bf0fda89241641d85842b6d16419afff257ef
            • MD5 SHA1 SHA512 SSDEEP TLSH

            e5b66ec.rbs

            • Path C:\Config.Msi\e5b66ec.rbs
            • Size 330KB
            • SHA256 0f41bce934df075cb10e44208e54c8f96c7a67b640cacc12fb3df28040c8ab2a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            e5b66f2.rbs

            • Path C:\Config.Msi\e5b66f2.rbs
            • Size 30KB
            • SHA256 159787011c9233decf210ac70755bc92053cb76f30b8b6455f6b58372c9aacdb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            e5b66f7.rbs

            • Path C:\Config.Msi\e5b66f7.rbs
            • Size 21KB
            • SHA256 09e6d5c8aa0323468a6d8d3e6454052e9cdd69618017e0217d1ab0a2cc0ccb84
            • MD5 SHA1 SHA512 SSDEEP TLSH

            e5b66fd.rbs

            • Path C:\Config.Msi\e5b66fd.rbs
            • Size 13.6MB
            • SHA256 9a860022a204561aa6dc3d8eba8fe7ba62a3de28029840ad11c5db47770bd818
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Update_Notifier_SetupInfo.ini

            • Path C:\Program Files (x86)\Common Files\MAGIX Services\Uninstall\{A4532592-9CE3-4CFA-A06D-EEAD49A50028}\Update_Notifier_SetupInfo.ini
            • Size 2KB
            • SHA256 fa6100ebedfec1ebc6af8317eaf743a3440c8af627dda9d2a91eccfe06809cc7
            • MD5 SHA1 SHA512 TLSH

            Update_Notifier_SetupRes.mxres

            • Path C:\Program Files (x86)\Common Files\MAGIX Services\Uninstall\{A4532592-9CE3-4CFA-A06D-EEAD49A50028}\Update_Notifier_SetupRes.mxres
            • Size 3.8MB
            • SHA256 35e96d225b28e7e54a863fd1f168bfdffcaa5d188db52d4af104108b2fe386f8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            DropShadow.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtGraphicalEffects\DropShadow.qmlc
            • Size 7KB
            • SHA256 b08648a121779c7b88a201f2e701de45ef33e2c4a82d2e269354d2f341a4767d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            FastGlow.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtGraphicalEffects\private\FastGlow.qmlc
            • Size 26KB
            • SHA256 47e14fd72b981f1ba55004c6e703846ed354bc2e483d5efaa63ed2ef3129fae3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            GaussianDirectionalBlur.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtGraphicalEffects\private\GaussianDirectionalBlur.qmlc
            • Size 23KB
            • SHA256 e4a612c596675b2e387dcfcd61ff011ed69ccfccb5a9db44d55aca90b4b48467
            • MD5 SHA1 SHA512 SSDEEP TLSH

            GaussianGlow.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtGraphicalEffects\private\GaussianGlow.qmlc
            • Size 7KB
            • SHA256 4e1ee24e72b63029ef46a61b3957174859096470dfed66069fcfe2f8e9c949bb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SourceProxy.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtGraphicalEffects\private\SourceProxy.qmlc
            • Size 4KB
            • SHA256 4575e60641bd469fc27bc1fb9a8220bc88900c72a82767dfd8dddc903235c216
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Button.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Button.qmlc
            • Size 5KB
            • SHA256 360d508f8b332c229e0d1edf50dd41a96820f7fb8752a815b9182a004d083ffa
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ComboBox.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\ComboBox.qmlc
            • Size 27KB
            • SHA256 22210a229e3423cb9b2da14b812c5d5ab2589ecb75262e3b16eb138462a353f1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Menu.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Menu.qmlc
            • Size 5KB
            • SHA256 4557e48d63f7a90878b479622aa224d3a4acb8635f0d28bd1941ae8cd1d31729
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ColumnMenuContent.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Private\ColumnMenuContent.qmlc
            • Size 18KB
            • SHA256 45759e6a03aae5586c652d732d5003aae65da534c0afd1acccdd57c6eaf1f715
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Control.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Private\Control.qmlc
            • Size 4KB
            • SHA256 5903b54e64908e18d8cb311572271a276b3dcb9b2bb98558f51cc9ba81d40aa4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EditMenu.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Private\EditMenu.qmlc
            • Size 4KB
            • SHA256 108c18c254f689f5cd8c97359dd9d3358ffa744ad682597c2b4e5b981d165079
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EditMenu_base.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Private\EditMenu_base.qmlc
            • Size 13KB
            • SHA256 aed86ac381a62a009dbfc91ce70a4c8cb8a50834178cbe1b2e92c32cbddac4fa
            • MD5 SHA1 SHA512 SSDEEP TLSH

            FocusFrame.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Private\FocusFrame.qmlc
            • Size 3KB
            • SHA256 1b019b3da2cc0846abbf8db1924f53b71a6b296807ddd55b0503854002b704f8
            • MD5 SHA1 SHA512 TLSH

            MenuContentItem.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Private\MenuContentItem.qmlc
            • Size 21KB
            • SHA256 9d79cd6ed38193c994c7593ee593caf4d822c87a49031c32b2ccaaa05b5a9557
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MenuContentScroller.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Private\MenuContentScroller.qmlc
            • Size 4KB
            • SHA256 ae088681b7972e1e712b9d348fdf6e2755fd5be2c505d1bea93d129efbfe5604
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MenuItemSubControls.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Private\MenuItemSubControls.qmlc
            • Size 884B
            • SHA256 fd69d7019fa77d64c98c3040606c39a40b60c32cebd94b249c330766999a0cc2
            • MD5 SHA1 SHA512 TLSH

            ScrollBar.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Private\ScrollBar.qmlc
            • Size 14KB
            • SHA256 a68f55311593a2e645387a75ee80e1412fc696cfbb02c65e0c51fa565c9603a8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ScrollViewHelper.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Private\ScrollViewHelper.qmlc
            • Size 18KB
            • SHA256 5cfecf780966049a4435904f804fefdffc124887efb016b0b80b1b4e26882372
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Style.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Private\Style.qmlc
            • Size 1KB
            • SHA256 26e7f8c488b73c397020dd21169eb6da31a485a8a4ff1fd52a7ec49ec26a3167
            • MD5 SHA1 SHA512 TLSH

            SystemPaletteSingleton.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Private\SystemPaletteSingleton.qmlc
            • Size 3KB
            • SHA256 17110c229c2e27c20b86a7e0ccd178c4e60f984fef1575c67bde47c2f63d8b9c
            • MD5 SHA1 SHA512 TLSH

            TextHandle.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Private\TextHandle.qmlc
            • Size 6KB
            • SHA256 727f8124a42834f788b8f69ae0d3ae412ff2df20fadbf40873795f33c9942d7d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            TextInputWithHandles.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Private\TextInputWithHandles.qmlc
            • Size 14KB
            • SHA256 10870cb3cf5cf03edd2f81ef3786255a0cdb45e69af451f552dd6aeed0f6649c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            TextSingleton.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Private\TextSingleton.qmlc
            • Size 596B
            • SHA256 fe0a60b753cb2c2bea9c1d2e2dcfa15a4262eeb912eae545d1272dccc41085c6
            • MD5 SHA1 SHA512 TLSH

            ProgressBar.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\ProgressBar.qmlc
            • Size 5KB
            • SHA256 84f3342cba4d8dab83817979a508ab83fc11e0cfa85b6b681079a337c3cfe853
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ScrollView.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\ScrollView.qmlc
            • Size 19KB
            • SHA256 fa68db3c8de6511e0f57c04044c02fa03755c1352c2bf579c1a56d7a9a7fac39
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ButtonStyle.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Styles\Base\ButtonStyle.qmlc
            • Size 14KB
            • SHA256 fd06f84a937804fbe70b7c83ee9a35a40b59199bc8c0d4b1b8132d8b8e2fed25
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ComboBoxStyle.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Styles\Base\ComboBoxStyle.qmlc
            • Size 25KB
            • SHA256 c7d164eaa7175139939da047228b90a31217df146328d593d5702877970eb61c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MenuStyle.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Styles\Base\MenuStyle.qmlc
            • Size 25KB
            • SHA256 4c866c7a5d8c0d1a4c0fe82e0b567586fbe09aeeb7f4692fd936011b17adb98e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ScrollViewStyle.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Styles\Base\ScrollViewStyle.qmlc
            • Size 35KB
            • SHA256 c1725aa6123156d10e06f2ae109510e2b965b4c1e452278a4236fa676c2852a7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            FocusFrameStyle.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Styles\Desktop\FocusFrameStyle.qmlc
            • Size 1KB
            • SHA256 fd447b8a3e4792d54ba5646d54484f97bed96e9d4580bfa50dad6b55eb5f9ec8
            • MD5 SHA1 SHA512 TLSH

            ProgressBarStyle.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Styles\Desktop\ProgressBarStyle.qmlc
            • Size 3KB
            • SHA256 1f13af4aa79201c682ab82e83395e6524baa202603bba22f082ccbd90d2129d1
            • MD5 SHA1 SHA512 TLSH

            ScrollViewStyle.qmlc

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\QtQuick\Controls\Styles\Desktop\ScrollViewStyle.qmlc
            • Size 8KB
            • SHA256 c21a456ed804c50a9318e1a6828addd461edbdce361d92fa6a48f30adf9f6fed
            • MD5 SHA1 SHA512 SSDEEP TLSH

            install.cfg

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\install.cfg
            • Size 759B
            • SHA256 b1f7671e9508baf8792c87823c3545ed9c1a5ea4a7303009dbbe488c382ff0ec
            • MD5 SHA1 SHA512 TLSH

            install.cfg

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\install.cfg
            • Size 1KB
            • SHA256 a4dcdfaf0c6018e682b46c4e3eb7ca16c108cb5ae785cab0b61241f73f3e2f93
            • MD5 SHA1 SHA512 TLSH

            install.cfg

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\install.cfg
            • Size 2KB
            • SHA256 a52c9ca1ab55be456c9efe30beccb6a72f5be257f8ea5916c0c88b15d84e8173
            • MD5 SHA1 SHA512 TLSH

            install.cfg

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\install.cfg
            • Size 2KB
            • SHA256 1c56b63697e5c28c9a8047c855293ffdb4a9c6a3f70ea80ef71c8772721c0c97
            • MD5 SHA1 SHA512 TLSH

            install.cfg

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\install.cfg
            • Size 3KB
            • SHA256 af3cf0f3e1d64d81780745510a8314f61869707f65842c34f218cebd697a94b5
            • MD5 SHA1 SHA512 TLSH

            install.cfg

            • Path C:\Program Files\Common Files\MAGIX Services\Update Notifier\install.cfg
            • Size 3KB
            • SHA256 b0692366fdc4b50b2ca17e1298c850950a26636a3d0a94767f5258de54ab7112
            • MD5 SHA1 SHA512 TLSH

            v10_style_parameq_down.bmp

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\DspDll\Bitmaps\mxgui.4.0\v10_style_parameq_down.bmp
            • Size 376B
            • SHA256 d49c33456f3df36f6f9af9fd0c3da53e6ff6e030e6c49deef6885ff6c677f468
            • MD5 SHA1 SHA512

            v8_style_advanced_dynamics_down.bmp

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\DspDll\Bitmaps\mxgui.4.0\v8_style_advanced_dynamics_down.bmp
            • Size 312KB
            • SHA256 29d9c1931710b10f4079900bdaa996c0eacbe6ae4d855ae745dc8cd5aee9011e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Forge150.exe

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Forge150.exe
            • Size 25.0MB
            • SHA256 11584cabe828be4b7f4db690844fc74d6a469258b9cc859d4d3c18fc4a296b11
            • MD5 SHA1 SHA512 SSDEEP TLSH

            local_en_US.cfg

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Language\local_en_US.cfg
            • Size 274B
            • SHA256 b47cec29babe1a955f0ec77ab2c242e4e3e487ebd1e94db19b288b1b0c522f57
            • MD5 SHA1 SHA512 TLSH

            local_en_US.cfg

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Language\local_en_US.cfg
            • Size 528B
            • SHA256 86957404d7aae7c63a5a7abdf4c8e019b192643a96fa8e1c12457a9858295319
            • MD5 SHA1 SHA512 TLSH

            local_en_US.cfg

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Language\local_en_US.cfg
            • Size 5KB
            • SHA256 5e136e516694faabd35f11e5cf82da29a84dce9043bbb9dcfd23583772b09884
            • MD5 SHA1 SHA512 SSDEEP TLSH

            local_ja_JP.cfg

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Language\local_ja_JP.cfg
            • Size 278B
            • SHA256 17e99cd41646059095f160d37f0969c26743e5a4bc6c34f9c9653d6512b696c7
            • MD5 SHA1 SHA512 TLSH

            local_ja_JP.cfg

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Language\local_ja_JP.cfg
            • Size 532B
            • SHA256 5979fe1e878dbbde88929ce1ec3668ec07444f4cffb999b15eeb71932f1d9201
            • MD5 SHA1 SHA512 TLSH

            local_ja_JP.cfg

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Language\local_ja_JP.cfg
            • Size 1KB
            • SHA256 3f173ca6171eff034df5377ba50f70c46abcb2be8a23e0852e887788b1b9bfe6
            • MD5 SHA1 SHA512 TLSH

            local_ja_JP.cfg

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Language\local_ja_JP.cfg
            • Size 1KB
            • SHA256 555c729e42c2525158455859f078a150b7a47169dfb0fac52b8e71b78db3a34b
            • MD5 SHA1 SHA512 TLSH

            local_ja_JP.cfg

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Language\local_ja_JP.cfg
            • Size 3KB
            • SHA256 e381de5dcc82511d627f173660742cadaf2da7b9ff41a13e26eec6e342c01bdf
            • MD5 SHA1 SHA512 TLSH

            local_ja_JP.cfg

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Language\local_ja_JP.cfg
            • Size 5KB
            • SHA256 9da61507cf73ad5f004fb51174ef46de248fe6a623ac15e31f62d62fe869aaac
            • MD5 SHA1 SHA512 SSDEEP TLSH

            local_ja_JP.cfg

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Language\local_ja_JP.cfg
            • Size 5KB
            • SHA256 0c429d1c1e63723b3b9804e1c0d90ae7a2c8baeef94cab3034c5cb03cdacf786
            • MD5 SHA1 SHA512 SSDEEP TLSH

            local_zh_CN.cfg

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Language\local_zh_CN.cfg
            • Size 434B
            • SHA256 bf02fdbd09dbcca4be71d46a7888bde791086f0d0ca0b744475a4a5d3158d383
            • MD5 SHA1 SHA512 TLSH

            local_zh_CN.cfg

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Language\local_zh_CN.cfg
            • Size 532B
            • SHA256 30311620535357bb5cb0279c0219a7aedb272a9c2d912422e8764f8acf9de7d5
            • MD5 SHA1 SHA512 TLSH

            local_zh_CN.cfg

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Language\local_zh_CN.cfg
            • Size 1KB
            • SHA256 c577d73f4403b33bae2af9ee8c8391c1487d2aee3551f9c97df281d2425fd1f5
            • MD5 SHA1 SHA512 TLSH

            local_zh_CN.cfg

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Language\local_zh_CN.cfg
            • Size 4KB
            • SHA256 3c6e72e9612ab163d82c0782e3c95267ed0ad3f00d14a7afc5461a4c9b62f914
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Patchnotes.html

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Patchnotes.html
            • Size 12KB
            • SHA256 435782ff52af85c2bd405524a1e92b8b3cd497694152ed9536c531fa879916ed
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnlockFormServiceCenter_fi_FI.rtf

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\Protein\Forms\UnlockFormServiceCenter_fi_FI.rtf
            • Size 2KB
            • SHA256 5a31feaa4bdbc96da11a4f68a7fcb36bb791dc073b41e109f7d085dd008790bc
            • MD5 SHA1 SHA512 TLSH

            eula

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\eula
            • Size 12KB
            • SHA256 47e73f90e0af59acafa197ed07e71cd8d6c45a26a3582012c0664a3eddd99638
            • MD5 SHA1 SHA512 SSDEEP TLSH

            install.cfg

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\install.cfg
            • Size 188B
            • SHA256 41cfe92dc55de0e225873ec5822ab437533db26c2f82d0585c83d523352304d0
            • MD5 SHA1 SHA512 TLSH

            install.cfg

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\install.cfg
            • Size 472B
            • SHA256 123125b57c6b897238996836c05f3376f4abe0915518886f884098afe32a1991
            • MD5 SHA1 SHA512 TLSH

            install.cfg

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\install.cfg
            • Size 626B
            • SHA256 7eec2ecd3e4f335400716766af1b0579fe7b6c497f31e7968356b10303dd6889
            • MD5 SHA1 SHA512 TLSH

            install.cfg

            • Path C:\Program Files\SOUND FORGE\SOUND FORGE Pro 15.0\install.cfg
            • Size 1KB
            • SHA256 3efd9fa8178f9d05f926fbb2c020b694eaf2042e0140ba7b15d3d8411ab4e4ac
            • MD5 SHA1 SHA512 TLSH

            installation.ini

            • Path C:\ProgramData\MAGIX\Sound_Forge_Pro_15\installation.ini
            • Size 402B
            • SHA256 d4c0b5b6fd39dad95c226a018bda448e331de301c3a5b460ab336d968b18ed39
            • MD5 SHA1 SHA512 TLSH

            Trace.log

            • Path C:\ProgramData\MAGIX\Update Notifier\ExceptionHandlerDll\Trace.log
            • Size 1KB
            • SHA256 9b1bcd78cfb4aa1255e95832aa3839e851a2f613bbddfae671e95c856eac26cb
            • MD5 SHA1 SHA512 TLSH

            103621DE9CD5414CC2538780B4B75751

            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751
            • Size 808B
            • SHA256 3dd5ea8a14eb665ba6057d424f94e5e83757ffaab456578dbf038af04053b19e
            • MD5 SHA1 SHA512 TLSH

            1B1495DD322A24490E2BF2FAABAE1C61

            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1B1495DD322A24490E2BF2FAABAE1C61
            • Size 355B
            • SHA256 12fd0590708bb38d8039bc994178acee8a3d220f0cd194b0f1c2fc9ba622f927
            • MD5 SHA1 SHA512 TLSH

            22D536C4B4AD2CEF7AC6B7789FD235E3

            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\22D536C4B4AD2CEF7AC6B7789FD235E3
            • Size 283B
            • SHA256 251ed08cc8f5873098ea5ee083034e7cd99ece955920e12a42e50306a94cb6eb
            • MD5 SHA1 SHA512 TLSH

            40C68D5626484A90937F0752C8B950AB

            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\40C68D5626484A90937F0752C8B950AB
            • Size 834B
            • SHA256 f64b94c786a213df5f80716f98b2e4f90edb77609b43dce1c788792f460a53dd
            • MD5 SHA1 SHA512 TLSH

            EA618097E393409AFA316F0F87E2C202_B06B4CAE26C37390498546FC139D1207

            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EA618097E393409AFA316F0F87E2C202_B06B4CAE26C37390498546FC139D1207
            • Size 5B
            • SHA256 bebe2853a3485d1c2e5c5be4249183e0ddaff9f87de71652371700a89d937128
            • MD5 SHA1 SHA512

            ECF3006D44DA211141391220EE5049F4

            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\ECF3006D44DA211141391220EE5049F4
            • Size 80KB
            • SHA256 fc9b3ced5234cf5890a2753d2e645099bff079ec2743825e54c725e7769a3b01
            • MD5 SHA1 SHA512 SSDEEP TLSH

            103621DE9CD5414CC2538780B4B75751

            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751
            • Size 192B
            • SHA256 8afa121f63ac96e890ce2ec178dd258f580bab774c38f1810528e24329f5b814
            • MD5 SHA1 SHA512 TLSH

            1B1495DD322A24490E2BF2FAABAE1C61

            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1B1495DD322A24490E2BF2FAABAE1C61
            • Size 192B
            • SHA256 1fe37b27ceebc5b7961b294ce3f109f72db68276b6e0a6c1d5f19c54b49ab4a8
            • MD5 SHA1 SHA512 TLSH

            22D536C4B4AD2CEF7AC6B7789FD235E3

            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\22D536C4B4AD2CEF7AC6B7789FD235E3
            • Size 192B
            • SHA256 9f5eaeac72818e5955ebcadda1989acf0bd6409fc511e65664cfa13e384eb25f
            • MD5 SHA1 SHA512 TLSH

            40C68D5626484A90937F0752C8B950AB

            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\40C68D5626484A90937F0752C8B950AB
            • Size 180B
            • SHA256 38da736b3821aaad0520b65b4993f8d92fe3c9016b87b251f9c5455db156af20
            • MD5 SHA1 SHA512 TLSH

            EA618097E393409AFA316F0F87E2C202_B06B4CAE26C37390498546FC139D1207

            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EA618097E393409AFA316F0F87E2C202_B06B4CAE26C37390498546FC139D1207
            • Size 402B
            • SHA256 a21256819b8197246a63c5ad8ce0564bf65cb5f4e93696dc9f7d7d8daf5f2723
            • MD5 SHA1 SHA512 TLSH

            ECF3006D44DA211141391220EE5049F4

            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\ECF3006D44DA211141391220EE5049F4
            • Size 170B
            • SHA256 59d264ebc34101812a47258a21b09498c87005e71b84f49af1b14911fb1ba1ab
            • MD5 SHA1 SHA512 TLSH

            0281175dc8a813fb83bb0d93ff232731cf4fada4.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\0281175dc8a813fb83bb0d93ff232731cf4fada4.qmlc
            • Size 11KB
            • SHA256 f47ec8da68ef6bdd0933110b043b1ee41ecf64f731aee698b9ad8d59ae9ff8ec
            • MD5 SHA1 SHA512 SSDEEP TLSH

            0677db3a894ee316448fc8a48ff7b80e4a3497d2.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\0677db3a894ee316448fc8a48ff7b80e4a3497d2.qmlc
            • Size 19KB
            • SHA256 0f0ab31d07afcb718a770c923ccacb5d7785e862dd8c84b1b9c48f1b89e9d9b5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            1299672801b937f3837588603725c81329420f41.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\1299672801b937f3837588603725c81329420f41.qmlc
            • Size 2KB
            • SHA256 3cfdc9a55cb2605113c4de9a82e4751f804fb3f4705bbf3896cfced2a4895b23
            • MD5 SHA1 SHA512 TLSH

            17e572c462d7c7dda83d85679383ef6456108e72.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\17e572c462d7c7dda83d85679383ef6456108e72.qmlc
            • Size 13KB
            • SHA256 95a1f7d123c6af22c30dd60eb5e8c01bf87425c5bc9ef31d8c4b156881839aa3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            1c556c951afe4363ac2475d61c597bb3d706d0b8.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\1c556c951afe4363ac2475d61c597bb3d706d0b8.qmlc
            • Size 2KB
            • SHA256 640291892fec4f39f79847d5566698f5e63d6fb28f059b516fff0d13808ea975
            • MD5 SHA1 SHA512 TLSH

            2098a8222bcd74d00c98c72a60fe39151872bd9b.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\2098a8222bcd74d00c98c72a60fe39151872bd9b.qmlc
            • Size 16KB
            • SHA256 5fc4ea04191c1e3fbe5ab2fc9ba0401502a6a7edfe5b8d399f11717671e9cc31
            • MD5 SHA1 SHA512 SSDEEP TLSH

            2173aaa5b0031c9874cebd7a71e137028888d98f.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\2173aaa5b0031c9874cebd7a71e137028888d98f.qmlc
            • Size 45KB
            • SHA256 6f77a151a699add0a5ed0fe1d42dd59932cb0741d89b5d9be1c2f744cb7d3c42
            • MD5 SHA1 SHA512 SSDEEP TLSH

            2af06d5d455f5b8e664b1e7a0004c5daa4e75f26.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\2af06d5d455f5b8e664b1e7a0004c5daa4e75f26.qmlc
            • Size 4KB
            • SHA256 8630ddb612874effb05cd76e1f890cff0084b76137464de5691f31056edca88e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            3b47aac9452f0c7968c90e7df3eaaa8eb6d73f7a.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\3b47aac9452f0c7968c90e7df3eaaa8eb6d73f7a.qmlc
            • Size 24KB
            • SHA256 4c7e47d89e9bd9a2d4d56b7348b58aed35e37569a19bd371bc5b41ba92dc5daa
            • MD5 SHA1 SHA512 SSDEEP TLSH

            4f1ef9cb2015e31d4736db5098be32b37ab69278.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\4f1ef9cb2015e31d4736db5098be32b37ab69278.qmlc
            • Size 10KB
            • SHA256 fe1b53d1ebbcf3c244bc8310680b9ab9753c44e7ff5955fa042e61c814cff83f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            6a9e02f680889822f3a0234ce32a77156ddb4309.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\6a9e02f680889822f3a0234ce32a77156ddb4309.qmlc
            • Size 26KB
            • SHA256 00a6b4dcccf10e848eaf10cfd8940fbc35655b1444cae0f87e63c875df74c76e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            6d7872f47c0dd45cad6d0d775d027d38e501f888.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\6d7872f47c0dd45cad6d0d775d027d38e501f888.qmlc
            • Size 9KB
            • SHA256 99deff63a02c704b81b77a19af8462cccd0c46a7c723f5f18ff311d2713a98f0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            7956c6d55c6d34b3f912d413d72733a0a03cf6e8.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\7956c6d55c6d34b3f912d413d72733a0a03cf6e8.qmlc
            • Size 76KB
            • SHA256 f76300e6ab979277660678439993cafd6d87799f00a94ccabc27fe9c1935ee3a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            7a93ea86e57972c198f2f241223a2cdf97e9113f.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\7a93ea86e57972c198f2f241223a2cdf97e9113f.qmlc
            • Size 6KB
            • SHA256 236d92a9e6ed64f459f0ebaf4ae63b5cc2be182532cf2a9587c486a9b7ebd916
            • MD5 SHA1 SHA512 SSDEEP TLSH

            885ad8ba4c4be8809a5ea6765711e2fee88e219e.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\885ad8ba4c4be8809a5ea6765711e2fee88e219e.qmlc
            • Size 2KB
            • SHA256 c5393afc84343ceb6380e22b7c9aa8ccab3e4d58b1d81ba9f0e50a927ad44db9
            • MD5 SHA1 SHA512 TLSH

            8c133976baca76e8ed402d6608a9ad2bbb789c55.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\8c133976baca76e8ed402d6608a9ad2bbb789c55.qmlc
            • Size 11KB
            • SHA256 87bded9eb51e4b3d2bf21422b2d1647d5b806e7e775d81a46847fc92cf8d91fd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            8e219043eefe8de5698a90109b6b89ed2ae9d51f.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\8e219043eefe8de5698a90109b6b89ed2ae9d51f.qmlc
            • Size 4KB
            • SHA256 bb07fe8b72230cbdadc974630419f9b2c33158b64f9c1445f2abf5ab2d4ab375
            • MD5 SHA1 SHA512 SSDEEP TLSH

            95d55e98cf586d74e3f8d6718c4560bc762c0112.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\95d55e98cf586d74e3f8d6718c4560bc762c0112.qmlc
            • Size 14KB
            • SHA256 332a94e0da9e368aaa412d0c0543b3d831403db0e78ac73a2c411d930420fbf2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            acb0d6d57e38b73c81c2c791ffff0fdf0d7e8951.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\acb0d6d57e38b73c81c2c791ffff0fdf0d7e8951.qmlc
            • Size 29KB
            • SHA256 f055aaef4288047e0364dc2fadf5c92c91d33c58a463dcfe5f64927f622617dd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            aeb62b72502b015c3f6562dc0951941dcf3b599a.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\aeb62b72502b015c3f6562dc0951941dcf3b599a.qmlc
            • Size 25KB
            • SHA256 96d4594c0c83477dfc10c7caad576f6281d052e0a48a3fad8480166fc7bad3f4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            af24e1ddad016e7f0d5ae502ea4a58db27b13d38.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\af24e1ddad016e7f0d5ae502ea4a58db27b13d38.qmlc
            • Size 756B
            • SHA256 871979a3881409f7624060ea5cb3e28af091e2f7627a460c1cdeb68393d6d2ee
            • MD5 SHA1 SHA512 TLSH

            b2dbb86486a42d27a47b2d388efd1f5e07adf8fe.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\b2dbb86486a42d27a47b2d388efd1f5e07adf8fe.qmlc
            • Size 6KB
            • SHA256 9d43e2ab3cc7117807d4f3cf98c86836d7a51fae145db924b1c71f494876ce5d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            b3572a4b8e6f2f50d88c1a15d67f960ec5e44b57.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\b3572a4b8e6f2f50d88c1a15d67f960ec5e44b57.qmlc
            • Size 624B
            • SHA256 4eb796e85ccf2a1ab0ceb64f46cb443481ebe0e64f17cd769d7f59f61cf03f15
            • MD5 SHA1 SHA512 TLSH

            b5d2411fa08509fa62f906b56b110ca93e3af1dc.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\b5d2411fa08509fa62f906b56b110ca93e3af1dc.qmlc
            • Size 15KB
            • SHA256 f9f04ea17d1d0a4eb38a75abe6ad9b58d09f4e686d36303ada41ca6ea8947241
            • MD5 SHA1 SHA512 SSDEEP TLSH

            bb54b4048422f4914515c5c1b930b2ba717b006e.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\bb54b4048422f4914515c5c1b930b2ba717b006e.qmlc
            • Size 3KB
            • SHA256 439bd04eb408629ecaacea0aa41e8868248f46e3278a0cd8638fcdb1617a86ed
            • MD5 SHA1 SHA512 TLSH

            bcedca707c40916030891fe67a0718735e27d493.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\bcedca707c40916030891fe67a0718735e27d493.qmlc
            • Size 9KB
            • SHA256 5dc34c97bf20f1b16603790ae44077e87b229d43b36ee4d88e4e127792cd48a1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            f61301cc4000de96afb1293ddd4fe7835276df8a.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\f61301cc4000de96afb1293ddd4fe7835276df8a.qmlc
            • Size 17KB
            • SHA256 8a4de726a41ef8836e4dc4f9b8786fe5e2389ca9b640173282e36f33a2ac9d9f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fbfb3d662fdce4a52c4924aca69e140a0f16e22f.qmlc

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\cache\qmlcache\fbfb3d662fdce4a52c4924aca69e140a0f16e22f.qmlc
            • Size 4KB
            • SHA256 9f9c3e03be110c48daaf40c7b23f9a67ba499ad196cb293aa778a58fe3a97160
            • MD5 SHA1 SHA512 SSDEEP TLSH

            networksync.log

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\networksync.log
            • Size 1007B
            • SHA256 5ac4dc727bccd90bd48dc6624bbb004609f4c63e1e43d2d1215dc4c1fe6ff367
            • MD5 SHA1 SHA512 TLSH

            networksync.log

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\networksync.log
            • Size 2KB
            • SHA256 dead26d541b46090c450801b5a1812b53e6f693b21dbdbb70c3498d47090849f
            • MD5 SHA1 SHA512 TLSH

            networksync.log

            • Path C:\Users\Admin\AppData\Local\QMxNetworkSync\networksync.log
            • Size 8KB
            • SHA256 8e6b4754fdca41192ff8493106a9815a691f8b485db3ceae50159fc8d4df71e9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BR53B7.tmp

            • Path C:\Users\Admin\AppData\Local\Temp\BRL00000978\BR53B7.tmp
            • Size 43KB
            • SHA256 a0e0ed16ae5f37d864bccd7b61b5795cd26782ab38e3ad963ca30bfbdac95364
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BR5444.tmp

            • Path C:\Users\Admin\AppData\Local\Temp\BRL00000978\BR5444.tmp
            • Size 288KB
            • SHA256 f675eba3b22e0a2238ec4961d99de3bacca0ab553ab26eecb49800a12a9371ab
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BR5493.tmp

            • Path C:\Users\Admin\AppData\Local\Temp\BRL00000978\BR5493.tmp
            • Size 35KB
            • SHA256 78827e2b1ef0aad4f8b1b42d0964064819aa22bfcd537ebaacb30d817edc06d8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BR54C3.tmp

            • Path C:\Users\Admin\AppData\Local\Temp\BRL00000978\BR54C3.tmp
            • Size 121KB
            • SHA256 a60879833bfe406793b4e5875b93429b658625630d752169aa93a3c151997428
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BR54C4.tmp

            • Path C:\Users\Admin\AppData\Local\Temp\BRL00000978\BR54C4.tmp
            • Size 532KB
            • SHA256 5dd27e845af9333ad7b907a37ab3d239b75be6ccc1f51ef4b21e59b037ce778c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BR54E4.tmp

            • Path C:\Users\Admin\AppData\Local\Temp\BRL00000978\BR54E4.tmp
            • Size 72KB
            • SHA256 5ddee4aab3cf33e505f52199d64809125b26de04fb9970ca589cd8619c859d80
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BR54F5.tmp

            • Path C:\Users\Admin\AppData\Local\Temp\BRL00000978\BR54F5.tmp
            • Size 14KB
            • SHA256 b017168c69ef40115141813e47122391602e1af28af342c56495b09f1c3c7522
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BR5573.tmp

            • Path C:\Users\Admin\AppData\Local\Temp\BRL00000978\BR5573.tmp
            • Size 14KB
            • SHA256 f1029f5cca3dabfeffe2c9db6ad84a9ff0f64f5b2fb85cb6ab348740f756e07d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BR567E.tmp

            • Path C:\Users\Admin\AppData\Local\Temp\BRL00000978\BR567E.tmp
            • Size 74KB
            • SHA256 41788435f245133ec5511111e2c5d52f7515e359876180067e0b5ba85c729322
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BR567F.tmp

            • Path C:\Users\Admin\AppData\Local\Temp\BRL00000978\BR567F.tmp
            • Size 102KB
            • SHA256 baad1fc5d9a16eb5226943c2a8b1571581c45da7aa00c1d0a5d12f2040cdabd7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BR56AF.tmp

            • Path C:\Users\Admin\AppData\Local\Temp\BRL00000978\BR56AF.tmp
            • Size 24KB
            • SHA256 e69a9d06f2c17cc021ebf9b62ca110548facdc147b67dea4846e09865043d2d9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BR56B0.tmp

            • Path C:\Users\Admin\AppData\Local\Temp\BRL00000978\BR56B0.tmp
            • Size 24KB
            • SHA256 27ea1b57a3024aec4a03188e80fdb2aa301fa5179c19be9c8b0dfc2aac73a114
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BR56C0.tmp

            • Path C:\Users\Admin\AppData\Local\Temp\BRL00000978\BR56C0.tmp
            • Size 100KB
            • SHA256 c71a16b1056e522cd0365449448116d06f37a3273d77694d170340064511dd25
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BR56C1.tmp

            • Path C:\Users\Admin\AppData\Local\Temp\BRL00000978\BR56C1.tmp
            • Size 56KB
            • SHA256 59182f092b59a3005ada6b2f2855c7e860e53e8adf6e41cd8cd515578ae7815a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            autorun.dat

            • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\autorun.dat
            • Size 20B
            • SHA256 fdd73c084217febebae634df8725072ffac238bbc6b1c6d88102f933e0a62ee1
            • MD5 SHA1 SHA512

            autorun.dat

            • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\autorun.dat
            • Size 25B
            • SHA256 cb815e02ff9b34ff0793e48e7bed1c26fa835e472cc5bd918fb3865bca740132
            • MD5 SHA1 SHA512

            forge.ico

            • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\forge.ico
            • Size 352KB
            • SHA256 f1f88d6c92134137fc481a883777bb4084846344f8c8db0872fbf07e1f22280f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            forge150.msi

            • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\forge150.msi
            • Size 3.1MB
            • SHA256 1f187491d4751b7ecadb13664ce9871a84a45ece17dbb01067529219f5082f09
            • MD5 SHA1 SHA512 SSDEEP TLSH

            forge150.udat

            • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\forge150.udat
            • Size 604KB
            • SHA256 883986d00df7669a1d573a76317f036521232b0ad80a1b5f9cefbbda788f8932
            • MD5 SHA1 SHA512 SSDEEP TLSH

            inst_banner.bmp

            • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\inst_banner.bmp
            • Size 210KB
            • SHA256 afc7e7fd4d8d9f6432747a9a2b80d214df0eb96b33586151c16f5f15bb1224c8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            inst_banner.bmp

            • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\inst_banner.bmp
            • Size 210KB
            • SHA256 7fd8e12c0b4cde6daac2ed33ee70a534765d82d2668fc9c5e3e95b55296989b9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            redist.msi

            • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\redist.msi
            • Size 30.4MB
            • SHA256 bbc2a0af193e59636c346eb6b1d284761e5a921a2b6d48c94afc420a062c4afb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            request.ini

            • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\request.ini
            • Size 151B
            • SHA256 83b31db9d0fb7204373e94e64de5a0442bc951e8071ede45bbe3b548977adeb6
            • MD5 SHA1 SHA512 TLSH

            sfnrpack.ico

            • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\sfnrpack.ico
            • Size 1KB
            • SHA256 168868b556bbccb513a69733815e2b49a034fb52383bba1b465e3b481ef944cb
            • MD5 SHA1 SHA512 TLSH

            sonyinstall_x64.dll

            • Path C:\Users\Admin\AppData\Local\Temp\SonyInstall_1\sonyinstall_x64.dll
            • Size 3.1MB
            • SHA256 1ef7e325741ba8498b3f12bdef1af314d6b090c781061e217f04c57d915e69c0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            CPleaseWait.ini

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\Bitmaps\mxgui.4.0\CPleaseWait.ini
            • Size 2KB
            • SHA256 2a4c025203881c60934ff7de148d342ad5213335c321749cfe603c0ee91cf5c2
            • MD5 SHA1 SHA512 TLSH

            ProgressDialogTemplates.ini

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\Bitmaps\mxgui.4.0\ProgressDialogTemplates.ini
            • Size 1KB
            • SHA256 c60d3542f97ee43f99e006b34d444b25444c257318e37b1ff55764309d2a317a
            • MD5 SHA1 SHA512 TLSH

            ProgressDialogTemplates.png

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\Bitmaps\mxgui.4.0\ProgressDialogTemplates.png
            • Size 38KB
            • SHA256 9cf7ce3d45c97311e6a400413c61befccf9bf6e9820d5886414829d1d2f2ca86
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Install.cfg

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\Install.cfg
            • Size 159B
            • SHA256 a55dc9e202f224c7f082d194c4ca830bf362206b6655e05586560146206ed9df
            • MD5 SHA1 SHA512 TLSH

            MFL_rel_u_vc12.dll

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\MFL_rel_u_vc12.dll
            • Size 2.1MB
            • SHA256 4e3193def3813423a8fad0083fb51a6921ac11784188b20a445d6877769e1ddb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MxDownloadManager-en_us.dll

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\MxDownloadManager-en_us.dll
            • Size 140KB
            • SHA256 1a8af5fd6295fcc9d1b187c7693bb516246d081db643bdf935c1cf0f98c2a0f7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MxDownloadManager.exe

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\MxDownloadManager.exe
            • Size 4.4MB
            • SHA256 c7b4433d6d1e6d78d6bf1957d8a534f8c143948723b1e080a4d2336c7a7cdb82
            • MD5 SHA1 SHA512 SSDEEP TLSH

            PlayRIpl.dll

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\PlayRIpl.dll
            • Size 20KB
            • SHA256 3db5f0d218be84cd4adfe2699f21d3114a9e430f69d065fb9081c08f5c11ddbe
            • MD5 SHA1 SHA512 SSDEEP TLSH

            PlayRIplPX.dll

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\PlayRIplPX.dll
            • Size 624KB
            • SHA256 caf460990add3bdf6e8e836535ff33016787f6020232e77505b37092460213d1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SetupInfo.ini

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\SetupInfo.ini
            • Size 3KB
            • SHA256 e846395d1be9531bad091434ad4e8d50d7c1322dad5ed0eb8d4ee0380a63eae3
            • MD5 SHA1 SHA512 TLSH

            SetupValues.dat

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\SetupValues.dat
            • Size 25B
            • SHA256 34619f41d3723c983461cbf1db1790908783880f9aa15f709354cf28f4ef623d
            • MD5 SHA1 SHA512

            VistaCooperation_rel_u_vc12.dll

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\VistaCooperation_rel_u_vc12.dll
            • Size 1.7MB
            • SHA256 735947827c0df2a9e7424beaef1c191d649a48aec6fb5e8800348f4cb945d284
            • MD5 SHA1 SHA512 SSDEEP TLSH

            CMxDownloadManagerDlg.ini

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\bitmaps\mxgui.4.0\CMxDownloadManagerDlg.ini
            • Size 7KB
            • SHA256 7bce2891a106b166192d4586a1a581456d9bad39400eb29ebe16de49dcd71329
            • MD5 SHA1 SHA512 SSDEEP TLSH

            CMxDownloadManagerDlg_1.ini

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\bitmaps\mxgui.4.0\CMxDownloadManagerDlg_1.ini
            • Size 7KB
            • SHA256 22120a84dce5c44a977f5ce229d175521f26117bbdbb4ecf0ea0e70fb5de5338
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Logo.png

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\bitmaps\mxgui.4.0\Logo.png
            • Size 4KB
            • SHA256 63a0002efbbb5698778ca16e61cd47654450614423bbd75d20f3f6e2bc3ac8ad
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Promo.png

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\bitmaps\mxgui.4.0\Promo.png
            • Size 147KB
            • SHA256 a6d5125aa3bedaf5903c6e9afb335dabf77ca3ddc87f0e2fb9d18da0ad0e6715
            • MD5 SHA1 SHA512 SSDEEP TLSH

            controlTemplates.ini

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\bitmaps\mxgui.4.0\controlTemplates.ini
            • Size 3KB
            • SHA256 ba50c265de5e05f6671bbd300689671ba8d18e04f047bc6b53ca21749a05b8ac
            • MD5 SHA1 SHA512 TLSH

            generalTemplates.ini

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\bitmaps\mxgui.4.0\generalTemplates.ini
            • Size 321B
            • SHA256 1ba202395050ff1d2415eb23b5615611e22f0fa6c0be0828c8220ced49a06aab
            • MD5 SHA1 SHA512 TLSH

            dm.xml

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\dm.xml
            • Size 1KB
            • SHA256 b9211d7e370e247a50495fa376cb3b9ad9d9bfd12f7722f105bdf221d66df880
            • MD5 SHA1 SHA512 TLSH

            ijl20.dll

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\ijl20.dll
            • Size 2.3MB
            • SHA256 ef8c2c043cdcc960a0082076eaa21542807ad47c895fabf5ade33f843ac0de13
            • MD5 SHA1 SHA512 SSDEEP TLSH

            installed.xml

            • Path C:\Users\Admin\AppData\Local\Temp\mgx24hup38s\installed.xml
            • Size 35B
            • SHA256 8f49354f824579622074cc96a4e85f0e0e003f17367b6426cf3c0226a7c46fd6
            • MD5 SHA1 SHA512

            Update_Notifier_en-II.mst

            • Path C:\Users\Admin\AppData\Local\Temp\mgxz5jd43zo\product\Update_Notifier_en-II.mst
            • Size 60KB
            • SHA256 69cb9d939186d52b658fac24fec691e2acce60fc8bc494c6e89a4340ac052c96
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Update_Notifier_fr-FR.mst

            • Path C:\Users\Admin\AppData\Local\Temp\mgxz5jd43zo\product\Update_Notifier_fr-FR.mst
            • Size 64KB
            • SHA256 00cb3e121509952facc18a6dd96935a7a63c545ae4b03925ada394b0fbddd3ba
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Update_Notifier_setup.exe

            • Path C:\Users\Admin\AppData\Local\Temp\mgxz5jd43zo\product\Update_Notifier_setup.exe
            • Size 4.6MB
            • SHA256 3f54b75def3caf817e18c11df2a4040f50c3011c4a8c14131911c68d357b4433
            • MD5 SHA1 SHA512 SSDEEP TLSH

            _e8e4psc.cab

            • Path C:\Users\Admin\AppData\Local\Temp\mgxz5jd43zo\product\_e8e4psc.cab
            • Size 36B
            • SHA256 a32e0a83001d2c5d41649063217923dac167809cab50ec5784078e41c9ec0f0f
            • MD5 SHA1 SHA512

            UpdateService.ini

            • Path C:\Users\Admin\AppData\Roaming\MAGIX\UpdateService\UpdateService.ini
            • Size 217B
            • SHA256 4d24d37150058fb8516d72e902ba47e6a7b9d94e729557902c2bc77053a3d600
            • MD5 SHA1 SHA512 TLSH

            0f5007522459c86e95ffcc62f32308f1_da7bcb70-f6b8-4f17-ad08-92d239111169

            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2584227348-426884507-1572084426-1000\0f5007522459c86e95ffcc62f32308f1_da7bcb70-f6b8-4f17-ad08-92d239111169
            • Size 1KB
            • SHA256 61c7232821ad966c53b4e7e153a938d4d8cb4300ec4de97f33458714ab1f0a26
            • MD5 SHA1 SHA512 TLSH

            0f5007522459c86e95ffcc62f32308f1_da7bcb70-f6b8-4f17-ad08-92d239111169

            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2584227348-426884507-1572084426-1000\0f5007522459c86e95ffcc62f32308f1_da7bcb70-f6b8-4f17-ad08-92d239111169
            • Size 1KB
            • SHA256 3994ca48d910fbfc7b47ea6cb67f9ec60a22d6d6819d4908f38f673c7ccf7c10
            • MD5 SHA1 SHA512 TLSH

            0f5007522459c86e95ffcc62f32308f1_da7bcb70-f6b8-4f17-ad08-92d239111169

            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2584227348-426884507-1572084426-1000\0f5007522459c86e95ffcc62f32308f1_da7bcb70-f6b8-4f17-ad08-92d239111169
            • Size 1KB
            • SHA256 369a10bf45025548d83c1445b2f65b90681b0930c7f67ffd32cc21731f0f942c
            • MD5 SHA1 SHA512 TLSH

            msvcrt_redist_03102026-064447.log

            • Path C:\Users\Admin\AppData\Roaming\Sony\msvcrt_redist_03102026-064447.log
            • Size 2B
            • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
            • MD5 SHA1 SHA512

            Acoustic_Mirror_Impulse_Files_180323_08-24_1_0_0_0.exe

            • Path C:\Users\Admin\Documents\MAGIX Downloads\Installationsmanager\Acoustic_Mirror_Impulse_Files_180323_08-24_1_0_0_0.exe
            • Size 48.1MB
            • SHA256 96e3701f4083aefa8f11f7ce6b564e3670cec0d759db148d28c2c21db4ec3624
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Noise_Reduction_Pack_2.0.0.1318_INT_x64_180710_10-25_2_0_0_1318.exe

            • Path C:\Users\Admin\Documents\MAGIX Downloads\Installationsmanager\Noise_Reduction_Pack_2.0.0.1318_INT_x64_180710_10-25_2_0_0_1318.exe
            • Size 22.1MB
            • SHA256 15606cac436379fff17bc390a6420130e2d81d1d555df656a77856269dbc6f7e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Update_Notifier_3.0.0.74_INT_240424_12-00_C8380445_3_0_0_74.exe

            • Path C:\Users\Admin\Documents\MAGIX Downloads\Installationsmanager\Update_Notifier_3.0.0.74_INT_240424_12-00_C8380445_3_0_0_74.exe
            • Size 41.8MB
            • SHA256 e1e5c810d8a347a6015eb2a35b54671b5d873d0996ec94903453a43d5aac87dd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            F_CENTRAL_mfc120_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C

            • Path C:\Windows\Installer\$PatchCache$\Managed\03D56ECBA1488E11484604D8C56C274F\1.0.0\F_CENTRAL_mfc120_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C
            • Size 5.3MB
            • SHA256 556442cbd59faab1bc639f0a8c129f2e4a505e9fbbfcd0f279d53810fa669f8a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            F_CENTRAL_mfc120chs_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C

            • Path C:\Windows\Installer\$PatchCache$\Managed\03D56ECBA1488E11484604D8C56C274F\1.0.0\F_CENTRAL_mfc120chs_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C
            • Size 45KB
            • SHA256 75bc225d5af5e8f267ee940a722aea1696a969fae777994881d3ace490d97bf0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            F_CENTRAL_mfc120cht_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C

            • Path C:\Windows\Installer\$PatchCache$\Managed\03D56ECBA1488E11484604D8C56C274F\1.0.0\F_CENTRAL_mfc120cht_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C
            • Size 45KB
            • SHA256 829871005a8bb56838f1ee22d786070e87bdccf9204a07612d6505004d29a5f0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            F_CENTRAL_mfc120deu_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C

            • Path C:\Windows\Installer\$PatchCache$\Managed\03D56ECBA1488E11484604D8C56C274F\1.0.0\F_CENTRAL_mfc120deu_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C
            • Size 73KB
            • SHA256 9cc7ee7335777aa1eb393eab8bfe5250c0f2fed10ac3a7c58ee3c4ef9662f6d8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            F_CENTRAL_mfc120enu_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C

            • Path C:\Windows\Installer\$PatchCache$\Managed\03D56ECBA1488E11484604D8C56C274F\1.0.0\F_CENTRAL_mfc120enu_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C
            • Size 63KB
            • SHA256 87554af8b85815f5aba84933de6809d76e1c1bfead70b2fdc7439e5a6b5302eb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            F_CENTRAL_mfc120esn_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C

            • Path C:\Windows\Installer\$PatchCache$\Managed\03D56ECBA1488E11484604D8C56C274F\1.0.0\F_CENTRAL_mfc120esn_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C
            • Size 72KB
            • SHA256 09f4506791b162cb14039fa3c656358e55089995534626f8e7fac0b4c66c3bbd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            F_CENTRAL_mfc120fra_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C

            • Path C:\Windows\Installer\$PatchCache$\Managed\03D56ECBA1488E11484604D8C56C274F\1.0.0\F_CENTRAL_mfc120fra_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C
            • Size 73KB
            • SHA256 0fcf915499d7a0df41d115e3d578310b6f5cf1c17956c08c3a42340f08b87646
            • MD5 SHA1 SHA512 SSDEEP TLSH

            F_CENTRAL_mfc120ita_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C

            • Path C:\Windows\Installer\$PatchCache$\Managed\03D56ECBA1488E11484604D8C56C274F\1.0.0\F_CENTRAL_mfc120ita_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C
            • Size 71KB
            • SHA256 6884b0886e3001d08a38a9c4cec196a6a8aec348bb24cd4fd91a05f120103341
            • MD5 SHA1 SHA512 SSDEEP TLSH

            F_CENTRAL_mfc120jpn_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C

            • Path C:\Windows\Installer\$PatchCache$\Managed\03D56ECBA1488E11484604D8C56C274F\1.0.0\F_CENTRAL_mfc120jpn_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C
            • Size 52KB
            • SHA256 57dff553b1608ea493f69697178c378e74d68b472b14d52a9eb1ad627dfbd54d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            F_CENTRAL_mfc120kor_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C

            • Path C:\Windows\Installer\$PatchCache$\Managed\03D56ECBA1488E11484604D8C56C274F\1.0.0\F_CENTRAL_mfc120kor_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C
            • Size 52KB
            • SHA256 ded612342b84998c1d8681746c81f970f15b31db4928118c743b9d24510b820a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            F_CENTRAL_mfc120rus_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C

            • Path C:\Windows\Installer\$PatchCache$\Managed\03D56ECBA1488E11484604D8C56C274F\1.0.0\F_CENTRAL_mfc120rus_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C
            • Size 69KB
            • SHA256 1ad8f734737afb18ff78d211351ffbe422196c5f6591407e53082e0f68a89ffc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            F_CENTRAL_mfc120u_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C

            • Path C:\Windows\Installer\$PatchCache$\Managed\03D56ECBA1488E11484604D8C56C274F\1.0.0\F_CENTRAL_mfc120u_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C
            • Size 5.4MB
            • SHA256 38437948c1bab1827963c08de7c82fbfa4fd3020f8b8c1ad02588878db4b29f7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            F_CENTRAL_mfcm120_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C

            • Path C:\Windows\Installer\$PatchCache$\Managed\03D56ECBA1488E11484604D8C56C274F\1.0.0\F_CENTRAL_mfcm120_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C
            • Size 89KB
            • SHA256 88c468e87ed00fc08288e9fb673c6a82aeb37b935c6602b8444f99f0659fcc98
            • MD5 SHA1 SHA512 SSDEEP TLSH

            F_CENTRAL_mfcm120u_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C

            • Path C:\Windows\Installer\$PatchCache$\Managed\03D56ECBA1488E11484604D8C56C274F\1.0.0\F_CENTRAL_mfcm120u_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C
            • Size 89KB
            • SHA256 dc62ac8c36075e17b1cf194643ddfee3e897e8d38c8aea6b13a0cfa83bd8b806
            • MD5 SHA1 SHA512 SSDEEP TLSH

            F_CENTRAL_msvcp120_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C

            • Path C:\Windows\Installer\$PatchCache$\Managed\03D56ECBA1488E11484604D8C56C274F\1.0.0\F_CENTRAL_msvcp120_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C
            • Size 644KB
            • SHA256 2abf0aab5a3c5ae9424b64e9d19d9d6d4aebc67814d7e92e4927b9798fef2848
            • MD5 SHA1 SHA512 SSDEEP TLSH

            F_CENTRAL_msvcr120_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C

            • Path C:\Windows\Installer\$PatchCache$\Managed\03D56ECBA1488E11484604D8C56C274F\1.0.0\F_CENTRAL_msvcr120_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C
            • Size 940KB
            • SHA256 ad32240bb1de55c3f5fcac8789f583a17057f9d14914c538c2a7a5ad346b341c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            F_CENTRAL_vcamp120_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C

            • Path C:\Windows\Installer\$PatchCache$\Managed\03D56ECBA1488E11484604D8C56C274F\1.0.0\F_CENTRAL_vcamp120_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C
            • Size 470KB
            • SHA256 ef3f1a0fa0aba642a4735e99814e7a218fb1d43e0cddc90ce63c62486bf5d384
            • MD5 SHA1 SHA512 SSDEEP TLSH

            F_CENTRAL_vccorlib120_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C

            • Path C:\Windows\Installer\$PatchCache$\Managed\03D56ECBA1488E11484604D8C56C274F\1.0.0\F_CENTRAL_vccorlib120_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C
            • Size 348KB
            • SHA256 602add77cbd807d02306de1d0179cb71a908eecb11677116fc206a7e714ab6d6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            F_CENTRAL_vcomp120_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C

            • Path C:\Windows\Installer\$PatchCache$\Managed\03D56ECBA1488E11484604D8C56C274F\1.0.0\F_CENTRAL_vcomp120_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C
            • Size 134KB
            • SHA256 ae710d6670d922fbbf0adcbec743fe75e572cf21cf7579faf5f347a606c37cbb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MSIAC2D.tmp

            • Path C:\Windows\Installer\MSIAC2D.tmp
            • Size 1.7MB
            • SHA256 9bf8943b9a1952dad0b5eb95ca0082958e903adedc3c780be272552bb1b4032c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MSIBB83.tmp

            • Path C:\Windows\Installer\MSIBB83.tmp
            • Size 123KB
            • SHA256 c03b47bcbe6c28cfa612950814ca383dddd0d4a527cc17f1750b8385d4917aad
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MSID9BB.tmp

            • Path C:\Windows\Installer\MSID9BB.tmp
            • Size 1.7MB
            • SHA256 4dae0f15bd7fcc89bb598eab6126aa1fd5fe4b716d499e69023d28af100e6f7f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MSIE072.tmp

            • Path C:\Windows\Installer\MSIE072.tmp
            • Size 191KB
            • SHA256 edebe2078afdc0947bbeac308b7c25270d7cc110929c9b2bc30297fd9d1d6037
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MSIE403.tmp

            • Path C:\Windows\Installer\MSIE403.tmp
            • Size 111KB
            • SHA256 dce819d37623938d3db90c8d14d02edf8a9e553b2ccbaf3b7988d00f5e3f1b4f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            e5b66ef.msi

            • Path C:\Windows\Installer\e5b66ef.msi
            • Size 7.1MB
            • SHA256 76103782cc939076848ffed6728ebbf1bd34f29c41438ebf7f8d50922e141585
            • MD5 SHA1 SHA512 SSDEEP TLSH

            e5b66f9.msi

            • Path C:\Windows\Installer\e5b66f9.msi
            • Size 2.5MB
            • SHA256 ba3756f1d29dfb0b83f345231b5aa35a83b8ef64ee3f42f57bbd7e318f85a4ba
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ProgramIcon.exe

            • Path C:\Windows\Installer\{A4532592-9CE3-4CFA-A06D-EEAD49A50028}\ProgramIcon.exe
            • Size 352KB
            • SHA256 9be0d330f5cd3687710a74bada691fbbd3ccb4345d9021c74bb8b4b7a98bea38
            • MD5 SHA1 SHA512 SSDEEP TLSH

            DLLDEV32i.dll

            • Path C:\Windows\SysWOW64\DLLDEV32i.dll
            • Size 117KB
            • SHA256 a62c28a78fb4089a8ce0e498218a788524e051d2da5bfedc902d6a6b9672213e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            msvcp71.dll

            • Path C:\Windows\SysWOW64\msvcp71.dll
            • Size 488KB
            • SHA256 df96156f6a548fd6fe5672918de5ae4509d3c810a57bffd2a91de45a3ed5b23b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            msvcr70.dll

            • Path C:\Windows\SysWOW64\msvcr70.dll
            • Size 336KB
            • SHA256 f68e4cdbc879423ea47d763a6768567f5f8063924f13a74239750c13fa8d168a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            msvcr71.dll

            • Path C:\Windows\SysWOW64\msvcr71.dll
            • Size 340KB
            • SHA256 8094af5ee310714caebccaeee7769ffb08048503ba478b879edfef5f1a24fefe
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Cleanup.xml

            • Path C:\Windows\System32\Sysprep\ActionFiles\Cleanup.xml
            • Size 12KB
            • SHA256 7f56c3cc359aa2e0a23fe8bd849a5b5daec3917d62ecd883ea0bc7f741807cf7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Generalize.xml

            • Path C:\Windows\System32\Sysprep\ActionFiles\Generalize.xml
            • Size 32KB
            • SHA256 ff55642502218ef2577dd4882bf85893e617ce2c8778375da403a7384ac29732
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Respecialize.xml

            • Path C:\Windows\System32\Sysprep\ActionFiles\Respecialize.xml
            • Size 416B
            • SHA256 1ae7609bea7ad9dbb3dafb75c02b6db17d292b328a31efde93c5982b1b31c4dd
            • MD5 SHA1 SHA512 TLSH

            Specialize.xml

            • Path C:\Windows\System32\Sysprep\ActionFiles\Specialize.xml
            • Size 19KB
            • SHA256 8a534ebd54a7e193df2e605c493ebdd902652e489f08ed7fdf1e6b2b2590d9f8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2.manifest

            • Path C:\Windows\WinSxS\InstallTemp\20261003184455203.0\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2.manifest
            • Size 856B
            • SHA256 e009373ce526a0e5856e0899a157f70d9d9e75304c70ae6bc19acbd9de4327d0
            • MD5 SHA1 SHA512 TLSH

            9.0.30729.4148.cat

            • Path C:\Windows\WinSxS\InstallTemp\20261003184455234.0\9.0.30729.4148.cat
            • Size 7KB
            • SHA256 7bc20aa67b3c61ba8ab16c42c5dd3d376df31c25e30a54cfb802b21c667d6040
            • MD5 SHA1 SHA512 SSDEEP TLSH

            9.0.30729.4148.policy

            • Path C:\Windows\WinSxS\InstallTemp\20261003184455234.0\9.0.30729.4148.policy
            • Size 764B
            • SHA256 5a9a9766ece32c4fd75cf523b42beff4ff9a672311063d3af01b4af71f568384
            • MD5 SHA1 SHA512 TLSH

            msvcp90.dll

            • Path C:\Windows\WinSxS\InstallTemp\20261003184455234.1\msvcp90.dll
            • Size 556KB
            • SHA256 4608beedd8cf9c3fc5ab03716b4ab6f01c7b7d65a7c072af04f514ffb0e02d01
            • MD5 SHA1 SHA512 SSDEEP TLSH

            msvcr90.dll

            • Path C:\Windows\WinSxS\InstallTemp\20261003184455234.1\msvcr90.dll
            • Size 637KB
            • SHA256 e16bc9b66642151de612ee045c2810ca6146975015bd9679a354567f56da2099
            • MD5 SHA1 SHA512 SSDEEP TLSH

            x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e.cat

            • Path C:\Windows\WinSxS\InstallTemp\20261003184455234.1\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e.cat
            • Size 7KB
            • SHA256 2717a5a51cfa1f0371b9fbb344d79554b0efa3a6ff94da3dc6664f7af13c5048
            • MD5 SHA1 SHA512 SSDEEP TLSH

            x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_f0ccd4aa.manifest

            • Path C:\Windows\WinSxS\InstallTemp\20261003184455297.0\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_f0ccd4aa.manifest
            • Size 861B
            • SHA256 19f63f32922553d62a08d17f41a75ec07d687c0bdaf8aa4ceff6d9725b5b6d14
            • MD5 SHA1 SHA512 TLSH

            0da233ea5e53dd013800000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\0da233ea5e53dd013700000070163016\0da233ea5e53dd013800000070163016_manifest
            • Size 863B
            • SHA256 5bf4413fd9a2c00f4ae2bcf47cabf663869721b355df91ee9eecef11dee406c5
            • MD5 SHA1 SHA512 TLSH

            f80336ea5e53dd013b00000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\0da233ea5e53dd013700000070163016\f80336ea5e53dd013b00000070163016_catalog
            • Size 7KB
            • SHA256 c47e99b3db76c6ae9961d9cf972c8fbcc33c469a72433e20cc06dbb191f92c46
            • MD5 SHA1 SHA512 SSDEEP TLSH

            0da233ea5e53dd013a00000070163016_vcomp90.dll

            • Path C:\Windows\WinSxS\Temp\InFlight\0da233ea5e53dd013900000070163016\0da233ea5e53dd013a00000070163016_vcomp90.dll
            • Size 55KB
            • SHA256 2872a57e3e06b40ed42ccd25f4c6a8a69358752ba16cb5cf164d1d3cf8bd1b47
            • MD5 SHA1 SHA512 SSDEEP TLSH

            111649ea5e53dd013e00000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\111649ea5e53dd013d00000070163016\111649ea5e53dd013e00000070163016_manifest
            • Size 774B
            • SHA256 0826a9cea106b6f2b57aeb6666294985e33315993e81aede3b0c22195c22c3c7
            • MD5 SHA1 SHA512 TLSH

            111649ea5e53dd013f00000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\111649ea5e53dd013d00000070163016\111649ea5e53dd013f00000070163016_catalog
            • Size 7KB
            • SHA256 c20d494f9646a2e45ed6fee271b5c0ce1c0c763eecd222d491ad9494377d6468
            • MD5 SHA1 SHA512 SSDEEP TLSH

            1d64f5e85e53dd010400000070163016_atl90.dll

            • Path C:\Windows\WinSxS\Temp\InFlight\1d64f5e85e53dd010300000070163016\1d64f5e85e53dd010400000070163016_atl90.dll
            • Size 155KB
            • SHA256 7cc6c299a20b2de62b3844417f085fce7fea32cc006a10658b3e4815b536329f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            1e4fd6e95e53dd012200000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\1e4fd6e95e53dd012100000070163016\1e4fd6e95e53dd012200000070163016_manifest
            • Size 858B
            • SHA256 08006dc1db2b6e584fd795a3ae1ea2044040b8f2a669ccf8cb30d1c3eabc8411
            • MD5 SHA1 SHA512 TLSH

            9b13dbe95e53dd012500000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\1e4fd6e95e53dd012100000070163016\9b13dbe95e53dd012500000070163016_catalog
            • Size 7KB
            • SHA256 f03cc99106931aaad2354d0ebdf8287ab08759a61a1050977fb69f1c941ad9da
            • MD5 SHA1 SHA512 SSDEEP TLSH

            20d88bea5e53dd014e00000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\20d88bea5e53dd014d00000070163016\20d88bea5e53dd014e00000070163016_manifest
            • Size 808B
            • SHA256 fad4f1550f61cbc557b0844a5b5996508fbcef0156476ea798816780d41583cb
            • MD5 SHA1 SHA512 TLSH

            20d88bea5e53dd014f00000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\20d88bea5e53dd014d00000070163016\20d88bea5e53dd014f00000070163016_catalog
            • Size 7KB
            • SHA256 f68eaaca88385c49ca81b7f7cbcdbd19b29528fa33005b6844dae70b0a190a60
            • MD5 SHA1 SHA512 SSDEEP TLSH

            22079eeb5e53dd019200000070163016_msvcr80.dll

            • Path C:\Windows\WinSxS\Temp\InFlight\22079eeb5e53dd019100000070163016\22079eeb5e53dd019200000070163016_msvcr80.dll
            • Size 617KB
            • SHA256 9382aaed2db19cd75a70e38964f06c63f19f63c9dfb5a33b0c2d445bb41b6e46
            • MD5 SHA1 SHA512 SSDEEP TLSH

            532ea5eb5e53dd019400000070163016_msvcm80.dll

            • Path C:\Windows\WinSxS\Temp\InFlight\22079eeb5e53dd019100000070163016\532ea5eb5e53dd019400000070163016_msvcm80.dll
            • Size 468KB
            • SHA256 e645846ffd536957f51fbe223e1dee0f834a5fc7043d956a71e6933c1ce5ad9e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            9c68a0eb5e53dd019300000070163016_msvcp80.dll

            • Path C:\Windows\WinSxS\Temp\InFlight\22079eeb5e53dd019100000070163016\9c68a0eb5e53dd019300000070163016_msvcp80.dll
            • Size 541KB
            • SHA256 384aaee2a103f7ed5c3ba59d4fb2ba22313aaa1fbc5d232c29dbc14d38e0b528
            • MD5 SHA1 SHA512 SSDEEP TLSH

            1d64f5e85e53dd010500000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\2402f3e85e53dd010100000070163016\1d64f5e85e53dd010500000070163016_catalog
            • Size 7KB
            • SHA256 a3d5bf514e20b1d8dd775db59eadb6968a1a3d05065362bc875e688226446b83
            • MD5 SHA1 SHA512 SSDEEP TLSH

            2985f9ea5e53dd016400000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\2985f9ea5e53dd016300000070163016\2985f9ea5e53dd016400000070163016_manifest
            • Size 471B
            • SHA256 c8fa2787f91a84994b2963acd6deb4b19eaa580203d29a2387dc6174f9711e01
            • MD5 SHA1 SHA512 TLSH

            2985f9ea5e53dd016700000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\2985f9ea5e53dd016300000070163016\2985f9ea5e53dd016700000070163016_catalog
            • Size 7KB
            • SHA256 904745a22eebba6e3ab6ea42558fce432c31d3f75aa005d4f1a426d482d7892d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            2985f9ea5e53dd016600000070163016_vcomp.dll

            • Path C:\Windows\WinSxS\Temp\InFlight\2985f9ea5e53dd016500000070163016\2985f9ea5e53dd016600000070163016_vcomp.dll
            • Size 85KB
            • SHA256 777d0d54efb3d856c55087180b4d582c9307ea9d654009ac506a7a2dc9738ad1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            33b1d8e95e53dd012400000070163016_atl90.dll

            • Path C:\Windows\WinSxS\Temp\InFlight\33b1d8e95e53dd012300000070163016\33b1d8e95e53dd012400000070163016_atl90.dll
            • Size 172KB
            • SHA256 2b508eea1f59be0e627bb87921f88d6c7277609dccefcd3618f83503cf871761
            • MD5 SHA1 SHA512 SSDEEP TLSH

            36e51aeb5e53dd017000000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\36e51aeb5e53dd016f00000070163016\36e51aeb5e53dd017000000070163016_manifest
            • Size 814B
            • SHA256 0468c781dcccd61d94c1cfbade9c43b0b56ea781166f2456eef00d0601370a14
            • MD5 SHA1 SHA512 TLSH

            36e51aeb5e53dd017100000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\36e51aeb5e53dd016f00000070163016\36e51aeb5e53dd017100000070163016_catalog
            • Size 7KB
            • SHA256 ed53519018f32a731447254c31eabc86b98dd7a95d19a39d8ab6e11d55f6fc88
            • MD5 SHA1 SHA512 SSDEEP TLSH

            3710e4ea5e53dd016000000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\3710e4ea5e53dd015f00000070163016\3710e4ea5e53dd016000000070163016_manifest
            • Size 808B
            • SHA256 558ed0b381099c7f300ed8ddc16e6f184984c1aee52c96ef1fcfaef138673c78
            • MD5 SHA1 SHA512 TLSH

            3710e4ea5e53dd016100000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\3710e4ea5e53dd015f00000070163016\3710e4ea5e53dd016100000070163016_catalog
            • Size 7KB
            • SHA256 2fb5151347a73fb9282c03b4d919f15c91167938cb8890cf57f41aaf3e4c4bd5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            3866deeb5e53dd019c00000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\3866deeb5e53dd019b00000070163016\3866deeb5e53dd019c00000070163016_manifest
            • Size 469B
            • SHA256 8778fc802a0fb4a199a7ff3e462c8b5ae57688fc8e027f960e01f07c052a0095
            • MD5 SHA1 SHA512 TLSH

            80cae0eb5e53dd019f00000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\3866deeb5e53dd019b00000070163016\80cae0eb5e53dd019f00000070163016_catalog
            • Size 7KB
            • SHA256 d3e19e02e9e3366e40372f11e7e0cd545cc64bca5c2d750ac5529b9948b725cb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            3866deeb5e53dd019e00000070163016_vcomp.dll

            • Path C:\Windows\WinSxS\Temp\InFlight\3866deeb5e53dd019d00000070163016\3866deeb5e53dd019e00000070163016_vcomp.dll
            • Size 64KB
            • SHA256 3bb2505986c41c1b27b713baddd2b32cdb54e0cc693aeb4d33c0099eb107ae0c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            02a9bde95e53dd011b00000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\4246bbe95e53dd011700000070163016\02a9bde95e53dd011b00000070163016_catalog
            • Size 7KB
            • SHA256 c38f6cfc3f6aa11957113683c1bf7c3f44816ba359fe89eedd4ee92da1b3dca9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            4246bbe95e53dd011a00000070163016_vcomp90.dll

            • Path C:\Windows\WinSxS\Temp\InFlight\4246bbe95e53dd011900000070163016\4246bbe95e53dd011a00000070163016_vcomp90.dll
            • Size 49KB
            • SHA256 fa473512b462d89b1829f3222362ac02757538f252967d16fda485ffa92ccf74
            • MD5 SHA1 SHA512 SSDEEP TLSH

            4b489ce95e53dd011400000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\4b489ce95e53dd011300000070163016\4b489ce95e53dd011400000070163016_manifest
            • Size 764B
            • SHA256 7ea6add145daf72ccbfd2140c32da4718039b2b683ccb02b47c8db142203e461
            • MD5 SHA1 SHA512 TLSH

            4b489ce95e53dd011500000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\4b489ce95e53dd011300000070163016\4b489ce95e53dd011500000070163016_catalog
            • Size 7KB
            • SHA256 44d63039dadfde315555a2e4773153ab795ab46f254f7a21a8b3b6a29f71ee20
            • MD5 SHA1 SHA512 SSDEEP TLSH

            5960b4ea5e53dd015800000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\5960b4ea5e53dd015700000070163016\5960b4ea5e53dd015800000070163016_manifest
            • Size 1KB
            • SHA256 e2aa9af404f792d0be6530a043a6c18bea15d764d36a030a9cee768a3ebbdce8
            • MD5 SHA1 SHA512 TLSH

            704cc0ea5e53dd015d00000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\5960b4ea5e53dd015700000070163016\704cc0ea5e53dd015d00000070163016_catalog
            • Size 7KB
            • SHA256 1ee7aadd217e7b87fd03fdce7fc2c8fce3848daa7e6d1e914e74f89e6924983c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            5960b4ea5e53dd015a00000070163016_msvcr80.dll

            • Path C:\Windows\WinSxS\Temp\InFlight\5960b4ea5e53dd015900000070163016\5960b4ea5e53dd015a00000070163016_msvcr80.dll
            • Size 783KB
            • SHA256 addd5b2deb07ac43c4e6c6c562c0c7b24948ad72332fede14d7e52b85f320cce
            • MD5 SHA1 SHA512 SSDEEP TLSH

            5aeabdea5e53dd015b00000070163016_msvcp80.dll

            • Path C:\Windows\WinSxS\Temp\InFlight\5960b4ea5e53dd015900000070163016\5aeabdea5e53dd015b00000070163016_msvcp80.dll
            • Size 1.0MB
            • SHA256 8610ff7fedc98f328e7d1042a055d015e0ecef03881018a204ebf9d290210bb7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            5aeabdea5e53dd015c00000070163016_msvcm80.dll

            • Path C:\Windows\WinSxS\Temp\InFlight\5960b4ea5e53dd015900000070163016\5aeabdea5e53dd015c00000070163016_msvcm80.dll
            • Size 503KB
            • SHA256 851b658b07759b41231db62c7a5eb94ecc831f889856d6ea47743010ddbb3317
            • MD5 SHA1 SHA512 SSDEEP TLSH

            6b5c90e95e53dd010c00000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\6b5c90e95e53dd010b00000070163016\6b5c90e95e53dd010c00000070163016_manifest
            • Size 1KB
            • SHA256 03d0776812368478ce60e8160ec3c6938782db1832f5cb53b7842e5840f9dbc5
            • MD5 SHA1 SHA512 TLSH

            6b5c90e95e53dd011000000070163016_msvcm90.dll

            • Path C:\Windows\WinSxS\Temp\InFlight\6b5c90e95e53dd010d00000070163016\6b5c90e95e53dd011000000070163016_msvcm90.dll
            • Size 220KB
            • SHA256 a15eaabbe6c32fba34c1cacd8c0f206c28a69a8b73e619c962d812ae7fa0f844
            • MD5 SHA1 SHA512 SSDEEP TLSH

            76ce64eb5e53dd018600000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\76ce64eb5e53dd018500000070163016\76ce64eb5e53dd018600000070163016_manifest
            • Size 804B
            • SHA256 a97d6be9dc81155a62ba68419a54b9b6cef8999e62f17fc74435a7749430f855
            • MD5 SHA1 SHA512 TLSH

            76ce64eb5e53dd018700000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\76ce64eb5e53dd018500000070163016\76ce64eb5e53dd018700000070163016_catalog
            • Size 7KB
            • SHA256 2c0305f00ea5bbc4b158fbb6ca0978157701db1c7d04505a701b2da4e5ee0d4a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            b66457ea5e53dd014200000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\b66457ea5e53dd014100000070163016\b66457ea5e53dd014200000070163016_manifest
            • Size 468B
            • SHA256 efff42411c3c9d903fa46edd78746b40e06b15b221aa5b038ea9ddc569712bed
            • MD5 SHA1 SHA512 TLSH

            c3c759ea5e53dd014500000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\b66457ea5e53dd014100000070163016\c3c759ea5e53dd014500000070163016_catalog
            • Size 7KB
            • SHA256 f906dbe8b6df2dcfd2aa5f8e58e9ab8ecb4b3be63a9e6fe2dfcf09d80bdd3feb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            b66457ea5e53dd014400000070163016_atl80.dll

            • Path C:\Windows\WinSxS\Temp\InFlight\b66457ea5e53dd014300000070163016\b66457ea5e53dd014400000070163016_atl80.dll
            • Size 111KB
            • SHA256 5460f0413989ae07c1a1d79ead92b606bb64e281f398d143de98fec83f0b9832
            • MD5 SHA1 SHA512 SSDEEP TLSH

            22079eeb5e53dd019000000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\cba49beb5e53dd018f00000070163016\22079eeb5e53dd019000000070163016_manifest
            • Size 1KB
            • SHA256 a50941352cb9d8f7ba6fbf7db5c8af95fb5ab76fc5d60cfd0984e558678908cc
            • MD5 SHA1 SHA512 TLSH

            a991a7eb5e53dd019500000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\cba49beb5e53dd018f00000070163016\a991a7eb5e53dd019500000070163016_catalog
            • Size 7KB
            • SHA256 db75056fb2f0bd417a827e9ff9f96e4a661d67d826329356e7bf55a902a7408a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            d45ecae95e53dd011e00000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\e7d4c8e95e53dd011d00000070163016\d45ecae95e53dd011e00000070163016_manifest
            • Size 770B
            • SHA256 42935f89f488aca0615d5a8a9741c4b8830c36b5c971f5aa05c82df345ceccaa
            • MD5 SHA1 SHA512 TLSH

            d45ecae95e53dd011f00000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\e7d4c8e95e53dd011d00000070163016\d45ecae95e53dd011f00000070163016_catalog
            • Size 7KB
            • SHA256 83d24fe403df20693673c49b94091b577e1cb4fe975d9d79eb2e74fad693a937
            • MD5 SHA1 SHA512 SSDEEP TLSH

            767ceee95e53dd012900000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\f31aece95e53dd012700000070163016\767ceee95e53dd012900000070163016_catalog
            • Size 7KB
            • SHA256 b3f4eeac4798e2a4cd6832f6484b51ad4b55372f4dbc3ec682f8b75a9db96283
            • MD5 SHA1 SHA512 SSDEEP TLSH

            f31aece95e53dd012800000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\f31aece95e53dd012700000070163016\f31aece95e53dd012800000070163016_manifest
            • Size 768B
            • SHA256 aa2339f22c558188c98c920ed665960fc09ad5263527a35712530341c46b3efd
            • MD5 SHA1 SHA512 TLSH

            f4b527ea5e53dd013400000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\f4b527ea5e53dd013300000070163016\f4b527ea5e53dd013400000070163016_manifest
            • Size 768B
            • SHA256 9721c3dc09c96bc34181d847638d4d4b6e82733897f83611a7bed216168f7071
            • MD5 SHA1 SHA512 TLSH

            f4b527ea5e53dd013500000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\f4b527ea5e53dd013300000070163016\f4b527ea5e53dd013500000070163016_catalog
            • Size 7KB
            • SHA256 2cf6d1131db827973501399c85c2a3cb1ac850d5174e5fa003a3189dd7ea0344
            • MD5 SHA1 SHA512 SSDEEP TLSH

            f5453ceb5e53dd017a00000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\f5453ceb5e53dd017900000070163016\f5453ceb5e53dd017a00000070163016_manifest
            • Size 466B
            • SHA256 43e8b1d9f404eb67105ab15282fd01f5bf4cd30f7f0c5d1250d11e9384ae9cc5
            • MD5 SHA1 SHA512 TLSH

            f5453ceb5e53dd017d00000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\f5453ceb5e53dd017900000070163016\f5453ceb5e53dd017d00000070163016_catalog
            • Size 7KB
            • SHA256 813c74c7711815cf656f96f0ce5d9e57a31c3c4f98b607c8425cdbe8d5ccb436
            • MD5 SHA1 SHA512 SSDEEP TLSH

            f5453ceb5e53dd017c00000070163016_atl80.dll

            • Path C:\Windows\WinSxS\Temp\InFlight\f5453ceb5e53dd017b00000070163016\f5453ceb5e53dd017c00000070163016_atl80.dll
            • Size 95KB
            • SHA256 63e1985a37d5993d170373bc28d067c13c1541ca2b63968b82e35eaacd927b49
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fb8b04ec5e53dd01a800000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\fb8b04ec5e53dd01a700000070163016\fb8b04ec5e53dd01a800000070163016_manifest
            • Size 810B
            • SHA256 946ab2900f94eace8a5850d64c5ff45de80a89863093d70c68afc5769798c65b
            • MD5 SHA1 SHA512 TLSH

            fb8b04ec5e53dd01a900000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\fb8b04ec5e53dd01a700000070163016\fb8b04ec5e53dd01a900000070163016_catalog
            • Size 7KB
            • SHA256 9588f2e1edc7f64f7d173987afefc7627ffdfc3484441debe5a25d2310d9d49e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            1c190bea5e53dd013100000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\fb8f01ea5e53dd012b00000070163016\1c190bea5e53dd013100000070163016_catalog
            • Size 7KB
            • SHA256 a6fa5700e66b3092732a37b5a7e1cf965732b6bc3557e90265203f5c1f04d97b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fb8f01ea5e53dd012c00000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\fb8f01ea5e53dd012b00000070163016\fb8f01ea5e53dd012c00000070163016_manifest
            • Size 1KB
            • SHA256 6b737568e1a12ab56ea091427b691b0fb5391997ebbdc4353c4abdd2786e110b
            • MD5 SHA1 SHA512 TLSH

            32b708ea5e53dd012f00000070163016_msvcp90.dll

            • Path C:\Windows\WinSxS\Temp\InFlight\fb8f01ea5e53dd012d00000070163016\32b708ea5e53dd012f00000070163016_msvcp90.dll
            • Size 833KB
            • SHA256 7ee97643cfeda8a79b7cafa5ef3a010b2f85ef868356d30d7ee09af8e85ff38a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            32b708ea5e53dd013000000070163016_msvcm90.dll

            • Path C:\Windows\WinSxS\Temp\InFlight\fb8f01ea5e53dd012d00000070163016\32b708ea5e53dd013000000070163016_msvcm90.dll
            • Size 240KB
            • SHA256 c18adc99c097230222063aa264d69841183b949eba5cd51c73b73d4011eb61d3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fb8f01ea5e53dd012e00000070163016_msvcr90.dll

            • Path C:\Windows\WinSxS\Temp\InFlight\fb8f01ea5e53dd012d00000070163016\fb8f01ea5e53dd012e00000070163016_msvcr90.dll
            • Size 609KB
            • SHA256 4546eb9106e86e471caf0870acdd4d1fe34c2ad293f596fd55b82215b922ae14
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fe2cc4eb5e53dd019800000070163016_manifest

            • Path C:\Windows\WinSxS\Temp\InFlight\fe2cc4eb5e53dd019700000070163016\fe2cc4eb5e53dd019800000070163016_manifest
            • Size 804B
            • SHA256 9415639494ec009216c9ebf0aec7d5c788fc7fae45d8b4278d259f3484d685eb
            • MD5 SHA1 SHA512 TLSH

            fe2cc4eb5e53dd019900000070163016_catalog

            • Path C:\Windows\WinSxS\Temp\InFlight\fe2cc4eb5e53dd019700000070163016\fe2cc4eb5e53dd019900000070163016_catalog
            • Size 7KB
            • SHA256 51c55792a77ddffa2c36fc5cc92cf7e67263b0004bb0b4970f3a00524f5bdbec
            • MD5 SHA1 SHA512 SSDEEP TLSH

            memory/224-3346-0x0000000000F80000-0x000000000132D000-memory.dmp

            memory/224-3351-0x0000000140000000-0x0000000141934000-memory.dmp

            memory/224-3358-0x0000000004C60000-0x0000000004F42000-memory.dmp

            memory/224-3357-0x00000000041A0000-0x0000000004C51000-memory.dmp

            memory/224-3359-0x0000000004F50000-0x00000000051BB000-memory.dmp

            memory/224-3340-0x00000000007F0000-0x0000000000832000-memory.dmp

            memory/224-3349-0x0000000001340000-0x0000000001356000-memory.dmp

            memory/224-3387-0x0000000004720000-0x0000000004AEA000-memory.dmp

            memory/224-3343-0x0000000000870000-0x0000000000A7B000-memory.dmp

            memory/224-3341-0x0000000000840000-0x000000000086F000-memory.dmp

            memory/224-3345-0x0000000000A80000-0x0000000000F7B000-memory.dmp

            memory/224-3355-0x0000000001630000-0x000000000165F000-memory.dmp

            memory/224-3352-0x0000000001370000-0x0000000001619000-memory.dmp

            memory/1156-3293-0x0000020431520000-0x0000020431536000-memory.dmp

            memory/2120-3319-0x000001D50B0E0000-0x000001D50B0F6000-memory.dmp

            memory/2156-3313-0x0000022E9DE20000-0x0000022E9DE36000-memory.dmp

            memory/2328-3322-0x0000020A8E0F0000-0x0000020A8E106000-memory.dmp

            memory/2404-3304-0x000002D1C43F0000-0x000002D1C43F1000-memory.dmp

            memory/2404-3302-0x000002D1C43C0000-0x000002D1C43D6000-memory.dmp

            memory/2424-3747-0x0000000072D50000-0x0000000072D5B000-memory.dmp

            memory/2424-3744-0x0000000066680000-0x000000006668E000-memory.dmp

            memory/2424-3704-0x0000000000C00000-0x0000000000ED3000-memory.dmp

            memory/2424-3708-0x0000000067C80000-0x0000000067D0C000-memory.dmp

            memory/2424-3706-0x0000000066680000-0x000000006668E000-memory.dmp

            memory/2424-3707-0x00000000710C0000-0x00000000710DF000-memory.dmp

            memory/2424-3710-0x0000000066C40000-0x0000000066C4B000-memory.dmp

            memory/2424-3711-0x0000000066C00000-0x0000000066C14000-memory.dmp

            memory/2424-3712-0x0000000067E00000-0x0000000067E1B000-memory.dmp

            memory/2424-3709-0x0000000072D50000-0x0000000072D5B000-memory.dmp

            memory/2424-3695-0x00000000034A0000-0x00000000034B9000-memory.dmp

            memory/2424-3701-0x00000000034D0000-0x00000000034DE000-memory.dmp

            memory/2424-3705-0x0000000072F00000-0x0000000072F0E000-memory.dmp

            memory/2424-3742-0x0000000000C00000-0x0000000000ED3000-memory.dmp

            memory/2424-3743-0x0000000072F00000-0x0000000072F0E000-memory.dmp

            memory/2424-3745-0x00000000710C0000-0x00000000710DF000-memory.dmp

            memory/2424-3746-0x0000000067C80000-0x0000000067D0C000-memory.dmp

            memory/2424-3749-0x0000000066C00000-0x0000000066C14000-memory.dmp

            memory/2424-3748-0x0000000066C40000-0x0000000066C4B000-memory.dmp

            memory/2424-3750-0x0000000067E00000-0x0000000067E1B000-memory.dmp

            memory/2732-3296-0x0000024007770000-0x0000024007786000-memory.dmp

            memory/2964-3860-0x0000000072F00000-0x0000000072F0E000-memory.dmp

            memory/2964-3863-0x0000000067C80000-0x0000000067D0C000-memory.dmp

            memory/2964-3865-0x0000000066C40000-0x0000000066C4B000-memory.dmp

            memory/2964-3862-0x00000000710C0000-0x00000000710DF000-memory.dmp

            memory/2964-3821-0x00000000017F0000-0x0000000001809000-memory.dmp

            memory/2964-3827-0x0000000001810000-0x000000000181E000-memory.dmp

            memory/2964-3867-0x0000000067E00000-0x0000000067E1B000-memory.dmp

            memory/2964-3861-0x0000000066680000-0x000000006668E000-memory.dmp

            memory/2964-3864-0x0000000072D50000-0x0000000072D5B000-memory.dmp

            memory/2964-3866-0x0000000066C00000-0x0000000066C14000-memory.dmp

            memory/2988-3310-0x0000021B67A80000-0x0000021B67A96000-memory.dmp

            memory/3736-3325-0x00000160B9580000-0x00000160B9596000-memory.dmp

            memory/3936-3605-0x0000022514500000-0x0000022514516000-memory.dmp

            memory/3936-3607-0x0000022516120000-0x00000225164B3000-memory.dmp

            memory/4028-3306-0x0000027857B10000-0x0000027857B26000-memory.dmp

            memory/4444-3392-0x00007FFC3E9B0000-0x00007FFC3EF02000-memory.dmp

            memory/4444-3393-0x00007FFC3E5A0000-0x00007FFC3E9A5000-memory.dmp

            memory/4464-3331-0x000002E5C69E0000-0x000002E5C69F6000-memory.dmp

            memory/5060-3290-0x0000019E7EBE0000-0x0000019E7EBF6000-memory.dmp

            memory/5220-3316-0x000001EC591F0000-0x000001EC59206000-memory.dmp

            memory/5732-3299-0x000001A410D20000-0x000001A410D36000-memory.dmp

            memory/5868-174-0x0000000000F00000-0x0000000001146000-memory.dmp

            memory/5868-181-0x0000000003320000-0x00000000033BC000-memory.dmp

            memory/5868-176-0x0000000001150000-0x000000000130A000-memory.dmp