Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    17/10/2026, 04:24

General

  • Target
    OpenIVSetup.exe
  • Size 24.9MB
  • Sample261017-e1fbfahy31
  • SHA256 bb476bef066592e17b65ac5d12306ee55fc33065402bd3be3591cf5f04cdf6e6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Credentials
  • Protocol

    ftp

  • Host

    downloads.ntscorp.ru

  • Port

    21

  • Username

    downloads.ntscorp.ru|anonymous

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 29 IoCs
  • Loads dropped DLL 62 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Drops desktop.ini file(s) 2 IoCs
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 11 IoCs
  • Suspicious use of WriteProcessMemory 38 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\OpenIVSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\OpenIVSetup.exe"
    1⤵
    • Checks computer location settings
    • Checks whether UAC is enabled
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:4876
    • C:\Users\Admin\AppData\Local\Temp\OpenIV Setup_0E587B74\dxwebsetup.exe
      "C:\Users\Admin\AppData\Local\Temp\OpenIV Setup_0E587B74\dxwebsetup.exe" /Q
      2⤵
      • Executes dropped EXE
      • Adds Run key to start application
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4416
      • C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe
        C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe /windowsupdate
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Drops desktop.ini file(s)
        • Enumerates connected drives
        • Drops file in System32 directory
        • Drops file in Windows directory
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:4852
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe d3dx9_24_x64.inf
          4⤵
          • Executes dropped EXE
          PID:8696
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe d3dx9_25_x64.inf
          4⤵
          • Executes dropped EXE
          PID:12696
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe d3dx9_26_x64.inf
          4⤵
          • Executes dropped EXE
          PID:13144
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe d3dx9_27_x64.inf
          4⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          PID:12512
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe d3dx9_28_x64.inf
          4⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          PID:12224
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe d3dx9_29_x64.inf
          4⤵
          • Executes dropped EXE
          PID:11876
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe XACT_x64.inf
          4⤵
          • Executes dropped EXE
          PID:11348
        • C:\Windows\system32\regsvr32.exe
          C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_0.dll
          4⤵
          • Loads dropped DLL
          • Modifies registry class
          PID:11228
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe d3dx9_30_x64.inf
          4⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          PID:10960
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe XACT2_1_x64.inf
          4⤵
          • Executes dropped EXE
          PID:9292
        • C:\Windows\system32\regsvr32.exe
          C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_1.dll
          4⤵
          • Loads dropped DLL
          • Modifies registry class
          PID:8832
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe xinput1_1_x64.inf, Install_Driver
          4⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          PID:8280
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe XACT2_2_x64.inf
          4⤵
          • Executes dropped EXE
          PID:1132
        • C:\Windows\system32\regsvr32.exe
          C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_2.dll
          4⤵
          • Loads dropped DLL
          • Modifies registry class
          PID:3112
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe xinput1_2_x64.inf, Install_Driver
          4⤵
          • Executes dropped EXE
          PID:8340
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe XACT2_3_x64.inf
          4⤵
          • Executes dropped EXE
          PID:6136
        • C:\Windows\system32\regsvr32.exe
          C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_3.dll
          4⤵
          • Loads dropped DLL
          • Modifies registry class
          PID:1036
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe d3dx9_31_x64.inf
          4⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          PID:5952
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe XACT2_4_x64.inf
          4⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          PID:6808
        • C:\Windows\system32\regsvr32.exe
          C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_4.dll
          4⤵
          • Loads dropped DLL
          • Modifies registry class
          PID:8128
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe d3dx9_32_x64.inf
          4⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          PID:7836
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe d3dx10_00_x64.inf
          4⤵
          • Executes dropped EXE
          PID:7452
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe XACT2_5_x64.inf
          4⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          PID:6664
        • C:\Windows\system32\regsvr32.exe
          C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_5.dll
          4⤵
          • Loads dropped DLL
          • Modifies registry class
          PID:6480
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe XACT2_6_x64.inf
          4⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          PID:4324
        • C:\Windows\system32\regsvr32.exe
          C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_6.dll
          4⤵
          • Loads dropped DLL
          • Modifies registry class
          PID:2212
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe d3dx9_33_x64.inf
          4⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          PID:4732
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe d3dx10_33_x64.inf
          4⤵
          • Executes dropped EXE
          PID:8924
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe XACT2_7_x64.inf
          4⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          PID:8404
        • C:\Windows\system32\regsvr32.exe
          C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_7.dll
          4⤵
          • Loads dropped DLL
          • Modifies registry class
          PID:12872
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe xinput1_3_x64.inf, Install_Driver
          4⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          PID:9500
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe d3dx9_34_x64.inf
          4⤵
          • Executes dropped EXE
          PID:1772
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe d3dx10_34_x64.inf
          4⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          • Drops file in Windows directory
          PID:12304
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe XACT2_8_x64.inf
          4⤵
          • Executes dropped EXE
          • Drops file in Windows directory
          PID:11968
        • C:\Windows\system32\regsvr32.exe
          C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_8.dll
          4⤵
          • Loads dropped DLL
          • Modifies registry class
          PID:11844
        • C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe d3dx9_35_x64.inf
          4⤵
          • Executes dropped EXE
          PID:11536
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Checks SCSI registry key(s)
    • Suspicious use of AdjustPrivilegeToken
    PID:9800
  • C:\Windows\system32\srtasks.exe
    C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:9444

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AUG2009_D3DCompiler_42_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\AUG2009_D3DCompiler_42_x64.inf
        • Size 830B
        • SHA256 8977772e5392b8e79364b3b8d97300e97ad891f38d5a2dd306549401e46b05ff
        • MD5 SHA1 SHA512 TLSH

        AUG2009_D3DCompiler_42_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\AUG2009_D3DCompiler_42_x86.inf
        • Size 1KB
        • SHA256 bb8834d2366f6899c507bae176a13dadbd44488451a263eac830be95f4bad43f
        • MD5 SHA1 SHA512 TLSH

        AUG2009_XACT_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\AUG2009_XACT_x64.inf
        • Size 920B
        • SHA256 5d57466af1801ff3a92b1540907f0e4b91d90189177d68c6b4c8833e5d57dec3
        • MD5 SHA1 SHA512 TLSH

        AUG2009_XACT_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\AUG2009_XACT_x86.inf
        • Size 1KB
        • SHA256 1eb88b5460824fd32eec9b90e7ef5cb529f51215046e539d39fa27a409709766
        • MD5 SHA1 SHA512 TLSH

        AUG2009_XAudio_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\AUG2009_XAudio_x64.inf
        • Size 923B
        • SHA256 4348663aa7cfe22916fb13d93307e7384376fad9d6fa34c6196f80df42c61a33
        • MD5 SHA1 SHA512 TLSH

        AUG2009_XAudio_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\AUG2009_XAudio_x86.inf
        • Size 1KB
        • SHA256 842cc52100b5774bcda19e40837bd552b308e74829d5b35a505822c7436892e1
        • MD5 SHA1 SHA512 TLSH

        AUG2009_d3dcsx_42_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\AUG2009_d3dcsx_42_x64.inf
        • Size 815B
        • SHA256 f7a5a84bb654837193e0f40b579777f5c6cc2c7341cf90503d6a6709d319797f
        • MD5 SHA1 SHA512 TLSH

        AUG2009_d3dcsx_42_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\AUG2009_d3dcsx_42_x86.inf
        • Size 1KB
        • SHA256 ff9da1b0328fd918cf9558ee57387a4865afe98db1410cc16b1e921c5a744c48
        • MD5 SHA1 SHA512 TLSH

        AUG2009_d3dx10_42_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\AUG2009_d3dx10_42_x64.inf
        • Size 815B
        • SHA256 2bfdd3d3bf485439013045b3a08942f457385bb89ab76d9479fbdd85f09e9d96
        • MD5 SHA1 SHA512 TLSH

        AUG2009_d3dx10_42_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\AUG2009_d3dx10_42_x86.inf
        • Size 1KB
        • SHA256 a80a00464775da82c02f628c5bc13cab0d0643ec2a44b28d2acf7c77d467becf
        • MD5 SHA1 SHA512 TLSH

        AUG2009_d3dx11_42_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\AUG2009_d3dx11_42_x64.inf
        • Size 815B
        • SHA256 f9c13939779d4526107cf7d3554c122efb564cff02228d02b0b6ff211904f5dd
        • MD5 SHA1 SHA512 TLSH

        AUG2009_d3dx11_42_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\AUG2009_d3dx11_42_x86.inf
        • Size 1KB
        • SHA256 edf6764083b47c04fda52b149f565587c6a07d4455357fe3c27c9e56cc57a94d
        • MD5 SHA1 SHA512 TLSH

        AUG2009_d3dx9_42_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\AUG2009_d3dx9_42_x64.inf
        • Size 812B
        • SHA256 4887cbec8545b02152eb16f6296987a43a256b69b408330eaee362184f298d98
        • MD5 SHA1 SHA512 TLSH

        AUG2009_d3dx9_42_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\AUG2009_d3dx9_42_x86.inf
        • Size 1KB
        • SHA256 5989dc367a8f84815bcfa1c46ff756527c6250c62973220d1af354b70027eaf2
        • MD5 SHA1 SHA512 TLSH

        Aug2008_XACT_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Aug2008_XACT_x64.inf
        • Size 920B
        • SHA256 cf09d632a4b2cc670d435f356f309dc58359735834baed10343fdfbf37eddaa1
        • MD5 SHA1 SHA512 TLSH

        Aug2008_XACT_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Aug2008_XACT_x86.inf
        • Size 1KB
        • SHA256 f1daaa8d96108a4a338f62a4a1339143ddc566e194ca00dde5427136bfccb0af
        • MD5 SHA1 SHA512 TLSH

        Aug2008_XAudio_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Aug2008_XAudio_x64.inf
        • Size 923B
        • SHA256 311bd58ed7437a1cc79692ae360a02efbc8ec51194abcb80bad78b2208a94d58
        • MD5 SHA1 SHA512 TLSH

        Aug2008_XAudio_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Aug2008_XAudio_x86.inf
        • Size 1KB
        • SHA256 f211a7d99b3ffa0180bd91f68b2c285564227e075d499e950e76fde04e7707e3
        • MD5 SHA1 SHA512 TLSH

        Aug2008_d3dx10_39_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Aug2008_d3dx10_39_x64.inf
        • Size 815B
        • SHA256 a5eab981c313538afcd7abc7742854d251c736835ffc1f549a4768fdf49c3e71
        • MD5 SHA1 SHA512 TLSH

        Aug2008_d3dx10_39_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Aug2008_d3dx10_39_x86.inf
        • Size 1KB
        • SHA256 e83f8d48323887af89648c5bd7af713b42d20ccb757be34675f1fa527e6cc33f
        • MD5 SHA1 SHA512 TLSH

        Aug2008_d3dx9_39_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Aug2008_d3dx9_39_x64.inf
        • Size 812B
        • SHA256 4cbb1c6804b9c76bba4e41f0d2a45f1daba7350af9da4ae6966651f7f4da041a
        • MD5 SHA1 SHA512 TLSH

        Aug2008_d3dx9_39_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Aug2008_d3dx9_39_x86.inf
        • Size 1KB
        • SHA256 8a23d386626328f9519076f33d5c3b71c639f2347741442c3374974e6f61bd53
        • MD5 SHA1 SHA512 TLSH

        FEB2010_X3DAudio_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\FEB2010_X3DAudio_x64.inf
        • Size 815B
        • SHA256 68351f03f4ef83e4b8c359e3e130441081690a1866b838a1b35d64674ef3abbf
        • MD5 SHA1 SHA512 TLSH

        FEB2010_X3DAudio_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\FEB2010_X3DAudio_x86.inf
        • Size 1KB
        • SHA256 d4da3e530982812d1e2a31570b80af541fac1b13c72997d2aad7ea3bfeaf4a4a
        • MD5 SHA1 SHA512 TLSH

        FEB2010_XACT_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\FEB2010_XACT_x64.inf
        • Size 920B
        • SHA256 c7efd1ec4e4d31644a5054d32cc1e6795464472c05439573ae93e1727a5eea4a
        • MD5 SHA1 SHA512 TLSH

        FEB2010_XACT_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\FEB2010_XACT_x86.inf
        • Size 1KB
        • SHA256 e850fdb84bcac0f667927e53fee943efd3f43be6c6a0ae1e17f3fff83ddb2635
        • MD5 SHA1 SHA512 TLSH

        FEB2010_XAudio_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\FEB2010_XAudio_x64.inf
        • Size 923B
        • SHA256 da63330fd2a1538b714ee6cf2e09256446a04a55f866b3f70237d8a7165cb3e3
        • MD5 SHA1 SHA512 TLSH

        FEB2010_XAudio_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\FEB2010_XAudio_x86.inf
        • Size 1KB
        • SHA256 74c827ef94881099761e04397ef8f162fd0ccaf4876a5503c4b53a5216d2acca
        • MD5 SHA1 SHA512 TLSH

        JUN2010_D3DCompiler_43_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\JUN2010_D3DCompiler_43_x64.inf
        • Size 830B
        • SHA256 3e779533a273e3395109c7efac13ba1c804c01b3ddb16938406fbdf90d851216
        • MD5 SHA1 SHA512 TLSH

        JUN2010_D3DCompiler_43_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\JUN2010_D3DCompiler_43_x86.inf
        • Size 1KB
        • SHA256 5dd568919e1b3cbcb23ab21d0f2d6c1a065070848aba5d2a896da39e55c6cbbf
        • MD5 SHA1 SHA512 TLSH

        JUN2010_XACT_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\JUN2010_XACT_x64.inf
        • Size 920B
        • SHA256 f3c288d84db29f7bc4d2c771341f765b5e1940a4827fcb55a65b48eec83c71d3
        • MD5 SHA1 SHA512 TLSH

        JUN2010_XACT_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\JUN2010_XACT_x86.inf
        • Size 1KB
        • SHA256 ca604ce9d2ee43a09b39b23a6a2a048b1a79d85c7d78679cc73aacc75cf7a62e
        • MD5 SHA1 SHA512 TLSH

        JUN2010_XAudio_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\JUN2010_XAudio_x64.inf
        • Size 923B
        • SHA256 1a0f1b929724f8b71d5ce922f19b9d539d2d804c89af947d5927b049ef0fd3d8
        • MD5 SHA1 SHA512 TLSH

        JUN2010_XAudio_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\JUN2010_XAudio_x86.inf
        • Size 1KB
        • SHA256 d786d06a709d5dc26067132b9735fc317763fcf8064442d6f77f65012ba179da
        • MD5 SHA1 SHA512 TLSH

        JUN2010_d3dcsx_43_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\JUN2010_d3dcsx_43_x64.inf
        • Size 815B
        • SHA256 5289b5ad22146d7cc0c35cdb2c9662742693550de8f013d1ec40e944288d155a
        • MD5 SHA1 SHA512 TLSH

        JUN2010_d3dcsx_43_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\JUN2010_d3dcsx_43_x86.inf
        • Size 1KB
        • SHA256 d5200b332caf4fff25eb3d224527a3944878c5c3849512779a2afcfeae4c3ca1
        • MD5 SHA1 SHA512 TLSH

        JUN2010_d3dx10_43_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\JUN2010_d3dx10_43_x64.inf
        • Size 815B
        • SHA256 a65f370a741d62c2be0ca588758d089dd976092cb910bb6b1b7d008741e18377
        • MD5 SHA1 SHA512 TLSH

        JUN2010_d3dx10_43_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\JUN2010_d3dx10_43_x86.inf
        • Size 1KB
        • SHA256 4d4263cbb11858c727824c4a071f992909675719be3076b4a47852bf6affd862
        • MD5 SHA1 SHA512 TLSH

        JUN2010_d3dx11_43_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\JUN2010_d3dx11_43_x64.inf
        • Size 815B
        • SHA256 2c4cf75b76203cba6378693668c8c00b564871c8bfd7fbda01e1e841477b2a3b
        • MD5 SHA1 SHA512 TLSH

        JUN2010_d3dx11_43_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\JUN2010_d3dx11_43_x86.inf
        • Size 1KB
        • SHA256 3925c924eb4ec4f5a643b2d14d2eda603341fbbd22118cdd8ae04aaa96f443c0
        • MD5 SHA1 SHA512 TLSH

        JUN2010_d3dx9_43_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\JUN2010_d3dx9_43_x64.inf
        • Size 812B
        • SHA256 272650a2d9b1cfea17021f4bf941b21f2206791e279070d4e906ce0ce56ac16f
        • MD5 SHA1 SHA512 TLSH

        JUN2010_d3dx9_43_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\JUN2010_d3dx9_43_x86.inf
        • Size 1KB
        • SHA256 6b33d32da02f664092d44b05237990f825b4062c105a063badcf978648b5e95b
        • MD5 SHA1 SHA512 TLSH

        Jun2008_X3DAudio_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Jun2008_X3DAudio_x64.inf
        • Size 815B
        • SHA256 f4526ad18f081b84a139e6d98923569fc8ffc7644e20499e2f68abfb3e87753e
        • MD5 SHA1 SHA512 TLSH

        Jun2008_X3DAudio_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Jun2008_X3DAudio_x86.inf
        • Size 1KB
        • SHA256 0064b7db5bfe52b6f40f61d962901c7baa116abbc72328f50586b6fa65f894bd
        • MD5 SHA1 SHA512 TLSH

        Jun2008_XACT_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Jun2008_XACT_x64.inf
        • Size 920B
        • SHA256 90577c4c3d5d0de80c805caf0cc713582698ef7224fecf4ff911ba6309c5c920
        • MD5 SHA1 SHA512 TLSH

        Jun2008_XACT_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Jun2008_XACT_x86.inf
        • Size 1KB
        • SHA256 79cb10222e466d54908d30ee433830e9673d5a538fabc5f4568521c2aff66eb1
        • MD5 SHA1 SHA512 TLSH

        Jun2008_XAudio_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Jun2008_XAudio_x64.inf
        • Size 923B
        • SHA256 9ce21064f2feed9bc9426a6e92e9c850aae31abeb80c7906ff917fbf4cc03913
        • MD5 SHA1 SHA512 TLSH

        Jun2008_XAudio_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Jun2008_XAudio_x86.inf
        • Size 1KB
        • SHA256 e5e435c4536f987e1087218b025e6dc66c24c3e300e839391891f1b3bfd360dd
        • MD5 SHA1 SHA512 TLSH

        Jun2008_d3dx10_38_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Jun2008_d3dx10_38_x64.inf
        • Size 815B
        • SHA256 0de0ada970774620c0905227666fc30910e64f3cfa4b99e4c5481685d12e3ded
        • MD5 SHA1 SHA512 TLSH

        Jun2008_d3dx10_38_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Jun2008_d3dx10_38_x86.inf
        • Size 1KB
        • SHA256 f5f54664ec67f6333a9f0607d891bd0dc2acfee8cce09ac4ee0372b5d0aa12fd
        • MD5 SHA1 SHA512 TLSH

        Jun2008_d3dx9_38_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Jun2008_d3dx9_38_x64.inf
        • Size 812B
        • SHA256 ddad68974990a21a8d4a91c47ef1034ddf0475551586f04e86b8cd2f0c990d6f
        • MD5 SHA1 SHA512 TLSH

        Jun2008_d3dx9_38_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Jun2008_d3dx9_38_x86.inf
        • Size 1KB
        • SHA256 06faf7f7ea5503dcece13d6537e57cd2581d5188a5d839fe7f118298a721b51a
        • MD5 SHA1 SHA512 TLSH

        Mar2008_X3DAudio_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2008_X3DAudio_x64.inf
        • Size 815B
        • SHA256 b7dba312a71ed109c9c54cc5cc096096eb8cf0962396e8dc996f8fa28307547c
        • MD5 SHA1 SHA512 TLSH

        Mar2008_X3DAudio_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2008_X3DAudio_x86.inf
        • Size 1KB
        • SHA256 0b6e28f00364a9ff436c3d99f0d4e80bf615f1450f420122324853cc0b88b16c
        • MD5 SHA1 SHA512 TLSH

        Mar2008_XACT_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2008_XACT_x64.inf
        • Size 920B
        • SHA256 1038a41e63ee8abbc8be85a86fafb2ac1d03defa6b88deb270f96a6ed1a97122
        • MD5 SHA1 SHA512 TLSH

        Mar2008_XACT_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2008_XACT_x86.inf
        • Size 1KB
        • SHA256 6b0cc0dc993e172855864fa078c4e5c8f2f46bfc3200bf2ccdf3292931ee3cb2
        • MD5 SHA1 SHA512 TLSH

        Mar2008_XAudio_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2008_XAudio_x64.inf
        • Size 923B
        • SHA256 10a2db49dd3bea59133bbd82b3fc0f8a959b65b0c250c11a9a6f3123b961e6e9
        • MD5 SHA1 SHA512 TLSH

        Mar2008_XAudio_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2008_XAudio_x86.inf
        • Size 1KB
        • SHA256 472bcfb54b5d63377da128596dfb30c8f200f79edaaf6d29de1afcdb71a3413d
        • MD5 SHA1 SHA512 TLSH

        Mar2008_d3dx10_37_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2008_d3dx10_37_x64.inf
        • Size 815B
        • SHA256 f37681f4d49f71d48b1960c3efac74f28af9fa764b29ed3a40b5f424fc8f60c9
        • MD5 SHA1 SHA512 TLSH

        Mar2008_d3dx10_37_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2008_d3dx10_37_x86.inf
        • Size 1KB
        • SHA256 bae3bc2b7071d2d1c657a87a8c8af6c0fb5373f11c9aa5f61b406924717d0792
        • MD5 SHA1 SHA512 TLSH

        Mar2008_d3dx9_37_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2008_d3dx9_37_x64.inf
        • Size 812B
        • SHA256 a4fda3373241c2748a969ddeeb6ef41b3cc1bca6608362ba87db75f69023fe9c
        • MD5 SHA1 SHA512 TLSH

        Mar2008_d3dx9_37_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2008_d3dx9_37_x86.inf
        • Size 1KB
        • SHA256 d55858e166a2fe00d4acc30da756f0ab2c4dd5a79a9874eab3100722c74a1b75
        • MD5 SHA1 SHA512 TLSH

        Mar2009_X3DAudio_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2009_X3DAudio_x64.inf
        • Size 815B
        • SHA256 4da1a6bbcb7e84073dcd1898f854702ec32f5324478b2fa39c4a9868abeecd3b
        • MD5 SHA1 SHA512 TLSH

        Mar2009_X3DAudio_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2009_X3DAudio_x86.inf
        • Size 1KB
        • SHA256 aabd029d75f25244bae4ca17dbf9c4feebec0d5f121fcd388c175c3360be1bac
        • MD5 SHA1 SHA512 TLSH

        Mar2009_XACT_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2009_XACT_x64.inf
        • Size 920B
        • SHA256 9369fb0a9d3353627c097fc19780e5e7126af47766ef6a4a95ff3ddcca56691e
        • MD5 SHA1 SHA512 TLSH

        Mar2009_XACT_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2009_XACT_x86.inf
        • Size 1KB
        • SHA256 764c3caeb1725a11701ca7119fdc49b3219553b79f9a5c1a02b20991391e5a21
        • MD5 SHA1 SHA512 TLSH

        Mar2009_XAudio_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2009_XAudio_x64.inf
        • Size 923B
        • SHA256 4a554d09934581a87a4cc98749b525b6794947b64b8414d380edfd502713f9b6
        • MD5 SHA1 SHA512 TLSH

        Mar2009_XAudio_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2009_XAudio_x86.inf
        • Size 1KB
        • SHA256 1b66e4d80f9843fc73b0a6097fb8ed5f3d2cfd5cfb5c328904d2c370bd87bb3e
        • MD5 SHA1 SHA512 TLSH

        Mar2009_d3dx10_41_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2009_d3dx10_41_x64.inf
        • Size 815B
        • SHA256 53dc284b87f5787804823977d2fbb528e393829367db5d2ac5dd79c581a27616
        • MD5 SHA1 SHA512 TLSH

        Mar2009_d3dx10_41_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2009_d3dx10_41_x86.inf
        • Size 1KB
        • SHA256 0170a4b551b58d92a753e86793bf3af762fe3f8d781512f710a4d661aec8d626
        • MD5 SHA1 SHA512 TLSH

        Mar2009_d3dx9_41_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2009_d3dx9_41_x64.inf
        • Size 812B
        • SHA256 12fe918aeb224a9bd4d2a8142f97c95d58a9a69e591e7e4f95014c155bb03519
        • MD5 SHA1 SHA512 TLSH

        Mar2009_d3dx9_41_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Mar2009_d3dx9_41_x86.inf
        • Size 1KB
        • SHA256 bd29711cc2ecd924990167ffa95f48842e24aeed3acef1023717040240b4bbb6
        • MD5 SHA1 SHA512 TLSH

        Nov2008_X3DAudio_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Nov2008_X3DAudio_x64.inf
        • Size 815B
        • SHA256 d04d052fa3065cdf00e96bcdd7dabf3583ef10b6d80fd67cb03c32f09f2e602d
        • MD5 SHA1 SHA512 TLSH

        Nov2008_X3DAudio_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Nov2008_X3DAudio_x86.inf
        • Size 1KB
        • SHA256 d0361ffe046b7a7a374a4938d419e4121365892e4f2138899f670619ab34ac6a
        • MD5 SHA1 SHA512 TLSH

        Nov2008_XACT_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Nov2008_XACT_x64.inf
        • Size 920B
        • SHA256 2d8a68e726728e4f4be05e35fca812b855046ce4bf697f0dea14094dbd7e1d79
        • MD5 SHA1 SHA512 TLSH

        Nov2008_XACT_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Nov2008_XACT_x86.inf
        • Size 1KB
        • SHA256 31680e7a90d24eda04c910e1f3e6c02774cfc5c36ae08e7ac043665264702f83
        • MD5 SHA1 SHA512 TLSH

        Nov2008_XAudio_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Nov2008_XAudio_x64.inf
        • Size 923B
        • SHA256 ed20b160dd26a5ed3c220a1fd9b5fc880b3280ebf56c2f73e76b6d4da5ef82bd
        • MD5 SHA1 SHA512 TLSH

        Nov2008_XAudio_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Nov2008_XAudio_x86.inf
        • Size 1KB
        • SHA256 950b5aef596fc5048732f6cf263dfca5bcc25df7dc17df91efcbc3551751a3b3
        • MD5 SHA1 SHA512 TLSH

        Nov2008_d3dx10_40_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Nov2008_d3dx10_40_x64.inf
        • Size 815B
        • SHA256 7f902d9ce6f6d71be1d16997ffc9661be2540522c73cc185516415a52dced2a5
        • MD5 SHA1 SHA512 TLSH

        Nov2008_d3dx10_40_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Nov2008_d3dx10_40_x86.inf
        • Size 1KB
        • SHA256 a4eed39cf36adccac4317e5822b30aa37ac5b001bcf4a24f7b5ccac6b8b71e9d
        • MD5 SHA1 SHA512 TLSH

        Nov2008_d3dx9_40_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Nov2008_d3dx9_40_x64.inf
        • Size 812B
        • SHA256 d071b30f56763506da0c939b8d35b0540bef3ef0d51a5cfbc45816ca91f891a3
        • MD5 SHA1 SHA512 TLSH

        Nov2008_d3dx9_40_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\Nov2008_d3dx9_40_x86.inf
        • Size 1KB
        • SHA256 955637638635025f01f82febab4a4977252a765439d90ce940fba752723b9db6
        • MD5 SHA1 SHA512 TLSH

        apr2005_d3dx9_25_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\apr2005_d3dx9_25_x64.inf
        • Size 806B
        • SHA256 3d97810d00ceb3e7674a2ef81427d4180f77f93f9454837c5933fbc6a1ad5c1d
        • MD5 SHA1 SHA512 TLSH

        apr2005_d3dx9_25_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\apr2005_d3dx9_25_x86.inf
        • Size 1KB
        • SHA256 f484ef48e0c6e2be8207d8c8c7308dd966d52bea1fde221b927d3e49f1cab0b7
        • MD5 SHA1 SHA512 TLSH

        apr2006_d3dx9_30_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\apr2006_d3dx9_30_x64.inf
        • Size 806B
        • SHA256 b70b8f62a2459580d22999301f1823bcb8a9bef54bd33b38e0af274a3a12e010
        • MD5 SHA1 SHA512 TLSH

        apr2006_d3dx9_30_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\apr2006_d3dx9_30_x86.inf
        • Size 1KB
        • SHA256 373cca07c0ceffa72901441219a4457de9ff110aededae5e4818588da39cd344
        • MD5 SHA1 SHA512 TLSH

        apr2006_mdx1_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\apr2006_mdx1_x86.inf
        • Size 2KB
        • SHA256 2546a1875bf868edc621a1cd0ee262151faa08762bcced0117e1304eace0c04d
        • MD5 SHA1 SHA512 TLSH

        apr2006_xact_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\apr2006_xact_x64.inf
        • Size 908B
        • SHA256 d9c3216ada5dd7791ca852a8ea97765f94a7b56fed27b20916b5067eb82b14d0
        • MD5 SHA1 SHA512 TLSH

        apr2006_xact_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\apr2006_xact_x86.inf
        • Size 1KB
        • SHA256 037db252501fd0e30303c11706d804d9eabbf319d0b4e88181ef8f297b4fef8e
        • MD5 SHA1 SHA512 TLSH

        apr2006_xinput_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\apr2006_xinput_x64.inf
        • Size 854B
        • SHA256 f9d01e93e547045e1d232242c900530dfdfa54698586c7049281965e3bd01ca2
        • MD5 SHA1 SHA512 TLSH

        apr2006_xinput_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\apr2006_xinput_x86.inf
        • Size 1KB
        • SHA256 b604779115d32d439f77b33257c96f928ec4ce564189f7d0d357099c1da140c4
        • MD5 SHA1 SHA512 TLSH

        apr2007_d3dx10_33_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\apr2007_d3dx10_33_x64.inf
        • Size 844B
        • SHA256 3e61c4d723d282c36c5493d82644ea96715b7b548e50494d22b4a83d4e2b8237
        • MD5 SHA1 SHA512 TLSH

        apr2007_d3dx10_33_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\apr2007_d3dx10_33_x86.inf
        • Size 1KB
        • SHA256 3286ba521fda888b1808f12955a58d7da4df7d2fdb472c7837a1e0e1a6317a06
        • MD5 SHA1 SHA512 TLSH

        apr2007_d3dx9_33_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\apr2007_d3dx9_33_x64.inf
        • Size 812B
        • SHA256 2d87efca75d8b9aeab3262841d52a7c56bad34ac6b9691f4df2d89b14c950f8d
        • MD5 SHA1 SHA512 TLSH

        apr2007_d3dx9_33_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\apr2007_d3dx9_33_x86.inf
        • Size 1KB
        • SHA256 349a09a2791d697bffffc61410a536cdcf258f0d7c86dda44a297e8aec4bdf00
        • MD5 SHA1 SHA512 TLSH

        apr2007_xact_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\apr2007_xact_x64.inf
        • Size 920B
        • SHA256 bf6ca1165632efccb0292ae8b739ce68d78ebb95dd39b8e4c1717d78a026db10
        • MD5 SHA1 SHA512 TLSH

        apr2007_xact_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\apr2007_xact_x86.inf
        • Size 1KB
        • SHA256 008db10780aa8fb6f20b7aa5f5d513ca77efb36c8dddfb9ad89173ecaf700af5
        • MD5 SHA1 SHA512 TLSH

        apr2007_xinput_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\apr2007_xinput_x64.inf
        • Size 860B
        • SHA256 0d6e1c0e961d878b319ac30d3439056883448dcf26774003b73920f3377ecac8
        • MD5 SHA1 SHA512 TLSH

        apr2007_xinput_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\apr2007_xinput_x86.inf
        • Size 1KB
        • SHA256 1c798cb80e9e46ce03356ea7316e1eff5d3a88ccdd7cbfbfcdce73cded23b4e5
        • MD5 SHA1 SHA512 TLSH

        aug2005_d3dx9_27_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\aug2005_d3dx9_27_x64.inf
        • Size 806B
        • SHA256 0a8ffec8d7ef3a0aa005f604a045dcf80cf5b6473b4f26e30c58eee23e253fae
        • MD5 SHA1 SHA512 TLSH

        aug2005_d3dx9_27_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\aug2005_d3dx9_27_x86.inf
        • Size 1KB
        • SHA256 d02232a6587c460c026601517178318bab2ac29c59d269c6e3d1a3a993a9a1c4
        • MD5 SHA1 SHA512 TLSH

        aug2006_xact_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\aug2006_xact_x64.inf
        • Size 908B
        • SHA256 6fe310a67227203bbca3389dfe3403fa268cb424f4b525cca2d5407ed26670a5
        • MD5 SHA1 SHA512 TLSH

        aug2006_xact_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\aug2006_xact_x86.inf
        • Size 1KB
        • SHA256 34e7227e03812fce5415b0a4c3d15a9e9b259350ac9873db2a98b2ea76ae2284
        • MD5 SHA1 SHA512 TLSH

        aug2006_xinput_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\aug2006_xinput_x64.inf
        • Size 854B
        • SHA256 35f25b9538e55172cf36729519581444e26b38a9dae5cccc4ad75dfa34ea08e7
        • MD5 SHA1 SHA512 TLSH

        aug2006_xinput_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\aug2006_xinput_x86.inf
        • Size 1KB
        • SHA256 cc66d67daa1f4c31ff5e59c2606c3930f72204a5057c29b9d58dde37a47b1cb7
        • MD5 SHA1 SHA512 TLSH

        aug2007_d3dx10_35_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\aug2007_d3dx10_35_x64.inf
        • Size 815B
        • SHA256 af4bdfeb4283f04e24475279931e042f17052224cf708f0c444fba2f2e221289
        • MD5 SHA1 SHA512 TLSH

        aug2007_d3dx10_35_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\aug2007_d3dx10_35_x86.inf
        • Size 1KB
        • SHA256 7987e2c475705bf8f049a15af946ec0cb5ccddf27c0b5c8126694421df601770
        • MD5 SHA1 SHA512 TLSH

        aug2007_d3dx9_35_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\aug2007_d3dx9_35_x64.inf
        • Size 812B
        • SHA256 e34ad9e49f31cb9211e0f350405c344d93fc65075e470c8fe09dd78af68f2c80
        • MD5 SHA1 SHA512 TLSH

        aug2007_d3dx9_35_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\aug2007_d3dx9_35_x86.inf
        • Size 1KB
        • SHA256 c0d87c1b079b54b75b86939199ca5ee1f796ae3de9c4ed0ae074a4fa01823c73
        • MD5 SHA1 SHA512 TLSH

        aug2007_xact_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\aug2007_xact_x64.inf
        • Size 920B
        • SHA256 2fcc4bdc6516418d3b4935c301e14f30e3bbd0adfd264bc34067b27b0b266b8e
        • MD5 SHA1 SHA512 TLSH

        aug2007_xact_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\aug2007_xact_x86.inf
        • Size 1KB
        • SHA256 c246c38e41ed71bde4b3cce4fe337826173896a04c26f8b2a00b06bb0cec024d
        • MD5 SHA1 SHA512 TLSH

        d3dcompiler_33.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dcompiler_33.dll
        • Size 1.1MB
        • SHA256 12e238af4b4edc1f774213709a87a91b77b2c9d2d18fe475b027872923b6fa17
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dcompiler_34.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dcompiler_34.dll
        • Size 1.1MB
        • SHA256 5044a5810fd931339933a8d0c56115a5a5c27d8c0d8e348977e2724a032accf0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dcompiler_35.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dcompiler_35.dll
        • Size 448KB
        • SHA256 fc26decbfdec6051ea7718b984a6cdb4061a09e8b9bbbe9f40ab43bbc9673561
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx10.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx10.dll
        • Size 429KB
        • SHA256 fd2caa28493ea76021b93641958238b7a933f4f6db1a2070be03cc81d87d8307
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx10_33.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx10_33.dll
        • Size 433KB
        • SHA256 b04e2b089656eae01a0071359f9d7fb040dea804c1b9d2379431864174259c2d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx10_34.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx10_34.dll
        • Size 433KB
        • SHA256 330e120d745e1132252df81800362a7ae0b61a9060afc800165ba8a1d55d3fb3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx10_35.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx10_35.dll
        • Size 434KB
        • SHA256 db775655fd923e29509402556f86002dd9aea062cdcdba7073e1057a67b5ce50
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_24.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_24.dll
        • Size 2.1MB
        • SHA256 94ec67763f67932dd4273ef5cc12889a5cef090ffea3ee78a80c7b530272b1b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_24.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_24.dll
        • Size 3.4MB
        • SHA256 1ec422bd6421c741eef57847260967f215913649901e21dd9c46eb1b3bb10906
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_24_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_24_x64.inf
        • Size 679B
        • SHA256 f02bd6bb0ca1ed41698def1465c05f5b47ca459f886647f2d84f85c5c09dad9c
        • MD5 SHA1 SHA512 TLSH

        d3dx9_25.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_25.dll
        • Size 2.2MB
        • SHA256 4c54df27ce84d21b2924e64ff79b13e7876ce85d8e0c9c1d0abd8da73888187a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_25.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_25.dll
        • Size 3.6MB
        • SHA256 10b09474bfe4e2bb395472628646bc5f353fbfbec976575c45eeff49984ebaa6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_25_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_25_x64.inf
        • Size 667B
        • SHA256 9af2752d59fc38dd26d30769132a0887ff4123269c0dc4406f5107295e69c7c1
        • MD5 SHA1 SHA512 TLSH

        d3dx9_26.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_26.dll
        • Size 2.2MB
        • SHA256 8ea96fe01c3c86a36fcb3795ae03eb12034003e335ef475571efaeda17c5bc78
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_26.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_26.dll
        • Size 3.6MB
        • SHA256 30b06dbbd202494bae3b87487e7273adcffd17a9d2c29977030fde0570aa841b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_26_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_26_x64.inf
        • Size 667B
        • SHA256 6c152334efa5b011a44f160a23a5c58b66f3bcebbf6c4bc0722a526d36699a4b
        • MD5 SHA1 SHA512 TLSH

        d3dx9_27.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_27.dll
        • Size 2.2MB
        • SHA256 a70d571cd675c97c9eeb4a234dba1d667ffb54ec3bb14defb36b3e2f605ae257
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_27.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_27.dll
        • Size 3.6MB
        • SHA256 f9dd288c9895973f8db1856d172779041c6dee173ad1ef53b1727fc85cb6b75f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_27_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_27_x64.inf
        • Size 667B
        • SHA256 6f56c5be97e703584dd832f35ebdc78c6aeb07cc9df155d47ed9903142086488
        • MD5 SHA1 SHA512 TLSH

        d3dx9_28.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_28.dll
        • Size 2.2MB
        • SHA256 f3e391b5f1c1f9637cabf2b812b6f5d65e4776c89d779f506f6b643cc563176d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_28.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_28.dll
        • Size 3.6MB
        • SHA256 a2870f86e2f1b11646ff3f404bdbde10520c481c1400b20d25fdf56e66fb0a17
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_28_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_28_x64.inf
        • Size 667B
        • SHA256 dae4f2beced67333eb6aade70a4a711581f789d0a442f8fb16ba6db5ab261700
        • MD5 SHA1 SHA512 TLSH

        d3dx9_29.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_29.dll
        • Size 2.2MB
        • SHA256 c5e21c18f8c79bc517da59e3192c39ea73bdcaf85867628187f6b3cca07dd21f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_29.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_29.dll
        • Size 3.7MB
        • SHA256 d496c31a6b0f41398ecad7698987c55c2cb88eb6568976ba9b01a197879dd9dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_29_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_29_x64.inf
        • Size 667B
        • SHA256 5ce705889566e690bc48e7f3fc41ec12b856e92d52c60aee45e1c223aa44848c
        • MD5 SHA1 SHA512 TLSH

        d3dx9_30.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_30.dll
        • Size 2.3MB
        • SHA256 5edeed79f2359527a55b8189cfa8b9b121cd608d44eead905a0f3436938ad532
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_31.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_31.dll
        • Size 2.3MB
        • SHA256 e2065619fe6eb0034833b1dc0369deb4a6edc3110e38a1132eeafcf430c578a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_32.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_32.dll
        • Size 3.3MB
        • SHA256 e96693794daa05a75a83c11df2e7b42f2de61567c6ad0b69e353b50f6c88119f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_33.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_33.dll
        • Size 3.3MB
        • SHA256 c6b7b2ad7742dde5dd8d1a35fdc1c185e586e551ad9c74d3fb21759cd8ca4da8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_34.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_34.dll
        • Size 3.3MB
        • SHA256 b6f77f06518d35345fb61172b6a13159125ed60c469d28b1a2e07970e9ddf81d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_35.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\d3dx9_35.dll
        • Size 3.6MB
        • SHA256 2198022938156b790e9cfb0f7997494b66a11a1ad49b395be58251d635b66b26
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dec2005_d3dx9_28_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\dec2005_d3dx9_28_x64.inf
        • Size 806B
        • SHA256 510b6d528be3f2997b8bd811486dc3c13eb27a9de22d1bf030e6db0e632cca4d
        • MD5 SHA1 SHA512 TLSH

        dec2005_d3dx9_28_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\dec2005_d3dx9_28_x86.inf
        • Size 1KB
        • SHA256 d4d03c4ab3c8486d6331548e967ee17e011fdac90f63c0a9a44a744815a7da7a
        • MD5 SHA1 SHA512 TLSH

        dec2006_d3dx10_00_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\dec2006_d3dx10_00_x64.inf
        • Size 426B
        • SHA256 2a43ac72ab9a6f4771c02b6e10884921b733b86dbd7ebdfc5502d011cd5c8d05
        • MD5 SHA1 SHA512 TLSH

        dec2006_d3dx10_00_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\dec2006_d3dx10_00_x86.inf
        • Size 673B
        • SHA256 33291a47388edecc059f1825c1979142d7a9cd4a850716f9dce687deba1fa750
        • MD5 SHA1 SHA512 TLSH

        dec2006_d3dx9_32_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\dec2006_d3dx9_32_x64.inf
        • Size 806B
        • SHA256 ff00313af4a90f426492d72969f5efc6c56a17f2dd91f20cb5c0a38d9f1f2b6b
        • MD5 SHA1 SHA512 TLSH

        dec2006_d3dx9_32_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\dec2006_d3dx9_32_x86.inf
        • Size 1KB
        • SHA256 ef09d783bf5cff2cfba99946e5e71fda577b196a49c88bed1c51b5fd29cecf94
        • MD5 SHA1 SHA512 TLSH

        dec2006_xact_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\dec2006_xact_x64.inf
        • Size 908B
        • SHA256 f2f2040b8d13705f00d8e20a53f22093aa0f8c8d6aa6224992ba727ace7b75f6
        • MD5 SHA1 SHA512 TLSH

        dec2006_xact_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\dec2006_xact_x86.inf
        • Size 1KB
        • SHA256 4c0a40094228a51f567bec65c2cdf289d268812c1af579e3c6b76cd3adb77e12
        • MD5 SHA1 SHA512 TLSH

        dxupdate.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\dxupdate.inf
        • Size 12KB
        • SHA256 93f5589499ee4ee2812d73c0d8feacbbcfe8c47b6d98572486bc0eff3c5906ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        feb2006_d3dx9_29_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\feb2006_d3dx9_29_x64.inf
        • Size 806B
        • SHA256 ef36ece1a6bd8af3b0b9247b081d28ed511b7e18c43eb3aff364c9ce8d3a06c3
        • MD5 SHA1 SHA512 TLSH

        feb2006_d3dx9_29_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\feb2006_d3dx9_29_x86.inf
        • Size 1KB
        • SHA256 f12f4bd86d5cd748b0fcf7106e9dff333c27c0886541339ba1f40c443bdc61cd
        • MD5 SHA1 SHA512 TLSH

        feb2006_xact_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\feb2006_xact_x64.inf
        • Size 890B
        • SHA256 b7ca1a4942057592c5b83b4425350da41c61779dcae608112141d727091842d4
        • MD5 SHA1 SHA512 TLSH

        feb2006_xact_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\feb2006_xact_x86.inf
        • Size 1KB
        • SHA256 45146fd446fc8533dc5f97d88bee9ae220161f24797114d0bf3afc7c479ed69b
        • MD5 SHA1 SHA512 TLSH

        feb2007_xact_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\feb2007_xact_x64.inf
        • Size 908B
        • SHA256 184c1684c57de07983edaaa1ae2751b263497673ee8418af023a63fa03553f53
        • MD5 SHA1 SHA512 TLSH

        feb2007_xact_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\feb2007_xact_x86.inf
        • Size 1KB
        • SHA256 64b6020f43bbab7f7c2368fcfe7224165fef555b2bef813aa13b2d9f6295d46c
        • MD5 SHA1 SHA512 TLSH

        infinst.exe

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
        • Size 56KB
        • SHA256 85a8b155b066d81efb5d4959f5ea59a9ce43d40663cb2aba05ef0e6d01c22c18
        • MD5 SHA1 SHA512 SSDEEP TLSH

        infinst.exe

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
        • Size 56KB
        • SHA256 ea544793b661304f31f18e9d107a4b4b46bd198d806f6366870746fe52e01df9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        infinst.exe

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
        • Size 59KB
        • SHA256 d636d29f6019bcc232e62553728871097097aae05a6426bb86af15720de2e0e6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        infinst.exe

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
        • Size 61KB
        • SHA256 34df5a253007edd15d14f28a333bac638fe961f0f3941b192d7a6a760c2635fe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        infinst.exe

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
        • Size 65KB
        • SHA256 10e420d85c6d2905d9ca076681c3b1d648bc1b5b3893c8eb5ff420d2b964f0cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        infinst.exe

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
        • Size 65KB
        • SHA256 5ec466d86f7205e7a99985f0be8cacd0494454780c28ac90ff5d4b906b9dc5e5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        infinst.exe

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
        • Size 65KB
        • SHA256 300ed1a4ef37c8d5f13d67a5daabd46bcdd9ad9da4fe6283f20d7d38f72caaf5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        infinst.exe

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
        • Size 65KB
        • SHA256 cd5f212a25c5f4ccb9a0c4688f1308941c2c238083b9a4766260b79261c4e243
        • MD5 SHA1 SHA512 SSDEEP TLSH

        infinst.exe

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
        • Size 65KB
        • SHA256 1a008a90db1768c12226ca16b48df724a821c47aa729fb553eb401c7527e770d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        infinst.exe

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
        • Size 65KB
        • SHA256 76eed293cdcdf17942acc313366b22b55ad78ee0389989438e63ab7ae145167d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        infinst.exe

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
        • Size 68KB
        • SHA256 34ab99536ea59ad60ba6efda3ea6d18291ef096a0bab3664248d6045805da0ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        infinst.exe

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\infinst.exe
        • Size 68KB
        • SHA256 d4e57566914f1d36f4ebfb6e164ce2170f1d5e6392189d0ad6de3ef3b0a9aad3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jun2005_d3dx9_26_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\jun2005_d3dx9_26_x64.inf
        • Size 806B
        • SHA256 addafcf0cfd36587c12eb2692922f0fb134874d11005a0544cc054546a493933
        • MD5 SHA1 SHA512 TLSH

        jun2005_d3dx9_26_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\jun2005_d3dx9_26_x86.inf
        • Size 1KB
        • SHA256 262ed4a65dd45e19f196cb2d9946326693ee31a86b51bf77116dec2727971cb6
        • MD5 SHA1 SHA512 TLSH

        jun2006_xact_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\jun2006_xact_x64.inf
        • Size 908B
        • SHA256 fe9caa55be17684622fd7339b1b96e1f0d107dc33c065706d24a435d523c6e12
        • MD5 SHA1 SHA512 TLSH

        jun2006_xact_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\jun2006_xact_x86.inf
        • Size 1KB
        • SHA256 6bdce6f6779712e38c6d9e6e5961217e417254089f096c719f25566e952cb257
        • MD5 SHA1 SHA512 TLSH

        jun2007_d3dx10_34_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\jun2007_d3dx10_34_x64.inf
        • Size 815B
        • SHA256 0f75b7ef71e183476ec938705024eb8a10a77d7602a336be876c7f5d17429725
        • MD5 SHA1 SHA512 TLSH

        jun2007_d3dx10_34_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\jun2007_d3dx10_34_x86.inf
        • Size 1KB
        • SHA256 808983dfd3db7c3452589ea4e14ab4af8ef47dbad3b639f9a3c55685c9b73867
        • MD5 SHA1 SHA512 TLSH

        jun2007_d3dx9_34_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\jun2007_d3dx9_34_x64.inf
        • Size 812B
        • SHA256 77f3fa1756181a90d2ee63c26cddfdaba0d720c9a49121db28746cd02b3e071d
        • MD5 SHA1 SHA512 TLSH

        jun2007_d3dx9_34_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\jun2007_d3dx9_34_x86.inf
        • Size 1KB
        • SHA256 a568b7b8a0360ad94b1ed6388eca6ca9d8770937360a426a0fdadef9a4019bba
        • MD5 SHA1 SHA512 TLSH

        jun2007_xact_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\jun2007_xact_x64.inf
        • Size 920B
        • SHA256 405d8cbe3c87b16afac2a9254497412a42de4ae2d8fb470a1234dc3260e0b90f
        • MD5 SHA1 SHA512 TLSH

        jun2007_xact_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\jun2007_xact_x86.inf
        • Size 1KB
        • SHA256 33b980fb973394d9d8cb4645914d4cf6793bf92bd311e0431ce9cacc59fdcbc5
        • MD5 SHA1 SHA512 TLSH

        mdx_1.0.2902.0_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\mdx_1.0.2902.0_x86.inf
        • Size 1KB
        • SHA256 3bd14cf2a96544ece692e1911500f7196370a111017fb6b0e23db0f0d0f40dfa
        • MD5 SHA1 SHA512 TLSH

        microsoft.directx.audiovideoplayback.xml

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\microsoft.directx.audiovideoplayback.xml
        • Size 33KB
        • SHA256 d7ac200711a20e1e93fe3b61254f6535e7589e52baaedb396ae5f292a9f4be43
        • MD5 SHA1 SHA512 SSDEEP TLSH

        microsoft.directx.diagnostics.xml

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\microsoft.directx.diagnostics.xml
        • Size 10KB
        • SHA256 73b5cf6b8ef13759e6a8131a71389928eae8c678344034ee57a5a8eaf2b82182
        • MD5 SHA1 SHA512 SSDEEP TLSH

        microsoft.directx.direct3d.xml

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\microsoft.directx.direct3d.xml
        • Size 829KB
        • SHA256 3c76cbd0841fbf6044dab6af73b770e044666b5e8336e92d74f330677ae4816a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        microsoft.directx.direct3dx.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\microsoft.directx.direct3dx.dll
        • Size 2.6MB
        • SHA256 7986e3fbe05418fe5d8425f2f1b76b7a7b09952f3ec560b286dd744bf7178059
        • MD5 SHA1 SHA512 SSDEEP TLSH

        microsoft.directx.direct3dx.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\microsoft.directx.direct3dx.dll
        • Size 2.7MB
        • SHA256 5b70f0ac40a38c903062a12ff7cd71d907e75238a044ded9b34fb51e9a9a2799
        • MD5 SHA1 SHA512 SSDEEP TLSH

        microsoft.directx.direct3dx.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\microsoft.directx.direct3dx.dll
        • Size 563KB
        • SHA256 c29d337bf7639fbf424b34cc0409d2715762e1b4d82881fb524a2508381c9f62
        • MD5 SHA1 SHA512 SSDEEP TLSH

        microsoft.directx.direct3dx.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\microsoft.directx.direct3dx.dll
        • Size 564KB
        • SHA256 36a21fc4f4c8f6ba4ad900613ee1b08ff43f2545585a2601c9fc4cf083d68a77
        • MD5 SHA1 SHA512 SSDEEP TLSH

        microsoft.directx.direct3dx.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\microsoft.directx.direct3dx.dll
        • Size 562KB
        • SHA256 5e90089e69e4f7e2e42ea4a81fb62005c3710d0a4acdf207b97ed03f5641d013
        • MD5 SHA1 SHA512 SSDEEP TLSH

        microsoft.directx.direct3dx.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\microsoft.directx.direct3dx.dll
        • Size 554KB
        • SHA256 f500c350dd71df7452b92444e19b4644b04283434a6557123f1e4d9fb078c3f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        microsoft.directx.direct3dx.xml

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\microsoft.directx.direct3dx.xml
        • Size 1.3MB
        • SHA256 80423d7cfaa5945cbad4cf96b65724c398ed503b4ff70b6951d8609987f15f7d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        microsoft.directx.direct3dx.xml

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\microsoft.directx.direct3dx.xml
        • Size 1.3MB
        • SHA256 1d809d3c4a123e3bcd745af2367be85266301ad7a4817049a44fc18e165afc7f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        microsoft.directx.directdraw.xml

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\microsoft.directx.directdraw.xml
        • Size 738KB
        • SHA256 4ae5c1ca9e8583dfaf856e32111a36e5802962101d2b67e1f50800d3cde3bce4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        microsoft.directx.directinput.xml

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\microsoft.directx.directinput.xml
        • Size 337KB
        • SHA256 6b66e10478cbe44c5a112fd0ed4e1d4b94ac34ac197cf2859082269127600819
        • MD5 SHA1 SHA512 SSDEEP TLSH

        microsoft.directx.directplay.xml

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\microsoft.directx.directplay.xml
        • Size 1.2MB
        • SHA256 5653483207a6e0e821afcbeb9c9ffdb7130502c5941f8df55a1d1dd29564aa03
        • MD5 SHA1 SHA512 SSDEEP TLSH

        microsoft.directx.directsound.xml

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\microsoft.directx.directsound.xml
        • Size 339KB
        • SHA256 65cdf4c3456fb46797776edcde06e16b1c17a1defc1c94c0c2af62f63a5cb2d6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        microsoft.directx.xml

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\microsoft.directx.xml
        • Size 259KB
        • SHA256 8600ecd86af17dca452991e55d7f54db97d9a99d81418016969677ea3ec96abb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nov2007_d3dx10_36_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\nov2007_d3dx10_36_x64.inf
        • Size 815B
        • SHA256 7a49ae818e199cf9f9bd831f94cb6d03a1e72a141d76546261979b30642757b7
        • MD5 SHA1 SHA512 TLSH

        nov2007_d3dx10_36_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\nov2007_d3dx10_36_x86.inf
        • Size 1KB
        • SHA256 96f48bb810055699d37e9e27a65947483a0b4df304870e3b5448d3051b3e4926
        • MD5 SHA1 SHA512 TLSH

        nov2007_d3dx9_36_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\nov2007_d3dx9_36_x64.inf
        • Size 812B
        • SHA256 d1b544b3912e73e5984cd759096120febe6f17e41a3cf920ef82431b9b569c1d
        • MD5 SHA1 SHA512 TLSH

        nov2007_d3dx9_36_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\nov2007_d3dx9_36_x86.inf
        • Size 1KB
        • SHA256 843764f70f56d430c0695e263c895a135a631f793213d1005fafcf9c210d1ac9
        • MD5 SHA1 SHA512 TLSH

        nov2007_x3daudio_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\nov2007_x3daudio_x64.inf
        • Size 815B
        • SHA256 1cc72ca78433fbb72ee6b654c908748ea846c87c80424816745f285ed3bc910b
        • MD5 SHA1 SHA512 TLSH

        nov2007_x3daudio_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\nov2007_x3daudio_x86.inf
        • Size 1KB
        • SHA256 f882bdbc8230d24b24e20f9d0db447586e9493801900a8ba381eb493bd41f5d5
        • MD5 SHA1 SHA512 TLSH

        nov2007_xact_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\nov2007_xact_x64.inf
        • Size 926B
        • SHA256 841d579573afd51499c7cd8ee986a41db63cedb722e8fac351d3632ff470c161
        • MD5 SHA1 SHA512 TLSH

        nov2007_xact_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\nov2007_xact_x86.inf
        • Size 1KB
        • SHA256 24714f229e479338ed89bdd6143140505fd63f517b7e71170ea6c072a1748b06
        • MD5 SHA1 SHA512 TLSH

        oct2006_d3dx9_31_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\oct2006_d3dx9_31_x64.inf
        • Size 806B
        • SHA256 c031987e68e476365cd885e41a072f85fdfc9e480c93871d024a5ccf26d17118
        • MD5 SHA1 SHA512 TLSH

        oct2006_d3dx9_31_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\oct2006_d3dx9_31_x86.inf
        • Size 1KB
        • SHA256 a1c61096019a6ae1a9f31e3fe67aa2bb7e9e451967959d7088344f3f20ab572e
        • MD5 SHA1 SHA512 TLSH

        oct2006_xact_x64.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\oct2006_xact_x64.inf
        • Size 908B
        • SHA256 4c388e9eaf3c39e75d003a58020e491b675b3a6054c702062a9c90e86f691d96
        • MD5 SHA1 SHA512 TLSH

        oct2006_xact_x86.inf

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\oct2006_xact_x86.inf
        • Size 1KB
        • SHA256 66998b21cbe6f05b12cdb4bb45549dcb1b4a92f8a1b910334150a8d767fa39e9
        • MD5 SHA1 SHA512 TLSH

        x3daudio1_0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\x3daudio1_0.dll
        • Size 13KB
        • SHA256 228dfece2b4555a243a73e7bf461036f1e53951977625651ff5a59deaeaf4b88
        • MD5 SHA1 SHA512 SSDEEP TLSH

        x3daudio1_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\x3daudio1_1.dll
        • Size 14KB
        • SHA256 ff15f14174a5543f028fa49cca745582fe4cacf3bbe490749cf43444690ab359
        • MD5 SHA1 SHA512 SSDEEP TLSH

        x3daudio1_2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\x3daudio1_2.dll
        • Size 17KB
        • SHA256 7c06bb70d12cf78de9c6a12a53c95f9dba41c140a48bccd500483e5b87795a8c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xactengine2_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\xactengine2_1.dll
        • Size 224KB
        • SHA256 666cef7d27a38f709063c9c581fd95e6b3fa27167bff4beff484dba2dc922a2b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xactengine2_2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\xactengine2_2.dll
        • Size 224KB
        • SHA256 4f996edb65022e33ae9c9f7acf7232c8d444f75c50c72894f6d3173b55404ebe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xactengine2_3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\xactengine2_3.dll
        • Size 231KB
        • SHA256 ca20cf8e4034719a46bf67c6009486c2c1cfc2da10ffed3a67dcae677b4f6793
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xactengine2_4.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\xactengine2_4.dll
        • Size 232KB
        • SHA256 1e0e09fc077bdeee3de065c663b83f6717d39d56778833f030955077d490d000
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xactengine2_5.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\xactengine2_5.dll
        • Size 245KB
        • SHA256 ec68b5163cbb5f15e2fbe37fdf5fcb0d01dffbe53a460cb2cf668f31f0127ad5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xactengine2_6.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\xactengine2_6.dll
        • Size 249KB
        • SHA256 be45aef0889b03e2243282a912f41580e8566db666a782c26a1d4d7988799d03
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xactengine2_7.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\xactengine2_7.dll
        • Size 255KB
        • SHA256 a43c92af3fbe91dfe2a1d415342631fe64e18c7dd3e16e93b6c78947b68e7bd6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xactengine2_8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\xactengine2_8.dll
        • Size 259KB
        • SHA256 15d82e89bea30bf82de6ba0cfbe97eeaf05d1e06bc0133f0d1ee8d0cc41f51f6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xinput1_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\xinput1_1.dll
        • Size 61KB
        • SHA256 69cd725c53e0302e75db20e9a3e4b33f58dceaa2e6ea4938b2733df8bc289a71
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xinput1_2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\xinput1_2.dll
        • Size 61KB
        • SHA256 9714d146a785d458f0de8fef387d82c9f8e101c02407a0cbeb06f02a69518eec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xinput1_3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\DX6227.tmp\xinput1_3.dll
        • Size 79KB
        • SHA256 8d540d484ea41e374fd0107d55d253f87ded4ce780d515d8fd59bbe8c98970a7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DXIDE07.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\DXIDE07.tmp
        • Size 56KB
        • SHA256 ed710d035ccaab0914810becf2f5db2816dba3a351f3666a38a903c80c16997a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dsetup32.dll

        • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dsetup32.dll
        • Size 1.5MB
        • SHA256 8a011da043a4b81e2b3d41a332e0ff23a65d546bd7636e8bc74885e8746927d6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxupdate.cif

        • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxupdate.cif
        • Size 65KB
        • SHA256 c6c5e877e92d387e977c135765075b7610df2500e21c16e106a225216e6442ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxupdate.dll

        • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxupdate.dll
        • Size 173KB
        • SHA256 fb4f297e295c802b1377c6684734b7249d55743dfb7c14807bef59a1b5db63a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxwsetup.cif

        • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.cif
        • Size 56KB
        • SHA256 762ff640013db2bd4109d7df43a867303093815751129bd1e33f16bf02e52cce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxwsetup.exe

        • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe
        • Size 515KB
        • SHA256 8f5e89298e3dc2e22d47515900c37cca4ee121c5ba06a6d962d40ad6e1a595da
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxwsetup.inf

        • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.inf
        • Size 477B
        • SHA256 d63c35e9b43eb0f28ffc28f61c9c9a306da9c9de3386770a7eb19faa44dbfc00
        • MD5 SHA1 SHA512 TLSH

        dxwebsetup.exe

        • Path C:\Users\Admin\AppData\Local\Temp\OpenIV Setup_0E587B74\dxwebsetup.exe
        • Size 285KB
        • SHA256 34f64699d4830145cae69bd40115b1f326e70fc6a98456cb3df996d947dddca4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OpenIV_Setup_Install.log

        • Path C:\Users\Admin\AppData\Local\Temp\OpenIV_Setup_Install.log
        • Size 1KB
        • SHA256 180a53091981d67544e58d9a5b99509be0733c93afa1cbeff87da8fca49077eb
        • MD5 SHA1 SHA512 TLSH

        OpenIV_Setup_Install.log

        • Path C:\Users\Admin\AppData\Local\Temp\OpenIV_Setup_Install.log
        • Size 5KB
        • SHA256 4ba179d6ac80059107bd5d291e4caf07ebc6869b530ef93e2eec2fa8afbffcf4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OpenIV_Setup_Install.log

        • Path C:\Users\Admin\AppData\Local\Temp\OpenIV_Setup_Install.log
        • Size 644B
        • SHA256 f0edb12014a938818a0181cd31f68bc7d98ba5dfd3d75677310bbacf550fe468
        • MD5 SHA1 SHA512 TLSH

        DirectX.log

        • Path C:\Windows\DirectX.log
        • Size 392B
        • SHA256 e5fb45d44226bcf3eb39c87062efbeb7972729a0f5429305716f345fe845e18e
        • MD5 SHA1 SHA512 TLSH

        DirectX.log

        • Path C:\Windows\DirectX.log
        • Size 588B
        • SHA256 4dae1a7b5ccf58a7bce6f377949bee41009e4707c2f39825c4694d305fe18ac1
        • MD5 SHA1 SHA512 TLSH

        DirectX.log

        • Path C:\Windows\DirectX.log
        • Size 707B
        • SHA256 02047a683cd6e7738cce599b1209c51d002cb94d6e6c44dae208d08c9e9290c3
        • MD5 SHA1 SHA512 TLSH

        DirectX.log

        • Path C:\Windows\DirectX.log
        • Size 903B
        • SHA256 ffd37e4d8218c898f83bba2a1d4074fac76fc838aace1bc92dddc560c3e43de4
        • MD5 SHA1 SHA512 TLSH

        DirectX.log

        • Path C:\Windows\DirectX.log
        • Size 1KB
        • SHA256 c4a5cc60496945b57c05879d9ef80b2556d484eebab31bc08502289e9aa7559b
        • MD5 SHA1 SHA512 TLSH

        DirectX.log

        • Path C:\Windows\DirectX.log
        • Size 4KB
        • SHA256 4acd9ce73b4415acb6501f828b5f20798008e68cc2781d7f3863fb41862ba29e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DirectX.log

        • Path C:\Windows\Logs\DirectX.log
        • Size 95KB
        • SHA256 470ba357868c75855a61156d23335a61d480ebe2046bbfd34926f09b03cfcd7b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DirectX.log

        • Path C:\Windows\Logs\DirectX.log
        • Size 1KB
        • SHA256 4944f41a7f6b47423e72a418d2b2b55cc2a537795107dd8c2b5dea29870bd105
        • MD5 SHA1 SHA512 TLSH

        DirectX.log

        • Path C:\Windows\Logs\DirectX.log
        • Size 3KB
        • SHA256 77acbcf5b3054ba8e844aa8ae548ce56cede4b744f9b3a5db7dd16acbf71f521
        • MD5 SHA1 SHA512 TLSH

        Jun2008_d3dx10_38_x86.cab

        • Path C:\Windows\SysWOW64\directx\websetup\Jun2008_d3dx10_38_x86.cab
        • Size 833KB
        • SHA256 e8dc1063c9434eed8d633741b19cdfa1889581041e2214b87b5159e3ea087f3c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2010_D3DCompiler_43_x64.cab

        • Path C:\Windows\SysWOW64\directx\websetup\Jun2010_D3DCompiler_43_x64.cab
        • Size 925KB
        • SHA256 9b56aba20f49739cde64f07ec317b6e20b0713fb9ae697318d811a0f103a6dbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2009_xact_x86.cab

        • Path C:\Windows\SysWOW64\directx\websetup\Mar2009_xact_x86.cab
        • Size 93KB
        • SHA256 250c430741fc09d74ef6f43559a365ee908f52d96cfdacc7b6d8bf5e1bd3e5e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nov2007_d3dx10_36_x64.cab

        • Path C:\Windows\SysWOW64\directx\websetup\Nov2007_d3dx10_36_x64.cab
        • Size 847KB
        • SHA256 bee9bec21771bc5365847be692e785ea619d625df629981a167429df6f0cc9cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SETD7FC.tmp

        • Path C:\Windows\SysWOW64\directx\websetup\SETD7FC.tmp
        • Size 93KB
        • SHA256 57bc22850bb8e0bcc511a9b54cd3da18eec61f3088940c07d63b9b74e7fe2308
        • MD5 SHA1 SHA512 SSDEEP TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 111B
        • SHA256 e60413bec64775bf1933ef4f9673c8bcfbe0ce71e950fd589bbd14c0f9a00359
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 243B
        • SHA256 c9ebd0c038382084726724ee5203e547bb79c34a99e95bb4e1e9b4bfd8def35d
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 384B
        • SHA256 df533eb9e0dbc2d1822963a5de20a7fecf8539e7308eb542653e6dcae9c82bb9
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 137B
        • SHA256 f960075a7b1c2590e18700f3230f7baea9aced3e6ba5dc93dac193027b5cec48
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 525B
        • SHA256 97d97b1c7f27857c71ad255d8127d6aee07ac9d9ff89cf26122d2b67725245dd
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 666B
        • SHA256 f62e34af76dd829b4fa111ec5fd14ccf7223e8d8be149ba08c9fbdccd822af91
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 807B
        • SHA256 9efd51642c41cf85174850e297a4b3aca1ce824819dcda2fa7a22dfbb260d7fe
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 846B
        • SHA256 f3b914fc3e918ae6f11f166cc1b4f9612d92d4dfc92603e617204b0a7feafc63
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 1KB
        • SHA256 f926561442ba3d43ee6ea8d4b42588b25d5b8a382577fcd89ee3bf2c263084ae
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 1KB
        • SHA256 54105c40e60d076517bc71a5594ce0adb7ad155c3eb9ea4baef272c3daf414fa
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 1KB
        • SHA256 39b61c1336e7bb95487dccaad47d33cff953589c17f51496a95342fcb17f148e
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 1KB
        • SHA256 f064b65618e11a6fef9253c955c36c8af441113aa7609822f2a02bf48c0ee3ff
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 1KB
        • SHA256 82cc97bae6609440ac13a3ea1d322213e157994e34ae69b007a84415f05500f7
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 1KB
        • SHA256 95717606d873b60d96be315921e2dc8e0d33d7e520e544cb68ccfa9d01b77afd
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 1KB
        • SHA256 7c9f53aecd03fceab89cd51734197fb3d77b819c99a6af0fd9f8f5f9baa1e785
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 2KB
        • SHA256 13f74a30aba7102226de97797839832b44d9987ce7d23c2c711903a5709b25d4
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 2KB
        • SHA256 4b2c282cd66821c6622f9f0f563e34a7c865db59f79c993c62347bda84427a35
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 2KB
        • SHA256 830f7d089d575cbfc227a0db375196a7d8d5078af42884e4582660bb2a4bb767
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 2KB
        • SHA256 36a9f0b234a4b274ad23d470224dcdab49a81a7f54bea7df9f0247a33a3ebf87
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 2KB
        • SHA256 6a19ec15b0a4911b2647f240bc43ad7d0b861d131acae2bb8f0eea2c94249399
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 2KB
        • SHA256 58fad17da80f0ab474f029b87f3b02d33876d4f098a9aa4f0923af347493c457
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 2KB
        • SHA256 95c5c1cd8a611b120d9679dee736734d5577f16b55b41de8bff677b5f9bc671a
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 2KB
        • SHA256 3f6c60f017ac9e5f8019e41e11367843a5bbb1c80c32c5e9cf16b8a0fab67d5d
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 3KB
        • SHA256 3f9257e94d34a5d9c2a623fdf8f76325ed76ab843fa349e8bfc9d10686d85f9f
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 3KB
        • SHA256 8e781f69d16f7836dfadd36f83c68c601580bec6de797d4ee64a48737d31e5ae
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 3KB
        • SHA256 d3a15b921d27ceb8d84477506f951082fbbd796e0fde794aedf2211628cfa955
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 3KB
        • SHA256 5d455aec145c442f759e0b4464ba5eb8b10b2df1cc4801d0ec134c77a2a9295c
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 3KB
        • SHA256 5f31262fbc7876338e63845e7dbbac366dbd1e2d9efdd062f07dba4c1f225239
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 3KB
        • SHA256 5ffc9c8ddadad4cc26dc6758b142d86b882a0cc840c53503b923e5e70c6507ab
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 3KB
        • SHA256 cb58110c6d731f63ec93d03536358ad0b4ad2d65a8cab2e9f7a62266cb5a1ddc
        • MD5 SHA1 SHA512 TLSH

        filelist.dat

        • Path C:\Windows\SysWOW64\directx\websetup\filelist.dat
        • Size 4KB
        • SHA256 57bc21b86044daf245e01b6e546994ae1ae05a5d7f9c4bf4f82f6f3435935514
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xactengine2_0.dll

        • Path C:\Windows\SysWOW64\xactengine2_0.dll
        • Size 224KB
        • SHA256 cfd1c2d34feb7d94f282e97bf762a99bfa7309dc7353d96dfe4aadc187d26c67
        • MD5 SHA1 SHA512 SSDEEP TLSH

        D3DCompiler_33.dll

        • Path C:\Windows\System32\D3DCompiler_33.dll
        • Size 1.3MB
        • SHA256 90dc7e301a3dfb1c015cb73811b77a5ea21f8ee46944011bca3a270584473013
        • MD5 SHA1 SHA512 SSDEEP TLSH

        D3DCompiler_34.dll

        • Path C:\Windows\System32\D3DCompiler_34.dll
        • Size 1.3MB
        • SHA256 95538ba7d65336b617f64d66789f3bf53f9bf52ffd4f717483d1a7e6a02c64b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx10.dll

        • Path C:\Windows\System32\d3dx10.dll
        • Size 458KB
        • SHA256 03115a37f75fffb7abf07a59ec6ecb5217d3479bc95f92846c7e9b91822a0567
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx10_33.dll

        • Path C:\Windows\System32\d3dx10_33.dll
        • Size 494KB
        • SHA256 3f0248c3bb9bda2a901b343b3b58172e175a86450d421f0fc4aebbd5a7d11477
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx10_34.dll

        • Path C:\Windows\System32\d3dx10_34.dll
        • Size 494KB
        • SHA256 f7f367df5d0fb5e32113515339d928a51d4253b1c0e21854277f67d0b271fce3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_30.dll

        • Path C:\Windows\System32\d3dx9_30.dll
        • Size 3.7MB
        • SHA256 7d1374e3b921a70b5028472ab164d9e582e3c3525334235d642664189da9b157
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_31.dll

        • Path C:\Windows\System32\d3dx9_31.dll
        • Size 3.8MB
        • SHA256 84167b7df7e97c63f0cc15c1d272cdc7bba942f6f36a8801aec9840825891d0d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_32.dll

        • Path C:\Windows\System32\d3dx9_32.dll
        • Size 4.2MB
        • SHA256 7c723479e3720a52f286d2e9e044f19ed893a34e6819d53e4de6991048febad1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_33.dll

        • Path C:\Windows\System32\d3dx9_33.dll
        • Size 4.3MB
        • SHA256 7338b1d039d0c08e45f24874e4918ffa642ebfe5967c96035f66f509265fa33e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_34.dll

        • Path C:\Windows\System32\d3dx9_34.dll
        • Size 4.3MB
        • SHA256 715fa6d4931324cca594c4fdfc60274ed29d296bb4592d102b36bc976c8b8ada
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dx9_35.dll

        • Path C:\Windows\System32\d3dx9_35.dll
        • Size 4.0MB
        • SHA256 704e831d05d70349922b7caada34d7b8b5371963407fc69387fde82c479fcd92
        • MD5 SHA1 SHA512 SSDEEP TLSH

        x3daudio1_0.dll

        • Path C:\Windows\System32\x3daudio1_0.dll
        • Size 16KB
        • SHA256 77cc09cea6de69f12106e6dd9df1c0446a525a54c3953d69d64711b9394cc38f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        x3daudio1_1.dll

        • Path C:\Windows\System32\x3daudio1_1.dll
        • Size 17KB
        • SHA256 fac23787e7c199c1969806850b5a9652f66f6dcac86f48f6f834abc253848a55
        • MD5 SHA1 SHA512 SSDEEP TLSH

        x3daudio1_2.dll

        • Path C:\Windows\System32\x3daudio1_2.dll
        • Size 20KB
        • SHA256 9566e346fbf72928e9b48b3408c8336a9e77b331bbc729e8ced9f0670c51c699
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xactengine2_0.dll

        • Path C:\Windows\System32\xactengine2_0.dll
        • Size 347KB
        • SHA256 a00ad310f3d7b2d4de2f5a4c081359fa443ce0baecc72ebf39d6b30ccf7babce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xactengine2_1.dll

        • Path C:\Windows\System32\xactengine2_1.dll
        • Size 344KB
        • SHA256 3ca31f274ea55cb966ec0b49addf72e1e21269406ae5fc44de3d5bbc884a6ce4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xactengine2_2.dll

        • Path C:\Windows\System32\xactengine2_2.dll
        • Size 345KB
        • SHA256 7b4e5938f1f69e5b8aaa8ecb479245b5773786192a47f9fdf6bd8eccfb109b83
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xactengine2_3.dll

        • Path C:\Windows\System32\xactengine2_3.dll
        • Size 354KB
        • SHA256 1cf72300e03b4b6fc48e1d9e79d93c42d657ee1f87153035d1578d1af8616ad5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xactengine2_4.dll

        • Path C:\Windows\System32\xactengine2_4.dll
        • Size 356KB
        • SHA256 2bfa6e7b793299a306a554b60a39d001e493937e88dca403d9f0dd1ea0de1aa0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xactengine2_5.dll

        • Path C:\Windows\System32\xactengine2_5.dll
        • Size 381KB
        • SHA256 a737ea87fd5b44343c26da6d47508901b916b83c5f4a508c0b18c56faf8c0329
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xactengine2_6.dll

        • Path C:\Windows\System32\xactengine2_6.dll
        • Size 384KB
        • SHA256 9f4c316be32e4de8c6594c26ff50410d2763b5f3320741b912a81a9ea9b7728e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xactengine2_7.dll

        • Path C:\Windows\System32\xactengine2_7.dll
        • Size 393KB
        • SHA256 bcf3012a44b448402166bbab661a9fbca7f9e3c11ad17b3f96a54bbbb82bb235
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xactengine2_8.dll

        • Path C:\Windows\System32\xactengine2_8.dll
        • Size 400KB
        • SHA256 43a29c6dae6468ca4163795a7555003a71384b8dbe052be0b3bf1d7d4d19cf24
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xinput1_1.dll

        • Path C:\Windows\System32\xinput1_1.dll
        • Size 81KB
        • SHA256 87c7f921bbf171fa04f7c2adaf8b25d4bf152d12c6b99771da42f3af07f78987
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xinput1_2.dll

        • Path C:\Windows\System32\xinput1_2.dll
        • Size 81KB
        • SHA256 77055b6a144c4017acd0a8b34520cf9a84be6b9c75db40f7a708b9f4e38aa138
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xinput1_3.dll

        • Path C:\Windows\System32\xinput1_3.dll
        • Size 104KB
        • SHA256 756cad002e1553cfa1a91ebe8c1b9380ffabe0b4b1916c4a4db802396ddfbef8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.DirectX.Direct3DX.dll

        • Path C:\Windows\assembly\tmp\1DO6YGQN\Microsoft.DirectX.Direct3DX.dll
        • Size 565KB
        • SHA256 2ee41d4d591a39d648e90db4d47d0fa0557fd68197756ee2ee94fcde4d820cfa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __AssemblyInfo__.ini

        • Path C:\Windows\assembly\tmp\1DO6YGQN\__AssemblyInfo__.ini
        • Size 308B
        • SHA256 7ce2c40620f69be28e28763c3d53a3b467a7e23151fc8800bada09bf1e7e7d3e
        • MD5 SHA1 SHA512 TLSH

        Microsoft.DirectX.AudioVideoPlayback.dll

        • Path C:\Windows\assembly\tmp\1IHJU2O8\Microsoft.DirectX.AudioVideoPlayback.dll
        • Size 52KB
        • SHA256 406f473429573e9f0084aae125ef8f19f59291aa4c33cf7d40e7d996995a3238
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __AssemblyInfo__.ini

        • Path C:\Windows\assembly\tmp\3MZSQYLG\__AssemblyInfo__.ini
        • Size 308B
        • SHA256 0ff0a897d5ee3a6d429bccc2027c26ee8abacef7e246b08acf0299eb937762c5
        • MD5 SHA1 SHA512 TLSH

        Microsoft.DirectX.Direct3DX.dll

        • Path C:\Windows\assembly\tmp\5HP2TCEY\Microsoft.DirectX.Direct3DX.dll
        • Size 565KB
        • SHA256 78d85f0e2cb7d7bde534222f4ebfea1c9e06d37ecd3bb7ebd59e35f00b94b11d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __AssemblyInfo__.ini

        • Path C:\Windows\assembly\tmp\5HP2TCEY\__AssemblyInfo__.ini
        • Size 308B
        • SHA256 b65c037642c16d3fb870eb32a9db4318f7a004ca2158af74484d2c72506b8b5a
        • MD5 SHA1 SHA512 TLSH

        Microsoft.DirectX.DirectDraw.dll

        • Path C:\Windows\assembly\tmp\83O2AQBT\Microsoft.DirectX.DirectDraw.dll
        • Size 142KB
        • SHA256 ff4c03bbeb292317a77c86c1c81ae9564acb984b352fbef36d66e2d8bcbd79a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __AssemblyInfo__.ini

        • Path C:\Windows\assembly\tmp\83O2AQBT\__AssemblyInfo__.ini
        • Size 310B
        • SHA256 3ddeea206f33bd5fa32a55c7afb3b17218bbbf73c9d12c838d90bd26c675532b
        • MD5 SHA1 SHA512 TLSH

        Microsoft.DirectX.dll

        • Path C:\Windows\assembly\tmp\CHK3J92E\Microsoft.DirectX.dll
        • Size 218KB
        • SHA256 942e98f142373547493f13b14e1603b2420851aff013d3085bada7b6b2214d9c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __AssemblyInfo__.ini

        • Path C:\Windows\assembly\tmp\CHK3J92E\__AssemblyInfo__.ini
        • Size 288B
        • SHA256 68eb823277690bd65eaedc7908ee7fc3e4d7760ff8d81e119b83ed388483d8aa
        • MD5 SHA1 SHA512 TLSH

        Microsoft.DirectX.DirectSound.dll

        • Path C:\Windows\assembly\tmp\EPP8DOA9\Microsoft.DirectX.DirectSound.dll
        • Size 174KB
        • SHA256 2e28c8fb8b87b5ffd1e0ea27710a2e785ef4741a89e4b3c3af726ec63d15a1fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __AssemblyInfo__.ini

        • Path C:\Windows\assembly\tmp\EPP8DOA9\__AssemblyInfo__.ini
        • Size 312B
        • SHA256 5aa270e87cce74f45c8914afbdb5cdc2907847ab2fbab486354d1cdd622cb60c
        • MD5 SHA1 SHA512 TLSH

        __AssemblyInfo__.ini

        • Path C:\Windows\assembly\tmp\EXYEUXLK\__AssemblyInfo__.ini
        • Size 308B
        • SHA256 cd1641c83d91e9fa4f9d89cf437114c39a37d03ad0e8264302996aaeddba6888
        • MD5 SHA1 SHA512 TLSH

        __AssemblyInfo__.ini

        • Path C:\Windows\assembly\tmp\L7BLPM4B\__AssemblyInfo__.ini
        • Size 308B
        • SHA256 c0cd6fdad53d815f5d64233530b9e3e4e0998077653a62d5da5623fc4244c325
        • MD5 SHA1 SHA512 TLSH

        __AssemblyInfo__.ini

        • Path C:\Windows\assembly\tmp\O32JTAQU\__AssemblyInfo__.ini
        • Size 308B
        • SHA256 30a5ea3bbc5d69acff6e3313237dcc1a6311084e6c5d6ef2f629e97b39e10c83
        • MD5 SHA1 SHA512 TLSH

        Microsoft.DirectX.Diagnostics.dll

        • Path C:\Windows\assembly\tmp\PAHKZR8T\Microsoft.DirectX.Diagnostics.dll
        • Size 12KB
        • SHA256 8c9685959706750091b0094522cec8644de1d1c6309e7a2fe02cef130d3a2b9c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.DirectX.DirectPlay.dll

        • Path C:\Windows\assembly\tmp\QPGYXX48\Microsoft.DirectX.DirectPlay.dll
        • Size 356KB
        • SHA256 489f65e1e00534835486e9255eec92b83edae4dade6dff867a380859ae53006a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __AssemblyInfo__.ini

        • Path C:\Windows\assembly\tmp\QPGYXX48\__AssemblyInfo__.ini
        • Size 310B
        • SHA256 367d963938953e53af5dad233e419b21b4fe90474951810bc053f2a705a960c5
        • MD5 SHA1 SHA512 TLSH

        Microsoft.DirectX.Direct3D.dll

        • Path C:\Windows\assembly\tmp\R1XFV3AZ\Microsoft.DirectX.Direct3D.dll
        • Size 462KB
        • SHA256 f3359d5e41b1d4fec7230579a593e40fe44f6afdfacd1e2bbe52ee06d84686fb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __AssemblyInfo__.ini

        • Path C:\Windows\assembly\tmp\R1XFV3AZ\__AssemblyInfo__.ini
        • Size 306B
        • SHA256 bc8039b5599a525a28d268fca05766417cc33f55075fc7ec5cb0e2dd085d54cd
        • MD5 SHA1 SHA512 TLSH

        Microsoft.DirectX.DirectInput.dll

        • Path C:\Windows\assembly\tmp\T0SHZK8Q\Microsoft.DirectX.DirectInput.dll
        • Size 155KB
        • SHA256 0ee2a2c371a918cabc85143202864d0c3a4abf1b93a5029081a622e0acf17ab7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __AssemblyInfo__.ini

        • Path C:\Windows\assembly\tmp\T0SHZK8Q\__AssemblyInfo__.ini
        • Size 312B
        • SHA256 b732a1fffecd9109b53ad21b041e476b9ee9f557e75243ead728e722505ee7ea
        • MD5 SHA1 SHA512 TLSH

        Microsoft.DirectX.Direct3DX.dll

        • Path C:\Windows\assembly\tmp\TUHHWS6X\Microsoft.DirectX.Direct3DX.dll
        • Size 564KB
        • SHA256 bebbc40ca25ef22e9d16b0de1123e0cb0444fe7a78b4f0b4395bdfd81618698c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __AssemblyInfo__.ini

        • Path C:\Windows\assembly\tmp\TUHHWS6X\__AssemblyInfo__.ini
        • Size 308B
        • SHA256 b784fb10c8b884194bfdb80b331894fc30ab58a6931cc35ee76b18e5d6213c21
        • MD5 SHA1 SHA512 TLSH

        Microsoft.DirectX.Direct3DX.dll

        • Path C:\Windows\assembly\tmp\ZJ7UBF2L\Microsoft.DirectX.Direct3DX.dll
        • Size 550KB
        • SHA256 8418941d8f1d4c84288e0bf54392378dd3d87b602bb693ff4f8a633022681c12
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __AssemblyInfo__.ini

        • Path C:\Windows\assembly\tmp\ZJ7UBF2L\__AssemblyInfo__.ini
        • Size 308B
        • SHA256 b28d5c003b74edab8de58ecee287da0cdb65d4087440a80f0b9e490a0ac80558
        • MD5 SHA1 SHA512 TLSH

        dxupdate.cab

        • Path C:\Windows\msdownld.tmp\AS58DFF1.tmp\dxupdate.cab
        • Size 98KB
        • SHA256 6e39b3fdb6722ea8aa0dc8f46ae0d8bd6496dd0f5f56bac618a0a7dd22d6cfb2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Apr2006_xinput_x86.cab

        • Path C:\Windows\msdownld.tmp\AS58F4B2.tmp\Apr2006_xinput_x86.cab
        • Size 48KB
        • SHA256 3fdf63211b0dd38069a9c1df74d7bc42742de003cef72ad1486aaa92d74546fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Apr2006_xinput_x64.cab

        • Path C:\Windows\msdownld.tmp\AS58F5DB.tmp\Apr2006_xinput_x64.cab
        • Size 88KB
        • SHA256 e63a67783ef7624559f95ab697bf8afbdab7ace31200283ef840e6b94aa16e5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2006_xinput_x86.cab

        • Path C:\Windows\msdownld.tmp\AS58F6B5.tmp\Aug2006_xinput_x86.cab
        • Size 48KB
        • SHA256 6dd7c0abe37d3df7aa6db7bb352260f4a15dc965ff9d30aa32fe9595c1a18300
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2006_xinput_x64.cab

        • Path C:\Windows\msdownld.tmp\AS58FBB7.tmp\Aug2006_xinput_x64.cab
        • Size 88KB
        • SHA256 c26633d38e0a91b9be70382e916a83d50e219609f7e05cfb2d27dfafbe480b43
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Dec2006_d3dx10_00_x86.cab

        • Path C:\Windows\msdownld.tmp\AS58FD7C.tmp\Dec2006_d3dx10_00_x86.cab
        • Size 190KB
        • SHA256 02daa8b5ac3752f76c3bfd9a505ebf22b1b4b41e44eb92ce2799033b2330d186
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Dec2006_d3dx10_00_x64.cab

        • Path C:\Windows\msdownld.tmp\AS58FF70.tmp\Dec2006_d3dx10_00_x64.cab
        • Size 210KB
        • SHA256 f9bd5bb083bd55d1d2a690bc66d6d9da0b1a8b49f09e811e788c030669121118
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Apr2007_xinput_x86.cab

        • Path C:\Windows\msdownld.tmp\AS590164.tmp\Apr2007_xinput_x86.cab
        • Size 55KB
        • SHA256 b6c1166c57d91afeeeaa745238d0d6465ff2084f0606fd29faf1bfa9e008a6c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Apr2007_xinput_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59026D.tmp\Apr2007_xinput_x64.cab
        • Size 97KB
        • SHA256 86ee073c199b5080fe4f5be6ac24bb1117fea42e4bbcd828b4f0ec26c669b22c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Feb2005_d3dx9_24_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5903B6.tmp\Feb2005_d3dx9_24_x86.cab
        • Size 992KB
        • SHA256 3d4e48874bddcd739cf79bf2b3fd195d7c3e861f738dc2eab19f347545f83068
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Apr2005_d3dx9_25_x86.cab

        • Path C:\Windows\msdownld.tmp\AS590721.tmp\Apr2005_d3dx9_25_x86.cab
        • Size 1.0MB
        • SHA256 5487ed4e969a822e5c481cefb1d4da3066b1d5ec8c55798b246915ecb58a8665
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2005_d3dx9_26_x86.cab

        • Path C:\Windows\msdownld.tmp\AS590A3D.tmp\Jun2005_d3dx9_26_x86.cab
        • Size 1.0MB
        • SHA256 c44eabf5be3b87cd845950670c27f6a1e5d92b7758ba7c39c7849b1ee1c649c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2005_d3dx9_27_x86.cab

        • Path C:\Windows\msdownld.tmp\AS590D7A.tmp\Aug2005_d3dx9_27_x86.cab
        • Size 1.0MB
        • SHA256 8c062b22dc2814d4f426827b4bf8cfd95989fd986fb3aaa23438a485ee748d6d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Dec2005_d3dx9_28_x86.cab

        • Path C:\Windows\msdownld.tmp\AS591096.tmp\Dec2005_d3dx9_28_x86.cab
        • Size 1.0MB
        • SHA256 645f8d90b07c69330a8c7c8912d70538411c9a6b2813048da8ad3c3119487f93
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Feb2006_d3dx9_29_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5913B3.tmp\Feb2006_d3dx9_29_x86.cab
        • Size 1.0MB
        • SHA256 4114e76799af3da9db3dae51305dad70a05b757e506e4a327092d536cca7ee75
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Apr2006_d3dx9_30_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5916E0.tmp\Apr2006_d3dx9_30_x86.cab
        • Size 1.1MB
        • SHA256 ca7b9c6a49e986c350147f00a6c95c5b577847b5667b75681a1ee15e3a189106
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Oct2006_d3dx9_31_x86.cab

        • Path C:\Windows\msdownld.tmp\AS591A3B.tmp\Oct2006_d3dx9_31_x86.cab
        • Size 1.1MB
        • SHA256 4891e2dea9d1798f6a89308e58c61a38e612f8433301ea2376ae14c3dfcb3021
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Dec2006_d3dx9_32_x86.cab

        • Path C:\Windows\msdownld.tmp\AS591D77.tmp\Dec2006_d3dx9_32_x86.cab
        • Size 1.5MB
        • SHA256 a1cc7603302ee53d54f4353c223d95e223706924d99b864220b13814ef93eefb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Apr2007_d3dx9_33_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59219E.tmp\Apr2007_d3dx9_33_x86.cab
        • Size 1.5MB
        • SHA256 efa2e6de548401376a575e83a79de019aa38f191d63fdef3bd2b07d8cb33e3d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Apr2007_d3dx10_33_x86.cab

        • Path C:\Windows\msdownld.tmp\AS592586.tmp\Apr2007_d3dx10_33_x86.cab
        • Size 682KB
        • SHA256 949068035ce57bbb3658217ec04f8de7a122c6e7857b6f8b0ca002eb573df553
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2007_d3dx9_34_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5927A9.tmp\Jun2007_d3dx9_34_x86.cab
        • Size 1.5MB
        • SHA256 1c1e1c6f68ba556a0af09a38c32eb421c543a4848c4b42d25867c98dab3b3a50
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2007_d3dx10_34_x86.cab

        • Path C:\Windows\msdownld.tmp\AS592BEE.tmp\Jun2007_d3dx10_34_x86.cab
        • Size 685KB
        • SHA256 8ec971c91040618338ac2369188f3e5d7c85a5b1e3b9fc8e752dd845d295cdba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2007_d3dx9_35_x86.cab

        • Path C:\Windows\msdownld.tmp\AS592E11.tmp\Aug2007_d3dx9_35_x86.cab
        • Size 1.6MB
        • SHA256 4914d2b5c3251b00c0cc236f51afe469728d92b50c953c66d213f079ac928eac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2007_d3dx10_35_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5931EA.tmp\Aug2007_d3dx10_35_x86.cab
        • Size 781KB
        • SHA256 9536166ee7cc1100cfe24e01532e8e4deed6baa838b4c025581f2ca046a25915
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nov2007_d3dx9_36_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59347A.tmp\Nov2007_d3dx9_36_x86.cab
        • Size 1.6MB
        • SHA256 f52cc1304b533083b3fc5553c49433c0e4e46d66d567b9de0b558ca518db1544
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nov2007_d3dx10_36_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5938A0.tmp\Nov2007_d3dx10_36_x86.cab
        • Size 788KB
        • SHA256 bdf7fb01c02783a4f8c9f5e7911f5cae3e2a7cbc425b90b36f9ea6eef2c27de3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2008_d3dx9_37_x86.cab

        • Path C:\Windows\msdownld.tmp\AS593B02.tmp\Mar2008_d3dx9_37_x86.cab
        • Size 1.4MB
        • SHA256 91a50d9efcdfbcdf22a91d6fbb0f50d3c2aa75f926d05cc166020bf7aaf30e28
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2008_d3dx10_37_x86.cab

        • Path C:\Windows\msdownld.tmp\AS593EDA.tmp\Mar2008_d3dx10_37_x86.cab
        • Size 802KB
        • SHA256 6a2727269e6cac7c4d2e316333d29bac0dc1cd7f51c36c0c08b0388203dedad2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2008_d3dx9_38_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5941A9.tmp\Jun2008_d3dx9_38_x86.cab
        • Size 1.4MB
        • SHA256 57e57a6348e55aaaca6bed5e27bbdd0a4bd0dde69c77f4d26c805be6384be927
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2008_d3dx9_39_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5947E3.tmp\Aug2008_d3dx9_39_x86.cab
        • Size 1.4MB
        • SHA256 61e703e8d231412f135b4aba629122d9cb69ac9ee39fa3cbbe6b95de05097a8b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2008_d3dx10_39_x86.cab

        • Path C:\Windows\msdownld.tmp\AS594BBB.tmp\Aug2008_d3dx10_39_x86.cab
        • Size 832KB
        • SHA256 84800c55f773d5d6913e344e41baba58cf07cec2e6c7114ca3bf48e8f355419f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nov2008_d3dx9_40_x86.cab

        • Path C:\Windows\msdownld.tmp\AS594E3C.tmp\Nov2008_d3dx9_40_x86.cab
        • Size 1.5MB
        • SHA256 863ac3438f57158d4f53900c6924bfdc132ab43a5af57d4658e65842836b4fa1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nov2008_d3dx10_40_x86.cab

        • Path C:\Windows\msdownld.tmp\AS595253.tmp\Nov2008_d3dx10_40_x86.cab
        • Size 945KB
        • SHA256 ec52b075a3e9c7fe468b317e0ff977964b1003d560065128741f4392bf47c49a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2009_d3dx9_41_x86.cab

        • Path C:\Windows\msdownld.tmp\AS595512.tmp\Mar2009_d3dx9_41_x86.cab
        • Size 1.5MB
        • SHA256 32356344aeddf709c9d5302d8f3fcc1ff1be2e82d8d17833a2086400af248794
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2009_d3dx10_41_x86.cab

        • Path C:\Windows\msdownld.tmp\AS595938.tmp\Mar2009_d3dx10_41_x86.cab
        • Size 1019KB
        • SHA256 b7da29103cdf374de0c09713cb985035eac45fb8b394d3b8157d8a7562a89899
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2009_d3dx9_42_x86.cab

        • Path C:\Windows\msdownld.tmp\AS595C36.tmp\Aug2009_d3dx9_42_x86.cab
        • Size 714KB
        • SHA256 9c96b6fc4df5c0efca9f0d653976772b2b964243214f99066e4ca4aa6df791dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2009_d3dx10_42_x86.cab

        • Path C:\Windows\msdownld.tmp\AS595E68.tmp\Aug2009_d3dx10_42_x86.cab
        • Size 190KB
        • SHA256 bb46189eb8cb7769eb7be00cfbc35902072fa9408313ef53f423e5ae5c728f61
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2009_d3dx11_42_x86.cab

        • Path C:\Windows\msdownld.tmp\AS595F62.tmp\Aug2009_d3dx11_42_x86.cab
        • Size 105KB
        • SHA256 39ff69ba9161d376c035d31023d2fdeecb9148a2439abe3afd8f608f7e05e09b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2009_d3dcsx_42_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59602D.tmp\Aug2009_d3dcsx_42_x86.cab
        • Size 3.2MB
        • SHA256 a9a704b73531d6bf59a421ab5c046c19a16d2b0b07f09816dbe9da4550a24b17
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2009_D3DCompiler_42_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59683C.tmp\Aug2009_D3DCompiler_42_x86.cab
        • Size 882KB
        • SHA256 6bd32337826f5a5141fc06391919a249e984150905c2546dc8bfc33d41a24e82
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2010_d3dx9_43_x86.cab

        • Path C:\Windows\msdownld.tmp\AS596B2A.tmp\Jun2010_d3dx9_43_x86.cab
        • Size 753KB
        • SHA256 457c5ce48eaa0fe551b46dffc1e4dca985d261686d8d4e6bced533ee1f682fce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2010_d3dx10_43_x86.cab

        • Path C:\Windows\msdownld.tmp\AS596D8B.tmp\Jun2010_d3dx10_43_x86.cab
        • Size 195KB
        • SHA256 f0bc06ceb484d97cf01526f9223df7b4357d166c4391869f2e7d514dc1fe769b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2010_d3dx11_43_x86.cab

        • Path C:\Windows\msdownld.tmp\AS596E95.tmp\Jun2010_d3dx11_43_x86.cab
        • Size 110KB
        • SHA256 b80db68cd82caf8bedaee62808171b20c546a76499c3ad53014e3bd2fbd2918d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2010_d3dcsx_43_x86.cab

        • Path C:\Windows\msdownld.tmp\AS596F70.tmp\Jun2010_d3dcsx_43_x86.cab
        • Size 747KB
        • SHA256 799b517227812252481c9c9b22cf16ff185ffc20b9273612c8a37153b53aad93
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2010_D3DCompiler_43_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5971C1.tmp\Jun2010_D3DCompiler_43_x86.cab
        • Size 912KB
        • SHA256 293ced557ad732abd2737333df39b08216f31601d7ab65b743fe51b4efb8b6f0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Feb2005_d3dx9_24_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5974A0.tmp\Feb2005_d3dx9_24_x64.cab
        • Size 1.2MB
        • SHA256 be3de63f136a2b41d3229e477ce2cd7f67ded031b4b370e640c39b80368238cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Apr2005_d3dx9_25_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59783A.tmp\Apr2005_d3dx9_25_x64.cab
        • Size 1.3MB
        • SHA256 a239e99d02fbfc9d30d5b705aa743fc070386faea1a66b3d67099ab446568a12
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2005_d3dx9_26_x64.cab

        • Path C:\Windows\msdownld.tmp\AS597BF3.tmp\Jun2005_d3dx9_26_x64.cab
        • Size 1.3MB
        • SHA256 794e23d8b08f88bb0d339825b3628c24cd0297195657f9871ee6324786fada36
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2005_d3dx9_27_x64.cab

        • Path C:\Windows\msdownld.tmp\AS597FAC.tmp\Aug2005_d3dx9_27_x64.cab
        • Size 1.3MB
        • SHA256 3500c1a7cfb5594521338d1c29946d1e4ffa44d5b6bc6cf347c5bbbde18e94dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Dec2005_d3dx9_28_x64.cab

        • Path C:\Windows\msdownld.tmp\AS598375.tmp\Dec2005_d3dx9_28_x64.cab
        • Size 1.3MB
        • SHA256 daf10a54089755f9a8aceff0c7695f1aa42d35e3179da5b9bb91e409036ae547
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Feb2006_d3dx9_29_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59872E.tmp\Feb2006_d3dx9_29_x64.cab
        • Size 1.3MB
        • SHA256 a5ffaf9d58da5d79402c4dc93e79960f971d2701d4651bb33d18925af641f11d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Feb2006_xact_x86.cab

        • Path C:\Windows\msdownld.tmp\AS598AE7.tmp\Feb2006_xact_x86.cab
        • Size 132KB
        • SHA256 6456fc26622f3a72b9449ed0e61874cf1adba23cccbfcda1324f033fe0788fda
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Feb2006_xact_x64.cab

        • Path C:\Windows\msdownld.tmp\AS598BD1.tmp\Feb2006_xact_x64.cab
        • Size 177KB
        • SHA256 c91a6380c65853e41e2f9593b954f3b5af49bcc894476d8eb78cd9f8b6dd7da4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Apr2006_d3dx9_30_x64.cab

        • Path C:\Windows\msdownld.tmp\AS598CBC.tmp\Apr2006_d3dx9_30_x64.cab
        • Size 1.3MB
        • SHA256 27d99894e2a68601f46487c9999723dc83bcc9c6f903f2e2622d05668035b015
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Apr2006_xact_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5990B3.tmp\Apr2006_xact_x86.cab
        • Size 133KB
        • SHA256 52c71c89ccc22fed3d7c985a22c464451af34b63b3a26a3799bc25d881221ebc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Apr2006_xact_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59918E.tmp\Apr2006_xact_x64.cab
        • Size 178KB
        • SHA256 f82b2043b470bf0e711c3d05d758a379920340212437917b5d98af0c14e7bfe0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2006_xact_x86.cab

        • Path C:\Windows\msdownld.tmp\AS599288.tmp\Jun2006_xact_x86.cab
        • Size 133KB
        • SHA256 23495764aba10ff35cf9d23aeeffdf38716219d8a155ae29162f01f7fe6a30cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2006_xact_x64.cab

        • Path C:\Windows\msdownld.tmp\AS599363.tmp\Jun2006_xact_x64.cab
        • Size 179KB
        • SHA256 5163afa067fe2f076ab428dd368ba0a2cf6470457ba528a35e97be40737a03c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2006_xact_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59945D.tmp\Aug2006_xact_x86.cab
        • Size 137KB
        • SHA256 31b16f93be7f5f9bb78e9ece6da96565d50a0bc1f66b206b7a21c601a308dc53
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2006_xact_x64.cab

        • Path C:\Windows\msdownld.tmp\AS599538.tmp\Aug2006_xact_x64.cab
        • Size 181KB
        • SHA256 13e7eb934a7596e7c3b7d8a0962e68da841d9c73d154825dc982ff6d05cff221
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Oct2006_d3dx9_31_x64.cab

        • Path C:\Windows\msdownld.tmp\AS599632.tmp\Oct2006_d3dx9_31_x64.cab
        • Size 1.4MB
        • SHA256 4f5cffa56fd44f7775f12fc511a1e3f030c05ac78484f6866b12b82979067c22
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Oct2006_xact_x86.cab

        • Path C:\Windows\msdownld.tmp\AS599A1A.tmp\Oct2006_xact_x86.cab
        • Size 137KB
        • SHA256 f6b6ebc9c239c5263aafaa63fd691da5aa715e9c794d5fd663e86559d5c6ae56
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Oct2006_xact_x64.cab

        • Path C:\Windows\msdownld.tmp\AS599AF4.tmp\Oct2006_xact_x64.cab
        • Size 181KB
        • SHA256 662d4e5d005cdba02fabb0d7a68a7b48ecafdebe21718d892833d5c482e5add7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Dec2006_d3dx9_32_x64.cab

        • Path C:\Windows\msdownld.tmp\AS599BFE.tmp\Dec2006_d3dx9_32_x64.cab
        • Size 1.5MB
        • SHA256 da1ce01be39f41f967282849715e8310dc1887bfeb92c4e0166d2c31f00647f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Dec2006_xact_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59A044.tmp\Dec2006_xact_x86.cab
        • Size 145KB
        • SHA256 b98e55c654b9ee6f6d040665d932bea7a1299c56cc9996eea900ac4f5649c7d3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Dec2006_xact_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59A11E.tmp\Dec2006_xact_x64.cab
        • Size 191KB
        • SHA256 bdaf9c41f83e65de2b73aaca2002541d48c65f551cfa0578b3259d3bfca54ead
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Feb2007_xact_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59A218.tmp\Feb2007_xact_x86.cab
        • Size 147KB
        • SHA256 0e3655490667ddf17150aec089889268bdd7f1e8367d2bed6f3eb68a5ff28288
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Feb2007_xact_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59A312.tmp\Feb2007_xact_x64.cab
        • Size 193KB
        • SHA256 3454d5101716a5c17bcdee8632668d981f99e8558d8d05e20a33ed718ed8c2ac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Apr2007_d3dx9_33_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59A40C.tmp\Apr2007_d3dx9_33_x64.cab
        • Size 1.5MB
        • SHA256 3ca2acf6b952d6438b91e540f39abcb93ee12e340ba1302f7406f01568e5cf91
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Apr2007_d3dx10_33_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59A862.tmp\Apr2007_d3dx10_33_x64.cab
        • Size 685KB
        • SHA256 1a37565c5b868b6a5c67f3e24b8af547506799444cb77c7086e7b0cec852f239
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Apr2007_xact_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59AA75.tmp\Apr2007_xact_x86.cab
        • Size 150KB
        • SHA256 39f970bf4cc42e9325ada84a603c6c691bf94921385a52325f402f7432ace697
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Apr2007_xact_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59AB6F.tmp\Apr2007_xact_x64.cab
        • Size 194KB
        • SHA256 7781f0494648989583d4ac7695b9c5310eea76b6a102e15ea0fc7376250e4584
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2007_d3dx9_34_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59AC79.tmp\Jun2007_d3dx9_34_x64.cab
        • Size 1.5MB
        • SHA256 fe4b15931e048c97cbbc26f753093e7d41eccf174402542631284f8bdb9ee692
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2007_d3dx10_34_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59B0DE.tmp\Jun2007_d3dx10_34_x64.cab
        • Size 685KB
        • SHA256 02ed1b5a850edb52ec174de177e91842edc7c5f4c06ceda5b16f3427dbcd4c99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2007_xact_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59B32F.tmp\Jun2007_xact_x86.cab
        • Size 152KB
        • SHA256 245b0c554cbe2677939a70e5c4c6666b1b43d10d47980223f8cdeadb2d0eb76b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2007_xact_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59B40A.tmp\Jun2007_xact_x64.cab
        • Size 195KB
        • SHA256 3f2ca0accef2594fb014296f4111b7fbb59729c5d928b22f7283c392494fee7c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2007_d3dx9_35_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59B504.tmp\Aug2007_d3dx9_35_x64.cab
        • Size 1.7MB
        • SHA256 28b6ff092de67717c47649c87e7114c34325edda199ce2943403c4f3f4c3e0b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2007_d3dx10_35_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59B979.tmp\Aug2007_d3dx10_35_x64.cab
        • Size 835KB
        • SHA256 c97275f60e2f25732b3b264b8bdf9cfdaa39d6e5b189c08fab5cd7a04fae9bf7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2007_xact_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59BC57.tmp\Aug2007_xact_x86.cab
        • Size 152KB
        • SHA256 c35652b18c6a2d108812f415ddd435ce0eef5489e37142300ba67d66986ef43c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2007_xact_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59BD42.tmp\Aug2007_xact_x64.cab
        • Size 196KB
        • SHA256 e8ef9c88a6b958916c1959d1c6c7f1666d22e0f70ce8a8c83183f49ed71f6287
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nov2007_d3dx9_36_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59BE4B.tmp\Nov2007_d3dx9_36_x64.cab
        • Size 1.7MB
        • SHA256 23ad953d03c9da720002834eddabe71bd649dc9cd31abc7a09a8e77a948414c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nov2007_x3daudio_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59C5EC.tmp\Nov2007_x3daudio_x86.cab
        • Size 21KB
        • SHA256 90f472ed8b0beeea5db1b462da44577160337c767b27ce70ed58d68d0a03e7a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nov2007_x3daudio_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59C679.tmp\Nov2007_x3daudio_x64.cab
        • Size 48KB
        • SHA256 122e09bbf46b3c3edae6c28ad060482dac24d4331c682fe0231cc5b6fb53c5e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nov2007_xact_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59C725.tmp\Nov2007_xact_x86.cab
        • Size 147KB
        • SHA256 6dcb9461eab4aceb999784ecd74d985b3543899542ffd66203929f409c70c8d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nov2007_xact_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59C80F.tmp\Nov2007_xact_x64.cab
        • Size 195KB
        • SHA256 9fa6f4116a4eb1e72f75cbdcb2e34198a243d169276d4f493ecb8a9dff3722d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2008_d3dx9_37_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59C909.tmp\Mar2008_d3dx9_37_x64.cab
        • Size 1.7MB
        • SHA256 7ef2e2a5d4843f58b3eaca34f5a9c63e9abfa726a3244b762a6de70bb9a95123
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2008_d3dx10_37_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59CE39.tmp\Mar2008_d3dx10_37_x64.cab
        • Size 828KB
        • SHA256 6aff708a5bc25b4ecee972f930293324f86bc45dc97d687dab782108606c5902
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2008_x3daudio_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59D0E9.tmp\Mar2008_x3daudio_x86.cab
        • Size 24KB
        • SHA256 1ababdfd6ca26f1c56f618f8c9f90dbc063d964bfa31caa787b0a8a1bee519be
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2008_x3daudio_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59D185.tmp\Mar2008_x3daudio_x64.cab
        • Size 56KB
        • SHA256 312c2dfd80126d25a1cfab0fadf5c99bf1f81b404e121afec908f5b5d04529a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2008_xact_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59D241.tmp\Mar2008_xact_x86.cab
        • Size 94KB
        • SHA256 d2140d9b4420b022d6e6135a67029033b5b0ec083893eceadd1007eee41ef4cd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2008_xact_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59D31B.tmp\Mar2008_xact_x64.cab
        • Size 122KB
        • SHA256 b6f81e365b7fc224f66bd6560e5040dabc9370b3f21f9bd85728349200dd7632
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2008_xaudio_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59D3F6.tmp\Mar2008_xaudio_x86.cab
        • Size 224KB
        • SHA256 bce9c695d24972eacef357da0f83ab9d9cce2ee9a46176ffffad3a0abd64f48f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2008_xaudio_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59D52F.tmp\Mar2008_xaudio_x64.cab
        • Size 248KB
        • SHA256 e9a2e00f9c96bd5c91c4ae069c1c2ef6451e0207e8c18074f14d0d0ac08301fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2008_d3dx9_38_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59D657.tmp\Jun2008_d3dx9_38_x64.cab
        • Size 1.7MB
        • SHA256 f33a6b6ef55bd4e75a2e67d269b917fa6113f2b1c9b745b19d3ce6a6365d1cfc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2008_d3dx10_38_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59DAEB.tmp\Jun2008_d3dx10_38_x64.cab
        • Size 850KB
        • SHA256 a75a8109e3b4ce2a805555577d45853bc2e67451ba287b45aa3ce4ca14ce87b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2008_x3daudio_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59DDAA.tmp\Jun2008_x3daudio_x86.cab
        • Size 24KB
        • SHA256 75f048bc8261c1877126a82d3e7983f22f830596eefeaffb799947d9a13afd51
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2008_x3daudio_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59DE56.tmp\Jun2008_x3daudio_x64.cab
        • Size 56KB
        • SHA256 7363590b33717a0c2e07f3b2dceb3689a526b255f29c84092022a37bf6e9b9c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2008_xact_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59DEF3.tmp\Jun2008_xact_x86.cab
        • Size 94KB
        • SHA256 fa86c9d133cc5ca499b1f57d52a6024cae3f5605ff0e5bc466f07e3f7bac121c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2008_xact_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59DFBE.tmp\Jun2008_xact_x64.cab
        • Size 121KB
        • SHA256 09e15921b2a8204235c7128b804f26e72599f05f55005bd29fdb05da8c812460
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2008_xaudio_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59E0A8.tmp\Jun2008_xaudio_x86.cab
        • Size 265KB
        • SHA256 6d128830655e6cc400c1677ad91341e7b69f3d3f5acf32bc44ed2a32b5e776eb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2008_xaudio_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59E1E1.tmp\Jun2008_xaudio_x64.cab
        • Size 266KB
        • SHA256 7679e7b1e03399a5d0d7b802308ee1503a9c5c59935d16c330db760876bfb37c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2008_d3dx9_39_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59E319.tmp\Aug2008_d3dx9_39_x64.cab
        • Size 1.7MB
        • SHA256 03f30dd485a82b6505a881f525e432bb84447e108bf086ef341a39951a1863ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2008_d3dx10_39_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59E7FB.tmp\Aug2008_d3dx10_39_x64.cab
        • Size 850KB
        • SHA256 c6602fb00efe93ea7875e29974c073b4f83991bfc064470de94a95dbacd51712
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2008_xact_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59EAAB.tmp\Aug2008_xact_x86.cab
        • Size 93KB
        • SHA256 736b3c20aa536c1569465badec5bffda858978b2d9ec1e48ad639ccde301d6f6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2008_xact_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59EB76.tmp\Aug2008_xact_x64.cab
        • Size 122KB
        • SHA256 1b640b0022c876f74a41db17672bb0685b74d3759a7818f84c8ffc51a9aa0d51
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2008_xaudio_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59EC50.tmp\Aug2008_xaudio_x86.cab
        • Size 267KB
        • SHA256 a1550abc06e39ca576d24efd2801d139c64c7dce643246a7ddf2de2d03a7ba23
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2008_xaudio_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59ED89.tmp\Aug2008_xaudio_x64.cab
        • Size 268KB
        • SHA256 42807ba4736a40b7bb9b4b558c0daffd2ca75987dafe47a6571f3c45f178d29e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nov2008_x3daudio_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59EEB2.tmp\Nov2008_x3daudio_x86.cab
        • Size 24KB
        • SHA256 8fbe56582e93b3277caf8660f689cc9e9fa6a33056d40a88d48f669a005430cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nov2008_x3daudio_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59EF4E.tmp\Nov2008_x3daudio_x64.cab
        • Size 56KB
        • SHA256 4da03f7a174d276dbbbe469c12670fa85fe247428fd5033e93ccc3ae4d5f84da
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nov2008_xact_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59EFFA.tmp\Nov2008_xact_x86.cab
        • Size 93KB
        • SHA256 3e804174d83cf4908cce7aac97756541a58c16372368904a253d10d64fb4d2a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nov2008_xact_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59F0C5.tmp\Nov2008_xact_x64.cab
        • Size 122KB
        • SHA256 636f4829ebbf2e9a1ebe572a0f0b7f8289089339cc38c7075f48fe4930134cc2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nov2008_xaudio_x86.cab

        • Path C:\Windows\msdownld.tmp\AS59F190.tmp\Nov2008_xaudio_x86.cab
        • Size 269KB
        • SHA256 cad128dc2e64a47f65bb44f43a5a0650b045a5dae34ce13f34817642c56e4721
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nov2008_xaudio_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59F2B9.tmp\Nov2008_xaudio_x64.cab
        • Size 270KB
        • SHA256 63229aa8bd8e675b292c263fcad6b7868394ad29987d3f4db55f618359cb0681
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nov2008_d3dx9_40_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59F3E2.tmp\Nov2008_d3dx9_40_x64.cab
        • Size 1.8MB
        • SHA256 9499871ec59f7f115f51399f21730734fa1037eb0c1ef9f1bd12c0479b216a6c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nov2008_d3dx10_40_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59F912.tmp\Nov2008_d3dx10_40_x64.cab
        • Size 973KB
        • SHA256 86f96aed9c4e381623a6476bdeb375c3f49eb0f252301ad4db2f7974362790b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2009_d3dx9_41_x64.cab

        • Path C:\Windows\msdownld.tmp\AS59FC10.tmp\Mar2009_d3dx9_41_x64.cab
        • Size 1.9MB
        • SHA256 53da650f9aad168fe8034da45abbabc950729780ecc4f645f1470e851fd67ac3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2009_d3dx10_41_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A014F.tmp\Mar2009_d3dx10_41_x64.cab
        • Size 1.0MB
        • SHA256 25ef5135a88061ede0c4fde037be62e3a11701748ff83eda1aa9cc496687265d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2009_x3daudio_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5A045D.tmp\Mar2009_x3daudio_x86.cab
        • Size 23KB
        • SHA256 2984d216a782ca017243f4685ba592801b1ac3ccac2bf20a8a134fecaff03510
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2009_x3daudio_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A04F9.tmp\Mar2009_x3daudio_x64.cab
        • Size 56KB
        • SHA256 53a41f2989a2f68e4e927c89b2e38bbfcee7a2182ec588db233f26292f9d7911
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2009_xact_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A0660.tmp\Mar2009_xact_x64.cab
        • Size 121KB
        • SHA256 19890202eaec445617d364ffbde498e8eff48ebe5112a42fb4b99b4258aa0757
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2009_xaudio_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5A072B.tmp\Mar2009_xaudio_x86.cab
        • Size 269KB
        • SHA256 e7aacd3af1c4e2031e4e4365d47e8af1023272c795f823b41f1728d48d127b67
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Mar2009_xaudio_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A0874.tmp\Mar2009_xaudio_x64.cab
        • Size 271KB
        • SHA256 2c1610997f383e55d5e264b3cc52d9bc5262ea72bad6116a0d84e623f61b0361
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2009_d3dx9_42_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A098D.tmp\Aug2009_d3dx9_42_x64.cab
        • Size 911KB
        • SHA256 54a61b655ca36f76a489b46c6174dd601a831210f16ecb9d839cdb7e19d47904
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2009_d3dx10_42_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A0C6B.tmp\Aug2009_d3dx10_42_x64.cab
        • Size 230KB
        • SHA256 98ca8f4d1c6cd13fa721a35a23992d9edd14cc7465d3752e5978d89c9bc91960
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2009_d3dx11_42_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A0D75.tmp\Aug2009_d3dx11_42_x64.cab
        • Size 136KB
        • SHA256 f2f4753e201d6e7f40f4011cc4b4fa95f4519da0481d98cb24dbb6679518ca93
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2009_d3dcsx_42_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A0E5F.tmp\Aug2009_d3dcsx_42_x64.cab
        • Size 3.0MB
        • SHA256 23d902f8b95dbd5ac925e7d1bd4952eeac762e11e209be973fd438396a1e6e50
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2009_D3DCompiler_42_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A15C2.tmp\Aug2009_D3DCompiler_42_x64.cab
        • Size 900KB
        • SHA256 ac103963d4ab1846c4a6d5bc042ed2fa543f88424e37e05af5165ee62989b503
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2009_xact_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5A1881.tmp\Aug2009_xact_x86.cab
        • Size 94KB
        • SHA256 1520e988f112dde8ea11794e4b6dc9bc6ccb2ae7e0be7342d4696b719e5a86d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2009_xact_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A194C.tmp\Aug2009_xact_x64.cab
        • Size 122KB
        • SHA256 34d922a89d6b354572c17b890b0efc21bea237b94859010278fc1a4435ae7724
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2009_xaudio_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5A1A27.tmp\Aug2009_xaudio_x86.cab
        • Size 269KB
        • SHA256 68785e0781b43c34cb184ae167363c23d5b9d18ddaf8474a5f1d6b90a939e8b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aug2009_xaudio_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A1B50.tmp\Aug2009_xaudio_x64.cab
        • Size 269KB
        • SHA256 348bcd596d4b3f1e10059a0ce3c4383d383c4964c00a77ae7281e3472f6b8b25
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Feb2010_x3daudio_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5A1C88.tmp\Feb2010_x3daudio_x86.cab
        • Size 23KB
        • SHA256 3cdd51afca42c61a7fcf0e7348ee4f2095d1bb9deba31f7c09f5694a028b0d35
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Feb2010_x3daudio_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A1D24.tmp\Feb2010_x3daudio_x64.cab
        • Size 56KB
        • SHA256 a46a4b55659921966428301c02409c32a642ff7699419f71ce8775944117ec41
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Feb2010_xact_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5A1DC1.tmp\Feb2010_xact_x86.cab
        • Size 94KB
        • SHA256 d5a7cb9a858e3dc2fa875c8aa915b6999137b616327aa79d382379a1ce3974b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Feb2010_xact_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A1E8C.tmp\Feb2010_xact_x64.cab
        • Size 122KB
        • SHA256 dc678bde00cc64b91d29c5d98be82b19de00518d1706643e8eb8ddd4ec577327
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Feb2010_xaudio_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5A1F67.tmp\Feb2010_xaudio_x86.cab
        • Size 273KB
        • SHA256 738f0ca04f3f568eb5c1a4d8f1af30e4930e4f7950e96776a5b8adea16efc8f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Feb2010_xaudio_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A208F.tmp\Feb2010_xaudio_x64.cab
        • Size 273KB
        • SHA256 b99380971dccf9500604a39bcdf5db6f5d96b14519ec0bd575587638a0238099
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2010_d3dx9_43_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A21C8.tmp\Jun2010_d3dx9_43_x64.cab
        • Size 918KB
        • SHA256 810a07865b7fcaf0d7abebc86682479a05bccba71c69aa2d4ecbec3c88c8270e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2010_d3dx10_43_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A24A6.tmp\Jun2010_d3dx10_43_x64.cab
        • Size 233KB
        • SHA256 c689eea749f1ad76a162d1c6dff31dd92d0ebf85f5b539c4c953d55bbb921b57
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2010_d3dx11_43_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A25C0.tmp\Jun2010_d3dx11_43_x64.cab
        • Size 138KB
        • SHA256 37ae82574cbbfe2cae6019a168a6d1bde38f88f8e51f13335001943980a665e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2010_d3dcsx_43_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A26AA.tmp\Jun2010_d3dcsx_43_x64.cab
        • Size 738KB
        • SHA256 ca1b0022af12f048586761439e152d1157eddb7153c031e075ab8d946173d31e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2010_xact_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5A2BDA.tmp\Jun2010_xact_x86.cab
        • Size 94KB
        • SHA256 fb320286968952ae93c7cdb4078bd99e689a0946157574760b844f7bf39c7ea0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2010_xact_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A2CA5.tmp\Jun2010_xact_x64.cab
        • Size 124KB
        • SHA256 3e8fcc374e84e1170067a057acfa3b5464220d6bf5324566a05242e8208799b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2010_xaudio_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5A2D80.tmp\Jun2010_xaudio_x86.cab
        • Size 274KB
        • SHA256 c364833271396d78811a9a3388341cb9e1cf5e6e0fe2d7986cb4dd2f931a0dae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Jun2010_xaudio_x64.cab

        • Path C:\Windows\msdownld.tmp\AS5A2EB8.tmp\Jun2010_xaudio_x64.cab
        • Size 273KB
        • SHA256 7cce405577fae04e58fe31a099febba96d3ea7cb94ed2184b6bfba32d9f20acc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MDX_1.0.2902.0_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5A3001.tmp\MDX_1.0.2902.0_x86.cab
        • Size 1.2MB
        • SHA256 afa44ed18e3217892499062db4337b94025726df991a0bd4dcc3a9f8c27c41b9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MDX_1.0.2903.0_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5A332D.tmp\MDX_1.0.2903.0_x86.cab
        • Size 1.2MB
        • SHA256 84e240f8813bacb2fe0f20081ca20cd0fed4b9e10c96aded8516b25375c407aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MDX_1.0.2904.0_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5A36B7.tmp\MDX_1.0.2904.0_x86.cab
        • Size 242KB
        • SHA256 cadffad57691af14fdc0f41250e644257a3068da134a5922f343f2e69b1b5441
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MDX_1.0.2905.0_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5A37E0.tmp\MDX_1.0.2905.0_x86.cab
        • Size 244KB
        • SHA256 f10aee00b78b734acb3bfdd81ce0ac22648376486d0c308f9975b05181ecbe13
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MDX_1.0.2906.0_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5A38F9.tmp\MDX_1.0.2906.0_x86.cab
        • Size 248KB
        • SHA256 bcfd420ecb20116a78b54678cbb04204e76368809aee1e1bb36810a4d433de2f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MDX_1.0.2907.0_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5A3A22.tmp\MDX_1.0.2907.0_x86.cab
        • Size 248KB
        • SHA256 b185fce1d25a4411c1a2f53ec1e4232de9a3078d7db7aa469d53c5fb041f792e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MDX_1.0.2908.0_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5A3B3C.tmp\MDX_1.0.2908.0_x86.cab
        • Size 248KB
        • SHA256 fd1c15037800a0a689126b09f29a6329452cbaf42508242d9cc185f557f04954
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MDX_1.0.2909.0_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5A3C64.tmp\MDX_1.0.2909.0_x86.cab
        • Size 248KB
        • SHA256 1e9c063428322da24df17c5d49c63a53e0f0751d26f741d90216b9c4ff1a9136
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MDX_1.0.2910.0_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5A3D8D.tmp\MDX_1.0.2910.0_x86.cab
        • Size 248KB
        • SHA256 1829a24a8ed3a2496ce92aa0c5142d8f512b11cdf23eda5e579edb5b11e2b589
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Apr2006_MDX1_x86.cab

        • Path C:\Windows\msdownld.tmp\AS5A3EB6.tmp\Apr2006_MDX1_x86.cab
        • Size 898KB
        • SHA256 90e08fc3b98267756c6017f4d37b157eba3586c262474d1556b21d9c35d84da2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/4876-70-0x0000000003B70000-0x0000000003B71000-memory.dmp

        memory/4876-69-0x0000000000400000-0x0000000001D79000-memory.dmp

        memory/4876-104-0x0000000000400000-0x0000000001D79000-memory.dmp

        memory/4876-6499-0x0000000000400000-0x0000000001D79000-memory.dmp

        memory/4876-0-0x0000000003B70000-0x0000000003B71000-memory.dmp

        memory/4876-1-0x0000000000400000-0x0000000001D79000-memory.dmp

        memory/11228-16227-0x0000000001EF0000-0x0000000001F4C000-memory.dmp

        memory/12872-18001-0x0000000001FD0000-0x0000000002036000-memory.dmp