Analysis

  • user interaction
    yes
  • max time kernel
    96s
  • max time network
    160s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    29/10/2026, 20:31

General

  • Target
    NewLifeRoleplay-Setup.exe
  • Size 146.1MB
  • Sample261029-zar8jaex2x
  • SHA256 57f6b4c1c9073e3cf9b4c50e48687b4bdd73916aa61cc229c6ca58d80bb7cab3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Manipulates Digital Signatures 1 TTPs 3 IoCs

    Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Modifies file permissions 1 TTPs 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 2 IoCs
  • Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

    Using powershell.exe command.

  • Drops desktop.ini file(s) 2 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Drops file in System32 directory 64 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 6 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 16 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Kills process with taskkill 1 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 14 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\NewLifeRoleplay-Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\NewLifeRoleplay-Setup.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:4860
    • C:\Windows\SysWOW64\certutil.exe
      "C:\Windows\system32\certutil.exe" -addstore -f Root "C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\codegic-root.cer"
      2⤵
      • Manipulates Digital Signatures
      • System Location Discovery: System Language Discovery
      PID:1060
    • C:\Windows\SysWOW64\certutil.exe
      "C:\Windows\system32\certutil.exe" -addstore -f CA "C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\codegic-intermediate.cer"
      2⤵
      • System Location Discovery: System Language Discovery
      PID:4640
    • C:\Windows\SysWOW64\taskkill.exe
      "C:\Windows\system32\taskkill.exe" /F /IM nlrp_launcher.exe
      2⤵
      • System Location Discovery: System Language Discovery
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:2056
    • C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\vc_redist.x86.exe
      "C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\vc_redist.x86.exe" /install /quiet /norestart
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:764
      • C:\Windows\Temp\{964433FE-27BD-447B-87F5-85AC0E835E99}\.cr\vc_redist.x86.exe
        "C:\Windows\Temp\{964433FE-27BD-447B-87F5-85AC0E835E99}\.cr\vc_redist.x86.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\vc_redist.x86.exe" -burn.filehandle.attached=724 -burn.filehandle.self=728 /install /quiet /norestart
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2816
        • C:\Windows\Temp\{AD3F462F-8C2F-4150-BBCC-0B4ABD40E6DF}\.be\VC_redist.x86.exe
          "C:\Windows\Temp\{AD3F462F-8C2F-4150-BBCC-0B4ABD40E6DF}\.be\VC_redist.x86.exe" -q -burn.elevated BurnPipe.{1C617C8A-CAE4-49A3-B35A-30135419DC45} {FB888CB9-46EA-412D-B01A-A9CF483B926F} 2816
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:4716
    • C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\directx_Jun2010_redist.exe
      "C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\directx_Jun2010_redist.exe" /Q /T:"C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\extracted"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:2592
    • C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\extracted\DXSETUP.exe
      "C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\extracted\DXSETUP.exe" /silent
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops desktop.ini file(s)
      • Drops file in System32 directory
      • Drops file in Windows directory
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious use of WriteProcessMemory
      PID:1428
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx9_24_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in System32 directory
        PID:3904
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx9_25_x64.inf
        3⤵
        • Executes dropped EXE
        PID:2096
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx9_26_x64.inf
        3⤵
        • Executes dropped EXE
        PID:3692
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx9_27_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in System32 directory
        • Drops file in Windows directory
        PID:3008
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx9_28_x64.inf
        3⤵
        • Executes dropped EXE
        PID:4572
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx9_29_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in Windows directory
        PID:4200
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XACT_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in System32 directory
        PID:1252
      • C:\Windows\system32\regsvr32.exe
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_0.dll
        3⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:4388
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx9_30_x64.inf
        3⤵
        • Executes dropped EXE
        PID:4244
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XACT2_1_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in System32 directory
        • Drops file in Windows directory
        PID:1812
      • C:\Windows\system32\regsvr32.exe
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_1.dll
        3⤵
        • Loads dropped DLL
        PID:1820
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe xinput1_1_x64.inf, Install_Driver
        3⤵
        • Executes dropped EXE
        • Drops file in System32 directory
        • Drops file in Windows directory
        PID:3268
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XACT2_2_x64.inf
        3⤵
        • Executes dropped EXE
        PID:1404
      • C:\Windows\system32\regsvr32.exe
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_2.dll
        3⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:3644
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe xinput1_2_x64.inf, Install_Driver
        3⤵
        • Executes dropped EXE
        PID:1736
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XACT2_3_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in Windows directory
        PID:5048
      • C:\Windows\system32\regsvr32.exe
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_3.dll
        3⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:4992
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx9_31_x64.inf
        3⤵
        • Executes dropped EXE
        PID:3816
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XACT2_4_x64.inf
        3⤵
        • Executes dropped EXE
        PID:4476
      • C:\Windows\system32\regsvr32.exe
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_4.dll
        3⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:1640
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx9_32_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in Windows directory
        PID:3608
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx10_00_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in System32 directory
        PID:3024
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XACT2_5_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in Windows directory
        PID:2104
      • C:\Windows\system32\regsvr32.exe
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_5.dll
        3⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:1140
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XACT2_6_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in System32 directory
        PID:352
      • C:\Windows\system32\regsvr32.exe
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_6.dll
        3⤵
        • Loads dropped DLL
        PID:1716
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx9_33_x64.inf
        3⤵
        • Executes dropped EXE
        PID:4156
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx10_33_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in Windows directory
        PID:1292
      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XACT2_7_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in Windows directory
        PID:3400
      • C:\Windows\system32\regsvr32.exe
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_7.dll
        3⤵
          PID:2564
        • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe xinput1_3_x64.inf, Install_Driver
          3⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          • Drops file in Windows directory
          PID:3428
        • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx9_34_x64.inf
          3⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          PID:4644
        • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx10_34_x64.inf
          3⤵
          • Executes dropped EXE
          PID:1760
        • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XACT2_8_x64.inf
          3⤵
          • Executes dropped EXE
          PID:72
        • C:\Windows\system32\regsvr32.exe
          C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_8.dll
          3⤵
          • Modifies registry class
          PID:4584
        • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx9_35_x64.inf
          3⤵
          • Executes dropped EXE
          • Drops file in Windows directory
          PID:3508
        • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx10_35_x64.inf
          3⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          • Drops file in Windows directory
          PID:4716
        • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XACT2_9_x64.inf
          3⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          PID:5004
        • C:\Windows\system32\regsvr32.exe
          C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_9.dll
          3⤵
          • Modifies registry class
          PID:2920
        • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx9_36_x64.inf
          3⤵
          • Executes dropped EXE
          PID:5116
        • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx10_36_x64.inf
          3⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          PID:4872
        • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe X3DAudio1_2_x64.inf
          3⤵
          • Executes dropped EXE
          PID:400
        • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
          C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XACT2_10_x64.inf
          3⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          • Drops file in Windows directory
          PID:2052
        • C:\Windows\system32\regsvr32.exe
          C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_10.dll
          3⤵
            PID:4556
          • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
            C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe D3DX9_37_x64.inf
            3⤵
            • Executes dropped EXE
            PID:540
          • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
            C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx10_37_x64.inf
            3⤵
            • Executes dropped EXE
            PID:2540
          • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
            C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe X3DAudio1_3_x64.inf
            3⤵
            • Executes dropped EXE
            PID:4388
          • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
            C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XACT3_0_x64.inf
            3⤵
            • Executes dropped EXE
            • Drops file in System32 directory
            PID:2496
          • C:\Windows\system32\regsvr32.exe
            C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_0.dll
            3⤵
              PID:3396
            • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
              C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XAudio2_0_x64.inf
              3⤵
              • Executes dropped EXE
              PID:4812
            • C:\Windows\system32\regsvr32.exe
              C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_0.dll
              3⤵
              • Modifies registry class
              PID:5116
            • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
              C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe D3DX9_38_x64.inf
              3⤵
              • Executes dropped EXE
              • Drops file in System32 directory
              PID:4048
            • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
              C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx10_38_x64.inf
              3⤵
              • Executes dropped EXE
              • Drops file in System32 directory
              PID:4444
            • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
              C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe X3DAudio1_4_x64.inf
              3⤵
              • Executes dropped EXE
              PID:2072
            • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
              C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XACT3_1_x64.inf
              3⤵
              • Executes dropped EXE
              • Drops file in Windows directory
              PID:4400
            • C:\Windows\system32\regsvr32.exe
              C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_1.dll
              3⤵
                PID:72
              • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XAudio2_1_x64.inf
                3⤵
                • Executes dropped EXE
                PID:3016
              • C:\Windows\system32\regsvr32.exe
                C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_1.dll
                3⤵
                • Modifies registry class
                PID:4200
              • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe D3DX9_39_x64.inf
                3⤵
                • Executes dropped EXE
                PID:4496
              • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx10_39_x64.inf
                3⤵
                • Executes dropped EXE
                PID:3780
              • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XACT3_2_x64.inf
                3⤵
                • Executes dropped EXE
                • Drops file in System32 directory
                PID:4400
              • C:\Windows\system32\regsvr32.exe
                C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_2.dll
                3⤵
                • Modifies registry class
                PID:3316
              • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XAudio2_2_x64.inf
                3⤵
                • Executes dropped EXE
                • Drops file in System32 directory
                PID:4588
              • C:\Windows\system32\regsvr32.exe
                C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_2.dll
                3⤵
                • Modifies registry class
                PID:1824
              • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe X3DAudio1_5_x64.inf
                3⤵
                • Executes dropped EXE
                PID:1264
              • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XACT3_3_x64.inf
                3⤵
                • Executes dropped EXE
                • Drops file in Windows directory
                PID:4488
              • C:\Windows\system32\regsvr32.exe
                C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_3.dll
                3⤵
                  PID:1760
                • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XAudio2_3_x64.inf
                  3⤵
                  • Executes dropped EXE
                  • Drops file in System32 directory
                  PID:4640
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_3.dll
                  3⤵
                  • Modifies registry class
                  PID:3512
                • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe D3DX9_40_x64.inf
                  3⤵
                  • Executes dropped EXE
                  • Drops file in System32 directory
                  PID:236
                • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx10_40_x64.inf
                  3⤵
                  • Executes dropped EXE
                  • Drops file in System32 directory
                  PID:2348
                • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe X3DAudio1_6_x64.inf
                  3⤵
                  • Executes dropped EXE
                  • Drops file in Windows directory
                  PID:1760
                • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XACT3_4_x64.inf
                  3⤵
                  • Executes dropped EXE
                  PID:2332
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_4.dll
                  3⤵
                  • Modifies registry class
                  PID:4640
                • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XAudio2_4_x64.inf
                  3⤵
                  • Executes dropped EXE
                  • Drops file in Windows directory
                  PID:3428
                • C:\Windows\system32\regsvr32.exe
                  C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_4.dll
                  3⤵
                  • Modifies registry class
                  PID:3220
                • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe D3DX9_41_x64.inf
                  3⤵
                  • Executes dropped EXE
                  PID:1452
                • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx10_41_x64.inf
                  3⤵
                  • Executes dropped EXE
                  PID:2296
                • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe D3DX9_42_x64.inf
                  3⤵
                  • Executes dropped EXE
                  PID:3012
                • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx10_42_x64.inf
                  3⤵
                  • Executes dropped EXE
                  • Drops file in Windows directory
                  PID:3624
                • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                  C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx11_42_x64.inf
                  3⤵
                    PID:4040
                  • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                    C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dcsx_42_x64.inf
                    3⤵
                    • Drops file in Windows directory
                    PID:1124
                  • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                    C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe D3DCompiler_42_x64.inf
                    3⤵
                    • Drops file in Windows directory
                    PID:3464
                  • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                    C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XACT3_5_x64.inf
                    3⤵
                      PID:4804
                    • C:\Windows\system32\regsvr32.exe
                      C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_5.dll
                      3⤵
                        PID:2784
                      • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                        C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XAudio2_5_x64.inf
                        3⤵
                          PID:4184
                        • C:\Windows\system32\regsvr32.exe
                          C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_5.dll
                          3⤵
                          • Modifies registry class
                          PID:2512
                        • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                          C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe X3DAudio1_7_x64.inf
                          3⤵
                          • Drops file in System32 directory
                          PID:4924
                        • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                          C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XACT3_6_x64.inf
                          3⤵
                            PID:3512
                          • C:\Windows\system32\regsvr32.exe
                            C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_6.dll
                            3⤵
                              PID:3904
                            • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                              C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XAudio2_6_x64.inf
                              3⤵
                              • Drops file in System32 directory
                              • Drops file in Windows directory
                              PID:4952
                            • C:\Windows\system32\regsvr32.exe
                              C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_6.dll
                              3⤵
                              • Modifies registry class
                              PID:4044
                            • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                              C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe D3DX9_43_x64.inf
                              3⤵
                                PID:2424
                              • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx10_43_x64.inf
                                3⤵
                                  PID:2052
                                • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                  C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dx11_43_x64.inf
                                  3⤵
                                  • Drops file in Windows directory
                                  PID:200
                                • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                  C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe d3dcsx_43_x64.inf
                                  3⤵
                                  • Drops file in Windows directory
                                  PID:3644
                                • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                  C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe D3DCompiler_43_x64.inf
                                  3⤵
                                  • Drops file in Windows directory
                                  PID:3472
                                • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                  C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XACT3_7_x64.inf
                                  3⤵
                                    PID:2996
                                  • C:\Windows\system32\regsvr32.exe
                                    C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_7.dll
                                    3⤵
                                      PID:4580
                                    • C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                      C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe XAudio2_7_x64.inf
                                      3⤵
                                      • Drops file in System32 directory
                                      PID:3480
                                    • C:\Windows\system32\regsvr32.exe
                                      C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_7.dll
                                      3⤵
                                      • Modifies registry class
                                      PID:4636
                                  • C:\Windows\SysWOW64\icacls.exe
                                    "C:\Windows\system32\icacls.exe" "C:\Program Files (x86)\New Life Roleplay" /grant *S-1-5-32-545:(OI)(CI)M /T /C
                                    2⤵
                                    • Modifies file permissions
                                    • System Location Discovery: System Language Discovery
                                    PID:4920
                                  • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                                    powershell -NoProfile -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\set-lnk-aumid.ps1" -Lnk "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\New Life Roleplay Launcher.lnk" -Aumid "NewLifeRoleplay.Client"
                                    2⤵
                                    • Command and Scripting Interpreter: PowerShell
                                    • System Location Discovery: System Language Discovery
                                    • Suspicious behavior: EnumeratesProcesses
                                    • Suspicious use of AdjustPrivilegeToken
                                    PID:2024
                                    • C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
                                      "C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\ha5hdlkd\ha5hdlkd.cmdline"
                                      3⤵
                                      • System Location Discovery: System Language Discovery
                                      PID:3316
                                      • C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
                                        C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RESED73.tmp" "c:\Users\Admin\AppData\Local\Temp\ha5hdlkd\CSC33933A5CA241A0A662EBC11F1FE779.TMP"
                                        4⤵
                                          PID:4136
                                    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                                      powershell -NoProfile -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\set-lnk-aumid.ps1" -Lnk "C:\Users\Public\Desktop\New Life Roleplay Launcher.lnk" -Aumid "NewLifeRoleplay.Client"
                                      2⤵
                                      • Command and Scripting Interpreter: PowerShell
                                      • System Location Discovery: System Language Discovery
                                      • Suspicious behavior: EnumeratesProcesses
                                      • Suspicious use of AdjustPrivilegeToken
                                      PID:3908
                                      • C:\Windows\System32\Conhost.exe
                                        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                        3⤵
                                          PID:2332
                                        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
                                          "C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\xuvy5yk4\xuvy5yk4.cmdline"
                                          3⤵
                                          • System Location Discovery: System Language Discovery
                                          PID:2576
                                          • C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
                                            C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RESF5DF.tmp" "c:\Users\Admin\AppData\Local\Temp\xuvy5yk4\CSC3C4E9EF6E1A1442FB52584863C602C92.TMP"
                                            4⤵
                                              PID:4884
                                        • C:\Program Files (x86)\New Life Roleplay\launcher\nlrp_launcher.exe
                                          "C:\Program Files (x86)\New Life Roleplay\launcher\nlrp_launcher.exe"
                                          2⤵
                                          • Checks whether UAC is enabled
                                          • Reads the TCP/IP host and domain name from the registry
                                          • System Location Discovery: System Language Discovery
                                          PID:3448
                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=nlrp_launcher.exe --webview-exe-version=0.11 --user-data-dir="C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=3448.5100.18230816163627007167
                                            3⤵
                                            • Drops file in Program Files directory
                                            • Enumerates system info in registry
                                            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                            PID:1856
                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler "--user-data-dir=C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7fff4623b078,0x7fff4623b084,0x7fff4623b090
                                              4⤵
                                                PID:4804
                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView" --webview-exe-name=nlrp_launcher.exe --webview-exe-version=0.11 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1684,i,11575223471073838110,2467821646098469986,262144 --variations-seed-version --mojo-platform-channel-handle=1644 /prefetch:2
                                                4⤵
                                                  PID:2352
                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView" --webview-exe-name=nlrp_launcher.exe --webview-exe-version=0.11 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1984,i,11575223471073838110,2467821646098469986,262144 --variations-seed-version --mojo-platform-channel-handle=1996 /prefetch:11
                                                  4⤵
                                                  • Drops file in Program Files directory
                                                  PID:4748
                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView" --webview-exe-name=nlrp_launcher.exe --webview-exe-version=0.11 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1652,i,11575223471073838110,2467821646098469986,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:13
                                                  4⤵
                                                    PID:896
                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView" --webview-exe-name=nlrp_launcher.exe --webview-exe-version=0.11 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3572,i,11575223471073838110,2467821646098469986,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
                                                    4⤵
                                                      PID:572
                                                  • C:\Program Files (x86)\New Life Roleplay\launcher\nlrp_launcher.exe
                                                    "C:\Program Files (x86)\New Life Roleplay\launcher\nlrp_launcher.exe" --relaunch
                                                    3⤵
                                                    • Checks whether UAC is enabled
                                                    • Drops file in Program Files directory
                                                    • Reads the TCP/IP host and domain name from the registry
                                                    • System Location Discovery: System Language Discovery
                                                    PID:4624
                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=nlrp_launcher.exe --webview-exe-version=0.11 --user-data-dir="C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=4624.576.5753949232107834118
                                                      4⤵
                                                      • Drops file in Program Files directory
                                                      • Enumerates system info in registry
                                                      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                      PID:4980
                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler "--user-data-dir=C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x168,0x16c,0x170,0x144,0x1a0,0x7fff4623b078,0x7fff4623b084,0x7fff4623b090
                                                        5⤵
                                                          PID:3368
                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView" --webview-exe-name=nlrp_launcher.exe --webview-exe-version=0.11 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1784,i,8543864541119408211,15785189657986513898,262144 --variations-seed-version --mojo-platform-channel-handle=1780 /prefetch:2
                                                          5⤵
                                                            PID:1112
                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView" --webview-exe-name=nlrp_launcher.exe --webview-exe-version=0.11 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2044,i,8543864541119408211,15785189657986513898,262144 --variations-seed-version --mojo-platform-channel-handle=2036 /prefetch:11
                                                            5⤵
                                                            • Drops file in Program Files directory
                                                            PID:2100
                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView" --webview-exe-name=nlrp_launcher.exe --webview-exe-version=0.11 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2296,i,8543864541119408211,15785189657986513898,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:13
                                                            5⤵
                                                              PID:2920
                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView" --webview-exe-name=nlrp_launcher.exe --webview-exe-version=0.11 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3464,i,8543864541119408211,15785189657986513898,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
                                                              5⤵
                                                                PID:2948
                                                      • C:\Windows\system32\vssvc.exe
                                                        C:\Windows\system32\vssvc.exe
                                                        1⤵
                                                        • Checks SCSI registry key(s)
                                                        • Suspicious use of AdjustPrivilegeToken
                                                        PID:1788
                                                      • C:\Windows\system32\srtasks.exe
                                                        C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
                                                        1⤵
                                                        • Suspicious use of AdjustPrivilegeToken
                                                        PID:3108

                                                      Network

                                                            MITRE ATT&CK Enterprise v16

                                                            Replay Monitor

                                                            Loading Replay Monitor...

                                                            Downloads

                                                            distribution.json

                                                            • Path C:\Program Files (x86)\New Life Roleplay\game\dist\distribution.json
                                                            • Size 287KB
                                                            • SHA256 01d9d695aa347bfc888ffb64f651d221fa080ca6724b9373ecd223c7c005257d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            distribution.json.sig

                                                            • Path C:\Program Files (x86)\New Life Roleplay\game\dist\distribution.json.sig
                                                            • Size 72B
                                                            • SHA256 023c12e86668e6ff460b0b2e308302d24d14fb3e335103921706da45ba0a3d1c
                                                            • MD5 SHA1 SHA512 TLSH

                                                            nlrp_launcher.exe.new

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\nlrp_launcher.exe.new
                                                            • Size 608KB
                                                            • SHA256 1c82bb7ea4ce26a9abf14a8afd1d10e067f68e1ca3d0760038226c69aae98e1b
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            24f40967-1248-4a58-a2fa-fe8c457f6d13.tmp

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\24f40967-1248-4a58-a2fa-fe8c457f6d13.tmp
                                                            • Size 4KB
                                                            • SHA256 44964b9c643a7dcbf1fc78b7221c0c81e4d0aba62c25ed7864124f41af8bec39
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            260f453c-c018-4c66-b0f1-97c47dc5a4f3.tmp

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\260f453c-c018-4c66-b0f1-97c47dc5a4f3.tmp
                                                            • Size 16KB
                                                            • SHA256 ef90f32adc77d6b2919922bb307531c60ace8335b75159daa8aa328b51baeb02
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            297e0c72-1008-426c-b89a-fbdbfa4f1485.tmp

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\297e0c72-1008-426c-b89a-fbdbfa4f1485.tmp
                                                            • Size 4KB
                                                            • SHA256 8e38eb57a539b264b20eb033dbfa3badc834996e323551ecf0807eab164c5053
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            9108b49f-4754-4faa-adb4-6d0047df61e2.tmp

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\9108b49f-4754-4faa-adb4-6d0047df61e2.tmp
                                                            • Size 2KB
                                                            • SHA256 596e1c352add488fd29bef6dd1323aa15cea91bc2379c91186a3a0104dbdf7c7
                                                            • MD5 SHA1 SHA512 TLSH

                                                            970cbcd3-d8c0-48b2-a30f-bd2e966ea607.tmp

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\970cbcd3-d8c0-48b2-a30f-bd2e966ea607.tmp
                                                            • Size 3KB
                                                            • SHA256 ead32b168a69be21c839ab20b2f42db2b48f263dfb320cfea864e674ab66fabd
                                                            • MD5 SHA1 SHA512 TLSH

                                                            97bfabee-c25c-436f-9a67-77a7390f9d30.tmp

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\97bfabee-c25c-436f-9a67-77a7390f9d30.tmp
                                                            • Size 4KB
                                                            • SHA256 1b4a551c00d4a1a3e4457b1d472cce5cef63d77c7aa8910b5b4e2028e62e5f54
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            settings.dat

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\Crashpad\settings.dat
                                                            • Size 280B
                                                            • SHA256 4e302267071d35847643f58ad19a058e90fabdd6b8a5b3f31b635720dbfca3b1
                                                            • MD5 SHA1 SHA512 TLSH

                                                            settings.dat

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\Crashpad\settings.dat
                                                            • Size 280B
                                                            • SHA256 e7dc96cec4bf5005fed0c42a44471df1da2613bebef41ddbcae42829a7461113
                                                            • MD5 SHA1 SHA512 TLSH

                                                            4b45cfbd-c798-41ed-a56d-a945c6bd1130.tmp

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\Default\4b45cfbd-c798-41ed-a56d-a945c6bd1130.tmp
                                                            • Size 6KB
                                                            • SHA256 79ff241b62adcf14d26785bfe9072a78f0acabf5928b7de46b385e7ccc05ae2a
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            temp-index

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\Default\Code Cache\js\index-dir\temp-index
                                                            • Size 72B
                                                            • SHA256 e175a626f60c76ab7ccb35137e0bdc955c5b7659da7f4400da7acbf30c52b56e
                                                            • MD5 SHA1 SHA512 TLSH

                                                            temp-index

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\Default\Code Cache\js\index-dir\temp-index
                                                            • Size 48B
                                                            • SHA256 21607c11e4269bba3b9c647a398f6f48cdfec1940db10bc6ca9cfbe2d686089f
                                                            • MD5 SHA1 SHA512

                                                            temp-index

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\Default\Code Cache\js\index-dir\temp-index
                                                            • Size 96B
                                                            • SHA256 377cc9bbe5b4b179668f4dcb21cebb9c89bca8f72c6ef3b4734c1dc827a6f9fd
                                                            • MD5 SHA1 SHA512 TLSH

                                                            index

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\Default\DawnGraphiteCache\index
                                                            • Size 256KB
                                                            • SHA256 f0b535c11947c75c325912ca740dd9be4be9c2d8ecc21a11ff8d46d024f40a87
                                                            • MD5 SHA1 SHA512 SSDEEP

                                                            data_0

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\Default\GPUCache\data_0
                                                            • Size 8KB
                                                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                            • MD5 SHA1 SHA512 SSDEEP

                                                            data_1

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\Default\GPUCache\data_1
                                                            • Size 264KB
                                                            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                            • MD5 SHA1 SHA512 SSDEEP

                                                            data_2

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\Default\GPUCache\data_2
                                                            • Size 8KB
                                                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                            • MD5 SHA1 SHA512 SSDEEP

                                                            data_3

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\Default\GPUCache\data_3
                                                            • Size 8KB
                                                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                            • MD5 SHA1 SHA512 SSDEEP

                                                            SCT Auditing Pending Reports

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\Default\Network\SCT Auditing Pending Reports
                                                            • Size 2B
                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                            • MD5 SHA1 SHA512

                                                            bc8f4217-0cc1-4128-b630-60b0d5756bf3.tmp

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\Default\Network\bc8f4217-0cc1-4128-b630-60b0d5756bf3.tmp
                                                            • Size 355B
                                                            • SHA256 25d96edd66cde7f5f9f351fd15aa2f537aee4cf6f7d90d0f40d6fc5d113c9ae2
                                                            • MD5 SHA1 SHA512 TLSH

                                                            CURRENT

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\Default\Site Characteristics Database\CURRENT
                                                            • Size 16B
                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                            • MD5 SHA1 SHA512

                                                            MANIFEST-000001

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001
                                                            • Size 41B
                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                            • MD5 SHA1 SHA512

                                                            f4b85312-0e50-440b-9a96-329423f4a91f.tmp

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\Default\f4b85312-0e50-440b-9a96-329423f4a91f.tmp
                                                            • Size 6KB
                                                            • SHA256 3e83074956ef298104d5ef57042c3f486043fff671c1ad94762f1c4f150c2174
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Local State

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\Local State
                                                            • Size 1KB
                                                            • SHA256 b299e16552ab73acad92436e4df4d8c5dc93eccf6ddded6f654de731e534e25a
                                                            • MD5 SHA1 SHA512 TLSH

                                                            b7296c3a-356d-43b1-8248-aa0d892a7a49.tmp

                                                            • Path C:\Program Files (x86)\New Life Roleplay\launcher\webview2_data\EBWebView\b7296c3a-356d-43b1-8248-aa0d892a7a49.tmp
                                                            • Size 1KB
                                                            • SHA256 646cacf4c38bf29a534f71334143e3ac1578a31a2b7c6843705dbe824c0c4fa9
                                                            • MD5 SHA1 SHA512 TLSH

                                                            AUG2009_D3DCompiler_42_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\AUG2009_D3DCompiler_42_x64.inf
                                                            • Size 830B
                                                            • SHA256 8977772e5392b8e79364b3b8d97300e97ad891f38d5a2dd306549401e46b05ff
                                                            • MD5 SHA1 SHA512 TLSH

                                                            AUG2009_D3DCompiler_42_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\AUG2009_D3DCompiler_42_x86.inf
                                                            • Size 1KB
                                                            • SHA256 bb8834d2366f6899c507bae176a13dadbd44488451a263eac830be95f4bad43f
                                                            • MD5 SHA1 SHA512 TLSH

                                                            AUG2009_XACT_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\AUG2009_XACT_x64.inf
                                                            • Size 920B
                                                            • SHA256 5d57466af1801ff3a92b1540907f0e4b91d90189177d68c6b4c8833e5d57dec3
                                                            • MD5 SHA1 SHA512 TLSH

                                                            AUG2009_XACT_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\AUG2009_XACT_x86.inf
                                                            • Size 1KB
                                                            • SHA256 1eb88b5460824fd32eec9b90e7ef5cb529f51215046e539d39fa27a409709766
                                                            • MD5 SHA1 SHA512 TLSH

                                                            AUG2009_XAudio_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\AUG2009_XAudio_x64.inf
                                                            • Size 923B
                                                            • SHA256 4348663aa7cfe22916fb13d93307e7384376fad9d6fa34c6196f80df42c61a33
                                                            • MD5 SHA1 SHA512 TLSH

                                                            AUG2009_XAudio_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\AUG2009_XAudio_x86.inf
                                                            • Size 1KB
                                                            • SHA256 842cc52100b5774bcda19e40837bd552b308e74829d5b35a505822c7436892e1
                                                            • MD5 SHA1 SHA512 TLSH

                                                            AUG2009_d3dcsx_42_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\AUG2009_d3dcsx_42_x64.inf
                                                            • Size 815B
                                                            • SHA256 f7a5a84bb654837193e0f40b579777f5c6cc2c7341cf90503d6a6709d319797f
                                                            • MD5 SHA1 SHA512 TLSH

                                                            AUG2009_d3dcsx_42_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\AUG2009_d3dcsx_42_x86.inf
                                                            • Size 1KB
                                                            • SHA256 ff9da1b0328fd918cf9558ee57387a4865afe98db1410cc16b1e921c5a744c48
                                                            • MD5 SHA1 SHA512 TLSH

                                                            AUG2009_d3dx10_42_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\AUG2009_d3dx10_42_x64.inf
                                                            • Size 815B
                                                            • SHA256 2bfdd3d3bf485439013045b3a08942f457385bb89ab76d9479fbdd85f09e9d96
                                                            • MD5 SHA1 SHA512 TLSH

                                                            AUG2009_d3dx10_42_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\AUG2009_d3dx10_42_x86.inf
                                                            • Size 1KB
                                                            • SHA256 a80a00464775da82c02f628c5bc13cab0d0643ec2a44b28d2acf7c77d467becf
                                                            • MD5 SHA1 SHA512 TLSH

                                                            AUG2009_d3dx11_42_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\AUG2009_d3dx11_42_x64.inf
                                                            • Size 815B
                                                            • SHA256 f9c13939779d4526107cf7d3554c122efb564cff02228d02b0b6ff211904f5dd
                                                            • MD5 SHA1 SHA512 TLSH

                                                            AUG2009_d3dx11_42_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\AUG2009_d3dx11_42_x86.inf
                                                            • Size 1KB
                                                            • SHA256 edf6764083b47c04fda52b149f565587c6a07d4455357fe3c27c9e56cc57a94d
                                                            • MD5 SHA1 SHA512 TLSH

                                                            AUG2009_d3dx9_42_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\AUG2009_d3dx9_42_x64.inf
                                                            • Size 812B
                                                            • SHA256 4887cbec8545b02152eb16f6296987a43a256b69b408330eaee362184f298d98
                                                            • MD5 SHA1 SHA512 TLSH

                                                            AUG2009_d3dx9_42_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\AUG2009_d3dx9_42_x86.inf
                                                            • Size 1KB
                                                            • SHA256 5989dc367a8f84815bcfa1c46ff756527c6250c62973220d1af354b70027eaf2
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Aug2008_XACT_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Aug2008_XACT_x64.inf
                                                            • Size 920B
                                                            • SHA256 cf09d632a4b2cc670d435f356f309dc58359735834baed10343fdfbf37eddaa1
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Aug2008_XACT_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Aug2008_XACT_x86.inf
                                                            • Size 1KB
                                                            • SHA256 f1daaa8d96108a4a338f62a4a1339143ddc566e194ca00dde5427136bfccb0af
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Aug2008_XAudio_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Aug2008_XAudio_x64.inf
                                                            • Size 923B
                                                            • SHA256 311bd58ed7437a1cc79692ae360a02efbc8ec51194abcb80bad78b2208a94d58
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Aug2008_XAudio_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Aug2008_XAudio_x86.inf
                                                            • Size 1KB
                                                            • SHA256 f211a7d99b3ffa0180bd91f68b2c285564227e075d499e950e76fde04e7707e3
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Aug2008_d3dx10_39_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Aug2008_d3dx10_39_x64.inf
                                                            • Size 815B
                                                            • SHA256 a5eab981c313538afcd7abc7742854d251c736835ffc1f549a4768fdf49c3e71
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Aug2008_d3dx10_39_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Aug2008_d3dx10_39_x86.inf
                                                            • Size 1KB
                                                            • SHA256 e83f8d48323887af89648c5bd7af713b42d20ccb757be34675f1fa527e6cc33f
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Aug2008_d3dx9_39_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Aug2008_d3dx9_39_x64.inf
                                                            • Size 812B
                                                            • SHA256 4cbb1c6804b9c76bba4e41f0d2a45f1daba7350af9da4ae6966651f7f4da041a
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Aug2008_d3dx9_39_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Aug2008_d3dx9_39_x86.inf
                                                            • Size 1KB
                                                            • SHA256 8a23d386626328f9519076f33d5c3b71c639f2347741442c3374974e6f61bd53
                                                            • MD5 SHA1 SHA512 TLSH

                                                            D3DCompiler_37.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\D3DCompiler_37.dll
                                                            • Size 1.4MB
                                                            • SHA256 715876d15b590936e4d32602a764d810650eec134922b32eea742e2fa71791c1
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DCompiler_38.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\D3DCompiler_38.dll
                                                            • Size 1.4MB
                                                            • SHA256 ddcaadbdd47bcba02c8d1880d456acc20732d21554977338ae507987ed04046e
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DCompiler_39.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\D3DCompiler_39.dll
                                                            • Size 1.4MB
                                                            • SHA256 b99b655abc4ec45851cc2acdb7a348e739687200a4fe3be9c35d6738dd61112f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DCompiler_40.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\D3DCompiler_40.dll
                                                            • Size 1.9MB
                                                            • SHA256 f0a6f156d13150de6ebb094233e5ff78581fbdb77bd0ff8d083698c42bc8e13b
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DCompiler_41.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\D3DCompiler_41.dll
                                                            • Size 1.8MB
                                                            • SHA256 69ddadf8f5be24f10382706480b55e2492008d102001779f976608e880c65aab
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DCompiler_42.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\D3DCompiler_42.dll
                                                            • Size 1.9MB
                                                            • SHA256 6c976311406c23aa71018d274da0ecdef43b6e3a3b0b01e941a5e8e4e974386c
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DCompiler_43.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\D3DCompiler_43.dll
                                                            • Size 2.0MB
                                                            • SHA256 2f23182ec6f4889397ac4bf03d62536136c5bdba825c7d2c4ef08c827f3a8a1c
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            FEB2010_X3DAudio_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\FEB2010_X3DAudio_x64.inf
                                                            • Size 815B
                                                            • SHA256 68351f03f4ef83e4b8c359e3e130441081690a1866b838a1b35d64674ef3abbf
                                                            • MD5 SHA1 SHA512 TLSH

                                                            FEB2010_X3DAudio_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\FEB2010_X3DAudio_x86.inf
                                                            • Size 1KB
                                                            • SHA256 d4da3e530982812d1e2a31570b80af541fac1b13c72997d2aad7ea3bfeaf4a4a
                                                            • MD5 SHA1 SHA512 TLSH

                                                            FEB2010_XACT_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\FEB2010_XACT_x64.inf
                                                            • Size 920B
                                                            • SHA256 c7efd1ec4e4d31644a5054d32cc1e6795464472c05439573ae93e1727a5eea4a
                                                            • MD5 SHA1 SHA512 TLSH

                                                            FEB2010_XACT_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\FEB2010_XACT_x86.inf
                                                            • Size 1KB
                                                            • SHA256 e850fdb84bcac0f667927e53fee943efd3f43be6c6a0ae1e17f3fff83ddb2635
                                                            • MD5 SHA1 SHA512 TLSH

                                                            FEB2010_XAudio_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\FEB2010_XAudio_x64.inf
                                                            • Size 923B
                                                            • SHA256 da63330fd2a1538b714ee6cf2e09256446a04a55f866b3f70237d8a7165cb3e3
                                                            • MD5 SHA1 SHA512 TLSH

                                                            FEB2010_XAudio_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\FEB2010_XAudio_x86.inf
                                                            • Size 1KB
                                                            • SHA256 74c827ef94881099761e04397ef8f162fd0ccaf4876a5503c4b53a5216d2acca
                                                            • MD5 SHA1 SHA512 TLSH

                                                            JUN2010_D3DCompiler_43_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\JUN2010_D3DCompiler_43_x64.inf
                                                            • Size 830B
                                                            • SHA256 3e779533a273e3395109c7efac13ba1c804c01b3ddb16938406fbdf90d851216
                                                            • MD5 SHA1 SHA512 TLSH

                                                            JUN2010_D3DCompiler_43_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\JUN2010_D3DCompiler_43_x86.inf
                                                            • Size 1KB
                                                            • SHA256 5dd568919e1b3cbcb23ab21d0f2d6c1a065070848aba5d2a896da39e55c6cbbf
                                                            • MD5 SHA1 SHA512 TLSH

                                                            JUN2010_XACT_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\JUN2010_XACT_x64.inf
                                                            • Size 920B
                                                            • SHA256 f3c288d84db29f7bc4d2c771341f765b5e1940a4827fcb55a65b48eec83c71d3
                                                            • MD5 SHA1 SHA512 TLSH

                                                            JUN2010_XACT_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\JUN2010_XACT_x86.inf
                                                            • Size 1KB
                                                            • SHA256 ca604ce9d2ee43a09b39b23a6a2a048b1a79d85c7d78679cc73aacc75cf7a62e
                                                            • MD5 SHA1 SHA512 TLSH

                                                            JUN2010_XAudio_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\JUN2010_XAudio_x64.inf
                                                            • Size 923B
                                                            • SHA256 1a0f1b929724f8b71d5ce922f19b9d539d2d804c89af947d5927b049ef0fd3d8
                                                            • MD5 SHA1 SHA512 TLSH

                                                            JUN2010_XAudio_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\JUN2010_XAudio_x86.inf
                                                            • Size 1KB
                                                            • SHA256 d786d06a709d5dc26067132b9735fc317763fcf8064442d6f77f65012ba179da
                                                            • MD5 SHA1 SHA512 TLSH

                                                            JUN2010_d3dcsx_43_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\JUN2010_d3dcsx_43_x64.inf
                                                            • Size 815B
                                                            • SHA256 5289b5ad22146d7cc0c35cdb2c9662742693550de8f013d1ec40e944288d155a
                                                            • MD5 SHA1 SHA512 TLSH

                                                            JUN2010_d3dcsx_43_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\JUN2010_d3dcsx_43_x86.inf
                                                            • Size 1KB
                                                            • SHA256 d5200b332caf4fff25eb3d224527a3944878c5c3849512779a2afcfeae4c3ca1
                                                            • MD5 SHA1 SHA512 TLSH

                                                            JUN2010_d3dx10_43_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\JUN2010_d3dx10_43_x64.inf
                                                            • Size 815B
                                                            • SHA256 a65f370a741d62c2be0ca588758d089dd976092cb910bb6b1b7d008741e18377
                                                            • MD5 SHA1 SHA512 TLSH

                                                            JUN2010_d3dx10_43_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\JUN2010_d3dx10_43_x86.inf
                                                            • Size 1KB
                                                            • SHA256 4d4263cbb11858c727824c4a071f992909675719be3076b4a47852bf6affd862
                                                            • MD5 SHA1 SHA512 TLSH

                                                            JUN2010_d3dx11_43_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\JUN2010_d3dx11_43_x64.inf
                                                            • Size 815B
                                                            • SHA256 2c4cf75b76203cba6378693668c8c00b564871c8bfd7fbda01e1e841477b2a3b
                                                            • MD5 SHA1 SHA512 TLSH

                                                            JUN2010_d3dx11_43_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\JUN2010_d3dx11_43_x86.inf
                                                            • Size 1KB
                                                            • SHA256 3925c924eb4ec4f5a643b2d14d2eda603341fbbd22118cdd8ae04aaa96f443c0
                                                            • MD5 SHA1 SHA512 TLSH

                                                            JUN2010_d3dx9_43_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\JUN2010_d3dx9_43_x64.inf
                                                            • Size 812B
                                                            • SHA256 272650a2d9b1cfea17021f4bf941b21f2206791e279070d4e906ce0ce56ac16f
                                                            • MD5 SHA1 SHA512 TLSH

                                                            JUN2010_d3dx9_43_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\JUN2010_d3dx9_43_x86.inf
                                                            • Size 1KB
                                                            • SHA256 6b33d32da02f664092d44b05237990f825b4062c105a063badcf978648b5e95b
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Jun2008_X3DAudio_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Jun2008_X3DAudio_x64.inf
                                                            • Size 815B
                                                            • SHA256 f4526ad18f081b84a139e6d98923569fc8ffc7644e20499e2f68abfb3e87753e
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Jun2008_X3DAudio_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Jun2008_X3DAudio_x86.inf
                                                            • Size 1KB
                                                            • SHA256 0064b7db5bfe52b6f40f61d962901c7baa116abbc72328f50586b6fa65f894bd
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Jun2008_XACT_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Jun2008_XACT_x64.inf
                                                            • Size 920B
                                                            • SHA256 90577c4c3d5d0de80c805caf0cc713582698ef7224fecf4ff911ba6309c5c920
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Jun2008_XACT_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Jun2008_XACT_x86.inf
                                                            • Size 1KB
                                                            • SHA256 79cb10222e466d54908d30ee433830e9673d5a538fabc5f4568521c2aff66eb1
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Jun2008_XAudio_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Jun2008_XAudio_x64.inf
                                                            • Size 923B
                                                            • SHA256 9ce21064f2feed9bc9426a6e92e9c850aae31abeb80c7906ff917fbf4cc03913
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Jun2008_XAudio_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Jun2008_XAudio_x86.inf
                                                            • Size 1KB
                                                            • SHA256 e5e435c4536f987e1087218b025e6dc66c24c3e300e839391891f1b3bfd360dd
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Jun2008_d3dx10_38_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Jun2008_d3dx10_38_x64.inf
                                                            • Size 815B
                                                            • SHA256 0de0ada970774620c0905227666fc30910e64f3cfa4b99e4c5481685d12e3ded
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Jun2008_d3dx10_38_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Jun2008_d3dx10_38_x86.inf
                                                            • Size 1KB
                                                            • SHA256 f5f54664ec67f6333a9f0607d891bd0dc2acfee8cce09ac4ee0372b5d0aa12fd
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Jun2008_d3dx9_38_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Jun2008_d3dx9_38_x64.inf
                                                            • Size 812B
                                                            • SHA256 ddad68974990a21a8d4a91c47ef1034ddf0475551586f04e86b8cd2f0c990d6f
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Jun2008_d3dx9_38_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Jun2008_d3dx9_38_x86.inf
                                                            • Size 1KB
                                                            • SHA256 06faf7f7ea5503dcece13d6537e57cd2581d5188a5d839fe7f118298a721b51a
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2008_X3DAudio_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2008_X3DAudio_x64.inf
                                                            • Size 815B
                                                            • SHA256 b7dba312a71ed109c9c54cc5cc096096eb8cf0962396e8dc996f8fa28307547c
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2008_X3DAudio_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2008_X3DAudio_x86.inf
                                                            • Size 1KB
                                                            • SHA256 0b6e28f00364a9ff436c3d99f0d4e80bf615f1450f420122324853cc0b88b16c
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2008_XACT_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2008_XACT_x64.inf
                                                            • Size 920B
                                                            • SHA256 1038a41e63ee8abbc8be85a86fafb2ac1d03defa6b88deb270f96a6ed1a97122
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2008_XACT_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2008_XACT_x86.inf
                                                            • Size 1KB
                                                            • SHA256 6b0cc0dc993e172855864fa078c4e5c8f2f46bfc3200bf2ccdf3292931ee3cb2
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2008_XAudio_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2008_XAudio_x64.inf
                                                            • Size 923B
                                                            • SHA256 10a2db49dd3bea59133bbd82b3fc0f8a959b65b0c250c11a9a6f3123b961e6e9
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2008_XAudio_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2008_XAudio_x86.inf
                                                            • Size 1KB
                                                            • SHA256 472bcfb54b5d63377da128596dfb30c8f200f79edaaf6d29de1afcdb71a3413d
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2008_d3dx10_37_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2008_d3dx10_37_x64.inf
                                                            • Size 815B
                                                            • SHA256 f37681f4d49f71d48b1960c3efac74f28af9fa764b29ed3a40b5f424fc8f60c9
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2008_d3dx10_37_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2008_d3dx10_37_x86.inf
                                                            • Size 1KB
                                                            • SHA256 bae3bc2b7071d2d1c657a87a8c8af6c0fb5373f11c9aa5f61b406924717d0792
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2008_d3dx9_37_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2008_d3dx9_37_x64.inf
                                                            • Size 812B
                                                            • SHA256 a4fda3373241c2748a969ddeeb6ef41b3cc1bca6608362ba87db75f69023fe9c
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2008_d3dx9_37_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2008_d3dx9_37_x86.inf
                                                            • Size 1KB
                                                            • SHA256 d55858e166a2fe00d4acc30da756f0ab2c4dd5a79a9874eab3100722c74a1b75
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2009_X3DAudio_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2009_X3DAudio_x64.inf
                                                            • Size 815B
                                                            • SHA256 4da1a6bbcb7e84073dcd1898f854702ec32f5324478b2fa39c4a9868abeecd3b
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2009_X3DAudio_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2009_X3DAudio_x86.inf
                                                            • Size 1KB
                                                            • SHA256 aabd029d75f25244bae4ca17dbf9c4feebec0d5f121fcd388c175c3360be1bac
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2009_XACT_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2009_XACT_x64.inf
                                                            • Size 920B
                                                            • SHA256 9369fb0a9d3353627c097fc19780e5e7126af47766ef6a4a95ff3ddcca56691e
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2009_XACT_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2009_XACT_x86.inf
                                                            • Size 1KB
                                                            • SHA256 764c3caeb1725a11701ca7119fdc49b3219553b79f9a5c1a02b20991391e5a21
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2009_XAudio_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2009_XAudio_x64.inf
                                                            • Size 923B
                                                            • SHA256 4a554d09934581a87a4cc98749b525b6794947b64b8414d380edfd502713f9b6
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2009_XAudio_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2009_XAudio_x86.inf
                                                            • Size 1KB
                                                            • SHA256 1b66e4d80f9843fc73b0a6097fb8ed5f3d2cfd5cfb5c328904d2c370bd87bb3e
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2009_d3dx10_41_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2009_d3dx10_41_x64.inf
                                                            • Size 815B
                                                            • SHA256 53dc284b87f5787804823977d2fbb528e393829367db5d2ac5dd79c581a27616
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2009_d3dx10_41_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2009_d3dx10_41_x86.inf
                                                            • Size 1KB
                                                            • SHA256 0170a4b551b58d92a753e86793bf3af762fe3f8d781512f710a4d661aec8d626
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2009_d3dx9_41_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2009_d3dx9_41_x64.inf
                                                            • Size 812B
                                                            • SHA256 12fe918aeb224a9bd4d2a8142f97c95d58a9a69e591e7e4f95014c155bb03519
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Mar2009_d3dx9_41_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Mar2009_d3dx9_41_x86.inf
                                                            • Size 1KB
                                                            • SHA256 bd29711cc2ecd924990167ffa95f48842e24aeed3acef1023717040240b4bbb6
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Nov2008_X3DAudio_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Nov2008_X3DAudio_x64.inf
                                                            • Size 815B
                                                            • SHA256 d04d052fa3065cdf00e96bcdd7dabf3583ef10b6d80fd67cb03c32f09f2e602d
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Nov2008_X3DAudio_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Nov2008_X3DAudio_x86.inf
                                                            • Size 1KB
                                                            • SHA256 d0361ffe046b7a7a374a4938d419e4121365892e4f2138899f670619ab34ac6a
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Nov2008_XACT_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Nov2008_XACT_x64.inf
                                                            • Size 920B
                                                            • SHA256 2d8a68e726728e4f4be05e35fca812b855046ce4bf697f0dea14094dbd7e1d79
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Nov2008_XACT_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Nov2008_XACT_x86.inf
                                                            • Size 1KB
                                                            • SHA256 31680e7a90d24eda04c910e1f3e6c02774cfc5c36ae08e7ac043665264702f83
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Nov2008_XAudio_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Nov2008_XAudio_x64.inf
                                                            • Size 923B
                                                            • SHA256 ed20b160dd26a5ed3c220a1fd9b5fc880b3280ebf56c2f73e76b6d4da5ef82bd
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Nov2008_XAudio_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Nov2008_XAudio_x86.inf
                                                            • Size 1KB
                                                            • SHA256 950b5aef596fc5048732f6cf263dfca5bcc25df7dc17df91efcbc3551751a3b3
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Nov2008_d3dx10_40_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Nov2008_d3dx10_40_x64.inf
                                                            • Size 815B
                                                            • SHA256 7f902d9ce6f6d71be1d16997ffc9661be2540522c73cc185516415a52dced2a5
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Nov2008_d3dx10_40_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Nov2008_d3dx10_40_x86.inf
                                                            • Size 1KB
                                                            • SHA256 a4eed39cf36adccac4317e5822b30aa37ac5b001bcf4a24f7b5ccac6b8b71e9d
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Nov2008_d3dx9_40_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Nov2008_d3dx9_40_x64.inf
                                                            • Size 812B
                                                            • SHA256 d071b30f56763506da0c939b8d35b0540bef3ef0d51a5cfbc45816ca91f891a3
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Nov2008_d3dx9_40_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\Nov2008_d3dx9_40_x86.inf
                                                            • Size 1KB
                                                            • SHA256 955637638635025f01f82febab4a4977252a765439d90ce940fba752723b9db6
                                                            • MD5 SHA1 SHA512 TLSH

                                                            X3DAudio1_3.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\X3DAudio1_3.dll
                                                            • Size 25KB
                                                            • SHA256 74ec3e6b253af1b68252e62a5c08479453b3341d49c606adcf36913fe9ed9717
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            X3DAudio1_4.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\X3DAudio1_4.dll
                                                            • Size 25KB
                                                            • SHA256 799b38139523a3b30d26e21798ee705375c61eed8ae2434fddb52fde51f4bb78
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            X3DAudio1_5.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\X3DAudio1_5.dll
                                                            • Size 22KB
                                                            • SHA256 315944bb2a1959c8a4bd2677ed415363e1611c7351ce55319dc98fd2aac83f87
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            X3DAudio1_6.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\X3DAudio1_6.dll
                                                            • Size 21KB
                                                            • SHA256 574d14ab9a641c6cbadd78f2cd6c088b64b59c3646057952e63cad7d2778e1c3
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            X3DAudio1_7.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\X3DAudio1_7.dll
                                                            • Size 21KB
                                                            • SHA256 288c701bdedf1d45c63dd0b7d424a752f8819f90feb5088c582f76bc98970ba3
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XACT3_0_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XACT3_0_x86.inf
                                                            • Size 849B
                                                            • SHA256 4c9e72fb96372ebc97a727224e874f1430b33fb4e530764f587629ba5b59c12d
                                                            • MD5 SHA1 SHA512 TLSH

                                                            XACT3_1_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XACT3_1_x86.inf
                                                            • Size 849B
                                                            • SHA256 51e99a77b3cf3b0211f3b6e2ba84ea6f045ad94bac33ccb7f6212c29104e0b28
                                                            • MD5 SHA1 SHA512 TLSH

                                                            XACT3_2_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XACT3_2_x86.inf
                                                            • Size 849B
                                                            • SHA256 6b21142458cd6d89bc746b01a1351e5ac0038cce85e93fc32981d8ceaa0741ce
                                                            • MD5 SHA1 SHA512 TLSH

                                                            XACT3_3_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XACT3_3_x86.inf
                                                            • Size 849B
                                                            • SHA256 c4772ae50b79c4c31636ecad921ffc913e43922c21923be8b8b518cf2ce681b3
                                                            • MD5 SHA1 SHA512 TLSH

                                                            XACT3_4_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XACT3_4_x86.inf
                                                            • Size 849B
                                                            • SHA256 ee21caec8f0db2fdffc24eb167a3bfc9d44a0fe7c1213e816fcd369b8bf30e30
                                                            • MD5 SHA1 SHA512 TLSH

                                                            XACT3_5_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XACT3_5_x86.inf
                                                            • Size 849B
                                                            • SHA256 3de421939e233ace862772c332cfedc368915b6afb0f966374a4ac93a56df3be
                                                            • MD5 SHA1 SHA512 TLSH

                                                            XACT3_6_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XACT3_6_x86.inf
                                                            • Size 849B
                                                            • SHA256 da4b77f9e2cee68c8ff767e851b9abdb1d73a30704e6a2e0d3874f8cc559665f
                                                            • MD5 SHA1 SHA512 TLSH

                                                            XACT3_7_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XACT3_7_x86.inf
                                                            • Size 849B
                                                            • SHA256 8621b52841246b5574502d50af132489434b71ccdf7db17eab7564d6e66d6133
                                                            • MD5 SHA1 SHA512 TLSH

                                                            XAPOFX1_0.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAPOFX1_0.dll
                                                            • Size 63KB
                                                            • SHA256 8b396d275de2550af8ada6a1ff71f0f4870b51c8407e44044c2dde7ad6b754cc
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAPOFX1_1.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAPOFX1_1.dll
                                                            • Size 67KB
                                                            • SHA256 5ab63c0f040fdf65e681eba4daa55ed83e89ea10c426dc2fc763da0fc94f3ace
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAPOFX1_2.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAPOFX1_2.dll
                                                            • Size 69KB
                                                            • SHA256 d1a55061bcb42f69b7cf35e2985d48e30c7a90f0bc668e90390f465b36bd0161
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAPOFX1_3.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAPOFX1_3.dll
                                                            • Size 67KB
                                                            • SHA256 b05ad9417028b9777f69422caa01ae9fd22c7bfe542bc6e7de2649e28a4ea643
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAPOFX1_3.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAPOFX1_3.dll
                                                            • Size 67KB
                                                            • SHA256 c6956ac2ee59f71e86784138b5443de6970a1274ac161945b8a44dc1d535db84
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAPOFX1_4.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAPOFX1_4.dll
                                                            • Size 72KB
                                                            • SHA256 0aee44b12913a95840ee6431d90518b0d72c54a27392e21ee6995e2151554a06
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAPOFX1_5.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAPOFX1_5.dll
                                                            • Size 72KB
                                                            • SHA256 becfdcd6b16523573cb52df87aa7d993f1b345ba903d0618c3b36535c3800197
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAudio2_0.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAudio2_0.dll
                                                            • Size 468KB
                                                            • SHA256 e435b73193bdf651f7ae564eba05266595ac672db45e0e22dce92d0bcb3c6513
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAudio2_0_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAudio2_0_x86.inf
                                                            • Size 832B
                                                            • SHA256 1a001b3f39b6d0ee733d6f3dbe4f742c7c15ff2dd49f59f003ff5e581f6d2ee9
                                                            • MD5 SHA1 SHA512 TLSH

                                                            XAudio2_1.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAudio2_1.dll
                                                            • Size 495KB
                                                            • SHA256 32a7c6a4edef46f025a4a5c64b892e29baaae948e86d9ed49e82014eec1441de
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAudio2_1_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAudio2_1_x86.inf
                                                            • Size 882B
                                                            • SHA256 9f36be8d6eaa8f3ca3d679e677e1008974d85f955875fdd035943723477ca3f3
                                                            • MD5 SHA1 SHA512 TLSH

                                                            XAudio2_2.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAudio2_2.dll
                                                            • Size 497KB
                                                            • SHA256 9c7897b4ee1bcd190b1c0b7b77e64ee731d234764683a1e2286af70d86b62753
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAudio2_2_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAudio2_2_x86.inf
                                                            • Size 882B
                                                            • SHA256 f8b7e5979b8f19bbf32c320f3e3c640cf0d8bbaa323f37e613cf2f89ec316d5c
                                                            • MD5 SHA1 SHA512 TLSH

                                                            XAudio2_3.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAudio2_3.dll
                                                            • Size 502KB
                                                            • SHA256 04dec9d7c68962e01efec0aac0ef7a3499bc4c16e8a41bd61fe6641da48d7dcc
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAudio2_3_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAudio2_3_x86.inf
                                                            • Size 882B
                                                            • SHA256 ed9205fddb17832240c06e8b4cdcc9902ceead1efc91aa28cc798243c7a41b58
                                                            • MD5 SHA1 SHA512 TLSH

                                                            XAudio2_4.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAudio2_4.dll
                                                            • Size 505KB
                                                            • SHA256 bcde4317debd0052b1436a6fda60e1dcb1e308979498117fa0cb50061f38101c
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAudio2_4_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAudio2_4_x86.inf
                                                            • Size 882B
                                                            • SHA256 2cb9c45823f193a95982d3ad556046bb4daf0a16783e823245336e421e1c8a2b
                                                            • MD5 SHA1 SHA512 TLSH

                                                            XAudio2_5.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAudio2_5.dll
                                                            • Size 503KB
                                                            • SHA256 c596de2ab8394fb62538fef0b4657317f4ead50a6d798c5d066e25e334576c27
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAudio2_5_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAudio2_5_x86.inf
                                                            • Size 882B
                                                            • SHA256 b722d16fb312f2f8e5a163bda43b98c96e9de31910d36cc2f94639b74be6696a
                                                            • MD5 SHA1 SHA512 TLSH

                                                            XAudio2_6.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAudio2_6.dll
                                                            • Size 515KB
                                                            • SHA256 61b57170f7c6365714396072d22cb98746718c0f44c9f0d5c62fdb1b218639c7
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAudio2_6_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAudio2_6_x86.inf
                                                            • Size 882B
                                                            • SHA256 c60c4a6018e5f860a12322a0d77a1f2ad85c2d6d6dd04cc651560790dd66c9ad
                                                            • MD5 SHA1 SHA512 TLSH

                                                            XAudio2_7.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAudio2_7.dll
                                                            • Size 514KB
                                                            • SHA256 d1690b602cb317f7f1e1e13e3fc5819ad8b5b38a92d812078afb1b408ccc4b69
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAudio2_7_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\XAudio2_7_x86.inf
                                                            • Size 882B
                                                            • SHA256 1ebd56e5bc5d6442f01ac9faf333cb513ebc6397945e7f577a5970778cc636ee
                                                            • MD5 SHA1 SHA512 TLSH

                                                            apr2005_d3dx9_25_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\apr2005_d3dx9_25_x64.inf
                                                            • Size 806B
                                                            • SHA256 3d97810d00ceb3e7674a2ef81427d4180f77f93f9454837c5933fbc6a1ad5c1d
                                                            • MD5 SHA1 SHA512 TLSH

                                                            apr2005_d3dx9_25_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\apr2005_d3dx9_25_x86.inf
                                                            • Size 1KB
                                                            • SHA256 f484ef48e0c6e2be8207d8c8c7308dd966d52bea1fde221b927d3e49f1cab0b7
                                                            • MD5 SHA1 SHA512 TLSH

                                                            apr2006_d3dx9_30_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\apr2006_d3dx9_30_x64.inf
                                                            • Size 806B
                                                            • SHA256 b70b8f62a2459580d22999301f1823bcb8a9bef54bd33b38e0af274a3a12e010
                                                            • MD5 SHA1 SHA512 TLSH

                                                            apr2006_d3dx9_30_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\apr2006_d3dx9_30_x86.inf
                                                            • Size 1KB
                                                            • SHA256 373cca07c0ceffa72901441219a4457de9ff110aededae5e4818588da39cd344
                                                            • MD5 SHA1 SHA512 TLSH

                                                            apr2006_mdx1_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\apr2006_mdx1_x86.inf
                                                            • Size 2KB
                                                            • SHA256 2546a1875bf868edc621a1cd0ee262151faa08762bcced0117e1304eace0c04d
                                                            • MD5 SHA1 SHA512 TLSH

                                                            apr2006_mdx1_x86_archive.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\apr2006_mdx1_x86_archive.inf
                                                            • Size 1KB
                                                            • SHA256 80d44f16d81ae8bdb1ef8f0efdf53911523280723bab4392285cbd33a0fc633c
                                                            • MD5 SHA1 SHA512 TLSH

                                                            apr2006_xact_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\apr2006_xact_x64.inf
                                                            • Size 908B
                                                            • SHA256 d9c3216ada5dd7791ca852a8ea97765f94a7b56fed27b20916b5067eb82b14d0
                                                            • MD5 SHA1 SHA512 TLSH

                                                            apr2006_xact_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\apr2006_xact_x86.inf
                                                            • Size 1KB
                                                            • SHA256 037db252501fd0e30303c11706d804d9eabbf319d0b4e88181ef8f297b4fef8e
                                                            • MD5 SHA1 SHA512 TLSH

                                                            apr2006_xinput_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\apr2006_xinput_x64.inf
                                                            • Size 854B
                                                            • SHA256 f9d01e93e547045e1d232242c900530dfdfa54698586c7049281965e3bd01ca2
                                                            • MD5 SHA1 SHA512 TLSH

                                                            apr2006_xinput_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\apr2006_xinput_x86.inf
                                                            • Size 1KB
                                                            • SHA256 b604779115d32d439f77b33257c96f928ec4ce564189f7d0d357099c1da140c4
                                                            • MD5 SHA1 SHA512 TLSH

                                                            apr2007_d3dx10_33_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\apr2007_d3dx10_33_x64.inf
                                                            • Size 844B
                                                            • SHA256 3e61c4d723d282c36c5493d82644ea96715b7b548e50494d22b4a83d4e2b8237
                                                            • MD5 SHA1 SHA512 TLSH

                                                            apr2007_d3dx10_33_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\apr2007_d3dx10_33_x86.inf
                                                            • Size 1KB
                                                            • SHA256 3286ba521fda888b1808f12955a58d7da4df7d2fdb472c7837a1e0e1a6317a06
                                                            • MD5 SHA1 SHA512 TLSH

                                                            apr2007_d3dx9_33_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\apr2007_d3dx9_33_x64.inf
                                                            • Size 812B
                                                            • SHA256 2d87efca75d8b9aeab3262841d52a7c56bad34ac6b9691f4df2d89b14c950f8d
                                                            • MD5 SHA1 SHA512 TLSH

                                                            apr2007_d3dx9_33_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\apr2007_d3dx9_33_x86.inf
                                                            • Size 1KB
                                                            • SHA256 349a09a2791d697bffffc61410a536cdcf258f0d7c86dda44a297e8aec4bdf00
                                                            • MD5 SHA1 SHA512 TLSH

                                                            apr2007_xact_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\apr2007_xact_x64.inf
                                                            • Size 920B
                                                            • SHA256 bf6ca1165632efccb0292ae8b739ce68d78ebb95dd39b8e4c1717d78a026db10
                                                            • MD5 SHA1 SHA512 TLSH

                                                            apr2007_xact_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\apr2007_xact_x86.inf
                                                            • Size 1KB
                                                            • SHA256 008db10780aa8fb6f20b7aa5f5d513ca77efb36c8dddfb9ad89173ecaf700af5
                                                            • MD5 SHA1 SHA512 TLSH

                                                            apr2007_xinput_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\apr2007_xinput_x64.inf
                                                            • Size 860B
                                                            • SHA256 0d6e1c0e961d878b319ac30d3439056883448dcf26774003b73920f3377ecac8
                                                            • MD5 SHA1 SHA512 TLSH

                                                            apr2007_xinput_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\apr2007_xinput_x86.inf
                                                            • Size 1KB
                                                            • SHA256 1c798cb80e9e46ce03356ea7316e1eff5d3a88ccdd7cbfbfcdce73cded23b4e5
                                                            • MD5 SHA1 SHA512 TLSH

                                                            aug2005_d3dx9_27_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\aug2005_d3dx9_27_x64.inf
                                                            • Size 806B
                                                            • SHA256 0a8ffec8d7ef3a0aa005f604a045dcf80cf5b6473b4f26e30c58eee23e253fae
                                                            • MD5 SHA1 SHA512 TLSH

                                                            aug2005_d3dx9_27_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\aug2005_d3dx9_27_x86.inf
                                                            • Size 1KB
                                                            • SHA256 d02232a6587c460c026601517178318bab2ac29c59d269c6e3d1a3a993a9a1c4
                                                            • MD5 SHA1 SHA512 TLSH

                                                            aug2006_xact_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\aug2006_xact_x64.inf
                                                            • Size 908B
                                                            • SHA256 6fe310a67227203bbca3389dfe3403fa268cb424f4b525cca2d5407ed26670a5
                                                            • MD5 SHA1 SHA512 TLSH

                                                            aug2006_xact_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\aug2006_xact_x86.inf
                                                            • Size 1KB
                                                            • SHA256 34e7227e03812fce5415b0a4c3d15a9e9b259350ac9873db2a98b2ea76ae2284
                                                            • MD5 SHA1 SHA512 TLSH

                                                            aug2006_xinput_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\aug2006_xinput_x64.inf
                                                            • Size 854B
                                                            • SHA256 35f25b9538e55172cf36729519581444e26b38a9dae5cccc4ad75dfa34ea08e7
                                                            • MD5 SHA1 SHA512 TLSH

                                                            aug2006_xinput_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\aug2006_xinput_x86.inf
                                                            • Size 1KB
                                                            • SHA256 cc66d67daa1f4c31ff5e59c2606c3930f72204a5057c29b9d58dde37a47b1cb7
                                                            • MD5 SHA1 SHA512 TLSH

                                                            aug2007_d3dx10_35_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\aug2007_d3dx10_35_x64.inf
                                                            • Size 815B
                                                            • SHA256 af4bdfeb4283f04e24475279931e042f17052224cf708f0c444fba2f2e221289
                                                            • MD5 SHA1 SHA512 TLSH

                                                            aug2007_d3dx10_35_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\aug2007_d3dx10_35_x86.inf
                                                            • Size 1KB
                                                            • SHA256 7987e2c475705bf8f049a15af946ec0cb5ccddf27c0b5c8126694421df601770
                                                            • MD5 SHA1 SHA512 TLSH

                                                            aug2007_d3dx9_35_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\aug2007_d3dx9_35_x64.inf
                                                            • Size 812B
                                                            • SHA256 e34ad9e49f31cb9211e0f350405c344d93fc65075e470c8fe09dd78af68f2c80
                                                            • MD5 SHA1 SHA512 TLSH

                                                            aug2007_d3dx9_35_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\aug2007_d3dx9_35_x86.inf
                                                            • Size 1KB
                                                            • SHA256 c0d87c1b079b54b75b86939199ca5ee1f796ae3de9c4ed0ae074a4fa01823c73
                                                            • MD5 SHA1 SHA512 TLSH

                                                            aug2007_xact_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\aug2007_xact_x64.inf
                                                            • Size 920B
                                                            • SHA256 2fcc4bdc6516418d3b4935c301e14f30e3bbd0adfd264bc34067b27b0b266b8e
                                                            • MD5 SHA1 SHA512 TLSH

                                                            aug2007_xact_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\aug2007_xact_x86.inf
                                                            • Size 1KB
                                                            • SHA256 c246c38e41ed71bde4b3cce4fe337826173896a04c26f8b2a00b06bb0cec024d
                                                            • MD5 SHA1 SHA512 TLSH

                                                            d3dcompiler_33.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dcompiler_33.dll
                                                            • Size 1.1MB
                                                            • SHA256 12e238af4b4edc1f774213709a87a91b77b2c9d2d18fe475b027872923b6fa17
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dcompiler_34.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dcompiler_34.dll
                                                            • Size 1.1MB
                                                            • SHA256 5044a5810fd931339933a8d0c56115a5a5c27d8c0d8e348977e2724a032accf0
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dcompiler_35.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dcompiler_35.dll
                                                            • Size 1.3MB
                                                            • SHA256 5a866cdf74f981e783624dafb0e72f133ad9f9b293856d7a18c7558fa357beb1
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dcompiler_36.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dcompiler_36.dll
                                                            • Size 1.3MB
                                                            • SHA256 f15efcab1780fe7d784a3cd3798f147fa249e81b7ef9a494b85dc7fdab084734
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dcsx_42.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dcsx_42.dll
                                                            • Size 5.2MB
                                                            • SHA256 e462eb3d41db54988ce3be46ced60b0073f8d939a9946cda67fb1df3c8afe0a1
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dcsx_43.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dcsx_43.dll
                                                            • Size 1.8MB
                                                            • SHA256 b46a44b6fce8f141c9e02798645db2ee0da5c69ea71195e29f83a91a355fa2ca
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx10.dll
                                                            • Size 429KB
                                                            • SHA256 fd2caa28493ea76021b93641958238b7a933f4f6db1a2070be03cc81d87d8307
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_33.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx10_33.dll
                                                            • Size 433KB
                                                            • SHA256 b04e2b089656eae01a0071359f9d7fb040dea804c1b9d2379431864174259c2d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_34.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx10_34.dll
                                                            • Size 433KB
                                                            • SHA256 330e120d745e1132252df81800362a7ae0b61a9060afc800165ba8a1d55d3fb3
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_35.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx10_35.dll
                                                            • Size 434KB
                                                            • SHA256 db775655fd923e29509402556f86002dd9aea062cdcdba7073e1057a67b5ce50
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_36.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx10_36.dll
                                                            • Size 434KB
                                                            • SHA256 aee0248f18dfef8194451a22c69adda1cca38c03ae9aa776114da9d8851d4c38
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_37.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx10_37.dll
                                                            • Size 452KB
                                                            • SHA256 61aaf973712f848b24c3e769e3252248ece96db63f206de0ca7ff43d9ed87a51
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_38.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx10_38.dll
                                                            • Size 457KB
                                                            • SHA256 bf463b7ee2235f351309b5fd790f514acf2b55a4a1f90222f7479024cc28fc34
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_39.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx10_39.dll
                                                            • Size 457KB
                                                            • SHA256 613afdb8b44bb3bed945279229d9604a3cd553f8c2b9b091235cbab8cd00de61
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_40.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx10_40.dll
                                                            • Size 441KB
                                                            • SHA256 c05787cbf3aa4527baae96a425ceac910090ef48809990a450c33f3cda0e4767
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_41.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx10_41.dll
                                                            • Size 442KB
                                                            • SHA256 9f4c15e1f68795727eded4737acc5a1aa85f896cd9e6924fddc9128b48f1bbd6
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_42.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx10_42.dll
                                                            • Size 442KB
                                                            • SHA256 46429c4affe041b08a7acfda0e9162ba42de966acb2cbcaf09ef976232073b51
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_43.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx10_43.dll
                                                            • Size 459KB
                                                            • SHA256 56fcd13650fd1f075743154e8c48465dd68a236ab8960667d75373139d2631bf
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx11_42.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx11_42.dll
                                                            • Size 229KB
                                                            • SHA256 8c8fa8dce19e2f43e82cecd73a268e831a5ce0a16023845f7fa7fcb597772e85
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx11_43.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx11_43.dll
                                                            • Size 242KB
                                                            • SHA256 492e960cb3ccfc8c25fc83f7c464ba77c86a20411347a1a9b3e5d3e8c9180a8d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_24.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_24.dll
                                                            • Size 2.1MB
                                                            • SHA256 94ec67763f67932dd4273ef5cc12889a5cef090ffea3ee78a80c7b530272b1b5
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_25.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_25.dll
                                                            • Size 2.2MB
                                                            • SHA256 4c54df27ce84d21b2924e64ff79b13e7876ce85d8e0c9c1d0abd8da73888187a
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_26.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_26.dll
                                                            • Size 2.2MB
                                                            • SHA256 8ea96fe01c3c86a36fcb3795ae03eb12034003e335ef475571efaeda17c5bc78
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_27.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_27.dll
                                                            • Size 2.2MB
                                                            • SHA256 a70d571cd675c97c9eeb4a234dba1d667ffb54ec3bb14defb36b3e2f605ae257
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_28.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_28.dll
                                                            • Size 2.2MB
                                                            • SHA256 f3e391b5f1c1f9637cabf2b812b6f5d65e4776c89d779f506f6b643cc563176d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_29.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_29.dll
                                                            • Size 2.2MB
                                                            • SHA256 c5e21c18f8c79bc517da59e3192c39ea73bdcaf85867628187f6b3cca07dd21f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_30.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_30.dll
                                                            • Size 2.3MB
                                                            • SHA256 5edeed79f2359527a55b8189cfa8b9b121cd608d44eead905a0f3436938ad532
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_31.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_31.dll
                                                            • Size 2.3MB
                                                            • SHA256 e2065619fe6eb0034833b1dc0369deb4a6edc3110e38a1132eeafcf430c578a5
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_32.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_32.dll
                                                            • Size 3.3MB
                                                            • SHA256 e96693794daa05a75a83c11df2e7b42f2de61567c6ad0b69e353b50f6c88119f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_33.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_33.dll
                                                            • Size 3.3MB
                                                            • SHA256 c6b7b2ad7742dde5dd8d1a35fdc1c185e586e551ad9c74d3fb21759cd8ca4da8
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_34.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_34.dll
                                                            • Size 3.3MB
                                                            • SHA256 b6f77f06518d35345fb61172b6a13159125ed60c469d28b1a2e07970e9ddf81d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_35.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_35.dll
                                                            • Size 3.6MB
                                                            • SHA256 2198022938156b790e9cfb0f7997494b66a11a1ad49b395be58251d635b66b26
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_36.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_36.dll
                                                            • Size 3.6MB
                                                            • SHA256 c12f0ab0338eb5031d3d04beaf7208ac848f7e037d21ff963d2af90221cbe935
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_37.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_37.dll
                                                            • Size 3.6MB
                                                            • SHA256 c2ccb84c672a9d8966e82a28005a4269886ee304972ac3590c0b8a9c1622a3d8
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_38.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_38.dll
                                                            • Size 3.7MB
                                                            • SHA256 743e77a228e7d75442263ad70051e44534f7972c6326fd34b505a9c2c245894b
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_39.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_39.dll
                                                            • Size 3.7MB
                                                            • SHA256 5d29988cad858f754ecc62c3d30de555f82cc21b5b26c448b890295e9b7bee82
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_40.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_40.dll
                                                            • Size 4.2MB
                                                            • SHA256 16fd909aeb68d0d1aca8529dc7f78880b97d6649d70ce8d03a2c858bc28e216b
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_41.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_41.dll
                                                            • Size 4.0MB
                                                            • SHA256 6ac4df203af419d3f3b7d9a99e14a3490ea3ad307c474bfe36baea642b1421f6
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_42.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_42.dll
                                                            • Size 1.8MB
                                                            • SHA256 f8b9cfab7fffbc8f98e41aa439d72921dc180634a1febca2a9d41a0df35d3472
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_43.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\d3dx9_43.dll
                                                            • Size 1.9MB
                                                            • SHA256 0b28546be22c71834501f7d7185ede5d79742457331c7ee09efc14490dd64f5f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            dec2005_d3dx9_28_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\dec2005_d3dx9_28_x64.inf
                                                            • Size 806B
                                                            • SHA256 510b6d528be3f2997b8bd811486dc3c13eb27a9de22d1bf030e6db0e632cca4d
                                                            • MD5 SHA1 SHA512 TLSH

                                                            dec2005_d3dx9_28_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\dec2005_d3dx9_28_x86.inf
                                                            • Size 1KB
                                                            • SHA256 d4d03c4ab3c8486d6331548e967ee17e011fdac90f63c0a9a44a744815a7da7a
                                                            • MD5 SHA1 SHA512 TLSH

                                                            dec2006_d3dx10_00_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\dec2006_d3dx10_00_x64.inf
                                                            • Size 426B
                                                            • SHA256 2a43ac72ab9a6f4771c02b6e10884921b733b86dbd7ebdfc5502d011cd5c8d05
                                                            • MD5 SHA1 SHA512 TLSH

                                                            dec2006_d3dx10_00_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\dec2006_d3dx10_00_x86.inf
                                                            • Size 673B
                                                            • SHA256 33291a47388edecc059f1825c1979142d7a9cd4a850716f9dce687deba1fa750
                                                            • MD5 SHA1 SHA512 TLSH

                                                            dec2006_d3dx9_32_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\dec2006_d3dx9_32_x64.inf
                                                            • Size 806B
                                                            • SHA256 ff00313af4a90f426492d72969f5efc6c56a17f2dd91f20cb5c0a38d9f1f2b6b
                                                            • MD5 SHA1 SHA512 TLSH

                                                            dec2006_d3dx9_32_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\dec2006_d3dx9_32_x86.inf
                                                            • Size 1KB
                                                            • SHA256 ef09d783bf5cff2cfba99946e5e71fda577b196a49c88bed1c51b5fd29cecf94
                                                            • MD5 SHA1 SHA512 TLSH

                                                            dec2006_xact_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\dec2006_xact_x64.inf
                                                            • Size 908B
                                                            • SHA256 f2f2040b8d13705f00d8e20a53f22093aa0f8c8d6aa6224992ba727ace7b75f6
                                                            • MD5 SHA1 SHA512 TLSH

                                                            dec2006_xact_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\dec2006_xact_x86.inf
                                                            • Size 1KB
                                                            • SHA256 4c0a40094228a51f567bec65c2cdf289d268812c1af579e3c6b76cd3adb77e12
                                                            • MD5 SHA1 SHA512 TLSH

                                                            dxdllreg_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\dxdllreg_x86.inf
                                                            • Size 724B
                                                            • SHA256 54e098294ef0ad3b14b9c77642838b5992fe4573099d8397a1ef566d9e36da40
                                                            • MD5 SHA1 SHA512 TLSH

                                                            dxupdate.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\dxupdate.dll
                                                            • Size 173KB
                                                            • SHA256 fb4f297e295c802b1377c6684734b7249d55743dfb7c14807bef59a1b5db63a2
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            dxupdate.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\dxupdate.inf
                                                            • Size 12KB
                                                            • SHA256 93f5589499ee4ee2812d73c0d8feacbbcfe8c47b6d98572486bc0eff3c5906ca
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            feb2006_d3dx9_29_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\feb2006_d3dx9_29_x64.inf
                                                            • Size 806B
                                                            • SHA256 ef36ece1a6bd8af3b0b9247b081d28ed511b7e18c43eb3aff364c9ce8d3a06c3
                                                            • MD5 SHA1 SHA512 TLSH

                                                            feb2006_d3dx9_29_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\feb2006_d3dx9_29_x86.inf
                                                            • Size 1KB
                                                            • SHA256 f12f4bd86d5cd748b0fcf7106e9dff333c27c0886541339ba1f40c443bdc61cd
                                                            • MD5 SHA1 SHA512 TLSH

                                                            feb2006_xact_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\feb2006_xact_x64.inf
                                                            • Size 890B
                                                            • SHA256 b7ca1a4942057592c5b83b4425350da41c61779dcae608112141d727091842d4
                                                            • MD5 SHA1 SHA512 TLSH

                                                            feb2006_xact_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\feb2006_xact_x86.inf
                                                            • Size 1KB
                                                            • SHA256 45146fd446fc8533dc5f97d88bee9ae220161f24797114d0bf3afc7c479ed69b
                                                            • MD5 SHA1 SHA512 TLSH

                                                            feb2007_xact_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\feb2007_xact_x64.inf
                                                            • Size 908B
                                                            • SHA256 184c1684c57de07983edaaa1ae2751b263497673ee8418af023a63fa03553f53
                                                            • MD5 SHA1 SHA512 TLSH

                                                            feb2007_xact_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\feb2007_xact_x86.inf
                                                            • Size 1KB
                                                            • SHA256 64b6020f43bbab7f7c2368fcfe7224165fef555b2bef813aa13b2d9f6295d46c
                                                            • MD5 SHA1 SHA512 TLSH

                                                            infinst.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                                            • Size 65KB
                                                            • SHA256 5ec466d86f7205e7a99985f0be8cacd0494454780c28ac90ff5d4b906b9dc5e5
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            infinst.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                                            • Size 65KB
                                                            • SHA256 300ed1a4ef37c8d5f13d67a5daabd46bcdd9ad9da4fe6283f20d7d38f72caaf5
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            infinst.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                                            • Size 65KB
                                                            • SHA256 cd5f212a25c5f4ccb9a0c4688f1308941c2c238083b9a4766260b79261c4e243
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            infinst.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                                            • Size 65KB
                                                            • SHA256 1a008a90db1768c12226ca16b48df724a821c47aa729fb553eb401c7527e770d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            infinst.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                                            • Size 65KB
                                                            • SHA256 76eed293cdcdf17942acc313366b22b55ad78ee0389989438e63ab7ae145167d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            infinst.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                                            • Size 68KB
                                                            • SHA256 34ab99536ea59ad60ba6efda3ea6d18291ef096a0bab3664248d6045805da0ec
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            infinst.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                                            • Size 68KB
                                                            • SHA256 d4e57566914f1d36f4ebfb6e164ce2170f1d5e6392189d0ad6de3ef3b0a9aad3
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            infinst.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                                            • Size 68KB
                                                            • SHA256 fbe2e9cf7e400537a4871218113df178f70501ffeea59a8f0f721927124d6d46
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            infinst.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                                            • Size 68KB
                                                            • SHA256 e0838d8d562ed4683bc06ecdbc46fe19dcddf711a0c7909dabf62da572035dcf
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            infinst.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                                            • Size 73KB
                                                            • SHA256 de817d92db706f329d50567221c42110ae781d679ef853cc684aec779ab51ccf
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            infinst.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                                            • Size 74KB
                                                            • SHA256 ea31341129f7558d34fc2fcae9e715343aaadfc57f06a33a6da18448bd71b77d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            infinst.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                                            • Size 74KB
                                                            • SHA256 a4b1a15b9744ef83cefd88fa86fb4f9053d8e32cb08845cd37b0672a54fcab98
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            infinst.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                                            • Size 74KB
                                                            • SHA256 46906f2dde3a45d9537fa5a8e4c409cb81b7aa4f9ea9c8870a581dde00104f2e
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            infinst.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                                            • Size 74KB
                                                            • SHA256 4c8befaece0c58eb75c38e2347db04557c1bd2a4a269282c3769d6bcccf50395
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            infinst.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                                            • Size 74KB
                                                            • SHA256 691109b9127863b82291ec4c0f9bbf51f0119b775347ba37bda33be36f5c00e5
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            infinst.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                                            • Size 74KB
                                                            • SHA256 1707a6644d66406a9ac149b8fc959d964dce5c028ca3e1d0d5052e70f80515e2
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            infinst.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                                            • Size 74KB
                                                            • SHA256 3a07c2436d3fd2473e15518a53262d4f0fb7f2a05589437cc5668f929063e782
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            infinst.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                                            • Size 74KB
                                                            • SHA256 d808bb408a4bd695a9793e70b1c61637e008ac11174dbe1373481e2bdb0c9299
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            infinst.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\infinst.exe
                                                            • Size 81KB
                                                            • SHA256 8c62fe8466d9a24a0f1924de37b05d672a826454804086cddc7ed87c020e67ff
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            jun2005_d3dx9_26_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\jun2005_d3dx9_26_x64.inf
                                                            • Size 806B
                                                            • SHA256 addafcf0cfd36587c12eb2692922f0fb134874d11005a0544cc054546a493933
                                                            • MD5 SHA1 SHA512 TLSH

                                                            jun2005_d3dx9_26_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\jun2005_d3dx9_26_x86.inf
                                                            • Size 1KB
                                                            • SHA256 262ed4a65dd45e19f196cb2d9946326693ee31a86b51bf77116dec2727971cb6
                                                            • MD5 SHA1 SHA512 TLSH

                                                            jun2006_xact_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\jun2006_xact_x64.inf
                                                            • Size 908B
                                                            • SHA256 fe9caa55be17684622fd7339b1b96e1f0d107dc33c065706d24a435d523c6e12
                                                            • MD5 SHA1 SHA512 TLSH

                                                            jun2006_xact_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\jun2006_xact_x86.inf
                                                            • Size 1KB
                                                            • SHA256 6bdce6f6779712e38c6d9e6e5961217e417254089f096c719f25566e952cb257
                                                            • MD5 SHA1 SHA512 TLSH

                                                            jun2007_d3dx10_34_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\jun2007_d3dx10_34_x64.inf
                                                            • Size 815B
                                                            • SHA256 0f75b7ef71e183476ec938705024eb8a10a77d7602a336be876c7f5d17429725
                                                            • MD5 SHA1 SHA512 TLSH

                                                            jun2007_d3dx10_34_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\jun2007_d3dx10_34_x86.inf
                                                            • Size 1KB
                                                            • SHA256 808983dfd3db7c3452589ea4e14ab4af8ef47dbad3b639f9a3c55685c9b73867
                                                            • MD5 SHA1 SHA512 TLSH

                                                            jun2007_d3dx9_34_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\jun2007_d3dx9_34_x64.inf
                                                            • Size 812B
                                                            • SHA256 77f3fa1756181a90d2ee63c26cddfdaba0d720c9a49121db28746cd02b3e071d
                                                            • MD5 SHA1 SHA512 TLSH

                                                            jun2007_d3dx9_34_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\jun2007_d3dx9_34_x86.inf
                                                            • Size 1KB
                                                            • SHA256 a568b7b8a0360ad94b1ed6388eca6ca9d8770937360a426a0fdadef9a4019bba
                                                            • MD5 SHA1 SHA512 TLSH

                                                            jun2007_xact_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\jun2007_xact_x64.inf
                                                            • Size 920B
                                                            • SHA256 405d8cbe3c87b16afac2a9254497412a42de4ae2d8fb470a1234dc3260e0b90f
                                                            • MD5 SHA1 SHA512 TLSH

                                                            jun2007_xact_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\jun2007_xact_x86.inf
                                                            • Size 1KB
                                                            • SHA256 33b980fb973394d9d8cb4645914d4cf6793bf92bd311e0431ce9cacc59fdcbc5
                                                            • MD5 SHA1 SHA512 TLSH

                                                            mdx_1.0.2903.0_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\mdx_1.0.2903.0_x86.inf
                                                            • Size 1KB
                                                            • SHA256 3bd14cf2a96544ece692e1911500f7196370a111017fb6b0e23db0f0d0f40dfa
                                                            • MD5 SHA1 SHA512 TLSH

                                                            microsoft.directx.audiovideoplayback.xml

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\microsoft.directx.audiovideoplayback.xml
                                                            • Size 33KB
                                                            • SHA256 d7ac200711a20e1e93fe3b61254f6535e7589e52baaedb396ae5f292a9f4be43
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            microsoft.directx.diagnostics.xml

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\microsoft.directx.diagnostics.xml
                                                            • Size 10KB
                                                            • SHA256 73b5cf6b8ef13759e6a8131a71389928eae8c678344034ee57a5a8eaf2b82182
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            microsoft.directx.direct3d.xml

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\microsoft.directx.direct3d.xml
                                                            • Size 829KB
                                                            • SHA256 3c76cbd0841fbf6044dab6af73b770e044666b5e8336e92d74f330677ae4816a
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            microsoft.directx.direct3dx.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\microsoft.directx.direct3dx.dll
                                                            • Size 563KB
                                                            • SHA256 c29d337bf7639fbf424b34cc0409d2715762e1b4d82881fb524a2508381c9f62
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            microsoft.directx.direct3dx.xml

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\microsoft.directx.direct3dx.xml
                                                            • Size 1.3MB
                                                            • SHA256 80423d7cfaa5945cbad4cf96b65724c398ed503b4ff70b6951d8609987f15f7d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            microsoft.directx.direct3dx.xml

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\microsoft.directx.direct3dx.xml
                                                            • Size 1.3MB
                                                            • SHA256 1d809d3c4a123e3bcd745af2367be85266301ad7a4817049a44fc18e165afc7f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            microsoft.directx.directdraw.xml

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\microsoft.directx.directdraw.xml
                                                            • Size 738KB
                                                            • SHA256 4ae5c1ca9e8583dfaf856e32111a36e5802962101d2b67e1f50800d3cde3bce4
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            microsoft.directx.directinput.xml

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\microsoft.directx.directinput.xml
                                                            • Size 337KB
                                                            • SHA256 6b66e10478cbe44c5a112fd0ed4e1d4b94ac34ac197cf2859082269127600819
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            microsoft.directx.directplay.xml

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\microsoft.directx.directplay.xml
                                                            • Size 1.2MB
                                                            • SHA256 5653483207a6e0e821afcbeb9c9ffdb7130502c5941f8df55a1d1dd29564aa03
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            microsoft.directx.directsound.xml

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\microsoft.directx.directsound.xml
                                                            • Size 339KB
                                                            • SHA256 65cdf4c3456fb46797776edcde06e16b1c17a1defc1c94c0c2af62f63a5cb2d6
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            microsoft.directx.xml

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\microsoft.directx.xml
                                                            • Size 259KB
                                                            • SHA256 8600ecd86af17dca452991e55d7f54db97d9a99d81418016969677ea3ec96abb
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            nov2007_d3dx10_36_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\nov2007_d3dx10_36_x64.inf
                                                            • Size 815B
                                                            • SHA256 7a49ae818e199cf9f9bd831f94cb6d03a1e72a141d76546261979b30642757b7
                                                            • MD5 SHA1 SHA512 TLSH

                                                            nov2007_d3dx10_36_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\nov2007_d3dx10_36_x86.inf
                                                            • Size 1KB
                                                            • SHA256 96f48bb810055699d37e9e27a65947483a0b4df304870e3b5448d3051b3e4926
                                                            • MD5 SHA1 SHA512 TLSH

                                                            nov2007_d3dx9_36_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\nov2007_d3dx9_36_x64.inf
                                                            • Size 812B
                                                            • SHA256 d1b544b3912e73e5984cd759096120febe6f17e41a3cf920ef82431b9b569c1d
                                                            • MD5 SHA1 SHA512 TLSH

                                                            nov2007_d3dx9_36_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\nov2007_d3dx9_36_x86.inf
                                                            • Size 1KB
                                                            • SHA256 843764f70f56d430c0695e263c895a135a631f793213d1005fafcf9c210d1ac9
                                                            • MD5 SHA1 SHA512 TLSH

                                                            nov2007_x3daudio_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\nov2007_x3daudio_x64.inf
                                                            • Size 815B
                                                            • SHA256 1cc72ca78433fbb72ee6b654c908748ea846c87c80424816745f285ed3bc910b
                                                            • MD5 SHA1 SHA512 TLSH

                                                            nov2007_x3daudio_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\nov2007_x3daudio_x86.inf
                                                            • Size 1KB
                                                            • SHA256 f882bdbc8230d24b24e20f9d0db447586e9493801900a8ba381eb493bd41f5d5
                                                            • MD5 SHA1 SHA512 TLSH

                                                            nov2007_xact_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\nov2007_xact_x64.inf
                                                            • Size 926B
                                                            • SHA256 841d579573afd51499c7cd8ee986a41db63cedb722e8fac351d3632ff470c161
                                                            • MD5 SHA1 SHA512 TLSH

                                                            nov2007_xact_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\nov2007_xact_x86.inf
                                                            • Size 1KB
                                                            • SHA256 24714f229e479338ed89bdd6143140505fd63f517b7e71170ea6c072a1748b06
                                                            • MD5 SHA1 SHA512 TLSH

                                                            oct2005_xinput_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\oct2005_xinput_x64.inf
                                                            • Size 618B
                                                            • SHA256 534d55cae9f43193f49d74c9303fa3d32cc309d0b23597a97c315f207f2a358d
                                                            • MD5 SHA1 SHA512 TLSH

                                                            oct2005_xinput_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\oct2005_xinput_x86.inf
                                                            • Size 782B
                                                            • SHA256 a14d5947c0ad4a864f95e3f35344e93f4845094d660eb37b77b1fdae9f7995e2
                                                            • MD5 SHA1 SHA512 TLSH

                                                            oct2006_d3dx9_31_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\oct2006_d3dx9_31_x64.inf
                                                            • Size 806B
                                                            • SHA256 c031987e68e476365cd885e41a072f85fdfc9e480c93871d024a5ccf26d17118
                                                            • MD5 SHA1 SHA512 TLSH

                                                            oct2006_d3dx9_31_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\oct2006_d3dx9_31_x86.inf
                                                            • Size 1KB
                                                            • SHA256 a1c61096019a6ae1a9f31e3fe67aa2bb7e9e451967959d7088344f3f20ab572e
                                                            • MD5 SHA1 SHA512 TLSH

                                                            oct2006_xact_x64.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\oct2006_xact_x64.inf
                                                            • Size 908B
                                                            • SHA256 4c388e9eaf3c39e75d003a58020e491b675b3a6054c702062a9c90e86f691d96
                                                            • MD5 SHA1 SHA512 TLSH

                                                            oct2006_xact_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\oct2006_xact_x86.inf
                                                            • Size 1KB
                                                            • SHA256 66998b21cbe6f05b12cdb4bb45549dcb1b4a92f8a1b910334150a8d767fa39e9
                                                            • MD5 SHA1 SHA512 TLSH

                                                            x3daudio1_0.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\x3daudio1_0.dll
                                                            • Size 13KB
                                                            • SHA256 228dfece2b4555a243a73e7bf461036f1e53951977625651ff5a59deaeaf4b88
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            x3daudio1_1.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\x3daudio1_1.dll
                                                            • Size 14KB
                                                            • SHA256 ff15f14174a5543f028fa49cca745582fe4cacf3bbe490749cf43444690ab359
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            x3daudio1_2.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\x3daudio1_2.dll
                                                            • Size 17KB
                                                            • SHA256 7c06bb70d12cf78de9c6a12a53c95f9dba41c140a48bccd500483e5b87795a8c
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            x3daudio1_2.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\x3daudio1_2.dll
                                                            • Size 17KB
                                                            • SHA256 4c448c7f77e3b4385d2cd35d0c470589cdf0524e532f9cf7ae084a8f88aa949a
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            x3daudio1_2.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\x3daudio1_2.dll
                                                            • Size 17KB
                                                            • SHA256 1ae37d90d39c36c142a51ab9fef7230788ff95080f2bc47734737bf82d3c2c9b
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xact2_10_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xact2_10_x86.inf
                                                            • Size 855B
                                                            • SHA256 958de71e56e27cefa7cc490206e56dc5ef146f75b5cd53d22ced635625bb7ef0
                                                            • MD5 SHA1 SHA512 TLSH

                                                            xact2_1_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xact2_1_x86.inf
                                                            • Size 905B
                                                            • SHA256 20c974b8d4a04b2bbfe8950e424b9b6652ff66259428128df18eac5b3466ec12
                                                            • MD5 SHA1 SHA512 TLSH

                                                            xact2_2_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xact2_2_x86.inf
                                                            • Size 905B
                                                            • SHA256 a3b3bc3b262a5b38f9e2c5f721fa5b2dd695edb3df9e138ec47a59dd640e5cc5
                                                            • MD5 SHA1 SHA512 TLSH

                                                            xact2_3_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xact2_3_x86.inf
                                                            • Size 905B
                                                            • SHA256 8183b58a90053b2326879520425de48f4864209124301db340c95543f59be158
                                                            • MD5 SHA1 SHA512 TLSH

                                                            xact2_4_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xact2_4_x86.inf
                                                            • Size 905B
                                                            • SHA256 92251d97f2d1a1afd9427330dcf99ae3e7d925785c9e9067e1355abddde7afae
                                                            • MD5 SHA1 SHA512 TLSH

                                                            xact2_5_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xact2_5_x86.inf
                                                            • Size 905B
                                                            • SHA256 3f15fdd7620748e20d28abdf0d3c1f0f4e086090e738097980ed91fc4c33f0e0
                                                            • MD5 SHA1 SHA512 TLSH

                                                            xact2_6_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xact2_6_x86.inf
                                                            • Size 905B
                                                            • SHA256 2a500247d9221e08391b407df0c07c26ae297f9b69f4ee3c9b0326fdee4b972b
                                                            • MD5 SHA1 SHA512 TLSH

                                                            xact2_7_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xact2_7_x86.inf
                                                            • Size 905B
                                                            • SHA256 274c2faca85f3779f03d13be979fd7210b6984f85e25dec1ffbb5e8d9c935fdf
                                                            • MD5 SHA1 SHA512 TLSH

                                                            xact2_8_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xact2_8_x86.inf
                                                            • Size 905B
                                                            • SHA256 cca6f061caed3b8b48b5b95d46e6b9678d427891cb463a818ce684a557e9e2f4
                                                            • MD5 SHA1 SHA512 TLSH

                                                            xact2_9_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xact2_9_x86.inf
                                                            • Size 905B
                                                            • SHA256 4687ef716f623510ab9d7965160cd792c45c4c53e02f87d899165cd4b46bfe22
                                                            • MD5 SHA1 SHA512 TLSH

                                                            xact_x86.inf

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xact_x86.inf
                                                            • Size 899B
                                                            • SHA256 4c30d7162a3a06874ac51f2aa81a8ebd57a980073920441933e92c26230d8da9
                                                            • MD5 SHA1 SHA512 TLSH

                                                            xactengine2_0.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xactengine2_0.dll
                                                            • Size 224KB
                                                            • SHA256 cfd1c2d34feb7d94f282e97bf762a99bfa7309dc7353d96dfe4aadc187d26c67
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_1.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xactengine2_1.dll
                                                            • Size 224KB
                                                            • SHA256 666cef7d27a38f709063c9c581fd95e6b3fa27167bff4beff484dba2dc922a2b
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_10.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xactengine2_10.dll
                                                            • Size 261KB
                                                            • SHA256 113640ae8cf78caa7cface2f906f9e6b60809906f5c26e08b2e90fc48430f3b7
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_2.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xactengine2_2.dll
                                                            • Size 224KB
                                                            • SHA256 4f996edb65022e33ae9c9f7acf7232c8d444f75c50c72894f6d3173b55404ebe
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_3.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xactengine2_3.dll
                                                            • Size 231KB
                                                            • SHA256 ca20cf8e4034719a46bf67c6009486c2c1cfc2da10ffed3a67dcae677b4f6793
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_4.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xactengine2_4.dll
                                                            • Size 232KB
                                                            • SHA256 1e0e09fc077bdeee3de065c663b83f6717d39d56778833f030955077d490d000
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_5.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xactengine2_5.dll
                                                            • Size 245KB
                                                            • SHA256 ec68b5163cbb5f15e2fbe37fdf5fcb0d01dffbe53a460cb2cf668f31f0127ad5
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_6.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xactengine2_6.dll
                                                            • Size 249KB
                                                            • SHA256 be45aef0889b03e2243282a912f41580e8566db666a782c26a1d4d7988799d03
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_7.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xactengine2_7.dll
                                                            • Size 255KB
                                                            • SHA256 a43c92af3fbe91dfe2a1d415342631fe64e18c7dd3e16e93b6c78947b68e7bd6
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_8.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xactengine2_8.dll
                                                            • Size 259KB
                                                            • SHA256 15d82e89bea30bf82de6ba0cfbe97eeaf05d1e06bc0133f0d1ee8d0cc41f51f6
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_9.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xactengine2_9.dll
                                                            • Size 260KB
                                                            • SHA256 93a0d8fc38e4e9a301d9e721afbeedc5af40becc0b11a6e7e8e38f08f366ff6e
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine3_0.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xactengine3_0.dll
                                                            • Size 232KB
                                                            • SHA256 887329745c479ce8d3023c969adf66780dd7e51ab536f0a08550ba4c77066c20
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine3_1.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xactengine3_1.dll
                                                            • Size 232KB
                                                            • SHA256 088999560171c60129c95f9b541852392602561dce43e4c61a453d48065f52ca
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine3_2.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xactengine3_2.dll
                                                            • Size 232KB
                                                            • SHA256 e6a34c1f068f89d6515cb460eed3b4dbb53522c5579e6c75741482f0d40d9f99
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine3_3.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xactengine3_3.dll
                                                            • Size 230KB
                                                            • SHA256 ef052bc9b7fde596fff3ea2d9c8fc994f3282953dead1b7f5477e7154af67245
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine3_4.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xactengine3_4.dll
                                                            • Size 229KB
                                                            • SHA256 d3bad7995b998f2c95dbb33020a198ef5a248825321032f051619f353d46182b
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine3_5.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xactengine3_5.dll
                                                            • Size 233KB
                                                            • SHA256 1d37ab9b90372eaaafb5055401449dc3184428fed559baaf36fbcccd2479611a
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine3_6.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xactengine3_6.dll
                                                            • Size 233KB
                                                            • SHA256 8a7e7c5ac2e6230f0249d46751522e7ecf85e7490cf7491ab73bf2e7e59e4c0f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine3_7.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xactengine3_7.dll
                                                            • Size 234KB
                                                            • SHA256 d7b1cf58898046c430d49cf8f778e4898280f4709340c3938d3139894166fe8d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xinput1_1.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xinput1_1.dll
                                                            • Size 61KB
                                                            • SHA256 69cd725c53e0302e75db20e9a3e4b33f58dceaa2e6ea4938b2733df8bc289a71
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xinput1_2.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xinput1_2.dll
                                                            • Size 61KB
                                                            • SHA256 9714d146a785d458f0de8fef387d82c9f8e101c02407a0cbeb06f02a69518eec
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xinput1_3.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\DX4107.tmp\xinput1_3.dll
                                                            • Size 79KB
                                                            • SHA256 8d540d484ea41e374fd0107d55d253f87ded4ce780d515d8fd59bbe8c98970a7
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            __PSScriptPolicyTest_ewsfd2t2.zd4.ps1

                                                            • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ewsfd2t2.zd4.ps1
                                                            • Size 60B
                                                            • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                                            • MD5 SHA1 SHA512 TLSH

                                                            System.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\System.dll
                                                            • Size 12KB
                                                            • SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            codegic-intermediate.cer

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\codegic-intermediate.cer
                                                            • Size 1KB
                                                            • SHA256 698552460cb0a799149d80d44dd4deb2d3953752e446e47c917121949b4a01fc
                                                            • MD5 SHA1 SHA512 TLSH

                                                            codegic-root.cer

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\codegic-root.cer
                                                            • Size 1KB
                                                            • SHA256 1078cfa870ed2b2141294ce562b1890d22f149d5f5323fabc05618bd699ae69f
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Apr2005_d3dx9_25_x64.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Apr2005_d3dx9_25_x64.cab
                                                            • Size 1.3MB
                                                            • SHA256 b4188ce988af9c4771ae0abcc7edc42a091133f9f20196564f51755dc55ea85d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Apr2005_d3dx9_25_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Apr2005_d3dx9_25_x86.cab
                                                            • Size 1.0MB
                                                            • SHA256 6ebfb6ed6ac0b69502a5b74e2edca188872fe767269c4ebf62f174157d198de4
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Apr2006_MDX1_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Apr2006_MDX1_x86.cab
                                                            • Size 894KB
                                                            • SHA256 0e3b4b9d5a45884620820d0e9cfed852b03dfb44e443179a35e93f3183384db3
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Apr2006_MDX1_x86_Archive.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Apr2006_MDX1_x86_Archive.cab
                                                            • Size 4.0MB
                                                            • SHA256 0a051a9b50f58dc631254102ac885942ced67c2911950de0cdd93cd1cd9453ec
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Apr2006_XACT_x64.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Apr2006_XACT_x64.cab
                                                            • Size 174KB
                                                            • SHA256 002f45af20e43a24abee7a79c5add11987c88140b84e2ecd33c0c67259c7f71b
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Apr2006_XACT_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Apr2006_XACT_x86.cab
                                                            • Size 129KB
                                                            • SHA256 875662d0fc1fe865bf43e7279fd391e88f96b3141c1a829ab3080d547501ff8f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Apr2006_d3dx9_30_x64.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Apr2006_d3dx9_30_x64.cab
                                                            • Size 1.3MB
                                                            • SHA256 079f61e155695a61a0ce009ee00cf76fbf6b2b9b412c1a5b4a2035d4b5c90a5b
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Apr2006_d3dx9_30_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Apr2006_d3dx9_30_x86.cab
                                                            • Size 1.1MB
                                                            • SHA256 4b5da79e14ef58f2608fc5ccedfc7c6c6f782291aa5573f36af76f2903173db5
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Apr2006_xinput_x64.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Apr2006_xinput_x64.cab
                                                            • Size 85KB
                                                            • SHA256 48da57aa045a877053a481802fdb3ec5782615d9ad85a8c06612bd80272e75d7
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Apr2006_xinput_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Apr2006_xinput_x86.cab
                                                            • Size 44KB
                                                            • SHA256 a9b3dd45926364d79b42b75d8064c814ff428437143c59b1c703ec8323305fbb
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Aug2005_d3dx9_27_x64.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Aug2005_d3dx9_27_x64.cab
                                                            • Size 1.3MB
                                                            • SHA256 281d20c56caa3a2851199c028d4d20ef0a862cc3f84b165eb200da573d9e4401
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Aug2005_d3dx9_27_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Aug2005_d3dx9_27_x86.cab
                                                            • Size 1.0MB
                                                            • SHA256 7a10900872ecd9bdbc8f7beb7869a260fa4b25e34084f237f1b096df5371c273
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Aug2006_XACT_x64.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Aug2006_XACT_x64.cab
                                                            • Size 178KB
                                                            • SHA256 beaac99fd17bc9fa85a2a220a13d8c13bd90f66eee595cbd27ab9aaadc234b03
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Aug2006_XACT_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Aug2006_XACT_x86.cab
                                                            • Size 134KB
                                                            • SHA256 cd2e1256efa1723eb77c77440f7b72f0eed8c0df17677cd4cc5a95a65a0f4849
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Aug2006_xinput_x64.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Aug2006_xinput_x64.cab
                                                            • Size 85KB
                                                            • SHA256 a54c7820f37b5e70068b801263c7efcc26b6404555a968094227e8bbaf5c22c5
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Aug2006_xinput_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Aug2006_xinput_x86.cab
                                                            • Size 44KB
                                                            • SHA256 ad2b521d1a7abca6314eaeacb23690b63b2a17adbb2a47d3d69cc4660c7d2152
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Dec2005_d3dx9_28_x64.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Dec2005_d3dx9_28_x64.cab
                                                            • Size 1.3MB
                                                            • SHA256 8231b38a0ab70018f15d7239ed96e5f2bc89ddae6cf9650c9d7bd052b96877e3
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Dec2005_d3dx9_28_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Dec2005_d3dx9_28_x86.cab
                                                            • Size 1.0MB
                                                            • SHA256 bdee0708db956a4ce59220626106a2df70ede2e1e32f29e432254b04876fa7b9
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Dec2006_XACT_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Dec2006_XACT_x86.cab
                                                            • Size 142KB
                                                            • SHA256 3d9b905fce31b42c47be263165d71c346b5d47abdabbfe6e9a87fd5a89b0b9f5
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Dec2006_d3dx10_00_x64.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Dec2006_d3dx10_00_x64.cab
                                                            • Size 207KB
                                                            • SHA256 d926d1381f1949754f5e6d597c4ab49e3f350312b2e426effafeed22ba9ced91
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Dec2006_d3dx10_00_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Dec2006_d3dx10_00_x86.cab
                                                            • Size 187KB
                                                            • SHA256 07fe66373868c32de3f4a4097bd3834ac98018f490f5bf08f02f559c48dbf985
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Dec2006_d3dx9_32_x64.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Dec2006_d3dx9_32_x64.cab
                                                            • Size 1.5MB
                                                            • SHA256 473c0111f5a1efb6791575c5f769431fa2affd76813aaf9d476a571e26cd3fed
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Dec2006_d3dx9_32_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Dec2006_d3dx9_32_x86.cab
                                                            • Size 1.5MB
                                                            • SHA256 81251ebd8ee94f108807e32e04dea544c3937a5f870bc6ccb917d059e70b1838
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Feb2005_d3dx9_24_x64.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Feb2005_d3dx9_24_x64.cab
                                                            • Size 1.2MB
                                                            • SHA256 48eeeecd6411039b23f32b7b22c8d40bce45280af5f8b066edd6cf30284b90ca
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Feb2005_d3dx9_24_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Feb2005_d3dx9_24_x86.cab
                                                            • Size 989KB
                                                            • SHA256 12e2aab3dbaee503724a5505a6f6951f07306578801a4b5b6b9b54514275ce79
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Feb2006_XACT_x64.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Feb2006_XACT_x64.cab
                                                            • Size 174KB
                                                            • SHA256 ea39caab8e071df53c2f44c19fb2ff6e2f6af4ef47f0c66d8e7b1b0918d6745f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Feb2006_XACT_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Feb2006_XACT_x86.cab
                                                            • Size 129KB
                                                            • SHA256 633a1fe357e57bbb8e058e1e029f61f379ab936a85c5d30ee442d804a1806868
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Feb2006_d3dx9_29_x64.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Feb2006_d3dx9_29_x64.cab
                                                            • Size 1.3MB
                                                            • SHA256 405bd17fe25128a91693807a6008031d87c005ba93d016cbab6276891d3bc6bb
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Feb2006_d3dx9_29_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Feb2006_d3dx9_29_x86.cab
                                                            • Size 1.0MB
                                                            • SHA256 20231448d5d74b7df1e43d796d76381d563699f81944c7ad9ccbcc1a77a5591e
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Jun2005_d3dx9_26_x64.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Jun2005_d3dx9_26_x64.cab
                                                            • Size 1.3MB
                                                            • SHA256 7237630b897ce760948d9144151ef27c0699fb76150b5f157676fa2d220a236f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Jun2005_d3dx9_26_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Jun2005_d3dx9_26_x86.cab
                                                            • Size 1.0MB
                                                            • SHA256 b448d7ba5b6fe1dc27639d42eb6ba0a997a793135678c729ba6756cfe4efc38b
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Jun2006_XACT_x64.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Jun2006_XACT_x64.cab
                                                            • Size 176KB
                                                            • SHA256 e7bddd9db994cbb19671d45216edf40ffb3a77068cc97fbeb4c4e41e0d073501
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Jun2006_XACT_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Jun2006_XACT_x86.cab
                                                            • Size 130KB
                                                            • SHA256 c1a1348611259756b5921d43f9fd9f2a5b40a48af88ea679a40263a2aca029ec
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Oct2005_xinput_x64.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Oct2005_xinput_x64.cab
                                                            • Size 84KB
                                                            • SHA256 10f2bcfcc38d3150bc80eb0030a1cd40084f1ec028dc927543c485d54ec35022
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Oct2005_xinput_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Oct2005_xinput_x86.cab
                                                            • Size 44KB
                                                            • SHA256 f2d475864e34409fb586093f92390e1f47403867c39ac30918941f19f3fccb0f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Oct2006_XACT_x64.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Oct2006_XACT_x64.cab
                                                            • Size 178KB
                                                            • SHA256 db037f2b07f00a7aa481b12ed35d52e3b7c18bb786590eb444b27cf69a675f0f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Oct2006_XACT_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Oct2006_XACT_x86.cab
                                                            • Size 134KB
                                                            • SHA256 65916ca9db2d3eeb6a44f19a19c4254ca4fc1795bad81fda35e028d9b62e1d3d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Oct2006_d3dx9_31_x64.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Oct2006_d3dx9_31_x64.cab
                                                            • Size 1.3MB
                                                            • SHA256 3cf78eeedcddddaf131af35cc68c218685c133326ff2876cb821096ed7ebf0c8
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Oct2006_d3dx9_31_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\Oct2006_d3dx9_31_x86.cab
                                                            • Size 1.1MB
                                                            • SHA256 fd8c9c23aea007aa92eca130446913ef04d9fc78e0e6fc3c49c25d210889de61
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            dxdllreg_x86.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\dxdllreg_x86.cab
                                                            • Size 43KB
                                                            • SHA256 4afe0249a13868b7c4a92b4d53c998adf6053eb5e2c47fd81020fd8d4bb11150
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            dxupdate.cab

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\EXTRAC~1\dxupdate.cab
                                                            • Size 94KB
                                                            • SHA256 e18a5404b612e88fa8b403c9b33f064c0a89528db7ef9a79aa116908d0e6afed
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            DXSETUP.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\extracted\DXSETUP.exe
                                                            • Size 505KB
                                                            • SHA256 8f47d7121ef6532ad9ad9901e44e237f5c30448b752028c58a9d19521414e40d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            dsetup.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\extracted\dsetup.dll
                                                            • Size 93KB
                                                            • SHA256 2a61679eeedabf7d0d0ac14e5447486575622d6b7cfa56f136c1576ff96da21f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            dsetup32.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\dxredist\extracted\dsetup32.dll
                                                            • Size 1.5MB
                                                            • SHA256 fb0e534f9b0926e518f1c2980640dfd29f14217cdfa37cf3a0c13349127ed9a8
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            modern-wizard.bmp

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\modern-wizard.bmp
                                                            • Size 150KB
                                                            • SHA256 8726ecb41ddc1b59312e7d7d74de12654bc6326ab5ffe673a62352296919f1a9
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            nsDialogs.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\nsDialogs.dll
                                                            • Size 9KB
                                                            • SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            nsExec.dll

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\nsExec.dll
                                                            • Size 7KB
                                                            • SHA256 3a101fa91d4e8831dfb748a1e345ab74fd4a551e64254710bdf53972ba9b473c
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            vc_redist.x86.exe

                                                            • Path C:\Users\Admin\AppData\Local\Temp\nskB5E0.tmp\vc_redist.x86.exe
                                                            • Size 13.3MB
                                                            • SHA256 0c09f2611660441084ce0df425c51c11e147e6447963c3690f97e0b25c55ed64
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            DirectX.log

                                                            • Path C:\Windows\DirectX.log
                                                            • Size 4KB
                                                            • SHA256 4d3a9004d9b9529d9b9e4e1fc0cc4a33b98ea6e1b1907b0eda7527fe4b2debb6
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            DirectX.log

                                                            • Path C:\Windows\Logs\DirectX.log
                                                            • Size 474B
                                                            • SHA256 3b5a0231d8996cdf810a54dc35dafe9ed3c5696305775ad64eae6779d21d5565
                                                            • MD5 SHA1 SHA512 TLSH

                                                            DirectX.log

                                                            • Path C:\Windows\Logs\DirectX.log
                                                            • Size 1KB
                                                            • SHA256 77f97e5d2faac574b4678c5a463f2b2e7161534a74037fe91a6e9784ec9072e9
                                                            • MD5 SHA1 SHA512 TLSH

                                                            DirectX.log

                                                            • Path C:\Windows\Logs\DirectX.log
                                                            • Size 3KB
                                                            • SHA256 769e6812017bb8cd1ff71945795a46071844b785a85ea42dea479d02ddb44d48
                                                            • MD5 SHA1 SHA512 TLSH

                                                            DirectX.log

                                                            • Path C:\Windows\Logs\DirectX.log
                                                            • Size 4KB
                                                            • SHA256 71d15d1f23c48467fbaa2df6c0f49630b47692446b9a96a4c645633e1e2a8c40
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DCompiler_33.dll

                                                            • Path C:\Windows\System32\D3DCompiler_33.dll
                                                            • Size 1.3MB
                                                            • SHA256 90dc7e301a3dfb1c015cb73811b77a5ea21f8ee46944011bca3a270584473013
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DCompiler_34.dll

                                                            • Path C:\Windows\System32\D3DCompiler_34.dll
                                                            • Size 1.3MB
                                                            • SHA256 95538ba7d65336b617f64d66789f3bf53f9bf52ffd4f717483d1a7e6a02c64b3
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DCompiler_35.dll

                                                            • Path C:\Windows\System32\D3DCompiler_35.dll
                                                            • Size 1.9MB
                                                            • SHA256 b82f096607a52b76f69a2db03392e008dd60a7dce74665b0e09f5593ba7ca7ca
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DCompiler_36.dll

                                                            • Path C:\Windows\System32\D3DCompiler_36.dll
                                                            • Size 1.9MB
                                                            • SHA256 d002a8731182968d4036d54e401f9792a57c1c84caef576059ca18190b4698a4
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DCompiler_37.dll

                                                            • Path C:\Windows\System32\D3DCompiler_37.dll
                                                            • Size 1.8MB
                                                            • SHA256 425f0d7ee0f2845424266aa56f2cdce3a61541d5e2c7d7813f4373e45df0cb8b
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DCompiler_38.dll

                                                            • Path C:\Windows\System32\D3DCompiler_38.dll
                                                            • Size 1.9MB
                                                            • SHA256 1ff6374215e326b72dbdc2fe8af4f9002c5d755358ed8795d781f4a1078af174
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DCompiler_39.dll

                                                            • Path C:\Windows\System32\D3DCompiler_39.dll
                                                            • Size 1.9MB
                                                            • SHA256 54f4f734dd149ef9ee8c999cc3d7858082b85c551f17fa08553cde1abdee3c3e
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DCompiler_40.dll

                                                            • Path C:\Windows\System32\D3DCompiler_40.dll
                                                            • Size 2.5MB
                                                            • SHA256 bd81cf5c9b127519dbeb284e699e9d7545ee1130e655fd6a4e66b959e9d9aaac
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DCompiler_41.dll

                                                            • Path C:\Windows\System32\D3DCompiler_41.dll
                                                            • Size 2.3MB
                                                            • SHA256 f96d915c2d51346fe1a35a7d0b7acef7a3734af2c75579085fce9d1a29e0f2e6
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DCompiler_42.dll

                                                            • Path C:\Windows\System32\D3DCompiler_42.dll
                                                            • Size 2.5MB
                                                            • SHA256 4d61e843aa86d8801a60d01b8e872379c5b2503795a2bcbe6141978396ade00b
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DCompiler_43.dll

                                                            • Path C:\Windows\System32\D3DCompiler_43.dll
                                                            • Size 2.4MB
                                                            • SHA256 44c3a7e330b54a35a9efa015831392593aa02e7da1460be429d17c3644850e8a
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DX9_37.dll

                                                            • Path C:\Windows\System32\D3DX9_37.dll
                                                            • Size 4.7MB
                                                            • SHA256 8c1d75b01208b59fcabfb389df296e00a58713322f00112fbe80aa7b6221708a
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DX9_38.dll

                                                            • Path C:\Windows\System32\D3DX9_38.dll
                                                            • Size 4.8MB
                                                            • SHA256 b54e832bd8d7e94772c680f49c31b86f9c5db456f8e5cac66720d533896f1cfe
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DX9_39.dll

                                                            • Path C:\Windows\System32\D3DX9_39.dll
                                                            • Size 4.8MB
                                                            • SHA256 aecbe2965f7c9aa60257670114c06b21a3de914b03e20ff569c5cb44ec4807fd
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DX9_40.dll

                                                            • Path C:\Windows\System32\D3DX9_40.dll
                                                            • Size 5.4MB
                                                            • SHA256 8a9ea8bc06786d342af4e7d171abbe6640cf31d9d01afb86dbf63f26302077db
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DX9_41.dll

                                                            • Path C:\Windows\System32\D3DX9_41.dll
                                                            • Size 5.2MB
                                                            • SHA256 33fd649d5b6e90bd7b7f51d1431ef3501772ae985e320442e5fd750e4368669a
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DX9_42.dll

                                                            • Path C:\Windows\System32\D3DX9_42.dll
                                                            • Size 2.4MB
                                                            • SHA256 1d6f5aa25ac2f1e55d3fd89cd5b33edd4de3709bf0353c75ab8645cebc087fa5
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            D3DX9_43.dll

                                                            • Path C:\Windows\System32\D3DX9_43.dll
                                                            • Size 2.3MB
                                                            • SHA256 84b900dbd7fa978d6e0caee26fc54f2f61d92c9c75d10b35f00e3e82cd1d67b4
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            SET837F.tmp

                                                            • Path C:\Windows\System32\SET837F.tmp
                                                            • Size 20KB
                                                            • SHA256 b822d7de1253c52676f4e20f9c715e92759b43b69978dfef2527b6101e420ee6
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            SET88CE.tmp

                                                            • Path C:\Windows\System32\SET88CE.tmp
                                                            • Size 20KB
                                                            • SHA256 7a34a7a8af47c6b2cf890ecb56bad2454ba5eb1ef2df6fad9ee53c4770e941cc
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            SETACC2.tmp

                                                            • Path C:\Windows\System32\SETACC2.tmp
                                                            • Size 71KB
                                                            • SHA256 787e10d48d90db50dc155fca53fe8c5c1a383ca24d468733d4b8fe3acf2d0a34
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            X3DAudio1_3.dll

                                                            • Path C:\Windows\System32\X3DAudio1_3.dll
                                                            • Size 27KB
                                                            • SHA256 96c2a80a7fa7670d323e584b956cc98f69f2a22e5329ce4a93269468b142de44
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            X3DAudio1_4.dll

                                                            • Path C:\Windows\System32\X3DAudio1_4.dll
                                                            • Size 27KB
                                                            • SHA256 e38b62c0946b9e4e1446e0f8c6335fc7328eb20cc587e310983f3f6d6571ac5d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            X3DAudio1_5.dll

                                                            • Path C:\Windows\System32\X3DAudio1_5.dll
                                                            • Size 25KB
                                                            • SHA256 8dd91637f40136f8f941d0b9e8a096964336759a91beb3265a78627e800da85f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            X3DAudio1_6.dll

                                                            • Path C:\Windows\System32\X3DAudio1_6.dll
                                                            • Size 24KB
                                                            • SHA256 0afcf64138aacab2b4a5e110392a7d978694dc545845f89782c07c650f212f3b
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            X3DAudio1_7.dll

                                                            • Path C:\Windows\System32\X3DAudio1_7.dll
                                                            • Size 24KB
                                                            • SHA256 9460709339701ad471a5cabe6365355f4d586dc4fcb86507c1331839dc555446
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAPOFX1_0.dll

                                                            • Path C:\Windows\System32\XAPOFX1_0.dll
                                                            • Size 66KB
                                                            • SHA256 671c24f825629381870567d726b7dbc3890d665648043c041eb1100163c49e12
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAPOFX1_1.dll

                                                            • Path C:\Windows\System32\XAPOFX1_1.dll
                                                            • Size 70KB
                                                            • SHA256 cd03a9ef13123c1b9ce3d92b9e9fd9b9682c9f66c167dd8a326e4bd0acff73f2
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAPOFX1_2.dll

                                                            • Path C:\Windows\System32\XAPOFX1_2.dll
                                                            • Size 72KB
                                                            • SHA256 f16e5795fac7a97fc1ffb5d049c011ee5f0dcdc4c6393664b6a9d94f949fdf0f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAPOFX1_3.dll

                                                            • Path C:\Windows\System32\XAPOFX1_3.dll
                                                            • Size 71KB
                                                            • SHA256 5f03017d3b51c1dc413952d21bf35ac660693c6f7539e8f8930ddd41d197a495
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAPOFX1_4.dll

                                                            • Path C:\Windows\System32\XAPOFX1_4.dll
                                                            • Size 76KB
                                                            • SHA256 d42e7e91eafce25550f08a63240e23fbe3ddd278b852e36e4eab05bc42f5ec7d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAPOFX1_5.dll

                                                            • Path C:\Windows\System32\XAPOFX1_5.dll
                                                            • Size 75KB
                                                            • SHA256 e47dcf74d50403b376c562e4121e359e5886e42fcc60b3fa8ba53e6826854c49
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAudio2_0.dll

                                                            • Path C:\Windows\System32\XAudio2_0.dll
                                                            • Size 478KB
                                                            • SHA256 eed9479428df33f7a9be5eca9806c2e3412509274638d13032c6c0ed1a3a9ef1
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAudio2_1.dll

                                                            • Path C:\Windows\System32\XAudio2_1.dll
                                                            • Size 499KB
                                                            • SHA256 7c7c67e2255217d12c5c2afe53556c0f131049be7db4043aed9c1379b9ca9aa1
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAudio2_2.dll

                                                            • Path C:\Windows\System32\XAudio2_2.dll
                                                            • Size 501KB
                                                            • SHA256 9ac81279b1625cbd9a8b59716aac63ef68d722dae586291457d24366a5f4e78b
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAudio2_3.dll

                                                            • Path C:\Windows\System32\XAudio2_3.dll
                                                            • Size 506KB
                                                            • SHA256 d8e9c006edcf959f414ae7e3ff2e11af0885bc84cedc8249fdc1c5e71cdca8ba
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAudio2_4.dll

                                                            • Path C:\Windows\System32\XAudio2_4.dll
                                                            • Size 509KB
                                                            • SHA256 df7ddbea32acecc7fd6743002d211506ab75cb1685b4d2b708ea160c610a6f0d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAudio2_5.dll

                                                            • Path C:\Windows\System32\XAudio2_5.dll
                                                            • Size 505KB
                                                            • SHA256 36c77312026a3bd5fb928f4fe599a077b08264a82f2863875c2d4619ee133b71
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAudio2_6.dll

                                                            • Path C:\Windows\System32\XAudio2_6.dll
                                                            • Size 518KB
                                                            • SHA256 3240447ef7bab48ec32a19f36e990bbddfdcb0f664fd9f58449f46788b5c32dd
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            XAudio2_7.dll

                                                            • Path C:\Windows\System32\XAudio2_7.dll
                                                            • Size 506KB
                                                            • SHA256 f8636ccc37bbfc84107992b60e4226eb7237417112267ed64b08f72983ac4314
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dcsx_42.dll

                                                            • Path C:\Windows\System32\d3dcsx_42.dll
                                                            • Size 5.3MB
                                                            • SHA256 8852c218583dc11113705bd89dabd51b0f77db6b393eaf9a9a751652b7cdef24
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dcsx_43.dll

                                                            • Path C:\Windows\System32\d3dcsx_43.dll
                                                            • Size 1.8MB
                                                            • SHA256 3c9e1b87f2763f58402b5104d21e0d9d5db352fcccf7801eaa4cd1f5dbc20945
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10.dll

                                                            • Path C:\Windows\System32\d3dx10.dll
                                                            • Size 458KB
                                                            • SHA256 03115a37f75fffb7abf07a59ec6ecb5217d3479bc95f92846c7e9b91822a0567
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_33.dll

                                                            • Path C:\Windows\System32\d3dx10_33.dll
                                                            • Size 494KB
                                                            • SHA256 3f0248c3bb9bda2a901b343b3b58172e175a86450d421f0fc4aebbd5a7d11477
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_34.dll

                                                            • Path C:\Windows\System32\d3dx10_34.dll
                                                            • Size 494KB
                                                            • SHA256 f7f367df5d0fb5e32113515339d928a51d4253b1c0e21854277f67d0b271fce3
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_35.dll

                                                            • Path C:\Windows\System32\d3dx10_35.dll
                                                            • Size 496KB
                                                            • SHA256 2030b7d57c88b653a0eb55ea85ad90c6c8630a00f5a56ea5f9b6985acdda5289
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_36.dll

                                                            • Path C:\Windows\System32\d3dx10_36.dll
                                                            • Size 496KB
                                                            • SHA256 6b632dcf9ef779d72855eeb1bb4676ab922ffb9204f7d587475477fa2f51be4a
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_37.dll

                                                            • Path C:\Windows\System32\d3dx10_37.dll
                                                            • Size 517KB
                                                            • SHA256 3bb17715d9de0878f65a3a006b8614532a6133f56e12ef5fa392a63337c0c275
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_38.dll

                                                            • Path C:\Windows\System32\d3dx10_38.dll
                                                            • Size 528KB
                                                            • SHA256 1274a3902a0a8ce9309d2b636eec3d42048ac90a68a0add0e372027b3f000104
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_39.dll

                                                            • Path C:\Windows\System32\d3dx10_39.dll
                                                            • Size 528KB
                                                            • SHA256 1ec45bdb37e9f8bf7b6684deff6799b06d4bc2e2ef72b5f278d6c4b3a7597b13
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_40.dll

                                                            • Path C:\Windows\System32\d3dx10_40.dll
                                                            • Size 506KB
                                                            • SHA256 48af3a1834640969660a37899a4cb17677fd499c26185ac940d284a0b4212fb3
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_41.dll

                                                            • Path C:\Windows\System32\d3dx10_41.dll
                                                            • Size 508KB
                                                            • SHA256 464653c6c52e16d53b87c1f199c693f748fa48228f7690f086350b0f7bec581d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_42.dll

                                                            • Path C:\Windows\System32\d3dx10_42.dll
                                                            • Size 510KB
                                                            • SHA256 dfb4baaa5f06467183839f14f5d28466e7c6e7eaa90f292c4516ed6926f5da8a
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx10_43.dll

                                                            • Path C:\Windows\System32\d3dx10_43.dll
                                                            • Size 499KB
                                                            • SHA256 9bffa1ea073d79e9954cb398fc91b93ed9dc79ed2205995d4b949f1cc2ad3bd1
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx11_42.dll

                                                            • Path C:\Windows\System32\d3dx11_42.dll
                                                            • Size 278KB
                                                            • SHA256 fedb54eef0fb7a61514fd4273f5f13535de1082f55bfb5f7b05a1016f495dcdb
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx11_43.dll

                                                            • Path C:\Windows\System32\d3dx11_43.dll
                                                            • Size 270KB
                                                            • SHA256 981e42629df751217406e7150477cddc853b79abd6a8568a1566298ed8f7bd59
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_24.dll

                                                            • Path C:\Windows\System32\d3dx9_24.dll
                                                            • Size 3.4MB
                                                            • SHA256 1ec422bd6421c741eef57847260967f215913649901e21dd9c46eb1b3bb10906
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_25.dll

                                                            • Path C:\Windows\System32\d3dx9_25.dll
                                                            • Size 3.6MB
                                                            • SHA256 10b09474bfe4e2bb395472628646bc5f353fbfbec976575c45eeff49984ebaa6
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_26.dll

                                                            • Path C:\Windows\System32\d3dx9_26.dll
                                                            • Size 3.6MB
                                                            • SHA256 30b06dbbd202494bae3b87487e7273adcffd17a9d2c29977030fde0570aa841b
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_27.dll

                                                            • Path C:\Windows\System32\d3dx9_27.dll
                                                            • Size 3.6MB
                                                            • SHA256 f9dd288c9895973f8db1856d172779041c6dee173ad1ef53b1727fc85cb6b75f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_28.dll

                                                            • Path C:\Windows\System32\d3dx9_28.dll
                                                            • Size 3.6MB
                                                            • SHA256 a2870f86e2f1b11646ff3f404bdbde10520c481c1400b20d25fdf56e66fb0a17
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_29.dll

                                                            • Path C:\Windows\System32\d3dx9_29.dll
                                                            • Size 3.7MB
                                                            • SHA256 d496c31a6b0f41398ecad7698987c55c2cb88eb6568976ba9b01a197879dd9dc
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_30.dll

                                                            • Path C:\Windows\System32\d3dx9_30.dll
                                                            • Size 3.7MB
                                                            • SHA256 7d1374e3b921a70b5028472ab164d9e582e3c3525334235d642664189da9b157
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_31.dll

                                                            • Path C:\Windows\System32\d3dx9_31.dll
                                                            • Size 3.8MB
                                                            • SHA256 84167b7df7e97c63f0cc15c1d272cdc7bba942f6f36a8801aec9840825891d0d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_32.dll

                                                            • Path C:\Windows\System32\d3dx9_32.dll
                                                            • Size 4.2MB
                                                            • SHA256 7c723479e3720a52f286d2e9e044f19ed893a34e6819d53e4de6991048febad1
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_33.dll

                                                            • Path C:\Windows\System32\d3dx9_33.dll
                                                            • Size 4.3MB
                                                            • SHA256 7338b1d039d0c08e45f24874e4918ffa642ebfe5967c96035f66f509265fa33e
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_34.dll

                                                            • Path C:\Windows\System32\d3dx9_34.dll
                                                            • Size 4.3MB
                                                            • SHA256 715fa6d4931324cca594c4fdfc60274ed29d296bb4592d102b36bc976c8b8ada
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_35.dll

                                                            • Path C:\Windows\System32\d3dx9_35.dll
                                                            • Size 4.8MB
                                                            • SHA256 ca195b7ee7aee29e6417acf0e6c1736d9aac76890a622eb62ed137394fc6f2b9
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            d3dx9_36.dll

                                                            • Path C:\Windows\System32\d3dx9_36.dll
                                                            • Size 4.8MB
                                                            • SHA256 c683e8e543bdd678dfdea0b325a3de04a419eeb053e2f32702d8b472aaf54c6d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            x3daudio1_0.dll

                                                            • Path C:\Windows\System32\x3daudio1_0.dll
                                                            • Size 16KB
                                                            • SHA256 77cc09cea6de69f12106e6dd9df1c0446a525a54c3953d69d64711b9394cc38f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            x3daudio1_1.dll

                                                            • Path C:\Windows\System32\x3daudio1_1.dll
                                                            • Size 17KB
                                                            • SHA256 fac23787e7c199c1969806850b5a9652f66f6dcac86f48f6f834abc253848a55
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            x3daudio1_2.dll

                                                            • Path C:\Windows\System32\x3daudio1_2.dll
                                                            • Size 20KB
                                                            • SHA256 9566e346fbf72928e9b48b3408c8336a9e77b331bbc729e8ced9f0670c51c699
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_0.dll

                                                            • Path C:\Windows\System32\xactengine2_0.dll
                                                            • Size 347KB
                                                            • SHA256 a00ad310f3d7b2d4de2f5a4c081359fa443ce0baecc72ebf39d6b30ccf7babce
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_1.dll

                                                            • Path C:\Windows\System32\xactengine2_1.dll
                                                            • Size 344KB
                                                            • SHA256 3ca31f274ea55cb966ec0b49addf72e1e21269406ae5fc44de3d5bbc884a6ce4
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_10.dll

                                                            • Path C:\Windows\System32\xactengine2_10.dll
                                                            • Size 402KB
                                                            • SHA256 3fcc50623a5da6b23788dbde6eb10418b414865b12c84247ddb3024fda59a8ab
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_2.dll

                                                            • Path C:\Windows\System32\xactengine2_2.dll
                                                            • Size 345KB
                                                            • SHA256 7b4e5938f1f69e5b8aaa8ecb479245b5773786192a47f9fdf6bd8eccfb109b83
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_3.dll

                                                            • Path C:\Windows\System32\xactengine2_3.dll
                                                            • Size 354KB
                                                            • SHA256 1cf72300e03b4b6fc48e1d9e79d93c42d657ee1f87153035d1578d1af8616ad5
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_4.dll

                                                            • Path C:\Windows\System32\xactengine2_4.dll
                                                            • Size 356KB
                                                            • SHA256 2bfa6e7b793299a306a554b60a39d001e493937e88dca403d9f0dd1ea0de1aa0
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_5.dll

                                                            • Path C:\Windows\System32\xactengine2_5.dll
                                                            • Size 381KB
                                                            • SHA256 a737ea87fd5b44343c26da6d47508901b916b83c5f4a508c0b18c56faf8c0329
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_6.dll

                                                            • Path C:\Windows\System32\xactengine2_6.dll
                                                            • Size 384KB
                                                            • SHA256 9f4c316be32e4de8c6594c26ff50410d2763b5f3320741b912a81a9ea9b7728e
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_7.dll

                                                            • Path C:\Windows\System32\xactengine2_7.dll
                                                            • Size 393KB
                                                            • SHA256 bcf3012a44b448402166bbab661a9fbca7f9e3c11ad17b3f96a54bbbb82bb235
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_8.dll

                                                            • Path C:\Windows\System32\xactengine2_8.dll
                                                            • Size 400KB
                                                            • SHA256 43a29c6dae6468ca4163795a7555003a71384b8dbe052be0b3bf1d7d4d19cf24
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine2_9.dll

                                                            • Path C:\Windows\System32\xactengine2_9.dll
                                                            • Size 401KB
                                                            • SHA256 28ee04a1bd08faebf937367e3c3fae4d20980ba08070382497964ec77951b749
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine3_0.dll

                                                            • Path C:\Windows\System32\xactengine3_0.dll
                                                            • Size 173KB
                                                            • SHA256 1c953325e2f9e2033065c9898420453ed8b812eb739a7adda5021114a6fc9074
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine3_1.dll

                                                            • Path C:\Windows\System32\xactengine3_1.dll
                                                            • Size 173KB
                                                            • SHA256 444a0b9836b0116edc50e4226c5b6baedd4f92fc099dab21cfc246aba0c24975
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine3_2.dll

                                                            • Path C:\Windows\System32\xactengine3_2.dll
                                                            • Size 173KB
                                                            • SHA256 7d0d28dfd60a28283846c9b00f26ba8f98af16d95e81ad577ee0e89d56c2ef50
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine3_3.dll

                                                            • Path C:\Windows\System32\xactengine3_3.dll
                                                            • Size 171KB
                                                            • SHA256 2382bdad39eb8a94194ec4d169203067710d044b31e8f9b1c0571fd6ce32f23d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine3_4.dll

                                                            • Path C:\Windows\System32\xactengine3_4.dll
                                                            • Size 170KB
                                                            • SHA256 e4296c55d860e9f14f91c58841a7100036152d55bcb4bdcdf659ddc1d8a4c52f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine3_5.dll

                                                            • Path C:\Windows\System32\xactengine3_5.dll
                                                            • Size 172KB
                                                            • SHA256 65e8efebdf388f3075817f451ed96c4765bf83c0408b84f4f4f71a3f4214da8c
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine3_6.dll

                                                            • Path C:\Windows\System32\xactengine3_6.dll
                                                            • Size 172KB
                                                            • SHA256 6e656d37eadec5acf8ca99f2df37768eaec1c919e616caf3805c0884b2af7c26
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xactengine3_7.dll

                                                            • Path C:\Windows\System32\xactengine3_7.dll
                                                            • Size 172KB
                                                            • SHA256 31b7d87c0b7a5e44ec6fc935f11ec9ba949d8161c667f8396896ac92e9bc6745
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xinput1_1.dll

                                                            • Path C:\Windows\System32\xinput1_1.dll
                                                            • Size 81KB
                                                            • SHA256 87c7f921bbf171fa04f7c2adaf8b25d4bf152d12c6b99771da42f3af07f78987
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xinput1_2.dll

                                                            • Path C:\Windows\System32\xinput1_2.dll
                                                            • Size 81KB
                                                            • SHA256 77055b6a144c4017acd0a8b34520cf9a84be6b9c75db40f7a708b9f4e38aa138
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            xinput1_3.dll

                                                            • Path C:\Windows\System32\xinput1_3.dll
                                                            • Size 104KB
                                                            • SHA256 756cad002e1553cfa1a91ebe8c1b9380ffabe0b4b1916c4a4db802396ddfbef8
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            vc_redist.x86.exe

                                                            • Path C:\Windows\Temp\{964433FE-27BD-447B-87F5-85AC0E835E99}\.cr\vc_redist.x86.exe
                                                            • Size 669KB
                                                            • SHA256 4a6e1044ff0f49d2e3b12f7c40352c7e573e0c58f3b3cc0b55b63c95ede87828
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            logo.png

                                                            • Path C:\Windows\Temp\{AD3F462F-8C2F-4150-BBCC-0B4ABD40E6DF}\.ba\logo.png
                                                            • Size 1KB
                                                            • SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
                                                            • MD5 SHA1 SHA512 TLSH

                                                            wixstdba.dll

                                                            • Path C:\Windows\Temp\{AD3F462F-8C2F-4150-BBCC-0B4ABD40E6DF}\.ba\wixstdba.dll
                                                            • Size 215KB
                                                            • SHA256 e921f69b9fb4b5ad4691809d06896c5f1d655ab75e0ce94a372319c243c56d4e
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Microsoft.DirectX.DirectDraw.dll

                                                            • Path C:\Windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
                                                            • Size 142KB
                                                            • SHA256 ff4c03bbeb292317a77c86c1c81ae9564acb984b352fbef36d66e2d8bcbd79a8
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Microsoft.DirectX.Direct3DX.dll

                                                            • Path C:\Windows\assembly\tmp\1DO6YGQN\Microsoft.DirectX.Direct3DX.dll
                                                            • Size 565KB
                                                            • SHA256 2ee41d4d591a39d648e90db4d47d0fa0557fd68197756ee2ee94fcde4d820cfa
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            __AssemblyInfo__.ini

                                                            • Path C:\Windows\assembly\tmp\1DO6YGQN\__AssemblyInfo__.ini
                                                            • Size 308B
                                                            • SHA256 fd0a6c2104149bc1eb0d77bd15215eb3f1b899375e96949f5504beeefbfc56ad
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Microsoft.DirectX.AudioVideoPlayback.dll

                                                            • Path C:\Windows\assembly\tmp\1IHJU2O8\Microsoft.DirectX.AudioVideoPlayback.dll
                                                            • Size 52KB
                                                            • SHA256 406f473429573e9f0084aae125ef8f19f59291aa4c33cf7d40e7d996995a3238
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            __AssemblyInfo__.ini

                                                            • Path C:\Windows\assembly\tmp\1IHJU2O8\__AssemblyInfo__.ini
                                                            • Size 326B
                                                            • SHA256 1b9e3a31e7e25d4b5730b590f60c44e5cd6687df59ac3338a24bf7e1cc2681d2
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Microsoft.DirectX.Direct3DX.dll

                                                            • Path C:\Windows\assembly\tmp\30ROE94Y\Microsoft.DirectX.Direct3DX.dll
                                                            • Size 2.7MB
                                                            • SHA256 5b70f0ac40a38c903062a12ff7cd71d907e75238a044ded9b34fb51e9a9a2799
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            __AssemblyInfo__.ini

                                                            • Path C:\Windows\assembly\tmp\30ROE94Y\__AssemblyInfo__.ini
                                                            • Size 308B
                                                            • SHA256 1b2ba54845d0af343d3243103fe44471054a19d3e2da5a074f421aba203a2bd8
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Microsoft.DirectX.Direct3DX.dll

                                                            • Path C:\Windows\assembly\tmp\3MZSQYLG\Microsoft.DirectX.Direct3DX.dll
                                                            • Size 564KB
                                                            • SHA256 36a21fc4f4c8f6ba4ad900613ee1b08ff43f2545585a2601c9fc4cf083d68a77
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            __AssemblyInfo__.ini

                                                            • Path C:\Windows\assembly\tmp\3MZSQYLG\__AssemblyInfo__.ini
                                                            • Size 308B
                                                            • SHA256 a5ca2070a843155de77913953318761b770401010de7b20a8891794a01d3514f
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Microsoft.DirectX.Direct3DX.dll

                                                            • Path C:\Windows\assembly\tmp\5HP2TCEY\Microsoft.DirectX.Direct3DX.dll
                                                            • Size 565KB
                                                            • SHA256 78d85f0e2cb7d7bde534222f4ebfea1c9e06d37ecd3bb7ebd59e35f00b94b11d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            __AssemblyInfo__.ini

                                                            • Path C:\Windows\assembly\tmp\5HP2TCEY\__AssemblyInfo__.ini
                                                            • Size 308B
                                                            • SHA256 5433ded1056622e58fe572c11bda9ba11753affb5ec0c0c849d201385cabca56
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Microsoft.DirectX.Direct3DX.dll

                                                            • Path C:\Windows\assembly\tmp\5ZY4HSUI\Microsoft.DirectX.Direct3DX.dll
                                                            • Size 2.6MB
                                                            • SHA256 7986e3fbe05418fe5d8425f2f1b76b7a7b09952f3ec560b286dd744bf7178059
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            __AssemblyInfo__.ini

                                                            • Path C:\Windows\assembly\tmp\83O2AQBT\__AssemblyInfo__.ini
                                                            • Size 310B
                                                            • SHA256 794040ee0e268fa03b1a54a7a6de8699cc2e0076db38b97269fa96fa6016970d
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Microsoft.DirectX.dll

                                                            • Path C:\Windows\assembly\tmp\CHK3J92E\Microsoft.DirectX.dll
                                                            • Size 218KB
                                                            • SHA256 942e98f142373547493f13b14e1603b2420851aff013d3085bada7b6b2214d9c
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            Microsoft.DirectX.DirectSound.dll

                                                            • Path C:\Windows\assembly\tmp\EPP8DOA9\Microsoft.DirectX.DirectSound.dll
                                                            • Size 174KB
                                                            • SHA256 2e28c8fb8b87b5ffd1e0ea27710a2e785ef4741a89e4b3c3af726ec63d15a1fa
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            __AssemblyInfo__.ini

                                                            • Path C:\Windows\assembly\tmp\EPP8DOA9\__AssemblyInfo__.ini
                                                            • Size 312B
                                                            • SHA256 212e22bfb341e72368ceeb2d63e96e176310b91768e7b21b7c68fd115f2356f1
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Microsoft.DirectX.Direct3DX.dll

                                                            • Path C:\Windows\assembly\tmp\EXYEUXLK\Microsoft.DirectX.Direct3DX.dll
                                                            • Size 562KB
                                                            • SHA256 5e90089e69e4f7e2e42ea4a81fb62005c3710d0a4acdf207b97ed03f5641d013
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            __AssemblyInfo__.ini

                                                            • Path C:\Windows\assembly\tmp\EXYEUXLK\__AssemblyInfo__.ini
                                                            • Size 308B
                                                            • SHA256 d6ee39d42f2dbea3b2f6484d32cdc13c8f3c230c5f79879d768e777ba5056676
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Microsoft.DirectX.Direct3DX.dll

                                                            • Path C:\Windows\assembly\tmp\L7BLPM4B\Microsoft.DirectX.Direct3DX.dll
                                                            • Size 554KB
                                                            • SHA256 f500c350dd71df7452b92444e19b4644b04283434a6557123f1e4d9fb078c3f8
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            __AssemblyInfo__.ini

                                                            • Path C:\Windows\assembly\tmp\L7BLPM4B\__AssemblyInfo__.ini
                                                            • Size 308B
                                                            • SHA256 ef5eb4c030aacedbbdec6c0e1314dec655b0bc65d7b5763c187963b3a0c866b6
                                                            • MD5 SHA1 SHA512 TLSH

                                                            __AssemblyInfo__.ini

                                                            • Path C:\Windows\assembly\tmp\O32JTAQU\__AssemblyInfo__.ini
                                                            • Size 308B
                                                            • SHA256 37712802e72559aa36d47d8bc59262b46a6fbbdce3df35715d4c92d6840e8f14
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Microsoft.DirectX.Diagnostics.dll

                                                            • Path C:\Windows\assembly\tmp\PAHKZR8T\Microsoft.DirectX.Diagnostics.dll
                                                            • Size 12KB
                                                            • SHA256 8c9685959706750091b0094522cec8644de1d1c6309e7a2fe02cef130d3a2b9c
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            __AssemblyInfo__.ini

                                                            • Path C:\Windows\assembly\tmp\PAHKZR8T\__AssemblyInfo__.ini
                                                            • Size 312B
                                                            • SHA256 a59a7263413a5284c15d440121b9130d4cf70f35e21ca1eab1577b06a1ad2e01
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Microsoft.DirectX.DirectPlay.dll

                                                            • Path C:\Windows\assembly\tmp\QPGYXX48\Microsoft.DirectX.DirectPlay.dll
                                                            • Size 356KB
                                                            • SHA256 489f65e1e00534835486e9255eec92b83edae4dade6dff867a380859ae53006a
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            __AssemblyInfo__.ini

                                                            • Path C:\Windows\assembly\tmp\QPGYXX48\__AssemblyInfo__.ini
                                                            • Size 310B
                                                            • SHA256 0f5032c882005a7605c2d26cd33fdea85688fee277f101bd5c0851b21cacbb87
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Microsoft.DirectX.Direct3D.dll

                                                            • Path C:\Windows\assembly\tmp\R1XFV3AZ\Microsoft.DirectX.Direct3D.dll
                                                            • Size 462KB
                                                            • SHA256 f3359d5e41b1d4fec7230579a593e40fe44f6afdfacd1e2bbe52ee06d84686fb
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            __AssemblyInfo__.ini

                                                            • Path C:\Windows\assembly\tmp\R1XFV3AZ\__AssemblyInfo__.ini
                                                            • Size 306B
                                                            • SHA256 6c201a7da319ece1240542d27c2693090f15a1f732c5f502a6e6b4fb12bd9b47
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Microsoft.DirectX.DirectInput.dll

                                                            • Path C:\Windows\assembly\tmp\T0SHZK8Q\Microsoft.DirectX.DirectInput.dll
                                                            • Size 155KB
                                                            • SHA256 0ee2a2c371a918cabc85143202864d0c3a4abf1b93a5029081a622e0acf17ab7
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            __AssemblyInfo__.ini

                                                            • Path C:\Windows\assembly\tmp\T0SHZK8Q\__AssemblyInfo__.ini
                                                            • Size 312B
                                                            • SHA256 b49b9719095cc31b95d102353d49ec5c2038993ae3877a0395c5e828e247c539
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Microsoft.DirectX.Direct3DX.dll

                                                            • Path C:\Windows\assembly\tmp\TUHHWS6X\Microsoft.DirectX.Direct3DX.dll
                                                            • Size 564KB
                                                            • SHA256 bebbc40ca25ef22e9d16b0de1123e0cb0444fe7a78b4f0b4395bdfd81618698c
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            __AssemblyInfo__.ini

                                                            • Path C:\Windows\assembly\tmp\TUHHWS6X\__AssemblyInfo__.ini
                                                            • Size 308B
                                                            • SHA256 5d2c87fb98d158f6cafe86af57cfd085630cd5328c2b53d0fbeb2c42a6473e75
                                                            • MD5 SHA1 SHA512 TLSH

                                                            Microsoft.DirectX.Direct3DX.dll

                                                            • Path C:\Windows\assembly\tmp\ZJ7UBF2L\Microsoft.DirectX.Direct3DX.dll
                                                            • Size 550KB
                                                            • SHA256 8418941d8f1d4c84288e0bf54392378dd3d87b602bb693ff4f8a633022681c12
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                            __AssemblyInfo__.ini

                                                            • Path C:\Windows\assembly\tmp\ZJ7UBF2L\__AssemblyInfo__.ini
                                                            • Size 308B
                                                            • SHA256 5a10d0d96f4d3462d6dfbf5a46d124709d701c806ae29ea875e97628f4f3ea6e
                                                            • MD5 SHA1 SHA512 TLSH

                                                            memory/572-10810-0x00007FFF66340000-0x00007FFF66341000-memory.dmp

                                                            memory/1112-11114-0x000001CD12330000-0x000001CD127E8000-memory.dmp

                                                            memory/1112-11098-0x000001CD12330000-0x000001CD127E8000-memory.dmp

                                                            memory/1640-4897-0x0000000001F60000-0x0000000001FBE000-memory.dmp

                                                            memory/2024-10617-0x0000000005040000-0x000000000566A000-memory.dmp

                                                            memory/2024-10621-0x0000000005830000-0x0000000005B87000-memory.dmp

                                                            memory/2024-10619-0x00000000056E0000-0x0000000005746000-memory.dmp

                                                            memory/2024-10616-0x0000000002810000-0x0000000002846000-memory.dmp

                                                            memory/2024-10642-0x0000000007C70000-0x0000000008216000-memory.dmp

                                                            memory/2024-10641-0x0000000006C70000-0x0000000006C92000-memory.dmp

                                                            memory/2024-10640-0x0000000006F70000-0x0000000007006000-memory.dmp

                                                            memory/2024-10618-0x0000000004DF0000-0x0000000004E12000-memory.dmp

                                                            memory/2024-10639-0x0000000006210000-0x0000000006218000-memory.dmp

                                                            memory/2024-10631-0x00000000061E0000-0x00000000061FA000-memory.dmp

                                                            memory/2024-10620-0x00000000057C0000-0x0000000005826000-memory.dmp

                                                            memory/2024-10630-0x00000000075F0000-0x0000000007C6A000-memory.dmp

                                                            memory/2024-10629-0x0000000005CA0000-0x0000000005CEC000-memory.dmp

                                                            memory/2024-10628-0x0000000005C80000-0x0000000005C9E000-memory.dmp

                                                            memory/2352-10698-0x00007FFF66340000-0x00007FFF66341000-memory.dmp

                                                            memory/3448-10901-0x0000000000DE0000-0x0000000000EB0000-memory.dmp

                                                            memory/3908-10663-0x0000000006E20000-0x0000000006E28000-memory.dmp

                                                            memory/3908-10655-0x00000000057B0000-0x0000000005B07000-memory.dmp

                                                            memory/4388-3617-0x0000000000510000-0x000000000056C000-memory.dmp

                                                            memory/4992-4722-0x0000000002180000-0x00000000021DE000-memory.dmp