gozi_ifsb | d764a2af9c30f5eb532389e1ada0358e32053c622fe2e89b9032f0f51caf8ede

Analysis

max time kernel
151s
max time network
146s
platform
windows7_x64
resource
win7v20210408
submitted
28-07-2021 08:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Setup-9.05.0225.1111.exe
Size

31.1MB
MD5

3b8bba3ca09ba8bc57d51cc84b748826
SHA1

fe1abc07183929ca78d6e00b45737000ca01c0db
SHA256

713aa63fbb0078ec6ae542db18f5c557e96119ee3bf49fdb6bb1692b100de0ff
SHA512

b67d963408fdbbe00bdd21b1eed35827a9d8666689f23915ed7981457c4dd3976f4bac61912a23e70c6ca2b31ab981b666408a8653508448e05484aa3a89cf9c

Score

10^/10

gozi_ifsb banker discovery evasion persistence trojan

Malware Config

Signatures

Gozi, Gozi IFSB
Gozi ISFB is a well-known and widely distributed banking trojan.
banker trojan gozi_ifsb
Executes dropped EXE 3 IoCs

Processes:

Stormplayer9.exeWelcome9.exeBaofengPlatform9.exe

pid process

2032 Stormplayer9.exe
652 Welcome9.exe
1160 BaofengPlatform9.exe

Loads dropped DLL 55 IoCs

Processes:

Setup-9.05.0225.1111.exeStormplayer9.exeWelcome9.exeBaofengPlatform9.exe

pid	process
1828	Setup-9.05.0225.1111.exe
1828	Setup-9.05.0225.1111.exe
1828	Setup-9.05.0225.1111.exe
1828	Setup-9.05.0225.1111.exe
1828	Setup-9.05.0225.1111.exe
1828	Setup-9.05.0225.1111.exe
1828	Setup-9.05.0225.1111.exe
1828	Setup-9.05.0225.1111.exe
1828	Setup-9.05.0225.1111.exe
1828	Setup-9.05.0225.1111.exe
1828	Setup-9.05.0225.1111.exe
1828	Setup-9.05.0225.1111.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
652	Welcome9.exe
652	Welcome9.exe
652	Welcome9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

Processes:

Setup-9.05.0225.1111.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\BaofengPlatform9 = "\"C:\\Program Files (x86)\\BaofengVideo\\StormPlayer9\\Baofengplatform9.exe\" /autorun"	Setup-9.05.0225.1111.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Checks whether UAC is enabled 1 TTPs 1 IoCs
evasion trojan

System Information Discovery
T1082

Processes:

Setup-9.05.0225.1111.exe

description ioc process

Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA Setup-9.05.0225.1111.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Setup-9.05.0225.1111.exe

Drops file in Program Files directory 64 IoCs

Processes:

Setup-9.05.0225.1111.exe

description	ioc	process
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\codecs\ffmpeg.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\codecs\iconv.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\codecs\OggSplitter.ax	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\codecs\xvid.ax	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\codecs\LavFilters\LAVAudio.ax	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\LogMedia.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Language.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\PKit.exe	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\bin\lmd.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\codecs\cudaEncode.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\codecs\ff_libmpeg2.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\CoreFlash.dll	Setup-9.05.0225.1111.exe
File opened for modification	C:\Program Files (x86)\BaofengVideo\StormPlayer9\ApplicationData\Profiles\	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Config.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\codecs\mkzlib.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\Core.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\opencv_highgui2410.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Uninst.exe	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\bin\LogUC.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\LogPlatform.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\msvcr100.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\StormNC\kinterface.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\codecs\mkx.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\codecs\ffsource.ax	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\StormNC\kcore.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\codecs\bass.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\codecs\MpegSplitter.ax	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\exp\images\share.png	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\MovieStorm.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Skin\ClassicStormV.bfskin	Setup-9.05.0225.1111.exe
File opened for modification	C:\Program Files (x86)\BaofengVideo\StormPlayer9\ApplicationData\Profiles\bf\core.Profile	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\codecs\ac3filter.ax	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\DeCompressor.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\keys.dat	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\bin\LogUI.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\codecs\BHDSourceFilter.ax	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\StormNC\net_diag.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\StormNC\zlib1.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\CoreP2P.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\LibIcon.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Skin\TenthAnniversary.bftheme	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\StormPlayer.bfRes	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\StormNC\StormNC_R.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\web\images\cancellation.jpg	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\codecs\bass_ape.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\exp\images\close.png	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\exp\js\lib.js	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\StormNC\kpupload.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\DiagServer.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\StormNC\kpres.dll	Setup-9.05.0225.1111.exe
File opened for modification	C:\Program Files (x86)\BaofengVideo\StormPlayer9\ApplicationData\	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\ApplicationData\Profiles\bf\core.Profile	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\bin\HttpSvr.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\bin\LogFA.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\codecs\ff_ffmpeg.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Skin\ClassicStormIII.bfskin	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\codecs\AviSplitter.ax	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\codecs\ts.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\snap.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\pfarr.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Core\meedb.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\Parser.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\StormNC\kdownload.dll	Setup-9.05.0225.1111.exe
File created	C:\Program Files (x86)\BaofengVideo\StormPlayer9\web\images\false.jpg	Setup-9.05.0225.1111.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Modifies Internet Explorer settings 1 TTPs 31 IoCs

adware spyware

Modify Registry

T1112

Processes:

Setup-9.05.0225.1111.exeWelcome9.exeBaofengPlatform9.exeStormplayer9.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING\BFHD9.exe = "1"	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\Baofengplatform9.exe = "11001"	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\BFPush9.exe = "11001"	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\BFHD9.exe = "11001"	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION\BFHD9.exe = "1"	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_AJAX_CONNECTIONEVENTS \Stormplayer9.exe = "1"	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING\Baofengplatform9.exe = "1"	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	Welcome9.exe
Key created	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING\Stormplayer9.exe = "1"	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_AJAX_CONNECTIONEVENTS \Baofengplatform9.exe = "1"	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING\BFpop9.exe = "1"	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_AJAX_CONNECTIONEVENTS \BFpop9.exe = "1"	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main	Welcome9.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_AJAX_CONNECTIONEVENTS \BFHD9.exe = "1"	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_AJAX_CONNECTIONEVENTS \BFPush9.exe = "1"	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION\BFpop9.exe = "1"	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\BaofengPlatform9.exe.exe = "11000"	BaofengPlatform9.exe
Key created	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\Stormplayer9.exe = "11001"	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION\Baofengplatform9.exe = "1"	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING\BFPush9.exe = "1"	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION\BFPush9.exe = "1"	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_AJAX_CONNECTIONEVENTS	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION\Stormplayer9.exe = "1"	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	Welcome9.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\BFpop9.exe = "11001"	Setup-9.05.0225.1111.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2455352368-1077083310-2879168483-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\Stormplayer9.exe.exe = "11000"	Stormplayer9.exe

Modifies registry class 64 IoCs

Processes:

Setup-9.05.0225.1111.exe

description	ioc	process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.asf\shell\ = "open"	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.vob\shell\play_enqueue\ = "添加到暴风影音16 播放列表(&L)"	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.bik\shell\open\command	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.wv\OpenWithProgIds	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.srt\DefaultIcon	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.ram\shell\play_enqueue\command	Setup-9.05.0225.1111.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\.pmp2\OpenWithProgIds\BaofengPlayer9.pmp2	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.smpl\OpenWithProgIds	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.flac\shell\open\command	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{944AE114-F63B-4AFB-9348-3E0BDAFE1E49}\TypeLib	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{944AE114-F63B-4AFB-9348-3E0BDAFE1E49}\InprocServer32\ = "C:\\Program Files (x86)\\BaofengVideo\\StormPlayer9\\ShellDrag.dll"	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.m4v\shell\play_enqueue\DropTarget	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.mp4\shell\open\ = "使用暴风影音16 播放(&P)"	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.tpr\shell	Setup-9.05.0225.1111.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3\OpenWithProgids\BaofengPlayer9.mp3	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.pls\shell\open\command	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.mts\shell\open\command\ = "\"C:\\Program Files (x86)\\BaofengVideo\\StormPlayer9\\StormPlayer9.exe\" /Type=LocalFile /Play /Url=\"%1\" /From=Shell"	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.m4a\shell\open	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.m4a\OpenWithProgIds	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.ra\shell\open\DropTarget\Clsid = "{944AE114-F63B-4AFB-9348-3E0BDAFE1E49}"	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.mov\shell\open\DropTarget	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.aiff\shell\open\DropTarget	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amr	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.mpg\BaofengPlayer9.backup = "VLC.mpg"	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.cda\DefaultIcon\ = "C:\\Program Files (x86)\\BaofengVideo\\StormPlayer9\\LibIcon.dll,-225"	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rt	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.vob\shell\open\command\ = "\"C:\\Program Files (x86)\\BaofengVideo\\StormPlayer9\\StormPlayer9.exe\" /Type=LocalFile /Play /Url=\"%1\" /From=Shell"	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.d2v\ = "BaofengPlayer9.d2v"	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpcpl	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.qpl\shell\open\command	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4a\OpenWithProgids	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.GHD\OpenWithProgids	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.m2ts\OpenWithProgIds	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.mts\shell\play_enqueue\command	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.pss\shell\play_enqueue\DropTarget\Clsid = "{205D2714-073F-473E-BDEF-460D13A47966}"	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.dts\shell\play_enqueue\ = "添加到暴风影音16 播放列表(&L)"	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.265\shell\play_enqueue\command\ = "\"C:\\Program Files (x86)\\BaofengVideo\\StormPlayer9\\StormPlayer9.exe\" /Type=LocalFile /Url=\"%1\" /From=Shell"	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.dsv	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.tta\shell\ = "open"	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.cda	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.tta\DefaultIcon	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.asf\shell\open\command	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.wmp\shell\play_enqueue\DropTarget	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.m1v\shell\play_enqueue\DropTarget	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.m4b\BaofengPlayer9.backup	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.m4p\shell\open\ = "使用暴风影音16 播放(&P)"	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.evo\OpenWithProgids	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tpr	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.mp2\shell\play_enqueue\DropTarget	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.mod\DefaultIcon\ = "C:\\Program Files (x86)\\BaofengVideo\\StormPlayer9\\LibIcon.dll,-225"	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.m1v\shell\open\ = "使用暴风影音16 播放(&P)"	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gplf	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.rmi\shell\play_enqueue\DropTarget	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.act\BaofengPlayer9.backup	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.3gpp\DefaultIcon\ = "C:\\Program Files (x86)\\BaofengVideo\\StormPlayer9\\LibIcon.dll,-225"	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp5\OpenWithProgids	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.mpga	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.mid\shell\play_enqueue\ = "添加到暴风影音16 播放列表(&L)"	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.mpa\shell	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.hevc\shell\play_enqueue\DropTarget\Clsid = "{205D2714-073F-473E-BDEF-460D13A47966}"	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.smi	Setup-9.05.0225.1111.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.amv\shell\open\command\ = "\"C:\\Program Files (x86)\\BaofengVideo\\StormPlayer9\\StormPlayer9.exe\" /Type=LocalFile /Play /Url=\"%1\" /From=Shell"	Setup-9.05.0225.1111.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\.dsv\OpenWithProgIds\BaofengPlayer9.dsv	Setup-9.05.0225.1111.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BaofengPlayer9.tpr\shell\open\command	Setup-9.05.0225.1111.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

Setup-9.05.0225.1111.exeBaofengPlatform9.exeStormplayer9.exe

pid	process
1828	Setup-9.05.0225.1111.exe
1160	BaofengPlatform9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
2032	Stormplayer9.exe
1160	BaofengPlatform9.exe
2032	Stormplayer9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe

Suspicious use of AdjustPrivilegeToken 16 IoCs

Processes:

Setup-9.05.0225.1111.exeStormplayer9.exeBaofengPlatform9.exeAUDIODG.EXE

description	pid	process
Token: SeDebugPrivilege	1828	Setup-9.05.0225.1111.exe
Token: 33	2032	Stormplayer9.exe
Token: SeIncBasePriorityPrivilege	2032	Stormplayer9.exe
Token: 33	1160	BaofengPlatform9.exe
Token: SeIncBasePriorityPrivilege	1160	BaofengPlatform9.exe
Token: 33	1160	BaofengPlatform9.exe
Token: SeIncBasePriorityPrivilege	1160	BaofengPlatform9.exe
Token: 33	1160	BaofengPlatform9.exe
Token: SeIncBasePriorityPrivilege	1160	BaofengPlatform9.exe
Token: 33	1160	BaofengPlatform9.exe
Token: SeIncBasePriorityPrivilege	1160	BaofengPlatform9.exe
Token: SeManageVolumePrivilege	2032	Stormplayer9.exe
Token: 33	900	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	900	AUDIODG.EXE
Token: 33	900	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	900	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 4 IoCs

Processes:

Stormplayer9.exeBaofengPlatform9.exe

pid process

2032 Stormplayer9.exe
2032 Stormplayer9.exe
1160 BaofengPlatform9.exe
1160 BaofengPlatform9.exe
Suspicious use of SendNotifyMessage 2 IoCs

Processes:

BaofengPlatform9.exe

pid process

1160 BaofengPlatform9.exe
1160 BaofengPlatform9.exe

pid	process
1160	BaofengPlatform9.exe
1160	BaofengPlatform9.exe

Suspicious use of SetWindowsHookEx 8 IoCs

Processes:

Stormplayer9.exeWelcome9.exeBaofengPlatform9.exe

pid	process
2032	Stormplayer9.exe
2032	Stormplayer9.exe
652	Welcome9.exe
652	Welcome9.exe
1160	BaofengPlatform9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe
2032	Stormplayer9.exe

Suspicious use of WriteProcessMemory 12 IoCs

Processes:

Setup-9.05.0225.1111.exeStormplayer9.exe

description	pid	process	target process
PID 1828 wrote to memory of 2032	1828	Setup-9.05.0225.1111.exe	Stormplayer9.exe
PID 1828 wrote to memory of 2032	1828	Setup-9.05.0225.1111.exe	Stormplayer9.exe
PID 1828 wrote to memory of 2032	1828	Setup-9.05.0225.1111.exe	Stormplayer9.exe
PID 1828 wrote to memory of 2032	1828	Setup-9.05.0225.1111.exe	Stormplayer9.exe
PID 2032 wrote to memory of 652	2032	Stormplayer9.exe	Welcome9.exe
PID 2032 wrote to memory of 652	2032	Stormplayer9.exe	Welcome9.exe
PID 2032 wrote to memory of 652	2032	Stormplayer9.exe	Welcome9.exe
PID 2032 wrote to memory of 652	2032	Stormplayer9.exe	Welcome9.exe
PID 2032 wrote to memory of 1160	2032	Stormplayer9.exe	BaofengPlatform9.exe
PID 2032 wrote to memory of 1160	2032	Stormplayer9.exe	BaofengPlatform9.exe
PID 2032 wrote to memory of 1160	2032	Stormplayer9.exe	BaofengPlatform9.exe
PID 2032 wrote to memory of 1160	2032	Stormplayer9.exe	BaofengPlatform9.exe

C:\Users\Admin\AppData\Local\Temp\Setup-9.05.0225.1111.exe
"C:\Users\Admin\AppData\Local\Temp\Setup-9.05.0225.1111.exe"
1⤵
- Loads dropped DLL
- Adds Run key to start application
- Checks whether UAC is enabled
- Drops file in Program Files directory
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1828

C:\Program Files (x86)\BaofengVideo\StormPlayer9\Stormplayer9.exe
"C:\Program Files (x86)\BaofengVideo\StormPlayer9\Stormplayer9.exe"
2⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2032

C:\Program Files (x86)\BaofengVideo\StormPlayer9\Welcome9.exe
"C:\Program Files (x86)\BaofengVideo\StormPlayer9\Welcome9.exe" /From=
3⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:652

C:\Program Files (x86)\BaofengVideo\StormPlayer9\BaofengPlatform9.exe
"C:\Program Files (x86)\BaofengVideo\StormPlayer9\BaofengPlatform9.exe" /StartByStorm
3⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1160

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x2f8
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:900

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\BaofengVideo\StormPlayer9\BaofengPlatform9.exe
MD5
5f25668fb7de8e11d45e41ad5083cda7

SHA1
2c4c49ecd2c4773b85fde5735e4010a3c5dddb10

SHA256
be1338e4536333a335647e930c7ceb1adce4b7691151b6f4d3bd966cec150cc2

SHA512
522813025e163745ec1765d92b2e7bc52f113f955750c0e151fa811ec48a763c9d2d5890e1f9dbdf7f89bc32997eeeb06ae69128894af69b09002d1a6fd8339a

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\BaofengPlatform9.exe
MD5
5f25668fb7de8e11d45e41ad5083cda7

SHA1
2c4c49ecd2c4773b85fde5735e4010a3c5dddb10

SHA256
be1338e4536333a335647e930c7ceb1adce4b7691151b6f4d3bd966cec150cc2

SHA512
522813025e163745ec1765d92b2e7bc52f113f955750c0e151fa811ec48a763c9d2d5890e1f9dbdf7f89bc32997eeeb06ae69128894af69b09002d1a6fd8339a

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\Bin\skmlink.dll
MD5
eb4ebcbe68afccdbaba490a33eb2c756

SHA1
1df6c08b819a1cd3508901b542b73e7ad6f02fd3

SHA256
369fe2d66757439afc9c5a155e491e3b27348c827605c38a0ead5f9c923c5b82

SHA512
0550ec3e76144ff21b0d3bb912868848a20e17e9e099ee64ad3cb90e1794f8742cb77e0d66c3ccf963bae7ec91cc1c57d260a5ec89d3832a013623f8645d5958

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\Config.dll
MD5
6a858a304b4a565220c2f7daa13aafba

SHA1
50125224dbc73b3083aae65809e6844d56645594

SHA256
0cb69b0a975c205fab0b9928cb96d581135672779a4cc7ce0832ffa4aee15c1a

SHA512
83c39f04a7921440643d5355ac38a7ab823f19ab3ebe19b5291953e144f7f0dc234feb511f376167f4708397bd2755f5c067a3b345918413dc404d94f2c73bdb

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\Crash.dll
MD5
786ac1d3f3e8c7a16caeaf59ea9fd05d

SHA1
ddbde466cf1cb7f826ee92760f37f2eda2701322

SHA256
0d2ee3d68d260a022b6f9175fc7f06f61d43d4834a347032f87bb27fb63989c1

SHA512
9f292282d901e829092b672d5b1744f44e69901313965793b32613cb20074009b3f32469a97894cb081ab1e6ece1be171f6e316f9d899401ad67a8ad7bbc2ef2

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\DeCompressor.dll
MD5
068c9765a17272a6c0c36b6a1f7d151d

SHA1
b2fa5ff0a33544b507405638d5215c976611427e

SHA256
dd024ed4f418c41c310d2da6710bf65af57eea5dec7fb6262e0bdc1dfd686490

SHA512
514469146cf27f568d5492cacf32e0ab3725c75067f85d02c5c7bac7b77f1e1000ca178ac8715584cea77c17bbb5c0348aa9ace288e2c75f0048d34f670d6a1d

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\Log.dll
MD5
5841c8008d9839c4ad3db20879102d40

SHA1
1340130e7ea26c873b91a3dfdbde30dda7771eb8

SHA256
8bffbffeb6719864f1e0db38f9b473652c4a7b0ebd0b65cbc068013ae5923507

SHA512
1940654d08b80f051f1cbeeb693496f51919fb75d12f9502d597c117e96e46f74ee3ed8825fa693044d3f7db354ba3de9a940e1ce9690c23f62f0634bf7a9ff1

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\MSVCP100.dll
MD5
bc83108b18756547013ed443b8cdb31b

SHA1
79bcaad3714433e01c7f153b05b781f8d7cb318d

SHA256
b2ad109c15eaa92079582787b7772ba0a2f034f7d075907ff87028df0eaea671

SHA512
6e72b2d40e47567b3e506be474dafa7cacd0b53cd2c2d160c3b5384f2f461fc91bb5fdb614a351f628d4e516b3bbdabc2cc6d4cb4710970146d2938a687dd011

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\MSVCR100.dll
MD5
0e37fbfa79d349d672456923ec5fbbe3

SHA1
4e880fc7625ccf8d9ca799d5b94ce2b1e7597335

SHA256
8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18

SHA512
2bea9bd528513a3c6a54beac25096ee200a4e6ccfc2a308ae9cfd1ad8738e2e2defd477d59db527a048e5e9a4fe1fc1d771701de14ef82b4dbcdc90df0387630

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\Parser.dll
MD5
59af3423ea1d2ecfb689ef532ba76c78

SHA1
2fa23840d87acbe7d4afac1ed31ac2c85bd16800

SHA256
9677e86781c6745c69aff00d74f91dee62e739d38f3a5027d89305c0477fd678

SHA512
b035f7836765c75b2f437fa142a223feae8882336dc9a287106ecc1901ee6f0211d7315d2ac32f3a2398d26f3577bfbb5c271cec0ad15de62f92c3a0d66a1f98

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\Skin\TenthAnniversary.bfskin
MD5
2e926021d181048d5f6ef7da66f9f423

SHA1
8cc7a9158f44cdb12695b2861bc38a4291e2df6a

SHA256
5c5d739854515a7d76a82b5be379d5d953b8410b0b822ea3ddabdbd6fcc356db

SHA512
8ae6960545a48fe8a254b097cc1fe8a9f12cdb70ee45d49a2be71166d413b475ce8b22eb67398906eeab1b4ac3475b2bc4a409d3453a0f93f8e871bf0f754860

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\Skin\TenthAnniversary.bftheme
MD5
7a108813b79b81773c67ea325e44b273

SHA1
cfb5097f311821430c2912c90e4aa6a00ba9f9dc

SHA256
2ac4d073e60f665642a90eb8ff81e6020c1c7e72dc74a50e1106999147ac9892

SHA512
ddd0d0978d46bdb938642e98dc6acf86013dbef32fefef3cc5be6c500c4d9c36a948c9f016e7364453ac365a29f8883607a70218cece2c7acb61aa891cbe2c42

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\StormPlayer.dll
MD5
471e5d181e2938c24f41a2aba96514a8

SHA1
6b6a956fb0943abef65b16b8b0221600aa904b6e

SHA256
7dec1513e78c2f76b635f224774c2f86edc386909db95b4df491bee7ee430fbc

SHA512
cbcafb679bfbf7a74acf5894123edc670e404e057de8fc8947ba159ec301c5a606e973fe5c375aa3322548bd3f9c536266a36b31c9b48d8a7f3bd828c384bf80

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\StormPlayer9.exe
MD5
1693c7f77b460a9c8ab247464f0514e9

SHA1
f8e2f9c222f5be2172f59f8fe10cdd0a7e399d91

SHA256
4cb24925a609ea382ef1316847e8351cb8bec3af87b498778b3df0eecdddb292

SHA512
a0f48bfa9715414a09cd40af689f1a106f72aa5f958375546c6d27bced46f3122a29524fe002404da57b9b2e9201a41ed1f4c7ab41f424c6a5c56fb8be26d233

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\StormPlayer9.exe
MD5
1693c7f77b460a9c8ab247464f0514e9

SHA1
f8e2f9c222f5be2172f59f8fe10cdd0a7e399d91

SHA256
4cb24925a609ea382ef1316847e8351cb8bec3af87b498778b3df0eecdddb292

SHA512
a0f48bfa9715414a09cd40af689f1a106f72aa5f958375546c6d27bced46f3122a29524fe002404da57b9b2e9201a41ed1f4c7ab41f424c6a5c56fb8be26d233

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\StormPlayer9.ver
MD5
0646ccb37f2ffbcfea32c23471c20d1f

SHA1
b39236fa7f66be320ed6096baf1cf7d81e96d636

SHA256
e25f66a3d14d56569aa6cd05cf95e0a0fa34a01afb649d9a8450cc356fdd748b

SHA512
92ad994d82630e66083282458bf8f319a034eb0774a706ed55f0a5d2c0ea1e85f59c3b573c96ce88e23e0ba2a801db9cd174bf58ebefe9e0b8f3f93132c06e27

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\Welcome9.exe
MD5
7922fdaa51005aba6e32f10fddb512d5

SHA1
dc6bf2f0dd26159944ac5298d0eb28e776598c00

SHA256
2605e7410477b3cc642585b02b25c5d4290b5374e4dea99255f3867bef9e5960

SHA512
d962fbcb6c6f7e6e1a23dc031760e3c69c03ea003f4e71785b586bc5e0410b40535b4f88552c29d512badfaec06cfed430a5893849865aafd878ffd0a5ccd5a8

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\Welcome9.exe
MD5
7922fdaa51005aba6e32f10fddb512d5

SHA1
dc6bf2f0dd26159944ac5298d0eb28e776598c00

SHA256
2605e7410477b3cc642585b02b25c5d4290b5374e4dea99255f3867bef9e5960

SHA512
d962fbcb6c6f7e6e1a23dc031760e3c69c03ea003f4e71785b586bc5e0410b40535b4f88552c29d512badfaec06cfed430a5893849865aafd878ffd0a5ccd5a8

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\crt.dll
MD5
ef9f5caba1fa6d5e19c2f79063c6abbd

SHA1
a1446918f0fe6d95cf7e3d8481463e4395bf789c

SHA256
f6c0fc957c04b2008e9399f8b86393f9221ac3969adb21f2d2a49a04a4f9389a

SHA512
15a1a9c68414d50d4553a610c06207a77b9f79b5e1e8736c05e38e7f177e871ebcae0a638a58ac9df3070c78feafcac25385810df40714a66c7bdbf3b655c48b

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\diag.dll
MD5
10cd1bff51e63a8debce2d6dc1ef0f14

SHA1
616d3ef25349df8beba23e25729e2d5f40233821

SHA256
56e13ef6ab7f415f131e6a981c070e443b2c729eabb83672a823329050c6178f

SHA512
d47325a560548eaad7a275c45c600f7e78f045e52e7b5ef385e9206800636e57403f126b73651bb6a44abfdfa72ab1179f16a8f2b24112731d882a8e79e9220e

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\exp\welcome_index.html
MD5
5e609aa661e088e1d01a7fe491f3a7a3

SHA1
29e1fe35a02b03a8c1180bb89375a4390fd04023

SHA256
375236f6c4b8815d3531bfadef83d6f5b8fd9056558e4187d32c0d7c3c4dfc61

SHA512
ef45d85ce6e5e1a6cca0e6c98871b3919050992d9f9c701a6bb82f125f29506a47e4064e5679ba3f9741e1612a086b8ebe6692a78c91cd182eacea5ddf603ed4

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\fireworks_1008.dll
MD5
77ec83e494032ad696e927c321b81df0

SHA1
5ad94a3859757fb9245304fe7ef314a47e014aaa

SHA256
b568ef0a5e5b057ee3077b21248cb0743a562cd017a8587740c26936b02b81db

SHA512
9ce28c3a65185effda2146aea75f1617f303fd89b99beadfd8fb666b62b2a5ee214d1662ad9be8f64febb426d216157026ec6046f9ec3dc4f341d26bb743db49

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\http.dll
MD5
cea485e9889931101ef09b35bef8739f

SHA1
79730b28813e2e1691a843cb0f45471127d3ab1c

SHA256
bc4513eb14538961bd5f335fdfcf37bf594e66aa2c989d5eb1b48c43afd80995

SHA512
0af81b20c08b28005611629107648b1e47d1c4fc1987679bf476f2672f256804519374444d7eea3a14303d473d44c75ba92a9c16502e9dd9f6fe35541d35c2c6

Download Submit
C:\Program Files (x86)\BaofengVideo\StormPlayer9\playlist.dll
MD5
f653173ba95e50541ae6094dfaf04b59

SHA1
1f8c84005397383a7678dad79236ab2a1ba26a11

SHA256
b25a77a9743cbd0b8eb95d635ab434b382d9d38cc4b4dce1cb35d66ffe143c6a

SHA512
3abe01aedc7fa4bcb8450c96829e6818c09a2e7975dc71a2706be27dfe440d31655493a8545affbadb87f416924b5d39f71216fca6bf1152d83636c3974cbe0e

Download Submit
C:\ProgramData\BaofengVideo\StormPlayer9\Profiles\config.ini
MD5
d92edb35e68a295d8544d0a2283ae561

SHA1
82b2dc236761301c62bfa594b0e478895c653b9f

SHA256
be1a3a05aa84525475e5f33343222c57033bd7bcd749645a78b3c7eb0fe0c9d9

SHA512
997392879f62e7c88883166bd0de47df761ff75d3b6acbd8e0b75616dd3505c845e6ef1c4108021f35755991aceea404def245a44fa2517e56d61cd5fa0c5928

Download Submit
C:\ProgramData\BaofengVideo\StormPlayer9\Profiles\config.ini
MD5
486bbe59a5f48f528227ec6d576b6917

SHA1
eda086dde898b5943acf8dff75641f34c66965c4

SHA256
c2a04511e4ebf7275a522c85f6e27d95eb8f521632c7e5764ee751071a17d691

SHA512
fc06dc6587d799e963c9a7e8b7db70791137b0dcc94c3db08dd25d914280e749e83bfb98a3ee69b20a157cc709f9e040b4d673dd5ec00b7e22e01a8c2de843c3

Download Submit
C:\ProgramData\BaofengVideo\StormPlayer9\Profiles\vod\flash_common.xml
MD5
9bd53240f896c3d29de358eb04708b7c

SHA1
9b9cb15ea5b49f8ba8ae9c265fb959f039f34f7d

SHA256
8b42b8692cff1bdab24659625bea1db73641097b9a0fc6bc8e54fb7b79a709fd

SHA512
640d89800ef021e5afa401908e1f2138885013b00e1c8ec7016bc9a7a30faf3484e612161de79f4d3bc5107a7496b709aeb3ce5fd71fe7566f8aeb7dcfa7f024

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\BaofengPlatform9.exe
MD5
5f25668fb7de8e11d45e41ad5083cda7

SHA1
2c4c49ecd2c4773b85fde5735e4010a3c5dddb10

SHA256
be1338e4536333a335647e930c7ceb1adce4b7691151b6f4d3bd966cec150cc2

SHA512
522813025e163745ec1765d92b2e7bc52f113f955750c0e151fa811ec48a763c9d2d5890e1f9dbdf7f89bc32997eeeb06ae69128894af69b09002d1a6fd8339a

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\BaofengPlatform9.exe
MD5
5f25668fb7de8e11d45e41ad5083cda7

SHA1
2c4c49ecd2c4773b85fde5735e4010a3c5dddb10

SHA256
be1338e4536333a335647e930c7ceb1adce4b7691151b6f4d3bd966cec150cc2

SHA512
522813025e163745ec1765d92b2e7bc52f113f955750c0e151fa811ec48a763c9d2d5890e1f9dbdf7f89bc32997eeeb06ae69128894af69b09002d1a6fd8339a

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\BaofengPlatform9.exe
MD5
5f25668fb7de8e11d45e41ad5083cda7

SHA1
2c4c49ecd2c4773b85fde5735e4010a3c5dddb10

SHA256
be1338e4536333a335647e930c7ceb1adce4b7691151b6f4d3bd966cec150cc2

SHA512
522813025e163745ec1765d92b2e7bc52f113f955750c0e151fa811ec48a763c9d2d5890e1f9dbdf7f89bc32997eeeb06ae69128894af69b09002d1a6fd8339a

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\BaofengPlatform9.exe
MD5
5f25668fb7de8e11d45e41ad5083cda7

SHA1
2c4c49ecd2c4773b85fde5735e4010a3c5dddb10

SHA256
be1338e4536333a335647e930c7ceb1adce4b7691151b6f4d3bd966cec150cc2

SHA512
522813025e163745ec1765d92b2e7bc52f113f955750c0e151fa811ec48a763c9d2d5890e1f9dbdf7f89bc32997eeeb06ae69128894af69b09002d1a6fd8339a

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\Config.dll
MD5
6a858a304b4a565220c2f7daa13aafba

SHA1
50125224dbc73b3083aae65809e6844d56645594

SHA256
0cb69b0a975c205fab0b9928cb96d581135672779a4cc7ce0832ffa4aee15c1a

SHA512
83c39f04a7921440643d5355ac38a7ab823f19ab3ebe19b5291953e144f7f0dc234feb511f376167f4708397bd2755f5c067a3b345918413dc404d94f2c73bdb

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\Crash.dll
MD5
786ac1d3f3e8c7a16caeaf59ea9fd05d

SHA1
ddbde466cf1cb7f826ee92760f37f2eda2701322

SHA256
0d2ee3d68d260a022b6f9175fc7f06f61d43d4834a347032f87bb27fb63989c1

SHA512
9f292282d901e829092b672d5b1744f44e69901313965793b32613cb20074009b3f32469a97894cb081ab1e6ece1be171f6e316f9d899401ad67a8ad7bbc2ef2

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\DeCompressor.dll
MD5
068c9765a17272a6c0c36b6a1f7d151d

SHA1
b2fa5ff0a33544b507405638d5215c976611427e

SHA256
dd024ed4f418c41c310d2da6710bf65af57eea5dec7fb6262e0bdc1dfd686490

SHA512
514469146cf27f568d5492cacf32e0ab3725c75067f85d02c5c7bac7b77f1e1000ca178ac8715584cea77c17bbb5c0348aa9ace288e2c75f0048d34f670d6a1d

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\InstallStormPlayer.dll
MD5
e4b0c34fe5441beed19dcf6814bc0507

SHA1
66b999af7268e83a261b0722e28f85680021131d

SHA256
d68d211911fad1059ad3e0b39c0d396959e188e20d310c60a885aec59b49ec92

SHA512
418967ea20e60840d72ac9ebd65db8bd63daef8f33f7171fde04eb2d456e2c423df2d620f4ad715bab09beeb1bfc21026635a32560a6aa4b7ba579d509ef9126

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\LibIcon.dll
MD5
1b7367304611c426dfb851d117cd263a

SHA1
e8dc2f4777d2e74e4f589b48b5a2e7db979c00cb

SHA256
28ee33cec66d3c9c5f0e758eb2bdc0d8ee01ad828cae872e39ce7b2229f2dac3

SHA512
023e127e4bc516d4948b8f1c2af799b353fb51364fd4bcdc29671c619e314effb3d1f359f6a20544b608ba7a0790456ad3683d1717664908ce0e9f042c9bba83

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\Log.dll
MD5
5841c8008d9839c4ad3db20879102d40

SHA1
1340130e7ea26c873b91a3dfdbde30dda7771eb8

SHA256
8bffbffeb6719864f1e0db38f9b473652c4a7b0ebd0b65cbc068013ae5923507

SHA512
1940654d08b80f051f1cbeeb693496f51919fb75d12f9502d597c117e96e46f74ee3ed8825fa693044d3f7db354ba3de9a940e1ce9690c23f62f0634bf7a9ff1

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\Parser.dll
MD5
59af3423ea1d2ecfb689ef532ba76c78

SHA1
2fa23840d87acbe7d4afac1ed31ac2c85bd16800

SHA256
9677e86781c6745c69aff00d74f91dee62e739d38f3a5027d89305c0477fd678

SHA512
b035f7836765c75b2f437fa142a223feae8882336dc9a287106ecc1901ee6f0211d7315d2ac32f3a2398d26f3577bfbb5c271cec0ad15de62f92c3a0d66a1f98

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\PlayList.dll
MD5
f653173ba95e50541ae6094dfaf04b59

SHA1
1f8c84005397383a7678dad79236ab2a1ba26a11

SHA256
b25a77a9743cbd0b8eb95d635ab434b382d9d38cc4b4dce1cb35d66ffe143c6a

SHA512
3abe01aedc7fa4bcb8450c96829e6818c09a2e7975dc71a2706be27dfe440d31655493a8545affbadb87f416924b5d39f71216fca6bf1152d83636c3974cbe0e

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\ShellDrag.dll
MD5
1f815cb72b30eb6fdac1ecb0e7ff0c3c

SHA1
19c4a171da88560664b4e37cb480c9879d89c36b

SHA256
719ceee116e406c1cd2bd5945de6c8024b050f250efe8944964bf71b761d108f

SHA512
fccc089d7c8a06d3fd1517ad3949322a9948342a3f9676d7012d03e1faa69895927fc690d6dd171372188407b4d7c7c0484bc3a77aefa0e44d886cb47f6225d2

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\StormPlayer.dll
MD5
471e5d181e2938c24f41a2aba96514a8

SHA1
6b6a956fb0943abef65b16b8b0221600aa904b6e

SHA256
7dec1513e78c2f76b635f224774c2f86edc386909db95b4df491bee7ee430fbc

SHA512
cbcafb679bfbf7a74acf5894123edc670e404e057de8fc8947ba159ec301c5a606e973fe5c375aa3322548bd3f9c536266a36b31c9b48d8a7f3bd828c384bf80

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\StormPlayer9.exe
MD5
1693c7f77b460a9c8ab247464f0514e9

SHA1
f8e2f9c222f5be2172f59f8fe10cdd0a7e399d91

SHA256
4cb24925a609ea382ef1316847e8351cb8bec3af87b498778b3df0eecdddb292

SHA512
a0f48bfa9715414a09cd40af689f1a106f72aa5f958375546c6d27bced46f3122a29524fe002404da57b9b2e9201a41ed1f4c7ab41f424c6a5c56fb8be26d233

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\StormPlayer9.exe
MD5
1693c7f77b460a9c8ab247464f0514e9

SHA1
f8e2f9c222f5be2172f59f8fe10cdd0a7e399d91

SHA256
4cb24925a609ea382ef1316847e8351cb8bec3af87b498778b3df0eecdddb292

SHA512
a0f48bfa9715414a09cd40af689f1a106f72aa5f958375546c6d27bced46f3122a29524fe002404da57b9b2e9201a41ed1f4c7ab41f424c6a5c56fb8be26d233

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\StormPlayer9.exe
MD5
1693c7f77b460a9c8ab247464f0514e9

SHA1
f8e2f9c222f5be2172f59f8fe10cdd0a7e399d91

SHA256
4cb24925a609ea382ef1316847e8351cb8bec3af87b498778b3df0eecdddb292

SHA512
a0f48bfa9715414a09cd40af689f1a106f72aa5f958375546c6d27bced46f3122a29524fe002404da57b9b2e9201a41ed1f4c7ab41f424c6a5c56fb8be26d233

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\Uninst.exe
MD5
87939c52e9f33c238ef22769fcebe3c1

SHA1
2891d39937f6a96d51888187b62f18013821bfc5

SHA256
6af30702cd534bf898f8676ba2524ed708165f22545c38410f967d3fc7719990

SHA512
32c9e1210645357546e551355662bcb69868dedf44e916fe2d2631b1b31c68950ca32e4dca30f7562647db34258915c5478ffa74cdd3fb43266558f3f25858f2

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\Welcome9.exe
MD5
7922fdaa51005aba6e32f10fddb512d5

SHA1
dc6bf2f0dd26159944ac5298d0eb28e776598c00

SHA256
2605e7410477b3cc642585b02b25c5d4290b5374e4dea99255f3867bef9e5960

SHA512
d962fbcb6c6f7e6e1a23dc031760e3c69c03ea003f4e71785b586bc5e0410b40535b4f88552c29d512badfaec06cfed430a5893849865aafd878ffd0a5ccd5a8

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\bin\skmlink.dll
MD5
eb4ebcbe68afccdbaba490a33eb2c756

SHA1
1df6c08b819a1cd3508901b542b73e7ad6f02fd3

SHA256
369fe2d66757439afc9c5a155e491e3b27348c827605c38a0ead5f9c923c5b82

SHA512
0550ec3e76144ff21b0d3bb912868848a20e17e9e099ee64ad3cb90e1794f8742cb77e0d66c3ccf963bae7ec91cc1c57d260a5ec89d3832a013623f8645d5958

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\crt.dll
MD5
ef9f5caba1fa6d5e19c2f79063c6abbd

SHA1
a1446918f0fe6d95cf7e3d8481463e4395bf789c

SHA256
f6c0fc957c04b2008e9399f8b86393f9221ac3969adb21f2d2a49a04a4f9389a

SHA512
15a1a9c68414d50d4553a610c06207a77b9f79b5e1e8736c05e38e7f177e871ebcae0a638a58ac9df3070c78feafcac25385810df40714a66c7bdbf3b655c48b

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\crt.dll
MD5
ef9f5caba1fa6d5e19c2f79063c6abbd

SHA1
a1446918f0fe6d95cf7e3d8481463e4395bf789c

SHA256
f6c0fc957c04b2008e9399f8b86393f9221ac3969adb21f2d2a49a04a4f9389a

SHA512
15a1a9c68414d50d4553a610c06207a77b9f79b5e1e8736c05e38e7f177e871ebcae0a638a58ac9df3070c78feafcac25385810df40714a66c7bdbf3b655c48b

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\crt.dll
MD5
ef9f5caba1fa6d5e19c2f79063c6abbd

SHA1
a1446918f0fe6d95cf7e3d8481463e4395bf789c

SHA256
f6c0fc957c04b2008e9399f8b86393f9221ac3969adb21f2d2a49a04a4f9389a

SHA512
15a1a9c68414d50d4553a610c06207a77b9f79b5e1e8736c05e38e7f177e871ebcae0a638a58ac9df3070c78feafcac25385810df40714a66c7bdbf3b655c48b

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\crt.dll
MD5
ef9f5caba1fa6d5e19c2f79063c6abbd

SHA1
a1446918f0fe6d95cf7e3d8481463e4395bf789c

SHA256
f6c0fc957c04b2008e9399f8b86393f9221ac3969adb21f2d2a49a04a4f9389a

SHA512
15a1a9c68414d50d4553a610c06207a77b9f79b5e1e8736c05e38e7f177e871ebcae0a638a58ac9df3070c78feafcac25385810df40714a66c7bdbf3b655c48b

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\diag.dll
MD5
10cd1bff51e63a8debce2d6dc1ef0f14

SHA1
616d3ef25349df8beba23e25729e2d5f40233821

SHA256
56e13ef6ab7f415f131e6a981c070e443b2c729eabb83672a823329050c6178f

SHA512
d47325a560548eaad7a275c45c600f7e78f045e52e7b5ef385e9206800636e57403f126b73651bb6a44abfdfa72ab1179f16a8f2b24112731d882a8e79e9220e

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\extfa.dll
MD5
0e1a5e7de157b10b20ae2d3ae893d316

SHA1
f7c251744764a90c00fe8df7e48ae950ba88783a

SHA256
23751f9360a4726e76ba3a03bff9e0e58a28066ccebe42a79d00d836626809c8

SHA512
7eec6c0230f5aec0c93982409fdefcc9b9600f60a9c91131d3f68ed179959ac7e3c7ed5bcff97f695aa9670a322860fdc7cd0d1eb3e31668215899a800127469

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\fireworks_1008.dll
MD5
77ec83e494032ad696e927c321b81df0

SHA1
5ad94a3859757fb9245304fe7ef314a47e014aaa

SHA256
b568ef0a5e5b057ee3077b21248cb0743a562cd017a8587740c26936b02b81db

SHA512
9ce28c3a65185effda2146aea75f1617f303fd89b99beadfd8fb666b62b2a5ee214d1662ad9be8f64febb426d216157026ec6046f9ec3dc4f341d26bb743db49

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\http.dll
MD5
cea485e9889931101ef09b35bef8739f

SHA1
79730b28813e2e1691a843cb0f45471127d3ab1c

SHA256
bc4513eb14538961bd5f335fdfcf37bf594e66aa2c989d5eb1b48c43afd80995

SHA512
0af81b20c08b28005611629107648b1e47d1c4fc1987679bf476f2672f256804519374444d7eea3a14303d473d44c75ba92a9c16502e9dd9f6fe35541d35c2c6

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\http.dll
MD5
cea485e9889931101ef09b35bef8739f

SHA1
79730b28813e2e1691a843cb0f45471127d3ab1c

SHA256
bc4513eb14538961bd5f335fdfcf37bf594e66aa2c989d5eb1b48c43afd80995

SHA512
0af81b20c08b28005611629107648b1e47d1c4fc1987679bf476f2672f256804519374444d7eea3a14303d473d44c75ba92a9c16502e9dd9f6fe35541d35c2c6

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\msvcp100.dll
MD5
bc83108b18756547013ed443b8cdb31b

SHA1
79bcaad3714433e01c7f153b05b781f8d7cb318d

SHA256
b2ad109c15eaa92079582787b7772ba0a2f034f7d075907ff87028df0eaea671

SHA512
6e72b2d40e47567b3e506be474dafa7cacd0b53cd2c2d160c3b5384f2f461fc91bb5fdb614a351f628d4e516b3bbdabc2cc6d4cb4710970146d2938a687dd011

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\msvcp100.dll
MD5
bc83108b18756547013ed443b8cdb31b

SHA1
79bcaad3714433e01c7f153b05b781f8d7cb318d

SHA256
b2ad109c15eaa92079582787b7772ba0a2f034f7d075907ff87028df0eaea671

SHA512
6e72b2d40e47567b3e506be474dafa7cacd0b53cd2c2d160c3b5384f2f461fc91bb5fdb614a351f628d4e516b3bbdabc2cc6d4cb4710970146d2938a687dd011

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\msvcp100.dll
MD5
bc83108b18756547013ed443b8cdb31b

SHA1
79bcaad3714433e01c7f153b05b781f8d7cb318d

SHA256
b2ad109c15eaa92079582787b7772ba0a2f034f7d075907ff87028df0eaea671

SHA512
6e72b2d40e47567b3e506be474dafa7cacd0b53cd2c2d160c3b5384f2f461fc91bb5fdb614a351f628d4e516b3bbdabc2cc6d4cb4710970146d2938a687dd011

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\msvcp100.dll
MD5
bc83108b18756547013ed443b8cdb31b

SHA1
79bcaad3714433e01c7f153b05b781f8d7cb318d

SHA256
b2ad109c15eaa92079582787b7772ba0a2f034f7d075907ff87028df0eaea671

SHA512
6e72b2d40e47567b3e506be474dafa7cacd0b53cd2c2d160c3b5384f2f461fc91bb5fdb614a351f628d4e516b3bbdabc2cc6d4cb4710970146d2938a687dd011

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\msvcr100.dll
MD5
0e37fbfa79d349d672456923ec5fbbe3

SHA1
4e880fc7625ccf8d9ca799d5b94ce2b1e7597335

SHA256
8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18

SHA512
2bea9bd528513a3c6a54beac25096ee200a4e6ccfc2a308ae9cfd1ad8738e2e2defd477d59db527a048e5e9a4fe1fc1d771701de14ef82b4dbcdc90df0387630

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\msvcr100.dll
MD5
0e37fbfa79d349d672456923ec5fbbe3

SHA1
4e880fc7625ccf8d9ca799d5b94ce2b1e7597335

SHA256
8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18

SHA512
2bea9bd528513a3c6a54beac25096ee200a4e6ccfc2a308ae9cfd1ad8738e2e2defd477d59db527a048e5e9a4fe1fc1d771701de14ef82b4dbcdc90df0387630

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\msvcr100.dll
MD5
0e37fbfa79d349d672456923ec5fbbe3

SHA1
4e880fc7625ccf8d9ca799d5b94ce2b1e7597335

SHA256
8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18

SHA512
2bea9bd528513a3c6a54beac25096ee200a4e6ccfc2a308ae9cfd1ad8738e2e2defd477d59db527a048e5e9a4fe1fc1d771701de14ef82b4dbcdc90df0387630

Download Submit
\Program Files (x86)\BaofengVideo\StormPlayer9\msvcr100.dll
MD5
0e37fbfa79d349d672456923ec5fbbe3

SHA1
4e880fc7625ccf8d9ca799d5b94ce2b1e7597335

SHA256
8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18

SHA512
2bea9bd528513a3c6a54beac25096ee200a4e6ccfc2a308ae9cfd1ad8738e2e2defd477d59db527a048e5e9a4fe1fc1d771701de14ef82b4dbcdc90df0387630

Download Submit
memory/652-150-0x0000000000170000-0x0000000000171000-memory.dmp

Filesize
4KB

Download
memory/652-127-0x0000000000000000-mapping.dmp

Download
memory/1160-147-0x00000000002D0000-0x00000000002DF000-memory.dmp

Filesize
60KB

Download
memory/1160-146-0x0000000000260000-0x0000000000278000-memory.dmp

Filesize
96KB

Download
memory/1160-135-0x0000000000000000-mapping.dmp

Download
memory/1160-155-0x00000000051C0000-0x00000000051E3000-memory.dmp

Filesize
140KB

Download
memory/1160-154-0x0000000005160000-0x00000000051B6000-memory.dmp

Filesize
344KB

Download
memory/1160-153-0x0000000004870000-0x0000000004899000-memory.dmp

Filesize
164KB

Download
memory/1160-152-0x00000000034E0000-0x0000000003595000-memory.dmp

Filesize
724KB

Download
memory/1160-151-0x0000000000320000-0x0000000000321000-memory.dmp

Filesize
4KB

Download
memory/1160-149-0x0000000002D70000-0x0000000002DC8000-memory.dmp

Filesize
352KB

Download
memory/1160-148-0x0000000002870000-0x0000000002AC0000-memory.dmp

Filesize
2.3MB

Download
memory/1828-60-0x0000000075FF1000-0x0000000075FF3000-memory.dmp

Filesize
8KB

Download
memory/1828-84-0x0000000004810000-0x00000000048C5000-memory.dmp

Filesize
724KB

Download
memory/1828-61-0x0000000000200000-0x0000000000201000-memory.dmp

Filesize
4KB

Download
memory/2032-122-0x00000000059F0000-0x00000000059FE000-memory.dmp

Filesize
56KB

Download
memory/2032-104-0x0000000002880000-0x0000000002881000-memory.dmp

Filesize
4KB

Download
memory/2032-116-0x0000000005960000-0x0000000005986000-memory.dmp

Filesize
152KB

Download
memory/2032-73-0x0000000000000000-mapping.dmp

Download
memory/2032-107-0x0000000004840000-0x000000000484F000-memory.dmp

Filesize
60KB

Download
memory/2032-119-0x00000000059A0000-0x00000000059D5000-memory.dmp

Filesize
212KB

Download
memory/2032-93-0x00000000004C0000-0x00000000004EE000-memory.dmp

Filesize
184KB

Download
memory/2032-87-0x00000000024F0000-0x0000000002740000-memory.dmp

Filesize
2.3MB

Download
memory/2032-98-0x0000000003270000-0x0000000003325000-memory.dmp

Filesize
724KB

Download
memory/2032-103-0x0000000003B70000-0x0000000003B88000-memory.dmp

Filesize
96KB

Download