Analysis

  • max time kernel
    29s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20230703-en
  • resource tags

    arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
  • submitted
    09/07/2023, 21:34

General

  • Target

    MouseKeyboardCenter_64bit_ENG_14.41.exe

  • Size

    47.3MB

  • MD5

    581de3f046339e0731d52216f9780342

  • SHA1

    7e3cd381fc8465927ab558a902d47c6420bb78d6

  • SHA256

    b847e5f5a2aa770572009a0b0dd15d8d811226843a0b3b9a4216c3d05d432ad2

  • SHA512

    a2523fec5885da742ca87dcde0b50fc4270f3cfdef5eb992802c64ccc2f952edb934d8b3b7d2e646e8af45d0f57bfc305f911d302f1e60df2a7121a450122998

  • SSDEEP

    786432:tX+6r/Z4VywOz8xBEyooD2jgryI+O8fxEyvDMXF/EfFdvg3QpAbr/ejQ5wcd8n:tXbyVyKEyisryI3UmmDM9cdvcQiwQ5w/

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 3 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MouseKeyboardCenter_64bit_ENG_14.41.exe
    "C:\Users\Admin\AppData\Local\Temp\MouseKeyboardCenter_64bit_ENG_14.41.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2364
    • \??\c:\99cdd830368396d4af37\setup.exe
      c:\99cdd830368396d4af37\setup.exe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2440

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\1033\rtf\keyboard\sidewinder_keyboard\gaming_mode_led.rtf

    Filesize

    31KB

    MD5

    b4ec1bf25742bcecf4169b3bffff4358

    SHA1

    3ac94ae4733dab98340e76742263639efe578947

    SHA256

    d52ed1d69e8e6c42eaae9d55d2eac28e70343d05fe13fcf3e6f763ba39c9ba97

    SHA512

    518ff819d40affb70b7a252028a8190e0b8e89a5c9e37f0abd8b294d47f65586e84d9b202b7f7a7553964236070aa449ba66f617553c6d9fc24d6bf5db5bc01b

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\1033\rtf\keyboard\sidewinder_keyboard\media_keys.rtf

    Filesize

    30KB

    MD5

    ee838ba31272120edc0e86556289067a

    SHA1

    5af1bf37ae30faec8083afe13b5b38328238d0cf

    SHA256

    efeed59f0174fa44ca995e206d42aafff0454d9eed2cff3bf2b6bad8c81458d7

    SHA512

    b811f6261bfe6a26adee16ddaa592107819969fd683981e27e2ac1db432787d2bc3e0bf4164275d87321ab1ce8423d1532766bacab5fa04019cc8521acfed3d9

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\1033\rtf\mouse\all_mice\magnify.rtf

    Filesize

    29KB

    MD5

    2d8acd493924dd9c092938a47782c705

    SHA1

    a5140277bc7afe023aaac942be9aceab0fa3b5ba

    SHA256

    315db132cfc7c69f2291c9ca889f062cb8fb6c7f780d8a405c745f1b0551251b

    SHA512

    bf9371941080b04248218297383b386e61703274d025adc6f7f926953352da5b8afcdec79e828eeddf0cd89f33b89068fe8400c2622e2f940db6a434c586e7ab

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\1033\rtf\mouse\arc_touch\arctouch_general.rtf

    Filesize

    32KB

    MD5

    6af575641d753716240e739bae47e610

    SHA1

    86839f50ff5b0d9733c64b5a4d21c002791c8f74

    SHA256

    8e6a47653e060039af8adb07f0b7ead3d2516608681ec36cdce9d13ef9ce5af8

    SHA512

    c916763b6751e5c1e143ccaa1e371b34b6afb1fdc3d9d6a5505ea80984c018a17edfe588971a89a02814bbfb2c296b53114975c777889991929b505ac76aa8e0

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\1033\onenote\onenotedecreaseindent.mhm

    Filesize

    653B

    MD5

    d1ad7513475716149e109ee65903c39e

    SHA1

    b939913788f08ea946ab7289f9f5370f754629d8

    SHA256

    09890a85ff4af384634700d832c769d1df71323e0a679eaa220ebc688057c25c

    SHA512

    b776a0bf02b7637f3053cd40db735d76b29afe54ad1eba9d7ed278cba2396f095d171e28055af5ecdc1667c2b635f9145873aa5841f977a198554cb11f4c7324

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\1033\onenote\onenoteincreaseindent.mhm

    Filesize

    653B

    MD5

    163dad1233701f991a9e83b347a1dca7

    SHA1

    438eb19ac35b6d4ec289f6c947502be6b5161c46

    SHA256

    72f8c8efea53b6c43af6263c3e385b40509741b50b1d6db6bef849cab9567e6b

    SHA512

    6b193a24c0eed1db2a8deba300ebf4d25749af895a43440074dbc866c902930f8bfc8adabbf0dce351d026beca8d2f97f1fa6e58fabb4e6ecd4bbce97519cc95

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\1033\powerpnt\powerpntnewcomment.mhm

    Filesize

    496B

    MD5

    64a248548dc79e17aaefa2a05852874f

    SHA1

    6d9f8e96f634e91679e212912accb2ec4d2d8756

    SHA256

    120bca4ac28cb5d3560eb8aaf12d32af2457cdc4f4559dbe5e278b4eea3857f9

    SHA512

    58493728fd2d3943956ed0fff355959ef9255c7f8d5fd6bf488c71aacfdd1eb35f6c0f82b67057574dc2db515efb6427d5585dbb4957ee97e2038554e02fece5

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\1033\powerpnt\powerpntnextcomment.mhm

    Filesize

    496B

    MD5

    2f4b3d80bfd8f0edc3f52dd7f2d0cb4e

    SHA1

    6e424928e99f0c5c2ea002fdf0d9c197d9c7b6aa

    SHA256

    dfec7b3a8a701b9e62c171fe6017d5e79ea9decbfcc5a0f1bdad742ae2b15141

    SHA512

    40da868614bca3952292bdbe2454c7b4b33b983b8de80e503386161fde20bdf97718390e8dfe52493f4a4b474653fa36688b24546ec65c42ecdf4374dd590830

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\1033\powerpnt\powerpntpreviouscomment.mhm

    Filesize

    496B

    MD5

    c382ab5de97869ba19305fbddeaae1f7

    SHA1

    40e3fba61d483569e40eb069d738bca149a79f25

    SHA256

    ae761c8221cba45b45e0a0a018c6d3476509369839847e106d487343286d46ac

    SHA512

    a53fc9568731e89ac46719ffc03cd93d0c8089517bd2dd5a368c8bd9f96daa27106afc58912c3de2b7293f53829d01750a55f1c50e1d692eb58f821ae5ab23d0

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\1033\powerpnt\powerpntstrikethrough.mhm

    Filesize

    494B

    MD5

    399bcde31bec2e2b7a6ea748aed7c931

    SHA1

    99f23c28bdcf88ad68401074d04cd8f2ae3da135

    SHA256

    c4dacec3f4ef3a645ecd9462b3b1c035f6504c146a3aefcca433388c7d0da0cf

    SHA512

    084b145f3cecef1d29c276318517ddf024b6b303b08ed85ce33b791567e3e363faabe2370b1fb37d06769f65b2302d1ae9af3dd32f6ddef4a4c847a7962b0530

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\1041\onenote\onenotezoom100.mhm

    Filesize

    494B

    MD5

    89759ead69211e0376b7252a75252863

    SHA1

    0412620c82e2cae9b6910f498ef2f1b04c535001

    SHA256

    d6efdb071f2e809eb19acdc6da3ad435c40d5ad4a5f2dfc41b116ec417c72ea0

    SHA512

    c49cc5fc1dba9d4112a3fdd4752fd95eeb1d1b7ef1017dd19fdcd79127618997d60e53cfe95ddcd4bffc2cf97178e12568ddd98939ae559e28e1abffac7a55d4

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\1041\onenote\onenotezoompagewidth.mhm

    Filesize

    496B

    MD5

    65be8e5a74d81b37f983d9dc9066d1d7

    SHA1

    7260f7eb03cdd8e59bfd156d10a73e7772283b63

    SHA256

    e45404037159b8bfb8fd341b2575b6cec951503aa0ebf1f9e902a324da81991d

    SHA512

    a9c2170f0b2498db815d6446c4c01c37e0f8f1e70aa2be3f75aca82069a05648d1354ace6fdfb89018101ac9fa847ad21cd7dcf7b7d616b42b020014954ee60e

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\1041\powerpnt\powerpnttranslateselectedtext.mhm

    Filesize

    653B

    MD5

    1f26cf8fef69f2dd2c5cba6ba4aad3cb

    SHA1

    23d1be17929a1dcb2ec738920316e0eb68abcd94

    SHA256

    32e522446dadf436fc400bd14572fdf946546c232a9114d566c0c2318d78da5d

    SHA512

    7ac4b606e9095bc24cd691ee998c026edd5eb853d500776178de2689049a1d8d8f685c3f64ae6b40ae6959c5c50f1d257aa13ced62fe1d0e37efd1cbc0abedfc

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\excel\excelaligncenter.mhm

    Filesize

    653B

    MD5

    a4c65e05bdc153c957335baf9067fdbc

    SHA1

    843398b76ea586c85909b24846586d1e916b59e8

    SHA256

    2d5c1f5ba1385b7e5c5506aa10a7eadb4a0d32362d3a9ea7c65e4e3f4ac5522a

    SHA512

    ef6ac757406c8832e0cb2edaa92892564c9e5fae3143e29eaf97cf3fa95d1ae752b7765fe8b698d48d1d935df81f0dcd4d43b8f673cb0084d48b12b85598db0d

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\excel\excelalignleft.mhm

    Filesize

    653B

    MD5

    f58981257e15ea11fec177199447d96c

    SHA1

    343171778c85632e9c3efffbf6edc372ebf7712c

    SHA256

    94bf4d2e3cc47ea58844b4d7961042f3925a88a93f86f52cab8a3f2ace7570b5

    SHA512

    d6e9664d24d0a5d8b0d49e9fd21d3bdfb597a916fd1ad6d819a09b907d15113f7e9cacd240c8bad407de160fd3a8ad4e08fda6b3f51b8117091de910492c0f0a

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\excel\excelalignright.mhm

    Filesize

    653B

    MD5

    eaaf77906dc9b9c1e1b47921414a9e8a

    SHA1

    7a0c3ed4cfdfcd289575dccfeba4ea2cf3157a88

    SHA256

    c4ab92f13c06eb08195f452519feca04fbda2a7a89e88d94d536261dd194a828

    SHA512

    5eb221db4ea3d8e6ce81414c02127c99f029f9d235a6419b2f9d41ff3e67bea1e995b4bd3bd3a09fe0a518edf398a78bb3138e02a9487dc7ffdae16df74e21d9

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\excel\exceldecreaseindent.mhm

    Filesize

    494B

    MD5

    6eb0f8338f091227ef9d4800eed9ac2e

    SHA1

    bb7084ef1a9dff01c507aaa26b760936ad6b589b

    SHA256

    25ddcb713476540f59ce660087753d342713c08851d75ed0c2cf797932f7a130

    SHA512

    d59fb229a37ce77b59f46d02023fa23821ffeaab2febb471d2e9594940368cb7936a6b9466deaa1276195e3076c7ebdc9222be5a1b3acdc994d8294836305060

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\excel\excelincreaseindent.mhm

    Filesize

    494B

    MD5

    49f4a625409c39998eebadbb9c34e0cd

    SHA1

    cf66e8b0695e9577376194a6ef2e0cc4486900bb

    SHA256

    69002837adfe376f9b4c6b2b966cc4e26dcd6479ad8c5c37f338d42b42438051

    SHA512

    25b791eb35e59aae165f4fa3600884f974af0784c9b02b33c63953302ca0b1d003342632c02fdb31f40b41df634aebd3a2cc174ee49acc54a2fa1545f4aa1e81

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\excel\excelpasteformulas.mhm

    Filesize

    653B

    MD5

    95c8aea93120007f114f31d2ec35378f

    SHA1

    66efd2f24fa666e2baa2fc21fd889039e62151c4

    SHA256

    233ff7895b866485fb8333e07a7258a1416e27a61e571b8a1823f60421b5c9da

    SHA512

    ae800f74bef3ede3ba2f9b9877202c02c1b63159d728e596d3184e261f36aac70e52506ffb99699f1a1203d63e7119605930ff5a9550cebf4fa946ff46c0e9a4

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\excel\excelpastelink.mhm

    Filesize

    653B

    MD5

    a1e6a20fd707e2cf01242d0e4c323cc1

    SHA1

    19b4bee5c6addf46d206583cf1f2e7c9e3b5a0ab

    SHA256

    2f3330b4ee4f401405e466bdb0afb334bfc39fa70a1343d6ef41430a3b060da9

    SHA512

    f0595d94208c74ea536d3ed084382060bbc1c0c1c0af689dd824d0d1ff75e7b75405587fa3b1137cd6f9c9a0944cab4f28e0578519763abe82ad9975a1dcee81

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\excel\excelpastevalues.mhm

    Filesize

    653B

    MD5

    2b259e18e87f6247873fc8c3410f8659

    SHA1

    ec8a002e1bf2ed203869e0bc5b5aa740b5d0f9d9

    SHA256

    6337169cc2ac866cca45119d351944e9d6b70b76e0d947a32599057e12b07702

    SHA512

    c1d164a4ad9b1ab1b14e78aad9deaf921a81b3f716d30c67cdc3ebdcd87b3d7dac2c4300c3b9620332060a6c474fc36c08c80748b372537bbd8e2a02f940b225

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\excel\excelsortatoz.mhm

    Filesize

    653B

    MD5

    199b440d6429ed647a17025a76393aa2

    SHA1

    b7995b93b0892ea97a692efe1ed8bf233fd8efdd

    SHA256

    809a79afadff64ff1331540a1713cba8803e1a9fe6920786f07a97a3def198e1

    SHA512

    b61fc4e032479326d95ed9ea4bd1d6c29d5ed6f98176afd1e4214076019b6015ed1d166d8c2014a1f5e545c81180850950c4bbee91441886546598785fab7948

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\excel\excelsortztoa.mhm

    Filesize

    653B

    MD5

    cdcad21042983bf175cfb55c5d5ec6fa

    SHA1

    467e91a35fa83077d0ce6815935bdd17f73d9316

    SHA256

    b810bc6d2de1fb44dbb4e6480765433480a9f364516f7463b0c642ba55a6e788

    SHA512

    f6b200adfbfc39a8bc7fe3a7ff1fa234c16e05b84e4e8103c2be1047377ee4ff56e2f1f2059ea6acb248f359d71c27b6161a2844474659bf61d7bf7fb407a237

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\excel\exceltranslateselectedtext.mhm

    Filesize

    496B

    MD5

    1af0f3d682aedd31026fc0aad863a725

    SHA1

    8b566ca5964220c015d1978d3a79a53f3a7a5d20

    SHA256

    a0526111dd54532f3690b3564a41897cc062a98f8b3398043a0249caafddf7f5

    SHA512

    9fa774df87be2747e11889e869083ae245d56bfeade704675b225d5a1f284c9bae2fad1f6aa9ad3b1b5b0e3010763c77efdccb2024271440c6d8871e32f94232

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\onenote\onenotesubscript.mhm

    Filesize

    339B

    MD5

    629234a5ea8a8e641dd91168bca5e7f7

    SHA1

    93bf75f3c521adb21123064ada72990d2dd56ddf

    SHA256

    994061d57cc647157eb2496c449729abf0eddb6be291cfdbdfbe493d7f723608

    SHA512

    fcefe8c6275d952e4838ef4e7bd265869017ef60a3c4229b540846cf08e59f40fd72cf1ad9f0fa1587a65e2423ed0c7aa1017647ba8c0c678f29597922632fb4

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\onenote\onenotesuperscript.mhm

    Filesize

    496B

    MD5

    41d25894c88771a4dfdc1a4248d69fbf

    SHA1

    d4d729a79a186bd3d72147d0061b33a7b3270706

    SHA256

    4f9c5358b2e1d96afc8b0c0356c136263f36851538d0bcdaf2decad0334d3fd8

    SHA512

    bac7e3576494075e78f65b4cf353511a2f1d567dcc5b93094b8e12973f850d98894f5b79226c2a059ab0cbd8237363fbf724b6d4573b596a8522b2ee9cf30de8

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\outlook\outlookattachfile.mhm

    Filesize

    653B

    MD5

    21f2a9a3b3853f77c1d2b305353d7c90

    SHA1

    bc3ccfc08c01d1f08ddcf528ef623f8e1c80d084

    SHA256

    8a8a1542f526a8b6deb096492de9c527c3763674c1193e4431ea5539d2deb8b1

    SHA512

    7f29b311cc56feed7c18f2aa1fc3b884830a6bee23660769be2ad1c082fddd77e9d43467b951e00169dcdfdd8b9be091522ce642fe45b8c55e43089472fe0497

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\outlook\outlookforward.mhm

    Filesize

    339B

    MD5

    8c253e420ca41dc2e056d91641dc57be

    SHA1

    d26ef509849b89bb07ca8a3a64279f9fd88c8b57

    SHA256

    bdfed516dd6e9d468b615851a6e8b7661612218db5c79dfe9871a5d3fd93d916

    SHA512

    133d3640b4ae9936bba2e5019417c66314483d43c7067d8aa2a103202f1dab573ed8470a6ce3ffb913f02cac7b65477dd207ccc0387776864d743d24765229f4

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\outlook\outlooknewemail.mhm

    Filesize

    339B

    MD5

    b668a07ac223f2db0c12b5dd4aa2ec69

    SHA1

    5dd9edbc32235bbda1552329c301292682fa796e

    SHA256

    c1d5352b211128349d65a36b3c4dd85c184f9cbf4af5cea8db41a514978d3b98

    SHA512

    bdd0a9fe12d18c98ad64a919a6b8f49011775c2e66a31def378f6865ce623aec1b0fc9932e4004a2e9b02d9fe5d89008a3bb59dc4fc25dcb1c129b812682c0fd

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\outlook\outlooknewmeeting.mhm

    Filesize

    496B

    MD5

    f99dab8549969645390bbedd9920583e

    SHA1

    6068e30b07170bce8b790325b3d5edaaaa3e0442

    SHA256

    1a8ff70515d2ffa69a3feaa8d32b5391bbab4b1d08a1635d2fdbae2356f07751

    SHA512

    70142351196f5dd459cd84c5690ed710f9e4b21671bbfd06df07b6f55e092f711759669ea55df295b34b9bce99cbfe7bede81aefbf9f85acb26f7ac05deb6c7d

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\outlook\outlookreply.mhm

    Filesize

    339B

    MD5

    fd97f86281f965e556299ec854aa8c1d

    SHA1

    444ad1195087a9569efb1897e284189d8cbb62a5

    SHA256

    be80ed0359bae233ea9219d2b1fcdf7fb0800f69e527838340c4d4eb8ce68f88

    SHA512

    4615c504df6a1709ea68a781615db5365d3f473468bc93df2f9986c18372bbc61ca6383e57ee9f871cef7d5d57e5a944d2ff4cce8e2a554839b6459e995c0cb4

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\outlook\outlookreplyall.mhm

    Filesize

    496B

    MD5

    6ce881852daa6915795446fe0c730ce7

    SHA1

    a856b8600f94a3afaf5ad6cf3b172418db06e666

    SHA256

    bb26211a05ffa5834dcece8a2d8ae7c468110ce11d55bdb4dfc731f7853bfcd7

    SHA512

    d5c7770d08b638400d8f3e7f35ed63fb3ed9b726bc5966cee9b2b70acbaa9db1c297fff8af5e5357304643dbb544553268e9c834b90605bac9aa2fe4f86f793b

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\powerpnt\powerpntarrangealigncenter.mhm

    Filesize

    810B

    MD5

    3e7c0ad643d083a29b53bef715698cf7

    SHA1

    aed106731582a7565b38f6f6e83d0451721247c0

    SHA256

    3b9ba03bd3bba1f444fc416e0d76aa55dfbbe1920253ec5198be089d07d6dc32

    SHA512

    a5b11c72d0d5865c50f94de708ca7800b0b9b0d50bd69f84292b9ebc781d6b7324bc4fdcf1b285eb1b1bf97f36ff2c65abd4439dbc63503d64f9c8e6d6a4fcb3

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\powerpnt\powerpntarrangealignleft.mhm

    Filesize

    810B

    MD5

    d36f4cd5a75ab04639e77588d1a86964

    SHA1

    73e913044fbca0f3ad6cd671627070b135191291

    SHA256

    9426d9ec6551bebc828de062c66c5f0b4a358f8dfd1712d4ac27779c556d0405

    SHA512

    a200fbc13bc845db7910e0af55b65f5bf93a1202e5d1e0cdcdf2efc3b05adf5346f0101e79576bd3aaf1e7885325a6f5bfdb0f515d3d355b802fb15357f0c560

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\powerpnt\powerpntarrangealignright.mhm

    Filesize

    810B

    MD5

    5faf37ae0638fe35d97acaf84e661e56

    SHA1

    00ca521912805e6aa9e5e2ff85e899569dfc3671

    SHA256

    e9ce0c894e711a90d1bf4a8a00c2b76bb2a63a1291c5302c16fc52e82ccecdb8

    SHA512

    4fbe56db11f8e387321d2d23d154883e90bdf874a2545e9ec9d65093288390d8eeb5358d47c746e8f80ec029a48deb907493ddd51d0ea71b0a4a72814ef38911

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\powerpnt\powerpntarrangebringtofront.mhm

    Filesize

    653B

    MD5

    ca34481863f4bdf9affa0a249128e11f

    SHA1

    8579fcb0f06402981861d455a7885c610933858c

    SHA256

    0fbfb5b85a00a68ad6ea486b0b107a052a8acc39eaf12eb9fc82892cb8bccc36

    SHA512

    d7f474f05e1d718ae6107e6c907d00039aa993688242d6cc1b3bf6f77169d4cf772fddcc46cd94e046318b7b37d225cbe75e28803454d809b2941c17cd653b06

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\powerpnt\powerpntarrangesendtoback.mhm

    Filesize

    653B

    MD5

    8714865fe841b0e5edfebe1a2685e52b

    SHA1

    f8c4cd950b83aa22539e6d2aaa06c4bc21c440db

    SHA256

    52c7c2a8d84e746e833ea63ae63363b8d8c074a070dc494ff484cfcd1a4e4630

    SHA512

    a1ddd8dc73792439ced6f23887da0880f998045a8c0493c8051a39186c71f8a266aeefc96a09dc23ca633ff7930fa69c0c7a0ad23e846b75c5e9b00e53a0aac4

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\visio\visiobringtofront.mhm

    Filesize

    810B

    MD5

    5aef2738f79db18f8ee4d713d7eda2d4

    SHA1

    12b6cc5aa0fdc2c89afeadeb0a3f6bbc42305e36

    SHA256

    81d26e3d73e666b374da77b8165f10bceb8cb7291aa88cdfd2abeb057bb74324

    SHA512

    725ba2b5c6ac83a7e72b1ce8e2ebae61864c2f739f31d13c55924f159d1841944e95caf3664e6127de4624219862feaacac246902afa9f79a520b1e3052a74cf

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\visio\visiogroup.mhm

    Filesize

    496B

    MD5

    8a15a9717c57a0d91dd721447cfa577c

    SHA1

    e67255e3231d9730ff4c62832477829752dab035

    SHA256

    ca3abb2ee5875eb4a819c264d3764147d2b7946cac0ad47a1f5e8b398dae6c35

    SHA512

    76e77779469bb12c6dcebbd1bff0b091d91beaef7d826e97ce34bd1793aece07859c5d17ef8d9ffaad3bd00a34d320b200b02b33da49468bbf8f52d4556fe733

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\visio\visiopointertool.mhm

    Filesize

    496B

    MD5

    7f171f01794e626652f3f8ef77f9a96b

    SHA1

    2a037e1bf4a0ecbdd679205ff655f4a9f056f42c

    SHA256

    1f1ed5c886501e4437b99314d581090da76d7c9be84d5efe2817c1449a4a10e8

    SHA512

    78899a9b0ffd8c7d434495d90f638828dcf5cdba282bfce28c26a9cd8805c79f00db7eae09d43c4ad33b4fec7877f27748c411d89cad2fe03dc8bc8ae83ae318

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\visio\visiosendtoback.mhm

    Filesize

    810B

    MD5

    9daf59486aa5ac4b2091f8c71ad46ffd

    SHA1

    890e099e56dcae81d55b4416407c347246bf996c

    SHA256

    69c1a590c55d9fbd9aef42b4cb84b55f8c13dd656e2d99fd93e053fb8785e4e7

    SHA512

    a275a7aecb73c7859f6f5c4053aad24213995cbf28ff32c49a87291a0d2360e8b9e267c4531673caae6dea1737f0609eeb9b1a62dfa4e6db7ea55ec6db7de9d1

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\visio\visioungroup.mhm

    Filesize

    496B

    MD5

    d09747ffbe428ac97c83ea4bf431a5e7

    SHA1

    727d9a5c4504a70261417a5db74a23da2971ebf3

    SHA256

    ccd4eb8befef9f378f76e35d2b32fc8c414afa84180b7f0d1f212fd7c9694800

    SHA512

    4571be94db4e06858892e8cbe5470ddb1ef2e9dc5967263b44ab7aa9791e3f2abe8e879f5e3993c68634143f9ef13ee03165599f9889a066f1a4a3e20f69549f

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\winproj\winprojcomplete100.mhm

    Filesize

    651B

    MD5

    6802bdcc4cf05fad727c50c4e698b886

    SHA1

    c3afdab36e252563f7ca73cd8db9097d70cf1817

    SHA256

    2aad76ad0dda2f344d0d769df840f9ca2360c445f7937af85c4a3d1761ccc818

    SHA512

    31a93c6f0846d988c26f55a10f4432e61ba1f6011eb7d1df082d84cdd5f05ac71ee6f9b9c6e7f30344fafd82b23103be09c5b2ee29d3a7af01d7e6e4b9726eaf

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\winproj\winprojcomplete50.mhm

    Filesize

    651B

    MD5

    94d1afe53bc237f80e90589dfe16ee07

    SHA1

    9bce81d6725158e0db6be13f7584de19042d1906

    SHA256

    a3d7951c723ee361868d31f5b26285b9283d0b0acd9e88fa4f1549cb54f55784

    SHA512

    ae619c75a59d16423816b58c4b14310eb842f661236bf90d69231f796a37ed1e331bd0df461ca8dce67ed4fb0abd74adbc6365749f3b3973e99fec636ae92a61

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\winproj\winprojindenttask.mhm

    Filesize

    496B

    MD5

    fed787d5e0e1a07dd51ed696a0fe203c

    SHA1

    d2c892790f29c6ab450be2460a810ad5f178d435

    SHA256

    3475d6fb3d9371c18974f5d7a4a0d35a1194d290751947cf9d516fa726516c4b

    SHA512

    4dadce7c4e06aabb0ba43eab31581319e14cc575b424310b890588d4eeba177fb05de6913454b76eaa2f461c027bd51bfc0f47093dc811a22279bb14297569b7

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\winproj\winprojlinktheselectedtasks.mhm

    Filesize

    496B

    MD5

    0a7287278ad91424beb10a390fe71772

    SHA1

    1f231be64924714364ba8487c43bf4ea02c99159

    SHA256

    e9cfa614d943909b91f56a46a75dcbbad9c08091d95d05555f0c25a1d5ae83d4

    SHA512

    6db34aad8678037aace1829f690a1ca72ae111aa1f8585fd845e667ccb5bdaf3b0e96ca401573efe2b85a7ad5afc425018fa258430a0e9b7936eb9f204ea94a3

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\winproj\winprojoutdenttask.mhm

    Filesize

    496B

    MD5

    e3a10b9f7180383a5ae4868f74632aec

    SHA1

    53c72a32e7ab0a48a2cfd70aa90813ab668629db

    SHA256

    0f1477ebb8d21fada5d00e61061f65d1531b9f251b5119cd8ede98d9e7901fe2

    SHA512

    b960764faeae9dd0515a7d73d5f083d13ef4507f9d498bab732bffaefdf407b1b4079f6c58fd1890962eca2622503ed07103a24c275b91c453266ace441a368e

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\winword\winwordnextchange.mhm

    Filesize

    496B

    MD5

    5ad9e44f412d0d80b9f7e036807d10d4

    SHA1

    5b844f261a2eaacc365e9093c4a9e31a767ca4f9

    SHA256

    56fcf8fffb3246527a3434e93ce49f12986dc92b2d0d43fecc3457f094141967

    SHA512

    882671d4db28dd41a7dbf3ad2c864d2184b20fe7d1c149d4c934692a4b6de0080d299ae2fe88ee78b27c2c6aa961ab6d68fe34050a1adc2bdfa5427905524a87

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\winword\winwordpastekeepsourceformat.mhm

    Filesize

    653B

    MD5

    5aee1e3c5f955c09e94549854598df1d

    SHA1

    f4e3964523821de5187498664ebd7f1d4ab3a9bc

    SHA256

    396b532427e1896ee0456c1acd9e1781534339c1804f5b52a818f4a3deb22831

    SHA512

    8527bd1cca909b94dabb6e39a3e01248b7ab2b675d2bdd035d76b4c3a3eaaf33bb81f3cadea315f872e488b341b4ced56b494dbdf5dfb199e746a2139e9f96be

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\winword\winwordpastekeeptextonly.mhm

    Filesize

    653B

    MD5

    33e3cc83ec541c7958506e96be406f72

    SHA1

    adf8741c027bbb5b93acb2f368c66639b0dd0edf

    SHA256

    e93b338ad0889f5f6ea4faea9191ac68683efbb126fb19856efe1e9e8349f03b

    SHA512

    500f284d5592140175f8e5c4db35afa60c39f19d076201e47b733cd97819360099304486ce9ad3ab714e768d3e602cf773a41a4a038caab0a97ffa04772ea6f6

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\winword\winwordpastemergeformatting.mhm

    Filesize

    653B

    MD5

    b7d1a350f084395ec47774877df1b256

    SHA1

    5826ff0a26ddb6c745b99412a21eda1080b9248f

    SHA256

    d7ba810e4e531b907f9f1faaa6e7bfe6bbce18e0faed9ac462f893ec8dcaf15e

    SHA512

    68aa9a219d3ec2ab5256be06abf470bb0128e7172e88636c74c91eec3514a0250b7179a89aa2d544ca8616381f64074c50829fcf899fcea17292c4aa4f28f171

  • C:\99cdd830368396d4af37\mousekeyboardcenter\setup64\files\macros\2052\winword\winwordpreviouschange.mhm

    Filesize

    496B

    MD5

    0e4e49eb7839417225dc54d8f933941f

    SHA1

    e8979c027cc935930278b2fe904c647f2c436a6f

    SHA256

    0ba0e60344f36892018851b6582251e0a5dfd261a99c188c8adf9921fbba5f19

    SHA512

    fe651e3ef4dce0fdf39853a149ced5b3bc93b74732c726353d8b1d123456cc681f0cadf7ad5708062c9225f8c457efbfb589767c2a7b21c9476dd83d5b9bfb22

  • C:\99cdd830368396d4af37\setup.exe

    Filesize

    2.8MB

    MD5

    850e47338b1c21115e188933556702c3

    SHA1

    9cc56b890e78db7f473e08819372bb178f0e5e68

    SHA256

    a3d8b83edcf4d7eacc51cce46e8d4e18444c76d73d69cab4ef88f07f23ded22f

    SHA512

    d3cee39b67e5924d66d1c89ebe5d4a5f8b558ffe837754ae343794c62e42d8d8fcd6a1a36f4dbecb1066bb96acb920d577e4ae70b51b747a5a96c139e8c6dcdc

  • \99cdd830368396d4af37\mousekeyboardcenter\setup64\files\1033\setupres.dll

    Filesize

    1.7MB

    MD5

    e16fc196a27cf7b6cd22ec8822ea0a1b

    SHA1

    523bef96e38d6640cbb6aebec2036b4b06b87477

    SHA256

    0cb1534c07635c4098d7b080021cdc585328ae5a04a4ecc9f2df68adfba2f81d

    SHA512

    e345061f16c17f23593e97cefec6aeda216336f50dd5c35769aa66f2e4bf00ce2dba4b68e016aa662f216b09ca37695a0e98db097ed95948c48d3a1b27716cbe

  • \99cdd830368396d4af37\setup.exe

    Filesize

    2.8MB

    MD5

    850e47338b1c21115e188933556702c3

    SHA1

    9cc56b890e78db7f473e08819372bb178f0e5e68

    SHA256

    a3d8b83edcf4d7eacc51cce46e8d4e18444c76d73d69cab4ef88f07f23ded22f

    SHA512

    d3cee39b67e5924d66d1c89ebe5d4a5f8b558ffe837754ae343794c62e42d8d8fcd6a1a36f4dbecb1066bb96acb920d577e4ae70b51b747a5a96c139e8c6dcdc

  • \99cdd830368396d4af37\setup.exe

    Filesize

    2.8MB

    MD5

    850e47338b1c21115e188933556702c3

    SHA1

    9cc56b890e78db7f473e08819372bb178f0e5e68

    SHA256

    a3d8b83edcf4d7eacc51cce46e8d4e18444c76d73d69cab4ef88f07f23ded22f

    SHA512

    d3cee39b67e5924d66d1c89ebe5d4a5f8b558ffe837754ae343794c62e42d8d8fcd6a1a36f4dbecb1066bb96acb920d577e4ae70b51b747a5a96c139e8c6dcdc

  • \??\c:\99cdd830368396d4af37\MouseKeyboardCenter\Setup64\Files\1033\Eng.rtf

    Filesize

    14KB

    MD5

    2d342c0f2b28c2ea8281972f0be26184

    SHA1

    4affb3dcbee656d8b612ee69f3f46827535fe37d

    SHA256

    049f71c1689f3092409e0ab325bb0c045dcc0595ea785eb9f9fdd09dd000b6ff

    SHA512

    a501c8dc6907b0068c473446bbe59c9be233cf65e6d12aa157d67b975e12ac681c9b96e2d7cb6b754c5d291b2eeee88734e44a77230248e3705bef23aa25ea4e

  • \??\c:\99cdd830368396d4af37\MouseKeyboardCenter\Setup64\Files\1033\setupres.dll

    Filesize

    1.7MB

    MD5

    e16fc196a27cf7b6cd22ec8822ea0a1b

    SHA1

    523bef96e38d6640cbb6aebec2036b4b06b87477

    SHA256

    0cb1534c07635c4098d7b080021cdc585328ae5a04a4ecc9f2df68adfba2f81d

    SHA512

    e345061f16c17f23593e97cefec6aeda216336f50dd5c35769aa66f2e4bf00ce2dba4b68e016aa662f216b09ca37695a0e98db097ed95948c48d3a1b27716cbe

  • \??\c:\99cdd830368396d4af37\lang.ini

    Filesize

    23B

    MD5

    37eb4d739414162ab9b2dc924b9f88da

    SHA1

    64cac5f7b74914f3de6bf5e06ff03c267c087ad4

    SHA256

    ebb498ec3498be69ffce90a25ba3b67af4d518347b7e28181c7f97905101c6c5

    SHA512

    1d859870defe1b231948a5484df6758c1d02a5624cae51f63b55e7c8a7d64249e398b37f943dd3d2526491cb105c147fdb000bf37ca901629585b3173ee104a9

  • \??\c:\99cdd830368396d4af37\setup.exe

    Filesize

    2.8MB

    MD5

    850e47338b1c21115e188933556702c3

    SHA1

    9cc56b890e78db7f473e08819372bb178f0e5e68

    SHA256

    a3d8b83edcf4d7eacc51cce46e8d4e18444c76d73d69cab4ef88f07f23ded22f

    SHA512

    d3cee39b67e5924d66d1c89ebe5d4a5f8b558ffe837754ae343794c62e42d8d8fcd6a1a36f4dbecb1066bb96acb920d577e4ae70b51b747a5a96c139e8c6dcdc

  • memory/2440-889-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB