General

  • Target

    f7755f48e847.7z

  • Size

    9.4MB

  • MD5

    be6907af318553290ea8ea4b59e4e4c6

  • SHA1

    763c0238ac7c4e2a2892e72d0446d375ca6a0690

  • SHA256

    7c581adeb017c5047f4fe7330860ba081936469afc24413390091a127a18eb52

  • SHA512

    fdba925b39feb5827d9b1c4906fbb6517b714eeb9d4a3dd02673dfb8b6ac3a0e4d4724be557eb285f61bc1f310e6605baee385484eeac8e1254e0832025fbf32

  • SSDEEP

    196608:cbo8+dAAj0lTRnGEo/pNo6SX4g4+3zSN0Md5zfCcLr:c1Wn0lTsJ0dIb+/MdJfCcf

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • f7755f48e847.7z
    .7z
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/155.5563.621.mifest
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/2008351634a1d.urma
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/RTCOM64/iso2win.vlcl
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/RTCOM64/isodata.vlcl
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/RTCOM64/question.vmsg
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/RTCOM64/zh-CN.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/RTCOM64/zh-TW.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/1.bat
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/A
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/APKwait.bat
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/APXhttp.dll
    .dll windows:6 windows x86 arch:x86

    7f63d85b2e576f8e68a2d78d2ba24512


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/APXmodule-2.0.dll
    .dll windows:6 windows x86 arch:x86

    066106b4c4d4352dea7a3117de4fd1b5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Agent
    .exe windows:5 windows x86 arch:x86

    d8fc1a3614d526e7111f36ddb837bb41


    Headers

    Imports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/B
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Browser_1
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/DataTransform.ini
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Haloonoroff.exe
    .exe windows:4 windows x86 arch:x86

    60897a2e76a56fd8f1c6d52e76b01fda


    Code Sign

    Headers

    Imports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/CIM_ResourceAllocationSettingData.xsd
    .xml
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/CIM_VirtualSystemSettingData.xsd
    .xml
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/DrawContent/DrawContentNoname.exe
    .exe windows:5 windows x86 arch:x86

    f47ec2fe2c389851e885ba9314ee0b2a


    Code Sign

    Headers

    Imports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/Ico2.exe
    .exe windows:5 windows x86 arch:x86

    673ad2a6779b55e3c98d3eedbb538a66


    Code Sign

    Headers

    Imports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/LICENSE.3rd
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/LICENSE.libcodecs
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/LICENSE.libdt
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/Microsoft.VC80.ATL.manifest
    .xml
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/Microsoft.VC80.CRT.manifest
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/common.xsd
    .xml
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/hi.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/hr.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/hu.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/lco.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/li.dat
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/livehis.dat
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/package.json
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/rpi.dat
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/slist.dat
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/version
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/HoursBroker/xml.xsd
    .xml
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Lnnloader.exe
    .exe windows:4 windows x86 arch:x86

    1e1abe87215c90d7e07888b82973f23f


    Code Sign

    Headers

    Imports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Lost
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/LostHe
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/LostP
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/LostPHe
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/LostPShe
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/LostShe
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Mellogdoc
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Microsoft_VC90_CRT_manifest
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/N0vaDesktop.exe
    .exe windows:6 windows x86 arch:x86

    50744a0a61693b7f1394d0365708fbe2


    Code Sign

    Headers

    Imports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/NULL.bin
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/NVIDIA_GeForce_Experience_json
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/OTGContainer.exe
    .exe windows:6 windows x86 arch:x86

    50744a0a61693b7f1394d0365708fbe2


    Code Sign

    Headers

    Imports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Optimizat/plugins/Microsoft.VC80.ATL.manifest
    .xml
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Optimizat/plugins/Microsoft.VC80.CRT.manifest
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Optimizat/plugins/am.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Optimizat/plugins/ar.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Optimizat/plugins/bg.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Optimizat/plugins/vd.ico
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Optimizat/plugins/version
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Optimizat/themes/ca.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Optimizat/themes/cs.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Optimizat/themes/da.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Optimizat/themes/isolinux.bin
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Optimizat/themes/ovf-vmware.xsd
    .xml
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Optimizat/themes/ovfenv-vmware.xsd
    .xml
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Optimizat/themes/sample.flp
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Optimizat/vmPerfmon.h
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/PSpendZ.exe
    .exe windows:5 windows x86 arch:x86

    6e9a261f58f47d82fb85893416a0d9b3


    Code Sign

    Headers

    Imports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Ptuity.plx
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/SearchRun.exe
    .exe windows:6 windows x86 arch:x86

    50744a0a61693b7f1394d0365708fbe2


    Code Sign

    Headers

    Imports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/SysP1.bat
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/SysP2.bat
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/TDPCONTROL.dll
    .dll windows:4 windows x86 arch:x86

    fae8c8848fd62ec2f0c7b399d2599335


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/TDPINFO.dll
    .dll windows:4 windows x86 arch:x86

    1675840b660a646313d567cceefa9762


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/TDPSTAT.dll
    .dll windows:4 windows x86 arch:x86

    603b3a6e9efef705928f6caa985c4101


    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/TP.ini
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/TPClnVM.dll
    .dll windows:6 windows x86 arch:x86

    9c6f328f2cb781ece4da7a0d2c0597cc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/UPSDK.dll
    .dll windows:4 windows x86 arch:x86

    55bf9a5229a3edbfcc0416da74373cca


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/VNL.ini
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/WGLogin.olg
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/Win.rbg
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/XLGameUpdate.exe
    .exe windows:5 windows x86 arch:x86

    673ad2a6779b55e3c98d3eedbb538a66


    Code Sign

    Headers

    Imports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/XLGameUpdate2.exe
    .exe windows:6 windows x64 arch:x64

    5c4ec437df075608fc3185c1bf61d9de


    Code Sign

    Headers

    Imports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/cbg.sig
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/cdm.sig
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/cefvidf.dll
    .dll windows:6 windows x86 arch:x86

    b520cd39d145ad4ff4abccf146d6c397


    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/contribscr.ini
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/cor.sig
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/intchar32
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/intchar64
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/intl.dll
    .dll windows:6 windows x86 arch:x86

    0d5036fd971e20d4cb7ffe6bc5540c58


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    b7c0ca2c7eadf6e169e6d987180f93a8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/libcurl.dll
    .dll windows:4 windows x86 arch:x86

    d998ac89bfbbbdcc0f1d517c56821da6


    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/libexpat.dll
    .dll windows:6 windows x86 arch:x86

    0adc7e407d62fb1c1af3d4310d2d8a1e


    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/libtemp.bat
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/msvcp100.dll
    .dll windows:5 windows x64 arch:x64

    9a218d1ec03f40eca74839863a511cb7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/msvcp110.dll
    .dll windows:6 windows x64 arch:x64

    ac5237467f598a9a5b370a14eccc4dc8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/msvcp120.dll
    .dll windows:6 windows x64 arch:x64

    d0a59246eab41d54812cd63c2326e1f1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/msvcp140.dll
    .dll windows:6 windows x86 arch:x86

    6dbd7763e94344402d4206b7bab40e1f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    d698236340cc3612125f06edd4fce39a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/msvcp140_2.dll
    .dll windows:6 windows x64 arch:x64

    d282d9d2cfed48778a26b1216142615f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/msvcr110.dll
    .dll windows:6 windows x64 arch:x64

    2d8550b19d324144e95b49aae32a0dca


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/msvcr120.dll
    .dll windows:6 windows x64 arch:x64

    8f18e22935ef8b336e246ee763fbec97


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/plugins/Microsoft.VC80.ATL.manifest
    .xml
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/plugins/Microsoft.VC80.CRT.manifest
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/plugins/RunHours/es-419.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/plugins/RunHours/es.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/plugins/RunHours/et.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/plugins/RunHours/fa.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/plugins/de.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/plugins/el.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/plugins/en-GB.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/plugins/en-US.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/plugins/version
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/qvlnk.bro
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/rar.exe
    .exe windows:5 windows x86 arch:x86

    85996a3c955c1cdb00ed9e4698bbe557


    Code Sign

    Headers

    Imports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/settingss
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/settingss2
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/somextrainfo.ini
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/station.bin
    .dll windows:6 windows x86 arch:x86

    144166113ab4a5e253b0d586d0c21c38


    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    6a84b7445ccacd5d29ac27de2745f356


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    ae0bde6314fa2027b54ce04898f6ab69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/version/AARV1
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/version/AARV2
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/version/AuLibV1
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/version/AuLibV2
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/version/CharMainoV1
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/version/CharMainoV2
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/version/CjLibV1
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/version/CjLibV2
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/version/ComeOn
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/version/QdLibV1
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/version/QdLibV2
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/version/Shell
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/version/WinCall
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/version/globalV1
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/version/globalV2
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/version/qvlnkbroV1
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/version/qvlnkbroV2
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/version/settingV1
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/version/settingV2
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/vmauthd.dll
    .dll windows:6 windows x86 arch:x86

    63232ad55dfff77477034ee948581832


    Code Sign

    Headers

    Imports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/Run/vnetlib32
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/plugins/ms.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/plugins/nb.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/plugins/run_upgrader.sh
    .sh linux
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/plugins/scrnsave/5G4C4g5a.ROM
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/plugins/scrnsave/AHCI.ROM
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/plugins/scrnsave/gos.vmsg
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/plugins/scrnsave/host.vmsg
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/plugins/vmnetUserif.sys
    .sys windows:10 windows x64 arch:x64

    32ac3357add9a76de708a1785e370328


    Headers

    Imports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/plugins/vmnetuserif.cat
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/rtmpal/action.vmsg
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/rtmpal/cluster.vmsg
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/rtmpal/ovftool-warning.vmsg
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/rtmpal/stask.vmsg
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/rtmpal/th.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/ALGinfo/rtmpal/tr.pak
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/LICENSE
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/extensions.on
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/lang.conf
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/launcher.qm
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/manifest.json
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/prelo.pb
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/vk_.json
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/wdscore/Microsoft.VC80.ATL.manifest
    .xml
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/wdscore/Microsoft.VC80.CRT.manifest
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/wdscore/attributes.kuip
    .xml
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/wdscore/common.kuip
    .xml
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/wdscore/ipaip2.exe
    .exe windows:4 windows x86 arch:x86

    34ccdad5d2edaac0c9254bfe123410b8


    Code Sign

    Headers

    Imports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/wdscore/livehis.dat
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/wdscore/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/wdscore/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/AMPPL/wdscore/slist.dat
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/P2psvcBlack/lang.conf
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/P2psvcBlack/launcher.qm
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/P2psvcBlack/version
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/PulgPlay/setup.cfg
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/PulgPlay/version
  • f7755f48e847/RoamingLocalLows/WPerceptionsimulation/PulgPlay/wpptb2_kso.cfg