General

  • Target

    audit_util.zip

  • Size

    11.0MB

  • MD5

    f8d60f7358513eff73a4453d81a36b70

  • SHA1

    b1622630201a2ea8acdf143b10dd64e1aa72d316

  • SHA256

    caa48a7e81c50ceced24a23e224b91c2384975644b98e7661ce0da43e0fae8e6

  • SHA512

    fa586294696660c0f1b6411c2ab1a0f96dbd8b9d03730413020081c86398a0ebd677d11a05dcf88ccedb499af1cddc3d3f2303b485d65b6a89cb3f7b8a412bbe

  • SSDEEP

    196608:WqEm6OCgEcIp/xUBd8VYK5N5DmEtlw7p+LGCld1Ae4i5jaLHARg/AJzbKVwVimoJ:mOCgCp56O59tlYYGCX6vi5jaygqPimoJ

Score
1/10

Malware Config

Signatures

Files

  • audit_util.zip
    .zip
  • Afterimage.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • AuditInstaller.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • Authentication.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Autofac.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BIOSiQUtils.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Common.Logging.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Common.Logging.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • CryptoUtils.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • CustomAudit.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • CustomAudit.exe.config
    .xml
  • DdmErase.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Dell.Pla.P1.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Dell.Pla.P1.MessageClient.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • EraseWrapper.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • EraseWrapperUtils.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Google.ProtocolBuffers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • LaunchAudit.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • MainOSProfile.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ManagedWMI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.ComponentStudio.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.ComponentStudio.ComponentPlatformInterface.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.ComponentStudio.Serializer.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Dism.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.ServiceBus.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Wim.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NFluent.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NTCore.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NativeWrapper.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Newtonsoft.Json.Bson.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • OEM/OEMinfo.reg
  • OEM/Tools/BIOSIntf.dll
    .dll windows:6 windows x64 arch:x64

    1db0a9834055f5a2784b9318d61a216b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OEM/Tools/HAPI/HAPIInstall.bat
  • OEM/Tools/HAPI/HAPIUninstall.bat
  • OEM/Tools/HAPI/dcdbas32.cat
  • OEM/Tools/HAPI/dcdbas32.inf
  • OEM/Tools/HAPI/dcdbas32.sys
    .sys windows:10 windows x86 arch:x86

    92e40d874ae3fd91c547f00523484c43


    Code Sign

    Headers

    Imports

    Sections

  • OEM/Tools/HAPI/dcdbas64.cat
  • OEM/Tools/HAPI/dcdbas64.inf
  • OEM/Tools/HAPI/dcdbas64.sys
    .sys windows:10 windows x64 arch:x64

    5556075e0c9b9cf90b8ef7ec64e6774f


    Code Sign

    Headers

    Imports

    Sections

  • OEM/Tools/HAPI/dcdipm64.sys
  • OEM/Tools/HAPI/dchapi32.dll
    .dll windows:5 windows x86 arch:x86

    028e06c8f8cf77f9991ee31c836b9bef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OEM/Tools/HAPI/dchapi64.dll
    .dll windows:5 windows x64 arch:x64

    69772cc110ba8ba0aa25f9826ce314f2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OEM/Tools/HAPI/dchbas32.dll
    .dll windows:5 windows x86 arch:x86

    4e6166c432c3581f1a8874696a2e0662


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OEM/Tools/HAPI/dchbas64.dll
    .dll windows:5 windows x64 arch:x64

    300488221b6aae02242bfb95e81ab75a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OEM/Tools/HAPI/dchcfg32.exe
    .exe windows:5 windows x86 arch:x86

    cd15701af9faabafd6cddfb5a5313b14


    Code Sign

    Headers

    Imports

    Sections

  • OEM/Tools/HAPI/dchcfg64.exe
    .exe windows:5 windows x64 arch:x64

    8f66670831632e8c0e295e659a1189de


    Code Sign

    Headers

    Imports

    Sections

  • OEM/Tools/HAPI/dchcfl32.dll
    .dll windows:5 windows x86 arch:x86

    cf543936227eec29994a47f45d59883f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OEM/Tools/HAPI/dchcfl64.dll
    .dll windows:5 windows x64 arch:x64

    5bde117dbce18f17b976d7a355f13f08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OEM/Tools/HAPI/dchesm32.dll
    .dll windows:5 windows x86 arch:x86

    e96d2e901199cfd962e421a17b6233bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OEM/Tools/HAPI/dchipm32.dll
    .dll windows:5 windows x86 arch:x86

    cd72df5c275b05329d3d68a1de5bf985


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OEM/Tools/HAPI/dchipm64.dll
    .dll windows:5 windows x64 arch:x64

    23ff4c3c7edd5805735441fbcf24e6e5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OEM/Tools/HAPI/dchtst32.exe
    .exe windows:5 windows x86 arch:x86

    f4d007849a456f1242f9673e6dd10702


    Code Sign

    Headers

    Imports

    Sections

  • OEM/Tools/HAPI/dchtst64.exe
    .exe windows:5 windows x64 arch:x64

    a49fdceecb89ec25665dc38d513c928b


    Code Sign

    Headers

    Imports

    Sections

  • OEM/Tools/HAPI/dchtvm32.dll
    .dll windows:5 windows x86 arch:x86

    5b74fabdd2c90effca87bb14af18056f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OEM/Tools/HAPI/dciwds32.exe
    .exe windows:5 windows x86 arch:x86

    253328ec2513e553f80fd3e755858ce1


    Code Sign

    Headers

    Imports

    Sections

  • OEM/Tools/HAPI/dcmdev32.exe
    .exe windows:5 windows x86 arch:x86

    7a77108fb804fa8282a4351ffab18cc9


    Code Sign

    Headers

    Imports

    Sections

  • OEM/Tools/HAPI/dcmdev64.exe
    .exe windows:5 windows x64 arch:x64

    2ffb90aa4abad0fc6fe001b7adc2332d


    Code Sign

    Headers

    Imports

    Sections

  • OEM/Tools/HAPI/dcwipm32.dll
    .dll windows:5 windows x86 arch:x86

    351ea26a5a3f4f6317b8d98e7ec91457


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OEM/Tools/HAPI/hapint.exe
    .exe windows:5 windows x64 arch:x64

    23198b1ebb75040a273bc35f6eeda0d3


    Code Sign

    Headers

    Imports

    Sections

  • OEM/Tools/HAPI/hapint64.exe
    .exe windows:5 windows x64 arch:x64

    23198b1ebb75040a273bc35f6eeda0d3


    Code Sign

    Headers

    Imports

    Sections

  • OEM/Tools/HAPI/omsacntl.exe
    .exe windows:5 windows x64 arch:x64

    c4c7c807a75e5c68b6d056e2c2e06b37


    Code Sign

    Headers

    Imports

    Sections

  • OEM/Tools/cctk.exe
    .exe windows:6 windows x64 arch:x64

    759e10493c329e9cea90e4932af8fb83


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OEM/Tools/dchapi64.dll
    .dll windows:5 windows x64 arch:x64

    69772cc110ba8ba0aa25f9826ce314f2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OEM/Tools/dchbas64.dll
    .dll windows:5 windows x64 arch:x64

    300488221b6aae02242bfb95e81ab75a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OEM/Tools/mxml1.dll
    .dll windows:5 windows x64 arch:x64

    63e14894b74f5f5907e2f423d4e2d404


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OEM/Tools/pci.ids
  • OEM/gpsFix.reg
  • OSRIUtils.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • PSTools/Eula.txt
  • PSTools/PsExec64.exe
    .exe windows:5 windows x64 arch:x64

    159d56d406180a332fbc99290f30700e


    Code Sign

    Headers

    Imports

    Sections

  • PSTools/psversion.txt
  • Quartz.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Registry.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SOSDataContract.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Net.Http.Formatting.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SystemHelper.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • TelemetryWrapper.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • USMTUtils.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • UnattendUtils.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xceed.Compression.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xceed.FileSystem.Windows.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xceed.FileSystem.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xceed.Zip.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ar/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • cs/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • da/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • de/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • diskmgmt.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • el/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • en/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • es/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • fi/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • fr/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • he/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • hu/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • it/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ja-JP/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ko/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • log.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • mailbox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • nb/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • nl/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • no/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • pl/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • platformconfig64.exe
    .exe windows:5 windows x64 arch:x64

    735ad354e58e0134000dfa76675984a5


    Code Sign

    Headers

    Imports

    Sections

  • pt-BR/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • pt-PT/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ro/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ru/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • sk/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • sl/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • soscore.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • sv/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • tr/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • uk/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ur-PK/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • utilities.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • zh-CN/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • zh-HK/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • zh-MO/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • zh-SG/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • zh-TW/CustomAudit.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • zxing.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections