493e63fee6fd8194364582a65762fdede3a7445a52d01b96d940576c8233c76c

Analysis

max time kernel
110s
max time network
118s
platform
windows11-21h2_x64
resource
win11-20240221-en
resource tags

arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
submitted
23-02-2024 11:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

os2go_4.0_portable.exe
Size

37.6MB
MD5

bc8ae4e80987bb2ca6206a47378ee612
SHA1

baa38f1a9623c1f9923550ab6da73b21213c9246
SHA256

493e63fee6fd8194364582a65762fdede3a7445a52d01b96d940576c8233c76c
SHA512

1bb969b3493c671c3d4c9173ac72193a54453825e4856d366df9ce6d1a069093a8b4dabb1004b4561ccaa1894cd1e7a5d1313fcc381b2460c981816ef86a1c87
SSDEEP

786432:5Y/aJxSd95G4OWHrpNl+8nRiRE26K/gznUDLy2GTh2RomsO0u:qaJ4FuWLpN1Rl26pzSLy2G92DsOv

Score

8^/10

Malware Config

Signatures

Drops file in Drivers directory 4 IoCs

description	ioc	Process
File created	C:\Windows\system32\drivers\EUEDKOTG.sys	DrvSetup.exe
File opened for modification	C:\Windows\system32\drivers\EUEDKOTG.sys	DrvSetup.exe
File created	C:\Windows\system32\drivers\EUDCPOTG.sys	DrvSetup.exe
File created	C:\Windows\system32\drivers\.sys	DrvSetup.exe

Drops file in System32 directory 5 IoCs

description	ioc	Process
File opened for modification	C:\Windows\System32\GroupPolicy	EaseUS OS2Go.exe
File opened for modification	C:\Windows\SysWOW64\GroupPolicy\gpt.ini	EaseUS OS2Go.exe
File created	C:\Windows\System32\GroupPolicy\Machine\Registry.pol	EaseUS OS2Go.exe
File opened for modification	C:\Windows\System32\GroupPolicy\GPT.INI	EaseUS OS2Go.exe
File opened for modification	C:\Windows\System32\GroupPolicy\Machine\Registry.pol	EaseUS OS2Go.exe

Executes dropped EXE 12 IoCs

pid	Process
1884	DrvSetup.exe
3012	InfoForSetup.exe
2884	SetupUE.exe
2804	InfoForSetup.exe
4700	InfoForSetup.exe
3688	AliyunWrapExe.Exe
4688	EaseUS OS2Go.exe
2716	EuDownload.exe
2376	EuDownload.exe
4228	EuDownload.exe
2564	EuDownload.exe
1584	EuDownload.exe

Loads dropped DLL 64 IoCs

pid	Process
2036	os2go_4.0_portable.exe
2036	os2go_4.0_portable.exe
2036	os2go_4.0_portable.exe
3012	InfoForSetup.exe
2036	os2go_4.0_portable.exe
2804	InfoForSetup.exe
4700	InfoForSetup.exe
3688	AliyunWrapExe.Exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000	vds.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	vds.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000	vds.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\FriendlyName	vds.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
4688	EaseUS OS2Go.exe

Suspicious behavior: EnumeratesProcesses 28 IoCs

pid	Process
2716	EuDownload.exe
2716	EuDownload.exe
2376	EuDownload.exe
2376	EuDownload.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4688	EaseUS OS2Go.exe
4228	EuDownload.exe
4228	EuDownload.exe
2564	EuDownload.exe
2564	EuDownload.exe
1584	EuDownload.exe
1584	EuDownload.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4688	EaseUS OS2Go.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid	Process
1884	DrvSetup.exe
676	Process not Found

Suspicious use of AdjustPrivilegeToken 49 IoCs

description	pid	Process
Token: SeLoadDriverPrivilege	1884	DrvSetup.exe
Token: SeIncreaseQuotaPrivilege	3652	wmic.exe
Token: SeSecurityPrivilege	3652	wmic.exe
Token: SeTakeOwnershipPrivilege	3652	wmic.exe
Token: SeLoadDriverPrivilege	3652	wmic.exe
Token: SeSystemProfilePrivilege	3652	wmic.exe
Token: SeSystemtimePrivilege	3652	wmic.exe
Token: SeProfSingleProcessPrivilege	3652	wmic.exe
Token: SeIncBasePriorityPrivilege	3652	wmic.exe
Token: SeCreatePagefilePrivilege	3652	wmic.exe
Token: SeBackupPrivilege	3652	wmic.exe
Token: SeRestorePrivilege	3652	wmic.exe
Token: SeShutdownPrivilege	3652	wmic.exe
Token: SeDebugPrivilege	3652	wmic.exe
Token: SeSystemEnvironmentPrivilege	3652	wmic.exe
Token: SeRemoteShutdownPrivilege	3652	wmic.exe
Token: SeUndockPrivilege	3652	wmic.exe
Token: SeManageVolumePrivilege	3652	wmic.exe
Token: 33	3652	wmic.exe
Token: 34	3652	wmic.exe
Token: 35	3652	wmic.exe
Token: 36	3652	wmic.exe
Token: SeIncreaseQuotaPrivilege	3652	wmic.exe
Token: SeSecurityPrivilege	3652	wmic.exe
Token: SeTakeOwnershipPrivilege	3652	wmic.exe
Token: SeLoadDriverPrivilege	3652	wmic.exe
Token: SeSystemProfilePrivilege	3652	wmic.exe
Token: SeSystemtimePrivilege	3652	wmic.exe
Token: SeProfSingleProcessPrivilege	3652	wmic.exe
Token: SeIncBasePriorityPrivilege	3652	wmic.exe
Token: SeCreatePagefilePrivilege	3652	wmic.exe
Token: SeBackupPrivilege	3652	wmic.exe
Token: SeRestorePrivilege	3652	wmic.exe
Token: SeShutdownPrivilege	3652	wmic.exe
Token: SeDebugPrivilege	3652	wmic.exe
Token: SeSystemEnvironmentPrivilege	3652	wmic.exe
Token: SeRemoteShutdownPrivilege	3652	wmic.exe
Token: SeUndockPrivilege	3652	wmic.exe
Token: SeManageVolumePrivilege	3652	wmic.exe
Token: 33	3652	wmic.exe
Token: 34	3652	wmic.exe
Token: 35	3652	wmic.exe
Token: 36	3652	wmic.exe
Token: SeDebugPrivilege	4688	EaseUS OS2Go.exe
Token: SeBackupPrivilege	4688	EaseUS OS2Go.exe
Token: SeRestorePrivilege	4688	EaseUS OS2Go.exe
Token: SeSecurityPrivilege	4688	EaseUS OS2Go.exe
Token: SeTakeOwnershipPrivilege	4688	EaseUS OS2Go.exe
Token: SeDebugPrivilege	4688	EaseUS OS2Go.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4688	EaseUS OS2Go.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 2036 wrote to memory of 1884	2036	os2go_4.0_portable.exe	77
PID 2036 wrote to memory of 1884	2036	os2go_4.0_portable.exe	77
PID 2036 wrote to memory of 3012	2036	os2go_4.0_portable.exe	78
PID 2036 wrote to memory of 3012	2036	os2go_4.0_portable.exe	78
PID 2036 wrote to memory of 3012	2036	os2go_4.0_portable.exe	78
PID 2036 wrote to memory of 2884	2036	os2go_4.0_portable.exe	79
PID 2036 wrote to memory of 2884	2036	os2go_4.0_portable.exe	79
PID 2036 wrote to memory of 2884	2036	os2go_4.0_portable.exe	79
PID 2884 wrote to memory of 2804	2884	SetupUE.exe	80
PID 2884 wrote to memory of 2804	2884	SetupUE.exe	80
PID 2884 wrote to memory of 2804	2884	SetupUE.exe	80
PID 2884 wrote to memory of 3652	2884	SetupUE.exe	81
PID 2884 wrote to memory of 3652	2884	SetupUE.exe	81
PID 2884 wrote to memory of 3652	2884	SetupUE.exe	81
PID 2884 wrote to memory of 4700	2884	SetupUE.exe	84
PID 2884 wrote to memory of 4700	2884	SetupUE.exe	84
PID 2884 wrote to memory of 4700	2884	SetupUE.exe	84
PID 4700 wrote to memory of 3688	4700	InfoForSetup.exe	85
PID 4700 wrote to memory of 3688	4700	InfoForSetup.exe	85
PID 4700 wrote to memory of 3688	4700	InfoForSetup.exe	85
PID 2036 wrote to memory of 4688	2036	os2go_4.0_portable.exe	86
PID 2036 wrote to memory of 4688	2036	os2go_4.0_portable.exe	86
PID 2036 wrote to memory of 4688	2036	os2go_4.0_portable.exe	86
PID 4688 wrote to memory of 2716	4688	EaseUS OS2Go.exe	87
PID 4688 wrote to memory of 2716	4688	EaseUS OS2Go.exe	87
PID 4688 wrote to memory of 2716	4688	EaseUS OS2Go.exe	87
PID 4688 wrote to memory of 2376	4688	EaseUS OS2Go.exe	90
PID 4688 wrote to memory of 2376	4688	EaseUS OS2Go.exe	90
PID 4688 wrote to memory of 2376	4688	EaseUS OS2Go.exe	90
PID 4688 wrote to memory of 4228	4688	EaseUS OS2Go.exe	96
PID 4688 wrote to memory of 4228	4688	EaseUS OS2Go.exe	96
PID 4688 wrote to memory of 4228	4688	EaseUS OS2Go.exe	96
PID 4688 wrote to memory of 2564	4688	EaseUS OS2Go.exe	98
PID 4688 wrote to memory of 2564	4688	EaseUS OS2Go.exe	98
PID 4688 wrote to memory of 2564	4688	EaseUS OS2Go.exe	98
PID 4688 wrote to memory of 1584	4688	EaseUS OS2Go.exe	99
PID 4688 wrote to memory of 1584	4688	EaseUS OS2Go.exe	99
PID 4688 wrote to memory of 1584	4688	EaseUS OS2Go.exe	99

C:\Users\Admin\AppData\Local\Temp\os2go_4.0_portable.exe
"C:\Users\Admin\AppData\Local\Temp\os2go_4.0_portable.exe"
1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2036
- C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\x64\DrvSetup.exe
  "C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\x64\DrvSetup.exe" "C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\drv\win10x64" -install
  2⤵
  - Drops file in Drivers directory
  - Executes dropped EXE
  - Suspicious behavior: LoadsDriver
  - Suspicious use of AdjustPrivilegeToken
  PID:1884
- C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\InfoForSetup.exe
  "C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\InfoForSetup.exe" /AutoUid
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3012
- C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\SetupUE.exe
  "C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\SetupUE.exe" /Disable "{\"Language\":\"English\",\"Version\":\"OS2Go_Portable\",\"Version_Num\":\"4.0\" ,\"UE\":\"Off\"}"
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:2884
- - C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\InfoForSetup.exe
    "C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\InfoForSetup.exe" /Disable
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:2804
- - C:\Windows\SysWOW64\Wbem\wmic.exe
    wmic os get caption
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3652
- - C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\InfoForSetup.exe
    "C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\InfoForSetup.exe" /SendInfo "Window" "Install" "Activity" "Info_Userinfo" "Attribute" "{\"Language\":\"English\",\"Version\":\"OS2Go_Portable\",\"Version_Num\":\"4.0\" ,\"UE\":\"Off\",\"Country\":\"United States\",\"Timezone\":\"GMT-00:00\",\"OS\":\"Microsoft Windows 11 Pro 64-bit (10.0.22000.1.256)\"}"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious use of WriteProcessMemory
    PID:4700
  - - C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\AliyunWrapExe.Exe
      C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\AliyunWrapExe.Exe
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:3688
- C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\EaseUS OS2Go.exe
  "C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\EaseUS OS2Go.exe"
  2⤵
  - Drops file in System32 directory
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: AddClipboardFormatListener
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4688
- - C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\EuDownload.exe
    "C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\EuDownload.exe" https://update.easeus.com/update/os2go/innerbuy/os2go_3_5.ini "C:\Users\Admin\AppData\Local\Temp\euphtupdate.ini" 0 "" 1 1980
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    PID:2716
- - C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\EuDownload.exe
    "C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\EuDownload.exe" https://update.easeus.com/popup/product/os2go/os2go.ini "C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\..\res\os2go_tmp.ini" 0 "" 1 2340
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    PID:2376
- - C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\EuDownload.exe
    "C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\EuDownload.exe" https://update.easeus.com/popup/product/os2go/exit/en.png "C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\..\res\picture_os2go_tmp.png" 0 "" 1 2736
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    PID:4228
- - C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\EuDownload.exe
    "C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\EuDownload.exe" https://update.easeus.com/update/os2go/innerbuy/innerbuy_new.zip "C:\Users\Admin\AppData\Local\Temp\updateconfig.zip" 0 "" 1 3004
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    PID:2564
- - C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\EuDownload.exe
    "C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\EuDownload.exe" https://update.easeus.com/update/os2go/innerbuy/InnerBuy_demo.ini "C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\InnerBuy\res\InnerBuyConfig.ini" 0 "" 1 2884
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    PID:1584

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -s WPDBusEnum
1⤵
PID:396

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s fhsvc
1⤵
PID:3592

C:\Windows\System32\vdsldr.exe
C:\Windows\System32\vdsldr.exe -Embedding
1⤵
PID:4484

C:\Windows\System32\vds.exe
C:\Windows\System32\vds.exe
1⤵
- Checks SCSI registry key(s)
PID:4776

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s fhsvc
1⤵
PID:3900

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\SystemAcCrux\9ad448c69b53334ac.bin

Filesize
4KB

MD5
a75dd27b9bdb393d93a787891f73e37f

SHA1
e70e15d1c396c6498e4dbf39eb52b768e5ec8d95

SHA256
576070a436e5be94446e221dec4a4ac0d832366e8912eca4ad375d5f27855485

SHA512
af6e628ff9e940a5d030f388c53422b3cebeb16d5a448944645da4e4f175c9fe17431fab2de51914a48d5339f7cee993a46112663ded000ce1880284934795ea

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsu79A5.tmp\System.dll

Filesize
11KB

MD5
75ed96254fbf894e42058062b4b4f0d1

SHA1
996503f1383b49021eb3427bc28d13b5bbd11977

SHA256
a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7

SHA512
58174896db81d481947b8745dafe3a02c150f3938bb4543256e8cce1145154e016d481df9fe68dac6d48407c62cbe20753320ebd5fe5e84806d07ce78e0eb0c4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsu79A5.tmp\nsExec.dll

Filesize
6KB

MD5
3d366250fcf8b755fce575c75f8c79e4

SHA1
2ebac7df78154738d41aac8e27d7a0e482845c57

SHA256
8bdd996ae4778c6f829e2bcb651c55efc9ec37eeea17d259e013b39528dddbb6

SHA512
67d2d88de625227ccd2cb406b4ac3a215d1770d385c985a44e2285490f49b45f23ce64745b24444e2a0f581335fda02e913b92781043e8dfd287844435ba9094

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\InnerBuy\res\update.ini

Filesize
174B

MD5
7eb40ecc2c0414f34d2051900dad148a

SHA1
5f6c4e8df4750c14c5e40d3f8865acb2ec19a554

SHA256
17226ccf51eba4535f36db341af60b254fffff803285f575bfdd5782ed35670b

SHA512
6a4a59356e48347417a6709a5e1a3a4e89260a1bd87e41613ec5517763ccc9ea91fb9b340430125e2f52cc8dec0d4bc3160f3438d18499df1a42a71ea5d8b4df

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\AliyunConfig.ini

Filesize
1KB

MD5
c687a97be872125d33475170dee98fea

SHA1
369185e3448e73efd8d102a04223dda03f4b2d15

SHA256
617d6667090d8939b294ac313ed6f95866f19198a122c5d5b7e65cbc93a5e7b3

SHA512
35803c4904ceb9212dc803799bf212b4a37802ac1e0e233070e196e5f9b13d8f78bf55ed1d7551ee06f0ada8837333f71b2e0a4c60e3bf53af18aec30061e8ff

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\AliyunConfig.ini

Filesize
1KB

MD5
d975aa72a8c418e11a629d78507e534b

SHA1
3dc10600ef6d5e9fe00915bbf7e9c190e318fc7b

SHA256
ea4bf9235aa448193795f2f288eb149ed08650d2ac1d35d4973a86dcf60fc7c3

SHA512
8bbba2e1d6b0d7c32990445833fae7e01b7bb45d0037002c042973f9b1bc39bb697a8b4e4072f901bcd2e84cb990ba54fd0c4e67e970c30a55377053b95ee1d3

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\AliyunWrap.DLL

Filesize
501KB

MD5
29dc95cd3d51a320dc14e05e86dac565

SHA1
059befcf81b8d64174e325d459cfd23f11e3f0ac

SHA256
92e6e064265f773a9b06f9850767bdd0f18261128c7c74a962880068e5ffea66

SHA512
226614afc66cd689dd4bd8aff69cba5636a49dc360a9bfc6c33f6c5131487cfc4b13ed86e9b2532752da17080fb74f4c1d362b6908ac341b5d09b943c2bb7bf3

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\AliyunWrapExe.exe

Filesize
122KB

MD5
3db47cc3c2b22d579b8d9444a037bfdf

SHA1
49e25bb3d0fcf3d26d0b99e583b97e0567a8215d

SHA256
6e11551768b0181b64cf871ec36e68a21afeabd5df61fc07fbfe582ba177eeee

SHA512
a1c31d1a80c1d0724df79ee06dafc24204c6e4c057b49d222a7723ba80d6615bc991c82241343caea00bda9ae4ec2af8db2a684d854a78fbec0cbef7dd5ca253

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\BuyNow.dll

Filesize
75KB

MD5
b4d1232c0670e1c47b3baa910e9b64df

SHA1
874d0d824d949e211477ebc933a5ce6b698f6769

SHA256
9e895375bd9d70d98adf12640ea998ae032fbcd2c6955ec3b5d8288d14b52165

SHA512
e58c55c6fb4a36f0019782dcf6afbcc8859c174396c1f77d8158ac676ca98456445f76553286459b69f0b77fe08cdd37200c6326aa7aef8ff63269f8b80eb0d0

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\BuyNow.dll

Filesize
64KB

MD5
bf639cebc713079d5583300d4162411d

SHA1
4805cbb94531be5c5f39941cdec3a650f96af589

SHA256
922d1ecd650f63c7eab6d67e9bb28d1afd264056246d937a4318e159542ab5e6

SHA512
a38c128157eafa6385d2d7f0166db317e85c47b8855df9124c85e313b60340b295cdf127f3780954ba83e57af57863f72996bb9bc40664a71278fdb0f8cf9aa3

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\CodeLog.dll

Filesize
114KB

MD5
c785e75788fb0beb59bd9672d9bbb13c

SHA1
7a9fda45cea06bb64086fc26c5ee41c400bf130b

SHA256
1c0db88c9d44c828747086812327a21529f69895b201787bb672549efd731594

SHA512
66b459701d7c8152eacde0368d984a43a8913ec5c4e13531162e453987e62de532b6844bfe02dcaadc0e99028ae14f5558d04de274140ea229f19dbeed06dc5c

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\CodeLog.dll

Filesize
79KB

MD5
0ae0bd4a11c382a3c7c39663fd3b1e0f

SHA1
e8cea5ee6a115fe9467adc5b31b69b0eaccd00d7

SHA256
a4fc1662cb97ea5ce583e1ce6791f8967cf7e9bc5bd06e721ab6b31df4210a28

SHA512
655754eb9d17709ef28c69eb2298ea5a323b16ec944ff9f300e98f35635f1e73c00acd61b22e823e8346bea4a4e14a4e556565835b4d79a27d8bbd4acc33874a

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\CompressFile.dll

Filesize
26KB

MD5
b88752ef9c6eb211e2affc27b7fbbfff

SHA1
d2d45f977d75b5d0afe0ea8938f7ab081f40a80d

SHA256
fae20b11bec104a36c1b0fc013eb2a1025278d10db55bd93658bf119d2e4f9af

SHA512
00ccd082ad87841f61aebc3154d0c016b91b9462839e382199212d1023d388ba23161ca80b7ea9db312b710e5b9834ba0db5139083d5ae7ca995c4aa78a432f7

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\DataFile.ini

Filesize
702B

MD5
5fd348fad61f32220579fb35b913a35c

SHA1
48fb9fc153a3b122885af1f8bc2f72458a142255

SHA256
259f079baf094c3d85977c9c7f5f715f9b8e93d0f233941e8b86a6889f2e53f3

SHA512
6528da118b2d621fc9b104c4e4f1b565da59b55d2482ed5504d04b6a3a6edd3dce5238e163ebb7aee79b201fc5066d4bf6e8a9b88cb8478fceebb4b2f01c939c

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\DataFile.ini

Filesize
452B

MD5
022566363553cc5f74185e0189a6b35b

SHA1
8b9933c0adcad7b3453368adec7c1dfb91ef3d88

SHA256
4c64c9a79d7fe577beb7caa9b9b5cda5dbfb9c291eeb4fadfe7064a811805eae

SHA512
b52c9f604d51894e11639ec4b7540c7e015721447d4a38411905baccb6a229f972325329a682080ae54912457c27a47404ce2ca740f8995d34cc93d7a49beb24

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\DataFile.ini

Filesize
88B

MD5
7f411750d07619f38537e7fd612b8b44

SHA1
cda241a1ce5141288582c8f0ac4850992b427bdc

SHA256
ae89726af2bd0c0218fbf63af20d4464f44dced5156364d817b6e73afc8e9f87

SHA512
35dad46325060004a66e01e10af6a3ebfd94b6751347b6ec64840c4ec03d81480fc324494ea39dded03bf2f1a1ce352b15ab518d14214c15567af17fb32f16b8

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\DataFile.ini

Filesize
784B

MD5
bd7b96074a12e8e5341eb22cf42e93d9

SHA1
59fe07ba5f1ff344104d4e46e6e0621b6fba449c

SHA256
56f68ae367e55803eba1610e36a8c791b24cc3cd19730e5a95ba396b29e7849b

SHA512
7df694407ba87d6844e30044004ac16a6f5e3ec128d040eef5dfd20739a898f16618c6debd0592c16d13b877fc8a76f0e4e0301f4124c12e29124e7a2f8f4249

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\DataFile.ini

Filesize
784B

MD5
e7360a4e4a7f0857f4e3a0293b956fdf

SHA1
308e6d65505a722f8d3e8d28c0eaedeaa4fc1e0f

SHA256
75f791915b89441b72f9e3845798db2ac1e22e04a08010bac8b6fd94779520ec

SHA512
c1273277eaccb02d2e3ae60104470e5bcf82d223c1491d716f19848d38550bb19a9343b3adf8dd762463123619430197f3e98a5d5aee9727e3c1b243795e65dd

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\DataFile.ini

Filesize
1KB

MD5
1990c77a8b024c8864a561c7e89c9c68

SHA1
6d0729c4aaf8f0757a301d8e07feebadb71e3ed2

SHA256
0ec75524e10f5d61df4d4de888b90480112b0cec382f24e6ace2a13d4d8d33e2

SHA512
21b2ae452f839f317ab29a079e7a4377d23c7893df885b291789fc238f3767faff4cb6916bc709641d7dd0fb2adbd266e628488022cd46eb6568023bdf364b65

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\DataFile.ini

Filesize
1KB

MD5
f9c78cb8f2b63ea92b45ea1994489949

SHA1
3090b8d4f2fd6eda38794d5d6ba6cf1ca3334f9b

SHA256
9f69f5f57921003ed8eb2c75dc7df56272893b8b1e5c06b7357ff9206de62092

SHA512
a349fd57c8612add470f732781ce290fe0c9906a2346100d837108eb4d31ca6b4b65829a0e4abde49401d2a42610b15fd2cf8e0dad2a4e26af0f80f9d210e1d6

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\DriversPack\sas\xp-x86\symmpi.tag

Filesize
3B

MD5
bc949ea893a9384070c31f083ccefd26

SHA1
cbb8391cb65c20e2c05a2f29211e55c49939c3db

SHA256
6bdf66b5bf2a44e658bea2ee86695ab150a06e600bf67cd5cce245ad54962c61

SHA512
e4288e71070485637ec5825f510a7daa7e75ef6c71a1b755f51e1b0f2e58e5066837f58408ea74d75db42c49372c6027d433a869904fc5efaf4876dfcfde1287

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\EaseUS OS2Go.exe

Filesize
1.1MB

MD5
23af89ede55f713889830e593921803e

SHA1
4564a0fd77829913f3072d275698da54f17bf8f8

SHA256
5ce670731d3516baa80378efc7c16b0d88c2068479bc784d13a7e61f8c5de200

SHA512
ddcf5f2a3bdc352205b516ca54a45b15bcdf7b372f09ff795ea61db96429f569afed76c61d491ad17ddebaa8ec623d13789d57a438467e187c28c01aac35205e

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\EaseUS OS2Go.exe

Filesize
441KB

MD5
0ae148d20d2df0c1611cf8439023689e

SHA1
f7effec721ef251f84bf1730668cc30aa6c62b08

SHA256
9e3b6f80871ab90f71e426f4eac96d387784aa2d4af585ea87913971c05ec74e

SHA512
1c78aa0208d166647b151c5f7b3580b4bb4c47fbb55b2e3c1388574dfd1a7bca10a40b533b6b5755f6fbc9e75ca1831e4790eb661e3876899124630c6d593791

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\EuDownload.dll

Filesize
1.3MB

MD5
66027415186e0e2780e37b34fc3dc28e

SHA1
2317c0005f325125aab2822be33268277cb64982

SHA256
8f3dc359ed60c47d0c39b8668ddfd05a48c7ac86e03bf5d4afafb43488188d27

SHA512
f460c629aa8c252848d00e16396251af925f06566267508308dce53c8b157a4a63988951da3273ac9f101c27d6dc0678456fa419432916367607860d9fa82afd

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\EuDownload.exe

Filesize
1KB

MD5
d2289d35e190a6c3bdc00c967b8c7f14

SHA1
1f62570fb5451f1acd08ec6e0a60d84981d503c7

SHA256
ce3eb3ac60880987a9e7023927b24b288ef44dee67028a681ec429c3570275db

SHA512
bc15287455c2c1a00850554e1c5d921d69f25728652c609259653ed3ef985cc9df154183635c94f3a94bc3c3026afe9a5ea95803194380d844c69a96f010dea8

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\InfoForSetup.exe

Filesize
70KB

MD5
e24e407a696b1914eaade2851d4050ed

SHA1
f2e5f830b65ad6824dbda2a614780d3764a8b135

SHA256
af150ff8a5e6a6cd2148d639c15cda15cc554eaa603592773e763b9609ae0ca4

SHA512
9cf3412ea331588d7ecc515afcb4e6b42a465761dc892dbdfc177fdeae6714b3b27fcf826b4aa5c4f56b35f6b1a2682cea9ea4854a6ad697356181c5cf096165

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\MSVCP120.dll

Filesize
254KB

MD5
287be8ade9f3de38f30e41e7a48ce332

SHA1
19ea58afb48e63655928c9e7a5669c8f1ae041f1

SHA256
4c393f309992e9802a809c1d26063e86b620eef3f145056067f39431e4ae02b4

SHA512
14dfb3c04ee2a420220170e58a30c53d5f89122b9250a5f6c17791a3f599d6d9ecb957bdd4ae2f3963b96dff91b27c3382f64c90c05e18f98c5990f3cce6bf23

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\OSConfig.ini

Filesize
202KB

MD5
f33d377440ef93831889d3286812bec4

SHA1
68ac2cdc5455d068553f43136319bc3fb159f28c

SHA256
e8f8457d705e051222049f0a77c854176cdb685f72ce5ff8e832eeb18cab9c38

SHA512
5d9702523ff0713e4bfbf7a38f9c3ec821009093a7ce04c9391a3e1bf1e5b7f304714078ab13d8174a833cc2d294de86a2b88c14c3f070ed9f6ae91d75de0ee6

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\Qt5Core.dll

Filesize
440KB

MD5
a964926b105e6e49a23aadd5fb8c7dd5

SHA1
940cbefcd514b7fe744a88a4af0c1f7942352406

SHA256
ae9de25a39f8b38ba10d6b2636baa22f81f4668bef889593f6e34f67918c9865

SHA512
a190781b6c5cf5e30ac843b3381f4d109d97848fb9632b9b68aaa974e6f68b74b0dbf1e3ba8a82b9813cf179ef6e1ed1d1d32dda2e38048c672734454f8538e8

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\Qt5Core.dll

Filesize
4.5MB

MD5
30a6f0d262058b61f589f35d8438ad93

SHA1
7d31a7ca516ea15e0b3cf20065298ab0565a2a7b

SHA256
ed318a230664cc229f26a41f731bb94f630a8d8ea197b1163db3b9404652ab64

SHA512
f591389ff126f04b3d5b3a57452333401486f23357dfb90338e03eb8650b147f542860733850308a9bb812fdc620089e433dd4cde297f940380a8e5bde4d5d13

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\Qt5Gui.dll

Filesize
4.8MB

MD5
6c57dabf657c0a8c0c9967a20a3b407f

SHA1
047c1c7668ea2a397babfe573570791e922150db

SHA256
ff9dcf8ec666c048a483ff57a41bfcacce8044b93455604b4448e58ecb853a80

SHA512
09617dcdd71e6d06521fb98780322ce1b7dda1d0828bf2c4f4eb04a586daa5b09aa9d6f1f15cb9161f961eb0dc94c9d94f9388988a568be10353c4368cdec169

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\Qt5Widgets.dll

Filesize
4.3MB

MD5
e07cea82429fc3664d8dab1514f1a74f

SHA1
d0ac228f48b843e43b0481e8fed9f4630e700adc

SHA256
c9516c2eaa8074b718ec30fd70b5705ed7360a6773e56a7c0965440a92593898

SHA512
5426b874dfd7f9dc2a0451bdc3a98cb7a82356e12d31ffafffc92592032e2da164e2d1f4f189db9862d4ff3947581101f45e4c2483284fb31d97bd4a51929b91

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\Qt5Widgets.dll

Filesize
389KB

MD5
9a328ac2c8221d3be34276563c7245dd

SHA1
70ec0adbd6c63c4616e7d4ff4b7b1d57c0a46b56

SHA256
e420f00d01081322fffb7dd09c740939f22bb2ffde6ae7cc9dd9a89204f2ec8d

SHA512
c7a75a2e59bda1b9b22be8d66bf16eb507ada0bb6e9bc08d170c8f3884795c84265db5868c41890be8a14fc2b8574552b5d665491ff7d6ad44ec0053f7e1934c

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\Qt5WinExtras.dll

Filesize
224KB

MD5
2b532522918b9e365239229f93d7eea4

SHA1
3d03f0d2af8164ce6bc6ec51b14ebe42de11d3f2

SHA256
5b7d74d11e98b9d3181791ac0ea33f8fa51049c54d32da50614b430a0528558f

SHA512
3d90df5a3e826a47c4560e9c0ffcf4a889b2c467a75913b81ad1466890d7f3d538dfcfd6260c1e161bb21a78bff314e4ba8f17be61be943625b8d94d5c845c34

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\QtLib.dll

Filesize
1.1MB

MD5
4a95c494e73cb7bf881004de36c0d05c

SHA1
d91ce648e530d9942403ee0ba5b5cb935a96c57e

SHA256
2928adf0bf1f4df9fda144b09d14272d9c64c607add9936aee661d685e9d9938

SHA512
29cc6f635c5bb61bc67ca43e55ca20afd37dbdf4cbc5f3850020be9187566813f0787300318af052b6a7da157efd94f1f0955b7e1fc6e176e4a0fc9de6b5f6b8

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\QtLib.dll

Filesize
245KB

MD5
17ba60180b0440368f5cf14feb8eae78

SHA1
dafb37b601dd4ab5896ea1b7a90e248b9682d850

SHA256
c02750bdfcbf161ca49b597949f60b268b081e1659578e09afb3fe3ac6e42a68

SHA512
f0a02fdf9746254c1fdc5804d85194fcd8dc9be286a385bde31c6c19299a635f9d1e6de888c0830739c3b938cc1cf571f32df32ee788401bfa898bb7c577217d

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\Schedule\EuNetAuth.ini

Filesize
62B

MD5
83cfbb2818914f930a340ddee67b3acf

SHA1
17bb3f1f621799114e1583e41eb78321a13b03f6

SHA256
023a821c76090911a2a616791c7f155211a0901804302caf4d7d217b2c579876

SHA512
8b8bb7a2bba5b8b03162c3dc7c1e5a6e7cce4a09e3c0026a3309415f27156a8c66417394ba6eadcffe42637770067a6e7834237eef27daf339d56a1223360680

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\SetupUE.exe

Filesize
155KB

MD5
ccb8cce4ee5eb6dd1f0b3013326090f5

SHA1
fe9571be7242d4922a3e2752eb923452a69b1279

SHA256
5495487e7543faa1b56cc88e9d0ccda1f6fd776ec578cb3f0af398b16722fdd4

SHA512
084a4724ea99e1cbf332a8cec2374b2247ac1501186ac48886770ef10f058af8164ab9cde17a4bc49b0a5a76a4764addd1e1e0e3a7334d5ee70eb04afed05367

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\TBGetRemoteNetInfo.dll.manifest

Filesize
616B

MD5
f45fedfcce4a78fd25ea62ce9c2f089f

SHA1
ff2f255a5a9342f3b494b96bad04f3687623f0a7

SHA256
355f202ffd0106f6af1810742223cd92f96a63f0e4867d963152cb52b171653b

SHA512
01740f858ac78561f447710f00590f160e9faee7e7ac085ff4ccdda0ac9a0147bad8c810f52ae78cad13b8dc81f6fd2869121beb3acb3bbc04a48861bbfb59a3

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\TbConfig.ini

Filesize
57B

MD5
f1e8e80c8b444c4f0f22042fbb79d066

SHA1
4d1c61bca3c69ab89a643a666569d0a11ed3bf7a

SHA256
42cebbe65b51ebe599bd15b2315014336ff686935bf501ad5f0704c4d4fadb4a

SHA512
8c2999886cef1554fec1709807e26352c721fbe67b591c0f53c026e9d729afee8b666d57e3940703c95cf5aea88d93a47860e07543e01a9c7405d65dc240821a

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\TbConfig_OS2GO.xml

Filesize
6KB

MD5
4d0bb19cfe9e4104ad635705ac108023

SHA1
0099107daba0719501859d0ff9c5f08e06bf6098

SHA256
c265e0545a178c327efd49ef7c928e3142a19c07bd487ce896d46b294388c7f8

SHA512
8b14ca00cc8f603babe7c8c05fb04d6ce54fb51fb42b8d7f861fac5ca2c071f9d7449193d868f764e3ba1fe4cd3eeef6588a07f5898b7ee836f234ae4e8bb6c5

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\UIConfigAdd.ini

Filesize
144B

MD5
cbd07f71da5034d3a8421613c75a6f80

SHA1
dd281ba2e1688e6de028728074faee55b9cc933f

SHA256
4943f1060e5244bfe8ae1f7b34dae5ff808ea13a26949f488d72316a58dc1293

SHA512
e0d8fbd1d3b6ac3f0b0dde6025c556bd2d969070d10b366776575d04db7f9015e7716fbce2fe71fdb516552bce8a33e6788579617565f0a71a2fca86a26e9b02

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\UIManager.dll

Filesize
475KB

MD5
c48cba1d56cf0e4fa2e0231993f44aef

SHA1
5bb5e5a72461633fb3ac5e2902ae3bb1acba7830

SHA256
f3e62a282d82e792ff12c0b13d5b9d61bc3964ce66aeb8e916236b5cf444fce6

SHA512
f104991aec08ec4da55f4038c10efd43db2792372dd46038eacaa9c1dde4efaf51317ae4ecdbf419375276b6e8ed344afe7168b46fb5fae97d30ae9ffd33cfa3

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\UIManager.dll

Filesize
31KB

MD5
232181558896ae88d931a541de0eebe3

SHA1
f846f0886773622df5abc04d52c90001398e89a5

SHA256
566b243b6a47325e34f6c11f6331abdc11512ce19e2fdda16ee4d85d0ec661d3

SHA512
5083c8993f1ccddb18462ec3e323ee395456e31fb67c3175687e740dc618d47c9f654a605cacd0ddb25211690ae441ccd18f747cbd4f62b238e76397c4396770

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\UpdateInfo.dll

Filesize
109KB

MD5
50e94febe465b806f6af708f9d0bb894

SHA1
fe194c1bb16cdd2f31f6c7740bef434b36cc44f6

SHA256
eaa9cd802b2cf3b54eb1ee4b79f9ceb6968847291c798fe2fd23a660b7d7579b

SHA512
ab0aa2aa4d1e72d488a07b8f8b9cc39036f8511be1264c378289bd27f2e63c3c9bdbe52d4459c9bb404cbe3e8eac23b3a1bcdb9299b53f435931581abc723345

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\UpdateInfo.dll

Filesize
14KB

MD5
6b6f1d4fbb81ab01b1f6088a360dbd2b

SHA1
533d7adbd7eec4d031c9bcb78b5feed2bdf47967

SHA256
dc84244afdba717283fdbced66049b2333db86c4b3fd974573b797e3ca6804f4

SHA512
988914fe5321a7adb4aa9e5554f34cb533233274cbdfd550b7336d3199f9f4186b7cb4c72d4095ee68eed830f014575ce578949f225a1be8c0708a7907934481

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\default.ini

Filesize
2B

MD5
81051bcc2cf1bedf378224b0a93e2877

SHA1
ba8ab5a0280b953aa97435ff8946cbcbb2755a27

SHA256
7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6

SHA512
1b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\msvcp120.dll

Filesize
444KB

MD5
fd5cabbe52272bd76007b68186ebaf00

SHA1
efd1e306c1092c17f6944cc6bf9a1bfad4d14613

SHA256
87c42ca155473e4e71857d03497c8cbc28fa8ff7f2c8d72e8a1f39b71078f608

SHA512
1563c8257d85274267089cd4aeac0884a2a300ff17f84bdb64d567300543aa9cd57101d8408d0077b01a600ddf2e804f7890902c2590af103d2c53ff03d9e4a5

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\msvcr120.dll

Filesize
948KB

MD5
034ccadc1c073e4216e9466b720f9849

SHA1
f19e9d8317161edc7d3e963cc0fc46bd5e4a55a1

SHA256
86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f

SHA512
5f11ef92d936669ee834a5cef5c7d0e7703bf05d03dc4f09b9dcfe048d7d5adfaab6a9c7f42e8080a5e9aad44a35f39f3940d5cca20623d9cafe373c635570f7

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\tempInfo.web

Filesize
1B

MD5
cfcd208495d565ef66e7dff9f98764da

SHA1
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c

SHA256
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

SHA512
31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\x64\DrvSetup.exe

Filesize
205KB

MD5
d90c338c7f6a88ba65f57966963f39cb

SHA1
9dde0ebe0900ceb52793810cd186014ea53392f1

SHA256
2adfe4555b2ff0419a7d674368563e3206983cc8dfc484a49a16a46be4f2a6b8

SHA512
b0128146bdf4f76b80d727da15dbb5ecd9f4e1d68a9b24f54f99daf1f3a5ffe2e2f9ecdf1918fd54ed1ef6c958a8c419868a28a7635d173dc2370e70b823569c

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\bin\x64\EUClone.ini

Filesize
252B

MD5
86bbf1a23411e4d85f06b763ca8970cd

SHA1
9b1d811ddda20b376c62abaaab4799d8ddc3295c

SHA256
e41f30cfd260048da104370eaf2baeff6d694c158412d568268da8d001b93116

SHA512
422025e9171dba8b0de4faa7be43c2c578160140dba248b3f9dcdf744362117344b52cc19fc4470898f2ff169e1f1c1c76bb538ffafbe2cd391811ef268278c5

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\drv\win10x64\EUDCPOTG.sys

Filesize
76KB

MD5
49397ec24117ec97ef0893d1a3374cfc

SHA1
bce054c2c1ecdc35c6d747cc10c8ab74c0e12734

SHA256
0bce9a8df31e057916221f3c2b032e3db03b5bb777a1abe872b27ec29ab9b4b3

SHA512
87ec90a1b06afbbc0837e3b591e6ae91cde66c9c29e6c5408954e6716788fc62cff923d6ee6bea33919f5572b519dcd5b58a8b525f651ba4f0c26efe85eeae3f

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\drv\win10x64\EUEDKOTG.sys

Filesize
24KB

MD5
e05979b4b20dddae1823d77c3a692bd8

SHA1
3a8daefd4070307b79010a9f072f31fef83a2eb0

SHA256
49d2b78ff48262ccd5d4639fceab2e4e064eaa53081e9d0ff20133358ba6fa35

SHA512
cc2230d48b1e839414b19fa3b909a0fef3d41ced98b4992545842d10d677fdc358fe452a51bc6b440a7c10836e6ec50ddc4c791b28dab9152b18ba3bd08c6565

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\multi\res_ja_JP\res\TBEMLib.ini

Filesize
141KB

MD5
4322324d6eb55f00009638cc4d42ca17

SHA1
872b8d18bb0dc5a2677523f33e9804a5e6261d0e

SHA256
540b79940b56ddd157bc8bcd077b57665d27ad454566281d5f57cec6da28391c

SHA512
b2428e658e2140efc9fa0adb1bb836a0b180aa11fe9399f87edc3cc2fca1790388ed0757c8e5eacb9d12c528141d731b5ea76c43f891509b93556b37cd742a40

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\res\UIConfig.ini

Filesize
1KB

MD5
6a73513c8b277e9c5a62db30e6383b7d

SHA1
6213ad8615006d33d8022dccc8fc0d0c871ffb7a

SHA256
22eecf3f10010d817c29f5712aa41a7f3697fc98c11e26ad2fc1b3655ac5d948

SHA512
7115020ccf3d024cfc299a11d4db2315800274a4447bbe3f1295be0e54acfd68b030c24d73750bd2907fe680728288db38a78f8a7e9eb9185acc10f268acd2ce

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\res\language.ini

Filesize
156KB

MD5
5650e9aedc5d750611bf8a357c38f4f0

SHA1
407fae9247b4656690dedfe5b90824ed01762c7f

SHA256
e43d5860a3871a24d28eb8ef94b4ba9064b938e704ed719b3eb962e759de8fd6

SHA512
50797797401c69296c662aa0c9a7d8ec5d7d65c2491edef69e39c1ecf91e7873a7de2ea0b3620b7f231a5c2b748c4dc7ca2a2c97d8f125fa719e98241f66a6b7

Download Submit
C:\Users\Admin\AppData\Roaming\EaseUSOS2Go4.0\os2go\res\urls.ini

Filesize
6KB

MD5
0bd5a1fb0f4c0073eaff57331b051447

SHA1
42c6ea30990f87c0aa5195b2738e1b80d34780db

SHA256
446c014f5ebb2065d955aeedf29aea455f067820b2114038aa1f623b19145284

SHA512
7bd20f1458fba0f79be7681cb18af77e0a2b0c0b30b03a69e2b85114563a517a95da9eabe1c07d67f349376a1fad07e8a5ba5504a835bca4860765c4209744d6

Download Submit
memory/4688-980-0x0000000005E10000-0x0000000005F1F000-memory.dmp

Filesize
1.1MB

Download
memory/4688-989-0x0000000005370000-0x000000000538A000-memory.dmp

Filesize
104KB

Download
memory/4688-968-0x0000000004B60000-0x0000000004B72000-memory.dmp

Filesize
72KB

Download
memory/4688-1213-0x0000000063500000-0x0000000063643000-memory.dmp

Filesize
1.3MB

Download