ControlCenter_Ver_22[.]12[.]20[.]01[.]exe

resource
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/$TEMP/KillCloudMatrixBattery.exe
unpack001/$TEMP/KillFusionServer.exe
unpack001/$WINDIR/SysWOW64/acpimof.dll
unpack001/AiBoost.dll
unpack001/Aorus15Keyboard.dll
unpack001/CPUOC.dll
unpack001/ColourSliderLibrary.dll
unpack001/ComHeader.dll
unpack001/CoreAudioApi.dll
unpack001/CoreX11.dll
unpack001/CoreX12.dll
unpack001/CoreX14.dll
unpack001/CoreX18.dll
unpack001/DeepFan.dll
unpack001/EnableSystemProtection.exe
unpack001/FusionKeyboard.dll
unpack001/FusionShortcut.exe
unpack001/FusionStartUp.exe
unpack001/FusionStation.exe
unpack001/GMSG.exe
unpack001/HomeCloud/Comm_BUT.dll
unpack001/HomeCloud/WLogin.exe
unpack001/HomeCloud/Windows_Live.dll
unpack001/InputSimulator.dll
unpack001/Ionic.Zip.dll
unpack001/KillProc_x64.exe
unpack001/KillerSDK_ASDControl.dll
unpack001/MainSkin.dll
unpack001/Microsoft.Expression.Drawing.dll
unpack001/Microsoft.Expression.Interactions.dll
unpack001/NahimicAPI.dll
unpack001/NvFunc.dll
unpack001/OSD/CoreAudioApi.dll
unpack001/OSD/OSDwindow.exe
unpack001/OpenHardwareMonitorLib.dll
unpack001/RecoveryF9.exe
unpack001/SMV4_Service.exe
unpack001/Satellite.exe
unpack001/SetuUpInfDriver64.exe
unpack001/ShowAP.exe
unpack001/SmartDashboard.dll
unpack001/SmartManager.dll
unpack001/SmartUpdate.dll
unpack001/System.Management.Automation.dll
unpack001/UpdateAllRestoreDefault.exe
unpack001/UtilityCenter.exe
unpack001/WPF.FlipView.dll
unpack001/cloudmatrix/Battery/CloudMatrixBattery.exe
unpack001/cloudmatrix/Battery/KillCloudMatrixBattery.exe
unpack001/cloudmatrix/Battery/OpenHardwareMonitorLib.dll
unpack001/cloudmatrix/Battery/ShowCloudMatrixBattery.exe
unpack001/cloudmatrix/Battery/System.Data.SQLite.EF6.dll
unpack001/cloudmatrix/Battery/System.Data.SQLite.Linq.dll
unpack001/cloudmatrix/Battery/System.Data.SQLite.dll
unpack001/cloudmatrix/Battery/System.Windows.Controls.DataVisualization.Toolkit.dll
unpack001/cloudmatrix/Battery/x64/SQLite.Interop.dll
unpack001/cloudmatrix/Battery/x86/SQLite.Interop.dll
unpack001/cloudmatrix/CloudMatrixControlCenter.exe
unpack001/cloudmatrix/Newtonsoft.Json.dll
unpack001/cloudmatrix/OpenHardwareMonitorLib.dll
unpack001/cloudmatrix/System.Net.Http.dll
unpack001/cloudmatrix/UploadCloudMatrix.exe
unpack001/devcon.exe
unpack001/drup_info.dll
unpack001/dtyWork.exe
unpack001/sendWinKey.exe
unpack001/shotcut.dll
unpack001/switchProfile.exe
unpack001/testUsercontrolDll.dll
unpack001/tpfw.exe
unpack001/ubssrv_oc_only.exe
unpack001/urgent.exe
unpack001/wrapDll.dll
unpack001/write64reg.exe

ControlCenter_Ver_22.12.20.01.exe

IMPHASH 56a78d55f3f7af51443e58e0ce2fb5f6
SHA256 a045faf771725a9fdae197d4f6506d2601b84ad3a4f83b9737a2f396b58e53d8
MD5 729d46e3bf9f39e85a308992501b49d6
SHA1 871575724ab6dca8495328bf22981316348fd984
SHA512 ee0b2f75261df7ea116932307fd2e0ad11190ccb4984ee0961e611cf44418ce42b9bbaa231b898984427ab3e481972acb961d40ffc245840979207a47ce0c0e0
SSDEEP 6291456:OueEq1z14NxgRaTQlyXGQMniLVAXuhZvsB0kplGJcDgGC/3EWiS:teEqZagRR4en4dvG0kp8ODgGCfEW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

1d:ff:5c:b2:20:b7:25:e0:70:43:29:e8:02:49:d5:51:7f:14:ab:ea:00:69:1a:50:78:c6:4c:70:19:0c:fe:d0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=22044755,CN=Giga-byte Technology Co.\, Ltd.,O=Giga-byte Technology Co.\, Ltd.,STREET=5F.\, No. 6\, Baoqiang Rd.\, Xindian Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Dec 20, 2022

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=22044755,CN=Giga-byte Technology Co.\, Ltd.,O=Giga-byte Technology Co.\, Ltd.,STREET=5F.\, No. 6\, Baoqiang Rd.\, Xindian Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2e:05:38:4d:4d:e6:d2:d5:3a:06:3c:36

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 6, 2022 - Sep 6, 2025

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Serial Number

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6a

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

4

Entry point

13613

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW CreateFileW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/InstallOptions.dll

IMPHASH 4b45b7e00344a87332fbd12653854d1a
SHA256 c7fef6457989d97fecc0616a69947927da9d8c493f7905dc8475c748f044f3cf
MD5 ece25721125d55aa26cdfe019c871476
SHA1 b87685ae482553823bf95e73e790de48dc0c11ba
SHA512 4e384735d03c943f5eb3396bb3a9cb42c9d8a5479fe2871de5b8bc18db4bbd6e2c5f8fd71b6840512a7249e12a1c63e0e760417e4baa3dc30f51375588410480
SSDEEP 384:EXsC43tPegZ3eBaRwCPOYY7nNYXC06/Yosa:EXJTgZ3eBTCmrnNA5p
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentDirectoryW GlobalUnlock GlobalLock GetModuleHandleW CloseHandle SetEndOfFile SetCurrentDirectoryW GetPrivateProfileStringW GetPrivateProfileIntW MultiByteToWideChar ReadFile GetFileSize CreateFileW lstrcmpiW lstrcatW lstrcpynW WritePrivateProfileStringW lstrlenW lstrcpyW GlobalFree GlobalAlloc WriteFile SetFilePointer

user32

LoadCursorW SetWindowRgn GetDlgCtrlID CloseClipboard DrawFocusRect OpenClipboard DrawTextW SetCursor LoadIconW LoadImageW SetWindowLongW CreateWindowExW MapDialogRect SetWindowPos GetWindowRect CreateDialogParamW GetClientRect ShowWindow GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageW TranslateMessage GetMessageW IsDialogMessageW CallWindowProcW PostMessageW MessageBoxW GetSysColor CharNextW wsprintfW GetWindowTextW SetWindowTextW SendMessageW GetWindowLongW EnableMenuItem PtInRect MapWindowPoints GetClipboardData

gdi32

SetTextColor DeleteObject CombineRgn CreateRectRgn GetDIBits SelectObject CreateCompatibleDC GetObjectW

shell32

SHGetDesktopFolder SHGetPathFromIDListW ShellExecuteW SHBrowseForFolderW

comdlg32

GetOpenFileNameW GetSaveFileNameW CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/nsExec.dll

IMPHASH c1c7505e1e6e929ebb6b9100e55b050a
SHA256 1076ca39c449ed1a968021b76ef31f22a5692dfafeea29460e8d970a63c59906
MD5 675c4948e1efc929edcabfe67148eddd
SHA1 f5bdd2c4329ed2732ecfe3423c3cc482606eb28e
SHA512 61737021f86f54279d0a4e35db0d0808e9a55d89784a31d597f2e4b65b7bbeec99aa6c79d65258259130eeda2e5b2820f4f1247777a3010f2dc53e30c612a683
SSDEEP 96:J9zdzBzMDByZtr/HDQIUIq9m6v6vBckzu9wSBpLEgvElHlernNQaSGYuH2DQ:JykDr/HA5v6G2IElFernNQZGdHW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$TEMP/KillCloudMatrixBattery.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 8d195a2efe71c1c90a518260ba017c62c3cd55c953c884bf4bb8526d80cd0483
MD5 b06b03b1b41d9232da3ca80799202ab0
SHA1 6a043e3502b8d081312e2a96ac4b810ffe423eb5
SHA512 ef357d27d68ae7d91c98997dc622c144831be5b4d5991b0bdf38d4d808001e44e5b9a379c3ddfdd190a82805e19a2a8401e92e5623f86206d614a92aa8c70053
SSDEEP 192:LEgZeH9kq0B5Yz26c+YOXg6Q8stYcFwVc03KY:VUHOYz26/YmLQptYcFwVc03K
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12746

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Battery\WpfAppSqliteBattery\KillCloudMatrixBattery\obj\Release\KillCloudMatrixBattery.pdb

$TEMP/KillFusionServer.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 cdf9515663b9286a16b38507103669a3f60086b35a0b7af538641be8799bec3e
MD5 c12a21df340d3ec6e8c22d273de0ec19
SHA1 ddcbbd1f049f84d3a84156aec6066bd36e1274f6
SHA512 7e82e64aa758599b82a147aaf2351ba4feba654b95fdd87bfbf01dd88555932029578bfcec51eee4f5ceaeadb0861f98fedc5d888ead0277c6d17e6eca3fbae6
SSDEEP 3072:xhvksZEB/8aWi1tgNlPhvYsZEB/8aWi1++:xypB/8aDUqpB/8aDk+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

138878

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Code_Cafe\_Gigabyte_Fusion_438\KillAorusFusionShortcut\CancelFirmwareRecoveryUI\obj\x86\Release\KillFusionServer.pdb

$WINDIR/SysWOW64/acpimof.dll

SHA256 f40cf7ea5dba55de12825df65c3242279153b55fc75327b9361b0811b8757150
MD5 e78bc3c10b4dc5fce0d7ffe48dca8c05
SHA1 fffbaa94e43887efacfbb433c27280decb77986e
SHA512 3053a3a844302b8de8935a7a0f1aac19232dfbc8ece7e112ef08b4c09dcac762afa791fc2a0b846d0b7b32fd8c1017f64f68397a08e9002a6bbc300820be7d53
SSDEEP 384:Zj66MqE12zkNv1bJj1nABJJzzoFpHhO+qGLo:Zj63ZEkNv1lx0JJYHh1X
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\SoftwareCenter\SoftwareCenter\bin\Release\acpimof.pdb

AacHal_x64.dll

IMPHASH 558a0e132f19351abc4feab2e4bf5741
SHA256 48d5a041875af4d4f1f8ac42c3f8af1e3f10b619dd775805dc8f2e02dcf693bc
MD5 0ea2c2b9497b83cd7deb00c65c8c7889
SHA1 50719251f1627d1fd41db7a20c659898c29f9c04
SHA512 2ec35fbaa41cf64bddb964abbeddaa4f3d7aed01ebf7a906f793ac77f86aee027ff18fd92e634fd9ad0a09046e02714fb918ec14ea79432716950e3c18fee61e
SSDEEP 6144:wkB36vyz7vi19BAjg3to3KfW0tKx0eohTX0tb5T:wkB36vK7vi19akI0tKWeoJEj
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:6 windows x64 arch:x64

Digest

18:0f:42:5e:5b:40:b8:55:b2:2d:f8:21:32:28:11:f7:b5:a6:34:2c:07:38:06:f8:88:cf:81:1f:c6:82:28:67

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=16505809,CN=ENE TECHNOLOGY INC.,O=ENE TECHNOLOGY INC.,L=Hsinchu City,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Chains

Oct 21, 2020

SERIALNUMBER=16505809,CN=ENE TECHNOLOGY INC.,O=ENE TECHNOLOGY INC.,L=Hsinchu City,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

SERIALNUMBER=16505809,CN=ENE TECHNOLOGY INC.,O=ENE TECHNOLOGY INC.,L=Hsinchu City,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Serial Number

08:60:cf:73:72:68:c8:da:80:ec:aa:1f:84:5a:3d:21

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 13, 2018 - Jul 28, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

72568

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\LED\HAL_SRC\SAM\_Loki_HAL\loki_1.0.6.0\output\Release\x64\AacHal_x64.pdb

setupapi

SetupDiEnumDeviceInterfaces SetupDiGetClassDevsW SetupDiDestroyDeviceInfoList SetupDiGetDeviceInterfaceDetailW

kernel32

CloseHandle CreateMutexW CreateFileW GetModuleFileNameW GetConsoleCP OutputDebugStringW WideCharToMultiByte MultiByteToWideChar FlushFileBuffers HeapSize WriteConsoleW RtlLookupFunctionEntry WriteFile SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetLastError GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EncodePointer DecodePointer LCMapStringW GetLocaleInfoW GetCPInfo RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedFlushSList FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetStdHandle GetFileType SetFilePointerEx GetConsoleMode GetFileSizeEx IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP

advapi32

RegEnumKeyExW SetSecurityDescriptorDacl InitializeSecurityDescriptor RegCloseKey RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegDeleteKeyW

ole32

CoTaskMemFree StringFromCLSID

oleaut32

SysAllocString

winusb

WinUsb_Free WinUsb_ControlTransfer WinUsb_Initialize

Name

.text

Size

193KB

Virtual Size

193KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

97KB

Virtual Size

97KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

AiBoost.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c2bd769b599a2fc8fd7bac8f8430f97bb683462fe5a980bd85c047b3fad0d3e5
MD5 99c17a0f1bc0747230232504929fdcbc
SHA1 883550168351c5a6e3816ec82d6c0617c638b919
SHA512 4e6931fcd4ef10fedf292b0e743d8b7f918372cace900e40f47e384920aec4fcbc13b5eb7a8147f7d2f5fe7f4b8da9754e3936d9b4b3d55795044d5e2dd333e5
SSDEEP 12288:DspF/2MDB01L6+00wuLmuR53T1XgJh34tdYPnG5JYWl3//X:DGF/N0EH5u6uR53RXi34PWG5JYW9f
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

624206

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\SoftwareCenter\AiBoost\obj\Release\AiBoost.pdb

Aorus15Keyboard.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7f9f4ef4cb2d1aeb5e5128654d7a523c210be1abbdff433d79b91614cd1f77bc
MD5 02c5d067d318701260e7ff02ac65117f
SHA1 537378cd8256c8f2a97e26e9cc8e5fa12d39f8c6
SHA512 aef8b91183bb82ed259212310f73836ead68842d6a5b72aed4dfb84348a1374a0f17a512732816afb8ab0c4c331bee8d5c32458bf78a44b28e795c412f7fc3d8
SSDEEP 24576:8CqOHL+3YaXNmx2pu+/Lx4Ulw6yYbHWKCdxV9hZ++EJYd:LL+oggx+RLuUlw6JbHWKCN9hZ+7JYd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1508734

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\Aorus15Keyboard\obj\Release\Aorus15Keyboard.pdb

CPUOC.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f4b65dd1e2158f3ca8e6647b862f3189919b4d2817604be5ae90cea08fef6446
MD5 e25721a897a42622b4f669dfb91e5f2f
SHA1 020a7ba4c1f082dab99acd86c078a1e60d30b833
SHA512 152ea24df3c9407c8148138e9467c209e1ab194ffe99ea270d6eb757c4e075cfaacc517d88a21fbd98910fe7a94a336156b39158db492649d1244a5a8acc7b14
SSDEEP 768:aLtjZTinMmtgX4FH8CPuGIk1/j5J45CKdROM:ctjZTinMmtgX4FH8aJ4wKdN
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

72478

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\CPUOC\CPUOC\obj\Release\CPUOC.pdb

ColourSliderLibrary.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d589a1c6db440de2340b0a0fa4dcdd88524a2b7caf6c48517bcac6f45d17ba85
MD5 3f3b0f05df0fadb2c50c5c6b4f085af0
SHA1 8468c238d5817abebecdaf8c3ede410acb8421cc
SHA512 02f8282ae86729825313c5194fd4820d3dae52785d072dfa5bab781bb495d348fb15659bd3f10afdcf5fdccc684002c57132954c73055396b55ac6d3722f2189
SSDEEP 96:3RaWtqqNMb3O4EL4Z/Qu7vHbYcGeWxrKPCZRyGGZOvNxWoCiolv+HUoBLBAoU/A3:34+NWe4tjjk7KPmvNYoXolGHUAn3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17310

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Code\AorusFusion_V3.6.1\AorusKeyboard\ColourSliderLibrary\obj\Release\ColourSliderLibrary.pdb

ComHeader.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1ea4bd56d31ebf1f41c7a20025a7a47a50801e00149fd22bc7829184241a2314
MD5 5771ecad6e8042cf3b25b8988e9da52e
SHA1 9aff5b4ff2d7ec31edaae71dc22be25d375b4e23
SHA512 c98f07ed6ce2232e761dc4b7f61b5352924da40dc1ab705b636713edd067fbc87abde284ff85cfa41d96637ca5fd58e0ce6729db30c48854f7827be95a405c0d
SSDEEP 384:/ED+j0xy1SR9LAWmX47x2bfVktRGVy5j0AfdlHA:/EW0SWmXZRktRGVy5j1ng
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

27962

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\ComHeader\obj\Release\ComHeader.pdb

ControlCenter.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 3ca9a99f0299181c8cd6d0b913cde6e47007e09ca90b258132c20547eb84174b
MD5 5b59b37855c047534d18816fd15b5357
SHA1 b34c82e30b545ececa9e0b43ac1057853e593150
SHA512 b353363dd0b5645b73f8ddb5adedc49cb06a1a9e5828f0323794be4edf9f7ed8b0f4bbf7ff01c5a1072dc1246194464202fd2e59269ff8640f4e3f26b6fb4eef
SSDEEP 24576:+tr6iNlkToW4R1iCmAJ/N0pnkToQtKnkToQtfY:C6iv1iCmAJFF
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

26:09:ca:02:95:89:84:33:fa:00:19:47:e8:da:79:69:ec:5c:7b:96:be:40:e4:b9:79:81:dc:21:26:a8:05:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=22044755,CN=Giga-byte Technology Co.\, Ltd.,O=Giga-byte Technology Co.\, Ltd.,STREET=5F.\, No. 6\, Baoqiang Rd.\, Xindian Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Dec 20, 2022

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=22044755,CN=Giga-byte Technology Co.\, Ltd.,O=Giga-byte Technology Co.\, Ltd.,STREET=5F.\, No. 6\, Baoqiang Rd.\, Xindian Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2e:05:38:4d:4d:e6:d2:d5:3a:06:3c:36

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 6, 2022 - Sep 6, 2025

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Serial Number

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6a

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

4

Entry point

794646

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Steven\Desktop\ControlCenter\SoftwareCenter\SoftwareCenter\obj\Release\ControlCenter.pdb

CoreAudioApi.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b31426bb8d04254144f6d8cad523217cdc8ea09bebf9e69682d65a4d2eb8c653
MD5 4531c6ca3fbfa9051f5cbd6264e92567
SHA1 0d3274f4ee712683a513d9ae58d6df501204c00f
SHA512 aa2f1de2ee9126dfbf5c7a61dd78a9c53a99be4516caaef769c9d83c94267186555470e9c09ca776f7146d30c9688c10522a26382182f2d56e663dd3c7a9aa8f
SSDEEP 384:B7O8F6+r0LzBgDzKIeRiwQhXc99tdY4jKH16WO4H1YzttS+7I94/Lhm+g:Z6+8qzWRihXc99lmXORtS19khZg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

34606

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\CoreAudioApi\obj\Release\CoreAudioApi.pdb

CoreX11.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e19b80c3e31a6ef00b8eb92f63aed3ce4be765b258ee2ac740885b7ec7391c51
MD5 90516023064fe2ed4aa96b2cdc50d5c9
SHA1 8f4910fb142558d80f80aa28b02e73061dd68ce5
SHA512 e18861fba6238fbba782d2fcde30caf33d0fe93e2dc7eaf661f5f9ab452aa4e1312a7272a05c90d657716372489a9b49711061ccc500c950e6db0e9f9f8443f4
SSDEEP 1536:iR1yW+m/cN51lhmK3HQhKNPMnA0BC0d0FbiOBpclWlXlFldl7l9l/lNlTblblZbs:bfmKZzkMPK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

267006

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\CoreX11\CoreX11\obj\Release\CoreX11.pdb

CoreX12.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3e482910a0bfdbdaabfd3f97736495c348c3de684b2388ea6a789dedc283a9e2
MD5 57336933cf6f4ad54bee5570fd574b6f
SHA1 5b4eefeb90b3d79f68d70250b9d179708fc26057
SHA512 69106531882f72f7742dca7c8142f649e8c5e0e469b9a69b7df5525640d724efd57a594016557e24934eaf020a21c50d5615f071204756b511caf9db98b17e99
SSDEEP 768:BpYntL+OO7nf+5rAWm5B1ZXBHrWuHDkh8KSeVgZne/xUWiIVEzGktlmZl8sGG:BpGLBAfQAWm5B3XBaqDkWleHiTqZ8G
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

47038

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\CoreX12\CoreX12\obj\Release\CoreX12.pdb

CoreX14.dll

SHA256 5d7e1ced0d39d889345feb5c724d71e7bd832f928e960d1bbcc60fe03a184d38
MD5 58276c1d3fe4b0cd000eb5991a23031a
SHA1 ed5e37c27f953904d962d29e4e0f75724385a075
SHA512 aef67d9c55cc2557e2e9a47d04e6a1a2549212530db18aa1ae16f3d6a277c89fa109f4ff4ad5fab9a6ba35e30e9992dc7cb5328f9f53522326e7ccb8532fd330
SSDEEP 384:3at98uHs8Su+fDyp4demzoBVBic2JmivRRtzQA8B8vjBDMfwohIKuC8xJ+rl:3a78dOGxemzoBibtLHFo8+5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\CoreX14\obj\x64\Release\CoreX14.pdb

CoreX18.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6d9854486126a9769fecea72d08a5f956ab0f8489d4d124fc1b9ede258e0a30e
MD5 b0f95e82f3f297c7dcb2802a4cecc21a
SHA1 dbff8f4a11a5008136980e4a5493f5dc0d11e8b1
SHA512 410d676253e233d6db4f8a6ac5d035b342166aacbf1dc66587fd23cf4ae6cc350c99d67f6ad309b1fb201633c2b46ed7286f697b46f467fa1b0db460c0aea1e9
SSDEEP 192:a3u0pVD4JCSSHwpwprcYspCcHL+bpZBZwh/RBVUSjkvp1vdrpVx+bJYLrAVx+bJb:ap+EK0U5hC83poOoONi6XXTLR8j3At4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

90026

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\SoftwareCenter\CoreX18\obj\Release\CoreX18.pdb

DeepFan.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e3dd906e6eea3484e77471756767ae406c661fef5f9c915f0928479efd55d31b
MD5 b6cef7fb2b1975343c2301185406ee16
SHA1 123d5b56955b3441a4d8e936f201df6f76ac3839
SHA512 13bf633bfba46cf2ec03428c8f7ff00a9b0d57f505ba8cd6946d0165248e22f2e73853136085f48909cc097e5b3cc1cfcfe586556e6ace0c90fdc97a49465db0
SSDEEP 49152:yrL5B7zFH/VKCZVIuHR9TOFsvQHLNm/kvimGf+8c/D1THhEJ8Ww2k:yrnJH5IuHz70Nn/pTB32
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

2787470

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\DeepFan\testUsercontrolDll\obj\Release\DeepFan.pdb

EnableSystemProtection.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 45ccd0d548f36f43bb7279c2be57de3c1b1bf9861462780c4eac423521128723
MD5 80c3e4c141e688c730ea19b00712c8b9
SHA1 3bf33b8de052fb3ca933a513d0fc8ae9a37da251
SHA512 d5666a2df498cba3a2c08cfef5baaa6f8c395442bd443879a91b84daf5eef5df8392b86a51e6190c6a2e27c3fb2eede10735cc2656f2181623eee543305f0742
SSDEEP 192:Gns5BmaNHqbodpV5ksZpFV3effeI80/Yc/7LC:GnEmacbK1ksZpFVGfeI3/Yc/PC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

14162

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\code\TestWmic\TestWmic\obj\Release\EnableSystemProtection.pdb

FusionKeyboard.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 142556bc95fb80f506868fa30dd037785cad263cd062086f87cdd583724f2e74
MD5 94817bfe53bea63d11eac9ac0a674635
SHA1 ae6e9b5c1e8c8776115dfeecf94a474df8912265
SHA512 df3c06d13da3f7d143f280fd3fcea5ac8bb3f82b6d9ceee57e93b7a015b5acb7b9f5d8c740463727aaca18a559acd0e021920f72548057a01843a566b13d7e70
SSDEEP 98304:iqJUKIn6rBSQ5kGGk425hhfXA10o2dtY1C:iqJcaT5zR3h41Kd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4386558

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\FusionKeyboard\FusionKeyboard\obj\Release\FusionKeyboard.pdb

FusionShortcut.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 2e61a3cad04bff9a5cc114c52e07731c832582e86dc65e1f2c68b5985445d27e
MD5 cc5c4f89161f9592a6c3572812ff8b62
SHA1 b229039be9311e5eae421c57836f0ae0d98f6725
SHA512 3151f12af55bc7100c84106c221845bd131c02c9a835483ec657dd4d1bc34303a1bfacae965d94e33b68308e4f18e45e1aa7507c6c9f20ecbbb148e1f8c2666d
SSDEEP 1536:i4HDOmQUFfj8fbzEk8bok+XYqWZneOL0JCZFXHnez7UnuK:dXQUyzyZn3YeFXHnQUuK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

75154

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\ControlCenter\ControlCenter-20200401\FusionKeyboard\FusionShortcut\obj\Release\FusionShortcut.pdb

FusionStartUp.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e14cc35acf8ebc1fff6208d3a307009517c2cd185f3745aee487654d3419cc5e
MD5 14f670d50a8079d5e5ea4718b4a292cb
SHA1 514d28866acd810669a84bf208efaefba4afdb06
SHA512 b66e4704cf80a262cde914b1fae30146b68ab156f9e1bfc562972bc179db55ad746b16b436e8f0f63bbd2c8377d06d7056d47e3056e6aa77a01eb82d48945124
SSDEEP 192:otvHoRoNhWnJ1eZ4DjsbYaEWrS4NY29N4HW80D8ltDe3AljGnPD13ifYWc8Z7z:EvHPhvIjsbYa3NY29N4bmR3Ajm13ifr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

19302

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\AERO\Desktop\ControlCenter\FusionKeyboard\FusionStartUp\obj\Release\FusionStartUp.pdb

FusionStation.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 6bfcee09cacef1d02f38df03499c4c2247acf9185d61d790b5cf8c48942fd11e
MD5 ddd7717038b665f7a56cc21109d3321b
SHA1 8a574b6ec402d4d4bed3720c9e9866cb3af47632
SHA512 daa2fd34671099ce124fca6da8b1a60c366784967edd2b18dc99d1455981672a37bd7c335f473f2a97eb9849bba45927c320c716d62fe26d7d2d395a5dfcf32f
SSDEEP 3072:y3L5unyb6fyzhFhh8lZC0pDGJe4L6C1jRK:g6fvfDKX6Cv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

104998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\ControlCenter\ControlCenter-20210621\FusionKeyboard\FusionStation\obj\Debug\FusionStation.pdb

GMSG.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b43bf36771dd9ce34490bc384807b364642b048ae0426c8bfa21782fbba9af33
MD5 e3973ba34782995401c658a9102ec0cb
SHA1 bdfc03caa56e02545f5d7e5b862200620d550a77
SHA512 17711224fad9d3ffb2699eaaef0f951a7498d8a8a32777e54a4a226bd873aa54805236843ce39169199b4c03038abe13ffd27cbf568f4577c74c374229b5a53c
SSDEEP 768:AbIehvoAloGD1M/QjnELJFn2Fy7mbzBVas8oMUbcMsJ90ExBsnvlR+Jw5X0yeS/D:EFhvoAlzxM/QjnELJF2FOmb1Vas8oMUX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

47502

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Steven\Desktop\ControlCenter\GMSG\obj\Release\GMSG.pdb

HomeCloud/Comm_BUT.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cb83bf488c1f009f8938df3461a6af01de3fe29eeb1cc24dd9f1ce988aa3cc9a
MD5 aec22dd1d6c401e406576234acbd78bc
SHA1 3b8460714b0a1e9ebeaf21fc80347ff914e9051e
SHA512 fd329e7b92abf40639fe9f86f16d894ee955ddd79aa08431c0644e8c2b84b307f40c71d85977fc2cbfc6020242ee914d4e2e94420dff14d75a72d5bce554dd42
SSDEEP 768:QS4mNdYB35Ln35o935Oe35t235T35s35G35H35s35m35SI35vjkdAghllgo:vTNpdmjkThLf
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

58158

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

h:\CODE\CloudStation\OpenIDLogin\FaceBook\LoginFB\Comm_BUT\Comm_BUT\obj\Release\Comm_BUT.pdb

HomeCloud/WLogin.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 03a6e44ef98fee94cffdf3c417d631aaba6db029b626c65b649d4ce4321853e5
MD5 7bbf71bce664b1bb2b1ad40320af1f0d
SHA1 05cc799cfec1408ba0f7048b2c15eb6bfd2d0355
SHA512 9583a3129a1b38613a8630e1f5804f9eea4a2a8fa73c286bf238b50f10979d553264050fbf0c6ec97786ab30cb511616ffbc817802ff5cb7d823ebab76568d6d
SSDEEP 6144:2rgXqurgXq4rgXqMrgXqFweaoaR+uU9QyiJMGfWmgxdvNYkLV:2UauUa4UaMUaFwnB+uU9QyiJTqO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

430910

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

h:\CODE\CloudStation\OpenIDLogin\New_UI\Windows_Live\WLogin\WLogin\obj\Release\WLogin.pdb

HomeCloud/Windows_Live.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3a1391b4ae041bf055b163d2b06cc90f459e38505e89b3b14deb31245045d2bc
MD5 1775aa74d7cfa810898dd5240e5a7708
SHA1 2ccbeabcbf762314b3d99bc39fc8208f750a2a9e
SHA512 e2228df178740f27823f1bf98f5b9988a6d9c965068f4c672d2b0fa50ea29e13baf0a51ae159c3db85d4299da51b5e3c3a07243c5af75b7d83e30c407daf5d40
SSDEEP 1536:kvgFtjBNOh5WExDXPnHQ8AtWrDt65gk9IVJkj4gruCkJo:ocfNOh4qbnb956+k6V2j4gKC/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

104554

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Aorus Center\Windows_Live\Windows_Live\obj\Release\Windows_Live.pdb

Hotkey.xml

SHA256 3a5fd0f06cf2e323d20a396dab5708de3ca55532b14417bb9365ca4fa31e56f5
MD5 279ee02e51eadc0b136b67b55e3b9811
SHA1 6590ff841ddc4eef5dfb848abb032b17a9b89888
SHA512 cb2c2beb4ea8df7d70bc79e0c8be973d8cdfa4e3b0f5832c8938546ed89308226daf8994d3ebf35ffd86c9603c2377594c51e2bcf6e9e52b550441c59c29094c
SSDEEP 96:oJ0J9bf9a9o9S09/9F79k9Gd0ijo9JKd0id9Ji9JOO9Jc9Ju9J8AW9J5w9JWWl9k:vJhfQiRBX7SMjo6dS+OMeMAWJwmWlLwL
MD5 SHA1 SHA512 SSDEEP

ICON1028.ini

SHA256 9650b2292511fd53a60734436c8af54eaf2a9fbe1a2e409a5c02a2c7ca9d3daa
MD5 c2c9356138f02407028c6a22d511e215
SHA1 18e4cc735c6d97eaeb087d47b071a9e81e5f3a21
SHA512 5348e460ace4ee8b2df4ecc860c6f09881e6a789b288a6540e47e7ded41491f93d11081a78fc5fabb9eba4f1034f7305b36f1da80d7b939ffee1be990d5bc512
SSDEEP 384:gY3D0oCHXWFvfEdgF4VQv/vAysKxp6wFE1i6WCzx4kJ2T9pYlXEDApuP+gWW:gYKHXWFgwmS
MD5 SHA1 SHA512 SSDEEP

ICONdefault.ini

SHA256 5b28991eea4e30f85a37d85f11e520f1c8dc62a46456927d5c77756b9e02c23d
MD5 af62a23eb7938f59465ac6bccea08f85
SHA1 942fd0752b3940485caab181ed631288ca7415e4
SHA512 792b17cc78b0baf46931892371312c4388432033eaacdaeb05c839a8caf49adf338f29582fe2ba875fd04b3aaef3a03903408dea6fab7ee0a0e3c33e46de03cc
SSDEEP 384:BtkTD15yyQLqtB5F4VQv/vAysKxp6wFE1i6WCzx4kJ2T9pYlXEDApuP+gW3:BtkTD2yQ2tBpmb
MD5 SHA1 SHA512 SSDEEP

InputSimulator.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1a109115827ecd413b978872c65628572102fe993de2dff3a60bc73bd7c42718
MD5 05e9df67197c80f8ae379ca9c4a6dd16
SHA1 cab4ac99bd87bb3c684f2f3df287993b2a7cf058
SHA512 13c00099aaa9a2e2debd5e7ba4f1549baf33ccf9a39cb02c0db5fe79a819cc2fce11719954ef0496408bb347904ea21a549ba760461612bc1c00937f7762ec56
SSDEEP 384:lC4dP6FqZxx+I9OaFVnFP13jWh6Gl3cFf:lC5++AVnFP1yhbS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

19214

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Temp\InputSimulator\InputSimulator\obj\Release\InputSimulator.pdb

InstallUtil.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 6956094d3bb4de18a8b43237bbe05d2b8fb669e5595079e6ee9fe783bd4db8af
MD5 96881a06d1957cd363f5c4b78f14257b
SHA1 ae5348c8a67258c6bb835f4dc69acaebc9f91433
SHA512 0e3754a25524dec1bd2366bb3a433b55fe311d0f3202c07c7f10550703f14728c67638532ca09c85a938a0b1afa8b6187f24f54db1b37041bd7603f953e85f67
SSDEEP 384:2tpFVLK0MsihB9VKS7xdghLKJ9Yl6dnPU3SERztmbqCJstdMardz/JikPZ+EPZTg:aBMs2SqdeM6Iq8If6YKi9L66bPvm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

9d:68:bc:5b:07:e0:50:51:fb:04:cf:a1:aa:69:c7:8c:be:a0:62:af:db:fa:27:cb:f1:57:65:42:a9:fb:5d:34

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 23, 2024

PE Signature issue

Digest

39:9e:09:d7:6d:cb:ca:13:6e:b1:d6:a9:6c:b1:ec:a6:6e:77:71:b4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 9, 2017

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 18, 2016 - Nov 2, 2017

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 17, 2016 - Feb 17, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Minor OS version

0

Major OS version

4

Entry point

29318

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

InstallUtil.pdb

InstallUtil.exe.config

SHA256 2d4610ade011e530d817dd3ba4fc787e5dc0c2297cc520c30a643b8fb13f9093
MD5 c002006ced9de9edddd0fbc440a33623
SHA1 7144330e908fd57d439ce9200a388bfe37fb716a
SHA512 c2a5ee9cc44eafc4be7d2be7fa8f6b7e911ace2ebb656281ef8854eb9e93f567e224aaebd3238dc00c6a28bc92784d0317434ac9976d209b09286553bb891afe
MD5 SHA1 SHA512

InstallUtilLib.dll

IMPHASH 6480c87ec7188483360bb29c4f9e4693
SHA256 c55390df4ac8e80eb54df68b29d51eb5d9af23e020242d1136070a1c6fac6583
MD5 6487d42a68018b1b755fa898d63675f2
SHA1 77e78a2a6b332cb31a8cb6871014841e85a3ce2e
SHA512 a99eaa5e5564899a668c2500a1af6d290468d8b395cc0b12d3b8a34767cef9ff89b2b48afa3f2dbc65c9ab8f389658e323931d3daabe07f50389c3f5c62d0158
SSDEEP 1536:2wWExyoh82qLIF/YGnO9E1P3JVLj1qubp2:2wuohDE90JJj1b12
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

25:93:67:7d:ac:7b:3c:d0:64:e4:b3:0f:ce:f8:87:8e:2b:bc:c8:b0:96:65:0f:80:b7:a9:d6:83:54:15:b9:44

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 23, 2024

PE Signature issue

Digest

bb:74:20:6d:3b:9c:30:fa:67:98:5c:a8:5a:14:a4:d9:05:7f:0b:bb

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 9, 2017

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c6:78:80:36:01:75:1a:69:72:00:00:00:00:00:c6

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 18, 2016 - Nov 2, 2017

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 17, 2016 - Feb 17, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Minor OS version

1

Major OS version

5

Entry point

16497

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

InstallUtilLib.pdb

kernel32

GetProcAddress LoadLibraryW InterlockedCompareExchange FreeLibrary SwitchToThread InterlockedExchange LocalAlloc lstrlenW GetLastError MultiByteToWideChar LocalFree FormatMessageW LoadLibraryA SetErrorMode FlushFileBuffers CloseHandle CreateFileW HeapSize IsProcessorFeaturePresent GetStringTypeW LCMapStringW WriteConsoleW SetStdHandle RtlUnwind GetModuleFileNameW GetCurrentThreadId GetCommandLineA UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW SetLastError InterlockedDecrement HeapFree Sleep ExitProcess SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WriteFile GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc

user32

MessageBoxW

oleaut32

SysAllocString SysFreeString

msi

ord121 ord17 ord74 ord125 ord103

mscoree

ClrCreateManagedInstance CorBindToRuntimeHost

IntelOverclockingSDK.dll

SHA256 55ddece2040926544fe57bfd7df38f6ba924e8cd5ca3c27b249c5afce8bdff3a
MD5 98254c65bb12e148bac00c2648cbb08f
SHA1 edc8733ab30f8d66776bf394a20f0f359e50e36d
SHA512 7f8e1654f7f8050b0f1499279175c391481e83e65124fcff1f5b91a47eb0a06a41b897c3a17b7292dff8ebe73d7bd21afebab6c247f6399f57a37ed074d26406
SSDEEP 24576:+jg00KkS6uGXtY88mmaO97W30Cox3T8b16a7ZdvG9:Ig0iSurftONWrNj7o
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

a9:36:5a:91:2b:7b:60:88:cd:06:e0:2d:95:54:c7:4d:de:c8:20:fc:1e:27:85:23:f3:29:f6:c6:63:78:81:7c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 23, 2024

Digest

a9:36:5a:91:2b:7b:60:88:cd:06:e0:2d:95:54:c7:4d:de:c8:20:fc:1e:27:85:23:f3:29:f6:c6:63:78:81:7c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Intel Corporation,OU=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Chains

Sep 15, 2021

CN=Intel Corporation,OU=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Subject

CN=Intel Corporation,OU=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Serial Number

a6:d3:c3:ef:46:15:3f:e1:eb:a3:2b:2c:bb:18:4c:87

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 12, 2021 - Apr 12, 2023

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Serial Number

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 22, 2015 - Jul 22, 2025

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 23, 2020 - Jan 22, 2032

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 15, 2020 - Dec 2, 2021

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0b:aa:c1:00:00:00:00:00:09

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Ionic.Zip.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3b3e541682e48f3fd2872f85a06278da2f3e7877ee956da89b90d732a1eaa0bd
MD5 6ded8fcbf5f1d9e422b327ca51625e24
SHA1 8a1140cebc39f6994eef7e8de4627fb7b72a2dd9
SHA512 bda3a65133b7b1e2765c7d07c7da5103292b3c4c2f0673640428b3e7e8637b11539f06c330ab5d0ba6e2274bd2dcd2c50312be6579e75c4008ff5ae7dae34ce4
SSDEEP 6144:leSYvQAd10GtSV41OJDsTDDVUMle6ZjxLV/rHo0Oaaz2R9IY:oJBdBS4msNUCe65frHMnz2R9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

467790

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\DotNetZip\Zip\obj\Release\Ionic.Zip.pdb

KillProc_x64.exe

IMPHASH 8756a34f41c0e1552f6df37ab6ac1afc
SHA256 004c5e35c5bf235ae655b059c6e808d9d79f3ddf99ee5a2384c3b7f779cf4767
MD5 53f99351fae4a92b578fa2f83c50e30e
SHA1 4d8fb43042c96c5e8ffb94f1ed97327bd2323a24
SHA512 26d51335dcf6848b283087755075c967a245d6a7060a4115efefe511b99488ca5623b125b694964b05eb902ed94d16a5cb620a8f281a7c55b71995152254caa7
SSDEEP 1536:Xm7dQbZ2kxTP1dsgsWRLVi2GkVSQTE+W+:XFbZZxT/sgbUawQTE+j
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

6528

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\Developement\MSVCProjects\UrBackupClient3\KillProc\x64\Release\KillProc.pdb

KillerSDK_ASDControl.dll

SHA256 4170d4f23aca2aeb590116847be2a347974c37e184df956e402b39f9b8d1a2ea
MD5 6e570334045be3d98e678d942edce5ed
SHA1 d36c8570823d2702e7ae0cccb250f035fe59dcb3
SHA512 129d46425ae13fd209a0e925f95855f05fb8b84876516269f8c9505521addd07a23139ec0ba4073d287655bfd9c0c691dd032fce47aecc3ae3405fad3d3d9420
SSDEEP 192:F+fDmaSTdBOmmQo6K8IRNjqDKiyjbzb5dTA:F+fKaMdNmEIRNjqQHfXA
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\dev\dkorn\KillerNetwork_SDKSample\RivetClientSDKSample_TurnASDOnOff_IgnoreVersion\ASDOnOff\SDK_ASDControl\obj\x64\Release\KillerSDK_ASDControl.pdb

MacroDB.xml

SHA256 ca4826acea03279f54232232b660036217572e2ea05ba9de91ad5aaa276c7d82
MD5 a3f3f6bcfa73eb84cae1931762a0fd46
SHA1 47fb3c914f9fb3bd5a8f9a7a3e673bec559676d7
SHA512 ea99b451ac170300888e6cf4aa5d619510c75a7d4d38e5f607a8ff66c163e5ee40f635ac08a406efca7f9a8ec508bb63ece841fc64465f75f5fc992440e56065
SSDEEP 192:GkR7nkkPYg6DtRLtGaxlTpjxnU8RDVoL+5cWD7Rwy/Mpu7vi2R5zGdGjH6sJFR2H:mQvX
MD5 SHA1 SHA512 SSDEEP

MainSkin.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 498cf56e7e1978cb5b8206d7c7c17edafe8d55c2fadaa8560cb44c0a368897d9
MD5 b6bd5e6c1508c9cef8232d83c292b653
SHA1 d93c19aa130d7a898fcfb5b19c6db1f2c46cdd1b
SHA512 1d00fc279c5794077b9d45f0a8618b4a7247dd9529266d7888bc3344b324c3c93776dbc59a1dbaf10e846a5d5377b3416cf70cd8f4995bd1f523207201a9eed3
SSDEEP 49152:VBtunyM1Rb3vzCYy5cMwJIzFCme/EQ8cpdtQ0GMcmcHhEJ8WqGfD9A2Fz7b6qIeY:VBIfm/dJWLQ70cBHGfD9Acz7bPgs1m
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6855114

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\MainSkin\obj\Release\MainSkin.pdb

Mapping1028.ini

SHA256 db3a8d80b4e7194f8879ce60e2e8ca49a43dee028b8d8db2eabc77aed55b4133
MD5 edecd5698d5124366727c0d3464e7263
SHA1 15d07bd489af19484c85a882e30bdd076d11cbbc
SHA512 cd1e8a0c4d527b5d00beab5f850558bf62d21b984b95261a1839bde62712584ce811fff585f5c9c2fe830dc279b8aa1752af2b3d2b1174567ff2f1e48064d8a4
SSDEEP 384:5au1GQuklGFuKMNPYOm3HXWFvfWEZjZkXlXPceSiM2K7Uoz+ESmC5cuT16itzO9:rYfHXWFzjiKeEL
MD5 SHA1 SHA512 SSDEEP

Mappingdefault.ini

SHA256 68ad1214289be75aff0cd761d015280850d2b71e826f76cca15b53d967521432
MD5 930badc49d22a20fe4361621dfa88829
SHA1 a07bd9f97fc6aec171ba1a679ea2f2826d6c6349
SHA512 d7953cbe075989ffaf8a84c802d8db2019558402dd33b217af7f716499060e1a1d50aa28192af662c69ee73d412d2d7c073e9727e9206ac82f4718221f2dc7cc
SSDEEP 384:DjICjoHX3S8Mc+gv/gytMpyQm4+7FLmMPBYXD+PHdMXPceSiM2K7Uoz+ESefkH7b:vE3MpyQOJ1P2D+1fpwr1
MD5 SHA1 SHA512 SSDEEP

Microsoft.CognitiveServices.Speech.core.dll

IMPHASH e912cf8c6632f37f3eb6164844fb704a
SHA256 3bb3159f5f6764946137ee821d7f6ca740fa058ff8c92657b383e9676db09371
MD5 26799d9e91725847302c2328b4d60b2f
SHA1 af6babf4f9d6efc90c2f8820dde7d034da12fb74
SHA512 eef49ce569abadce27d6b81fc1af25d88a324f1e9715bd0c4ed981e82fe8505a3256e4f9aab1ecb2e2659d241e3d7bb687881f388cf76719cf17e1441aa8a5b3
SSDEEP 24576:4GYq/nUUEexLv3RzbuB+lPGXD/QTgRHiBwweGCwdU6yyPUGoGPorxsJ3C28gUNGV:jYunNhXGXBRH0T1JPUkorw3CrZ0kPe
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

91:01:a5:ce:eb:33:b0:bd:15:c2:91:92:9d:fc:6a:37:f1:75:73:d7:98:dc:75:6c:82:37:2b:07:e2:33:5b:9e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 23, 2024

Minor OS version

0

Major OS version

6

Entry point

1466880

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\s\build\bin\Release\Microsoft.CognitiveServices.Speech.core.pdb

dbghelp

SymInitialize SymFromAddr SymCleanup

crypt32

CertCreateCertificateContext CertFreeCertificateContext CertSetCertificateContextProperty CryptStringToBinaryA CryptDecodeObjectEx

ws2_32

socket getaddrinfo WSAStartup recv WSAIoctl WSAGetLastError freeaddrinfo closesocket ioctlsocket connect send

secur32

DecryptMessage DeleteSecurityContext EncryptMessage QueryContextAttributesA InitializeSecurityContextA FreeCredentialsHandle AcquireCredentialsHandleA

advapi32

CryptDestroyKey CryptReleaseContext CryptAcquireContextA EventWriteTransfer EventSetInformation EventUnregister EventRegister CryptImportKey

ncrypt

NCryptOpenStorageProvider NCryptFreeObject NCryptImportKey

kernel32

GetModuleFileNameA GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId GetSystemTime IsDebuggerPresent LeaveCriticalSection TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetModuleHandleW CreateEventW EnterCriticalSection InitializeSListHead IsProcessorFeaturePresent AcquireSRWLockShared AcquireSRWLockExclusive QueryPerformanceCounter ReleaseSRWLockExclusive WaitForSingleObjectEx DeleteCriticalSection InitializeCriticalSectionAndSpinCount ReleaseSRWLockShared VerSetConditionMask VerifyVersionInfoW GetLastError GetCurrentProcess GetProcAddress LoadLibraryA FormatMessageW CloseHandle SetEvent ResetEvent WaitForSingleObject CreateEventA CreateEventExA Sleep WaitForMultipleObjects CreateThread LocalFree FormatMessageA GetModuleHandleA

ole32

CoCreateInstance CoInitializeEx PropVariantClear CoUninitialize

msvcp140

?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?_Xbad_function_call@std@@YAXXZ _Mtx_lock _Mtx_unlock ?_Throw_C_error@std@@YAXH@Z ?_Xbad_alloc@std@@YAXXZ ?_Xlength_error@std@@YAXPEBD@Z ?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z ?_Syserror_map@std@@YAPEBDH@Z _Mtx_init_in_situ _Mtx_destroy_in_situ ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z ??Bid@locale@std@@QEAA_KXZ ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z ?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z ??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z ??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ?_Incref@facet@locale@std@@UEAAXXZ ?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A _Xtime_get_ticks _Query_perf_counter _Query_perf_frequency _Mtx_current_owns _Cnd_timedwait ?_Throw_Cpp_error@std@@YAXH@Z ?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z ?_Xout_of_range@std@@YAXPEBD@Z ?uncaught_exception@std@@YA_NXZ ?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ ?classic@locale@std@@SAAEBV12@XZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z ?tolower@?$ctype@D@std@@QEBADD@Z ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ?id@?$ctype@D@std@@2V0locale@2@A ?_Xinvalid_argument@std@@YAXPEBD@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z _Thrd_id ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z _Thrd_yield ?__ExceptionPtrCreate@@YAXPEAX@Z ?__ExceptionPtrDestroy@@YAXPEAX@Z ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z ?__ExceptionPtrToBool@@YA_NPEBX@Z ?__ExceptionPtrCurrentException@@YAXPEAX@Z ?__ExceptionPtrRethrow@@YAXPEBX@Z ?_XGetLastError@std@@YAXXZ ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z _Cnd_init_in_situ _Cnd_destroy_in_situ _Cnd_wait _Cnd_broadcast _Cnd_register_at_thread_exit _Cnd_unregister_at_thread_exit ?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z _Thrd_sleep ?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z ?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z ?_ReportUnobservedException@details@Concurrency@@YAXXZ ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ ?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z ?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ ?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ ?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ ??0task_continuation_context@Concurrency@@AEAA@XZ ?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z ?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ _Thrd_detach _Thrd_join _Cnd_do_broadcast_at_thread_exit ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A _Cnd_signal _Strcoll _Strxfrm ??0_Locinfo@std@@QEAA@PEBD@Z ??1_Locinfo@std@@QEAA@XZ ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ ??0facet@locale@std@@IEAA@_K@Z ??1facet@locale@std@@MEAA@XZ ?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?id@?$collate@D@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z ?_Xruntime_error@std@@YAXPEBD@Z ??0_Locinfo@std@@QEAA@HPEBD@Z ?_Getname@_Locinfo@std@@QEBAPEBDXZ ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z ?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ

vcruntime140

__C_specific_handler _purecall __std_type_info_destroy_list wcschr strchr __current_exception __current_exception_context strrchr memcmp __std_terminate __std_exception_copy __std_exception_destroy memcpy memmove __std_type_info_compare strstr memset __RTDynamicCast memchr __std_type_info_name _CxxThrowException

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_beginthreadex _invalid_parameter_noinfo terminate _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _initterm _initterm_e _invalid_parameter_noinfo_noreturn _seh_filter_dll _cexit _errno

api-ms-win-crt-math-l1-1-0

_dtest ceil ceilf sqrt _dsign

api-ms-win-crt-heap-l1-1-0

_callnewh malloc free calloc realloc

api-ms-win-crt-string-l1-1-0

strlen wcslen strncpy_s strtok_s strnlen _stricmp _strnicmp isspace toupper strcpy_s isupper tolower strcpy strncpy strcmp strtok

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func setvbuf fwrite _fseeki64 fsetpos fread fputc ungetc fgetpos __stdio_common_vsprintf fgetc _get_stream_buffer_pointers fflush fclose __stdio_common_vfprintf __stdio_common_vsprintf_s fopen_s

api-ms-win-crt-convert-l1-1-0

strtoul atoi strtoull strtod strtoll strtol

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-utility-l1-1-0

llabs rand

api-ms-win-crt-time-l1-1-0

strftime _time64 _mkgmtime64 _gmtime64_s _ctime64

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file

rpcrt4

UuidToStringA UuidCreate RpcStringFreeA

CreateModuleObject add_source_lang_config_to_auto_detect_source_lang_config audio_config_create_audio_input_from_a_microphone audio_config_create_audio_input_from_default_microphone audio_config_create_audio_input_from_stream audio_config_create_audio_input_from_wav_file_name audio_config_create_audio_output_from_default_speaker audio_config_create_audio_output_from_stream audio_config_create_audio_output_from_wav_file_name audio_config_create_pull_audio_input_stream audio_config_create_push_audio_input_stream audio_config_get_property_bag audio_config_is_handle_valid audio_config_release audio_data_stream_can_read_data audio_data_stream_can_read_data_from_position audio_data_stream_create_from_keyword_result audio_data_stream_create_from_result audio_data_stream_detach_input audio_data_stream_get_canceled_error_code audio_data_stream_get_position audio_data_stream_get_property_bag audio_data_stream_get_reason_canceled audio_data_stream_get_status audio_data_stream_is_handle_valid audio_data_stream_read audio_data_stream_read_from_position audio_data_stream_release audio_data_stream_save_to_wave_file audio_data_stream_set_position audio_stream_create_pull_audio_input_stream audio_stream_create_pull_audio_output_stream audio_stream_create_push_audio_input_stream audio_stream_create_push_audio_output_stream audio_stream_format_create_from_compressed_format audio_stream_format_create_from_default_input audio_stream_format_create_from_default_output audio_stream_format_create_from_waveformat_pcm audio_stream_format_is_handle_valid audio_stream_format_release audio_stream_is_handle_valid audio_stream_release auto_detect_source_lang_config_get_property_bag auto_detect_source_lang_config_is_handle_valid auto_detect_source_lang_config_release bot_framework_config_from_authorization_token bot_framework_config_from_subscription class_language_model_assign_class class_language_model_from_storage_id connection_close connection_connected_set_callback connection_disconnected_set_callback connection_from_conversation_translator connection_from_recognizer connection_handle_is_valid connection_handle_release connection_message_get_data connection_message_get_data_size connection_message_get_property_bag connection_message_handle_is_valid connection_message_handle_release connection_message_received_event_get_message connection_message_received_event_handle_is_valid connection_message_received_event_handle_release connection_message_received_set_callback connection_open connection_send_message connection_send_message_data connection_set_message_property conversation_create_from_config conversation_delete_conversation conversation_end_conversation conversation_get_conversation_id conversation_get_property_bag conversation_lock_conversation conversation_mute_all_participants conversation_mute_participant conversation_release_handle conversation_start_conversation conversation_transcription_result_get_user_id conversation_transcription_result_get_utterance_id conversation_translator_canceled_set_callback conversation_translator_connection_connected_set_callback conversation_translator_connection_disconnected_set_callback conversation_translator_conversation_expiration_set_callback conversation_translator_create_from_config conversation_translator_event_get_expiration_time conversation_translator_event_get_participant_changed_at_index conversation_translator_event_get_participant_changed_reason conversation_translator_event_handle_is_valid conversation_translator_event_handle_release conversation_translator_get_property_bag conversation_translator_handle_is_valid conversation_translator_handle_release conversation_translator_join conversation_translator_join_with_id conversation_translator_leave conversation_translator_participant_get_avatar conversation_translator_participant_get_displayname conversation_translator_participant_get_id conversation_translator_participant_get_is_host conversation_translator_participant_get_is_muted conversation_translator_participant_get_is_using_tts conversation_translator_participants_changed_set_callback conversation_translator_result_get_original_lang conversation_translator_send_text_message conversation_translator_session_started_set_callback conversation_translator_session_stopped_set_callback conversation_translator_set_authorization_token conversation_translator_start_transcribing conversation_translator_stop_transcribing conversation_translator_text_message_recevied_set_callback conversation_translator_transcribed_set_callback conversation_translator_transcribing_set_callback conversation_unlock_conversation conversation_unmute_all_participants conversation_unmute_participant conversation_update_participant conversation_update_participant_by_user conversation_update_participant_by_user_id create_auto_detect_source_lang_config_from_languages create_auto_detect_source_lang_config_from_open_range create_auto_detect_source_lang_config_from_source_lang_config create_voice_profile create_voice_profile_client_from_config create_voice_profile_from_id custom_commands_config_from_authorization_token custom_commands_config_from_subscription delete_voice_profile diagnostics_log_apply_properties diagnostics_log_start_logging diagnostics_log_stop_logging diagnostics_log_trace_message diagnostics_log_trace_message2 dialog_service_connector_activity_received_event_get_activity dialog_service_connector_activity_received_event_get_activity_size dialog_service_connector_activity_received_event_get_audio dialog_service_connector_activity_received_event_handle_is_valid dialog_service_connector_activity_received_event_has_audio dialog_service_connector_activity_received_event_release dialog_service_connector_activity_received_set_callback dialog_service_connector_async_handle_is_valid dialog_service_connector_async_handle_release dialog_service_connector_async_reco_result_handle_is_valid dialog_service_connector_async_reco_result_handle_release dialog_service_connector_async_string_handle_is_valid dialog_service_connector_async_string_handle_release dialog_service_connector_async_void_handle_is_valid dialog_service_connector_async_void_handle_release dialog_service_connector_canceled_set_callback dialog_service_connector_connect dialog_service_connector_connect_async dialog_service_connector_connect_async_wait_for dialog_service_connector_create_dialog_service_connector_from_config dialog_service_connector_disconnect dialog_service_connector_disconnect_async dialog_service_connector_disconnect_async_wait_for dialog_service_connector_get_property_bag dialog_service_connector_handle_is_valid dialog_service_connector_handle_release dialog_service_connector_listen_once dialog_service_connector_listen_once_async dialog_service_connector_listen_once_async_wait_for dialog_service_connector_recognized_set_callback dialog_service_connector_recognizing_set_callback dialog_service_connector_send_activity dialog_service_connector_send_activity_async dialog_service_connector_send_activity_async_wait_for dialog_service_connector_session_started_set_callback dialog_service_connector_session_stopped_set_callback dialog_service_connector_start_keyword_recognition dialog_service_connector_start_keyword_recognition_async dialog_service_connector_start_keyword_recognition_async_wait_for dialog_service_connector_stop_keyword_recognition dialog_service_connector_stop_keyword_recognition_async dialog_service_connector_stop_keyword_recognition_async_wait_for dialog_service_connector_synthesizing_audio_set_callback enroll_voice_profile error_get_call_stack error_get_error_code error_get_message error_release grammar_create_from_storage_id grammar_handle_is_valid grammar_handle_release grammar_list_add_grammar grammar_list_from_recognizer grammar_list_set_recognition_factor grammar_phrase_create_from_text grammar_phrase_handle_is_valid grammar_phrase_handle_release intent_recognizer_add_intent intent_result_get_intent_id intent_trigger_create_from_language_understanding_model intent_trigger_create_from_phrase intent_trigger_handle_is_valid intent_trigger_handle_release keyword_recognition_model_create_from_file keyword_recognition_model_handle_is_valid keyword_recognition_model_handle_release language_understanding_model__handle_release language_understanding_model_create_from_app_id language_understanding_model_create_from_subscription language_understanding_model_create_from_uri language_understanding_model_handle_is_valid participant_create_handle participant_get_property_bag participant_release_handle participant_set_preferred_langugage participant_set_voice_signature phrase_list_grammar_add_phrase phrase_list_grammar_clear phrase_list_grammar_from_recognizer_by_name property_bag_copy property_bag_free_string property_bag_get_string property_bag_is_valid property_bag_release property_bag_set_string pull_audio_input_stream_set_callbacks pull_audio_input_stream_set_getproperty_callback pull_audio_output_stream_read push_audio_input_stream_close push_audio_input_stream_set_property_by_id push_audio_input_stream_set_property_by_name push_audio_input_stream_write push_audio_output_stream_set_callbacks recognizer_async_handle_is_valid recognizer_async_handle_release recognizer_canceled_set_callback recognizer_create_conversation_transcriber_from_config recognizer_create_intent_recognizer_from_config recognizer_create_keyword_recognizer_from_audio_config recognizer_create_speaker_recognizer_from_config recognizer_create_speech_recognizer_from_auto_detect_source_lang_config recognizer_create_speech_recognizer_from_config recognizer_create_speech_recognizer_from_source_lang_config recognizer_create_translation_recognizer_from_config recognizer_disable recognizer_enable recognizer_event_handle_is_valid recognizer_event_handle_release recognizer_get_property_bag recognizer_handle_is_valid recognizer_handle_release recognizer_is_enabled recognizer_join_conversation recognizer_leave_conversation recognizer_recognition_event_get_offset recognizer_recognition_event_get_result recognizer_recognize_keyword_once recognizer_recognize_keyword_once_async recognizer_recognize_keyword_once_async_wait_for recognizer_recognize_once recognizer_recognize_once_async recognizer_recognize_once_async_wait_for recognizer_recognized_set_callback recognizer_recognizing_set_callback recognizer_result_handle_is_valid recognizer_result_handle_release recognizer_session_event_get_session_id recognizer_session_started_set_callback recognizer_session_stopped_set_callback recognizer_speech_end_detected_set_callback recognizer_speech_start_detected_set_callback recognizer_start_continuous_recognition recognizer_start_continuous_recognition_async recognizer_start_continuous_recognition_async_wait_for recognizer_start_keyword_recognition recognizer_start_keyword_recognition_async recognizer_start_keyword_recognition_async_wait_for recognizer_stop_continuous_recognition recognizer_stop_continuous_recognition_async recognizer_stop_continuous_recognition_async_wait_for recognizer_stop_keyword_recognition recognizer_stop_keyword_recognition_async recognizer_stop_keyword_recognition_async_wait_for reset_voice_profile result_get_canceled_error_code result_get_duration result_get_no_match_reason result_get_offset result_get_property_bag result_get_reason result_get_reason_canceled result_get_result_id result_get_text session_from_recognizer session_get_property_bag session_handle_is_valid session_handle_release source_lang_config_from_language source_lang_config_from_language_and_endpointId source_lang_config_get_property_bag source_lang_config_is_handle_valid source_lang_config_release speaker_identification_model_add_profile speaker_identification_model_create speaker_identification_model_release_handle speaker_recognizer_get_property_bag speaker_recognizer_identify speaker_recognizer_release_handle speaker_recognizer_verify speaker_verification_model_create speaker_verification_model_release_handle speech_config_from_authorization_token speech_config_from_authorization_token_internal speech_config_from_endpoint speech_config_from_endpoint_internal speech_config_from_host speech_config_from_host_internal speech_config_from_subscription speech_config_from_subscription_internal speech_config_get_property_bag speech_config_is_handle_valid speech_config_release speech_config_set_audio_output_format speech_config_set_profanity speech_config_set_service_property speech_translation_config_add_target_language speech_translation_config_from_authorization_token speech_translation_config_from_endpoint speech_translation_config_from_host speech_translation_config_from_subscription speech_translation_config_remove_target_language synth_result_get_audio_data synth_result_get_audio_format synth_result_get_audio_length synth_result_get_canceled_error_code synth_result_get_property_bag synth_result_get_reason synth_result_get_reason_canceled synth_result_get_result_id synthesizer_async_handle_is_valid synthesizer_async_handle_release synthesizer_canceled_set_callback synthesizer_completed_set_callback synthesizer_create_speech_synthesizer_from_auto_detect_source_lang_config synthesizer_create_speech_synthesizer_from_config synthesizer_disable synthesizer_enable synthesizer_event_handle_is_valid synthesizer_event_handle_release synthesizer_get_property_bag synthesizer_handle_is_valid synthesizer_handle_release synthesizer_is_enabled synthesizer_result_handle_is_valid synthesizer_result_handle_release synthesizer_speak_async_wait_for synthesizer_speak_ssml synthesizer_speak_ssml_async synthesizer_speak_text synthesizer_speak_text_async synthesizer_start_speaking_ssml synthesizer_start_speaking_ssml_async synthesizer_start_speaking_text synthesizer_start_speaking_text_async synthesizer_started_set_callback synthesizer_synthesis_event_get_result synthesizer_synthesizing_set_callback synthesizer_word_boundary_event_get_values synthesizer_word_boundary_set_callback translation_synthesis_result_get_audio_data translation_text_result_get_translation_text_buffer_header translator_add_target_language translator_remove_target_language translator_synthesizing_audio_set_callback user_create_from_id user_get_id user_release_handle voice_profile_client_get_property_bag voice_profile_client_release_handle voice_profile_get_id voice_profile_release_handle

Microsoft.CognitiveServices.Speech.csharp.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5d25d89b827285f7960d45f8ff8a68b99f958919d1564ed7126e0cd7405bf0f2
MD5 03f61ffcaf66f1ec9cb264a315c71ec9
SHA1 feaf72fd51e1ec4fa514e01d6f3936cc0032e36c
SHA512 68cda756abbfc270d599fe4a90ba6ad3394cf98164274a1feb7706f1021c49b04085d9cda802e2dbde8395f1ae573e3870433a787f501cdb21759b9e35ec3364
SSDEEP 3072:VGnLsRHvqZ4OpwalqtLerQdNrHNyBGKkDidVgAFXO:+4OOalqtLer4rH4gKkl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

98:41:a6:f8:46:8b:60:4e:6c:55:50:2f:4d:b9:90:a1:e8:62:77:8d:2c:f0:57:da:ea:92:25:25:70:64:43:50

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 23, 2024

Minor OS version

0

Major OS version

4

Entry point

164094

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\a\1\s\build\source\bindings\csharp\csharp_int\Release\net461\AnyCPU\net461\Microsoft.CognitiveServices.Speech.csharp.pdb

Microsoft.CognitiveServices.Speech.extension.codec.dll

IMPHASH 54724d5ecaf8e70d17b1e592bdecc6b0
SHA256 b0f850fe0506ca682ea99c71660aa5b191911e4914fb35d71289935d0609e62e
MD5 f7671a90f10a954ef8588d8bf2b76514
SHA1 d1203707bd048bb02c87e8fe4e4ce801d7b947ee
SHA512 36b92e3f976dd0e59f5eb68e50753c8ceb63cde84ae404aa3398a37f3f0dc8c08d432abea05f71ae1383e1bdf51147a768290062f263e2e99b964c89a7e4dc9e
SSDEEP 1536:EMfPT3DTbYwsk14GUqxbc9W6EpjBRGkgc3DGP:EMfPfTbYwsk14B9W6EBT13u
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

58:ef:70:63:6c:da:16:6b:99:e3:60:29:f9:29:bb:35:94:f5:05:d0:2a:83:a2:49:e6:29:d1:b4:d4:66:23:33

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 23, 2024

Minor OS version

0

Major OS version

6

Entry point

41776

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\s\build\bin\Release\Microsoft.CognitiveServices.Speech.extension.codec.pdb

libgstreamer-1.0-0

gst_element_get_static_pad gst_pad_get_current_caps gst_pad_is_linked gst_pad_link gst_object_get_parent gst_caps_get_structure gst_structure_get_name gst_bin_add_many gst_element_link_filtered gst_element_link_many gst_bin_get_type gst_caps_new_simple gst_pipeline_new gst_element_set_state gst_element_get_bus gst_element_get_type gst_element_factory_make gst_bus_timed_pop_filtered gst_message_parse_error gst_sample_get_buffer gst_buffer_unmap gst_buffer_map gst_buffer_new_allocate gst_mini_object_unref gst_object_unref gst_init

libglib-2.0-0

g_free g_clear_error g_str_has_prefix

libgobject-2.0-0

g_signal_connect_data g_object_set g_type_check_instance_cast g_signal_emit_by_name

microsoft.cognitiveservices.speech.core

diagnostics_log_trace_message

dbghelp

SymInitialize SymFromAddr SymCleanup

kernel32

IsDebuggerPresent DisableThreadLibraryCalls GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext InitializeSListHead FormatMessageW LoadLibraryA GetProcAddress GetCurrentProcess GetLastError

msvcp140

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?_Xlength_error@std@@YAXPEBD@Z _Mtx_init_in_situ _Mtx_destroy_in_situ ?_Xbad_function_call@std@@YAXXZ _Xtime_get_ticks _Query_perf_counter _Query_perf_frequency ?_Xout_of_range@std@@YAXPEBD@Z _Thrd_sleep _Mtx_lock _Mtx_unlock ?_Throw_C_error@std@@YAXH@Z ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z ??Bid@locale@std@@QEAA_KXZ ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z ?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z ??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z ??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ?_Incref@facet@locale@std@@UEAAXXZ ?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A ?uncaught_exception@std@@YA_NXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

vcruntime140

__current_exception __current_exception_context __C_specific_handler __std_type_info_destroy_list __std_terminate _CxxThrowException __std_type_info_compare __std_exception_destroy __std_exception_copy memmove _purecall __std_type_info_name memcpy memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

_stricmp strlen wcslen

api-ms-win-crt-heap-l1-1-0

calloc _callnewh malloc free

api-ms-win-crt-runtime-l1-1-0

_cexit _initterm_e _crt_atexit _execute_onexit_table terminate _initterm _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _seh_filter_dll _invalid_parameter_noinfo_noreturn _configure_narrow_argv

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

Microsoft.CognitiveServices.Speech.extension.kws.dll

IMPHASH 5bcb72bfc3c5fd05445298d6226d2c16
SHA256 2d9a2d88e5caaa18f41e0226924ef66638cc0e6eaeebbf436a0b0f4844b42778
MD5 a9bd787929d16eab6fade0e103d75467
SHA1 5eda07ada6dd123ba6cc0d7a7cc23dead81288e4
SHA512 4de104b4df9c5a6b1320a4175f0d5376e5b9a435a165ab19006fc177de6ac75d543a4b940681e9527300c7712bbc0ffdd197eaca1bdf34388f5865dde47af032
SSDEEP 6144:cu0bMx71SflC8WC4aKb2u8oxxioCe7p4xOu:cJbMx5U88DV
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

75:0e:3c:c2:22:a4:0e:33:88:e9:40:ff:9a:dd:96:6a:be:6b:6e:82:4f:3a:37:c2:13:b5:00:3a:83:2e:ad:1b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 23, 2024

Minor OS version

0

Major OS version

6

Entry point

167872

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\s\build\bin\Release\Microsoft.CognitiveServices.Speech.extension.kws.pdb

microsoft.cognitiveservices.speech.core

diagnostics_log_trace_message

kernel32

GetFileSizeEx ReadFile CreateFile2 CloseHandle GetLastError RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime DisableThreadLibraryCalls IsDebuggerPresent GetProcAddress LoadLibraryA FormatMessageW InitializeSListHead

msvcp140

?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A ?__ExceptionPtrCreate@@YAXPEAX@Z ?__ExceptionPtrDestroy@@YAXPEAX@Z ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z ?__ExceptionPtrToBool@@YA_NPEBX@Z ?__ExceptionPtrCurrentException@@YAXPEAX@Z ?__ExceptionPtrRethrow@@YAXPEBX@Z ?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z ?_XGetLastError@std@@YAXXZ ?_Incref@facet@locale@std@@UEAAXXZ ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ _Mtx_destroy_in_situ _Mtx_init_in_situ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?_Xbad_function_call@std@@YAXXZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Throw_C_error@std@@YAXH@Z _Mtx_unlock _Mtx_lock ?uncaught_exception@std@@YA_NXZ ??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ ??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z ?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z ??Bid@locale@std@@QEAA_KXZ ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

vcruntime140

strchr __std_type_info_destroy_list __C_specific_handler memcmp __CxxFrameHandler3 memmove memcpy memset __std_exception_copy __std_type_info_name __std_exception_destroy __std_terminate __RTDynamicCast _CxxThrowException __std_type_info_compare _purecall

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strlen _stricmp ispunct wcslen

api-ms-win-crt-heap-l1-1-0

calloc free _callnewh malloc

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function _execute_onexit_table _crt_atexit _cexit _seh_filter_dll _initterm _initterm_e _initialize_onexit_table _invalid_parameter_noinfo_noreturn _configure_narrow_argv _initialize_narrow_environment

api-ms-win-crt-stdio-l1-1-0

fseek ftell fread fopen fclose __stdio_common_vsprintf_s rewind

api-ms-win-crt-convert-l1-1-0

mbstowcs_s

api-ms-win-crt-math-l1-1-0

cos sin log expf logf cosf sinf sqrt

dbghelp

SymCleanup SymInitialize SymFromAddr

Microsoft.Expression.Drawing.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5fef57e02bf07ec9aa01c18f2ec07993985c9322d267424808fa80ff33a65b50
MD5 1afcbec2626988a2f359bf06b9637639
SHA1 9a89d514646f4cb7e2d081b0299314ede639c340
SHA512 ce085f8ce7e08f0e5d9748ab733d98114ff9a564608b9f6ee9040be0224cef81023656c96ea17bfdbb9a7d20b4b572c46581b0825f1067cb88f43149cbd4d0d0
SSDEEP 3072:CaBPOWg2uLcdk6i/OKPA5Dgh/rM2Plf7sShhQ:P82ds/OyA5c3VsIh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

128350

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\ExpressionRTM\Sparkle\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\Microsoft.Expression.Drawing\Win32\Release\Microsoft.Expression.Drawing.pdb

Microsoft.Expression.Drawing.xml

SHA256 4e5c21b77cce2bb836f894e9d3fc8495597d95a3d1593390b9099d795747557b
MD5 f18d55d8df8068d06634a9928534014f
SHA1 dbe177b7affa9db1d2072b77e568220a61d85dca
SHA512 babb0a9ea1dca16302c123c08194a02a81b6955d7cd691f51847c0957ab884ab435c07b65a0c61cda7555624dcc3a997195820b0508dc72aa0aa1e09ef55a250
SSDEEP 768:SGh8IHtfr9DZBXn4A1UfRgOiPmqYLupd7KAdLVZI6T8sF:SDQDh4A1UzApBKAdLd
MD5 SHA1 SHA512 SSDEEP

Microsoft.Expression.Interactions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0fa3c9d0271561d3636baa1cb29da58dcf223bc54d112da9f91624198e164997
MD5 87f1247fac7bf6991334f76d33841b1a
SHA1 916d38c9f9aa1255929b5d9e3bbaaad5cf18c8f8
SHA512 2505283a5b96d8e7e5d6f678ea971734dbcf282d51bcf239f0504c14ef0882e7c4935b7a16ca739e5ebad56bf1970eda73867ecdc0e18355b4846e3ba576bb3d
SSDEEP 1536:Vrf5GttgxHXEuRmG5rtkGY4CEmWAxXSSYhhS98ca2Wvsd65FJD8qWwjEZ:l5GttWHXEUx5r65LxXshk8JDZWt
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

96798

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\ExpressionRTM\Sparkle\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\Microsoft.Expression.Interactions\Win32\Release\Microsoft.Expression.Interactions.pdb

Microsoft.Expression.Interactions.xml

SHA256 7adf38bb660a2cd6f0152effd315bc705574ff4a3ab655f0e0c138f79a972eec
MD5 ef46cb66a9f7361d2bd7e4737d930d85
SHA1 f49896684c8de37a27c28afd82752f868862fcef
SHA512 2d9e1e727563bf10ba583c306f65b2cae5b668700828a6da4f1d9a420b7a202e88e8687c60fad8b5094c3ac69bc25fcf1e58befa7fda61e5c154b00e28949e6b
SSDEEP 1536:eI8rQXkkXSGsL7Uh6xo2CDh9zRUOYj13nl0Bv/lM:eIvXdY53nky
MD5 SHA1 SHA512 SSDEEP

NahimicAPI.dll

IMPHASH 039fbf944e133da8a814ada0255d563e
SHA256 7434e6e74c537e097b93bc5291bdf89905fed240acbe6ecf969f15e7c8e112ce
MD5 905e12fa14adbd6eee33e1ef9fbe5652
SHA1 d2a5bc4943d3e64baf371bd6cacf4d30b16c8a6b
SHA512 e16bfedd350e820b07296082872ccc26171e47ccc7c065e593bcbaa1effb14d0a422aa57427a089d296417d8a0bb7723e189d6ab4ad9825a0b622bce5b12dc11
SSDEEP 6144:VQCLWNS2kHquxln/t/ZCKdBsI/JyYje9gKUe+SuU:yC6hSquxln/hZCXjee9gKD
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

40500

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\BuildAgent\work\5256e5950c1e059e\Out\Release\Win64\NahimicAPI.pdb

kernel32

EncodePointer SetEvent SetThreadLocale GetThreadLocale DecodePointer InitializeCriticalSectionEx DeleteCriticalSection GetModuleFileNameW LoadLibraryExW FindResourceW LoadResource WaitForSingleObjectEx SizeofResource MultiByteToWideChar GetLastError RaiseException lstrcmpiW GetModuleHandleW GetProcAddress FreeLibrary LeaveCriticalSection ResetEvent EnterCriticalSection WriteConsoleW CreateFileW SetFilePointerEx SetStdHandle GetStringTypeW GetTimeZoneInformation IsDebuggerPresent OutputDebugStringW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead InitializeCriticalSection TryEnterCriticalSection InitializeCriticalSectionAndSpinCount Sleep FormatMessageW CloseHandle GetModuleHandleExW HeapAlloc HeapReAlloc HeapFree GetProcessHeap WideCharToMultiByte RtlUnwindEx RtlPcToFileHeader InterlockedFlushSList SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleFileNameA HeapSize GetACP FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA CompareStringW LCMapStringW GetStdHandle GetFileType FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode CreateEventW

user32

CharLowerW CharNextW

advapi32

FreeSid RegDeleteValueW RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegEnumKeyExW RegQueryInfoKeyW RegCloseKey RegDeleteKeyW RegQueryValueExW

ole32

StringFromGUID2 CoTaskMemAlloc CoInitialize CoUninitialize PropVariantClear CoCreateInstance CoTaskMemRealloc CoTaskMemFree

oleaut32

LoadTypeLi LoadRegTypeLi RegisterTypeLi SafeArrayPutElement SafeArrayCreate SysAllocString SysStringLen UnRegisterTypeLi VarUI4FromStr SysFreeString

NvFunc.dll

IMPHASH 3e12cc2827619ae8af81adec58959fa1
SHA256 b85e0d94b142480354d2f804d231f7941b70a2e82c5ee67e0e52837af5d2b535
MD5 10121b5f50d85e56a8e35bb3fb5aff27
SHA1 1da622096b137f993ad0037fe40670eb71d6e6fb
SHA512 0f48dad74909846ed591084648c9973068b26679cc12c0a302384d6f539c410ff19d4220fdb9379e6ad41e250fc4c50ac6a3656b76cdab822ca161d95ea3a4ea
SSDEEP 768:V+YpNno83MD7VLV1RsHiJWy3NqQnUgwz:V9p4RjR1JL5UgI
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

25172

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\SoftwareCenter\x64\Release\NvFunc.pdb

OSD/CoreAudioApi.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 67ff7f0255a6138925b800917aaa116be943074f036c2e0641b9cd29ec058d5a
MD5 ebbb9792aac50e2e9cde01b67c442183
SHA1 1060cfd60dc8a29b9345ee2afea00b943ed283de
SHA512 ba65a8198db889b3c695da85d5cb878f72b21e4613031417affc90938645a51629593ea35fa08d0299df8e43efa9f68d97b4209747e295ba2225b88830db9e59
SSDEEP 384:9h6mmj/Kaf6SE9k5notL2Wau5TXMy16WE25dpy4tutLn4/LhQHg:a/KaCXkCtLDau5gqEstSnkh8g
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

32174

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\OSDwindow_ver_1_1\CoreAudioApi\obj\Release\CoreAudioApi.pdb

OSD/OSDwindow.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 05ef8cff094187b5d1bacf99310494b8c1821f47b0fa5085dd4f893975af6279
MD5 049f19ee12a9ed9d70b7bfc41403be5b
SHA1 948c11fc43504fa726dc83fbc9ccb1d62a960881
SHA512 dde5d447a3def41e89af67790f2782704524661922e52f4b34c9eda4fe65b5b56360b4b4719eabb0513c35c4072457464a3a373e3ef3b3fd3fbf4c69749f5533
SSDEEP 12288:xvGi/RZUNZkvDyalCu2utmqky/b2pvi31AxxxDxxxTPyQh/2MDB01R:NjCa41utTk+1AxxxDxxxTyu/N0D
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1130926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Steven\Desktop\ControlCenter\OSDwindow_ver_1_1\OSDwindow\obj\Release\OSDwindow.pdb

OpenHardwareMonitorLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9adbeccb3e9df271b178154cb538862a2b2fa7d01bbc508d6842d517c0221831
MD5 208a1d6bb7696532f386811a79834145
SHA1 20409b98cfbbb8efce3ec414b1c2b5e8f9fa68a6
SHA512 b272bce82a86e952a94efa8a1988f2f81e5fbdd1a453448176f37e159d96e4767200e8f25a401ae8cc5490bff1be14157a45204fd4bab168b3369ea7dad52727
SSDEEP 3072:ENBS+N+fkTQX5L2dhTCABvfjhZe5yND/n00cn40ltvhWt3elo4Zr:ENBNLTQX5SRBHjfD7n00cn4ctv0Vc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

271086

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ProfileData.xml

SHA256 60136cc5ca1c6b1fb0343e21c70e91c936f711a51f0f44edc35d5aceb1db0ff1
MD5 849ce4b954dc79189f08e58126043a0e
SHA1 3e0932ceb3988509d8d1a8c964bce84b2e006c6f
SHA512 3c8a8fc14eb5aad1153a5e34bd81870db145cd981be022f9dc53e173f8e8e7462df2057c0169a2a423136497e8bb04d5ca1e76b44f0666048168f52fd8c8321c
MD5 SHA1 SHA512

ProfileHelperModel.dll

SHA256 1e79bc350db126d95c8231335d8d6c6e44298b16ea092a8867de0b7e14d698e3
MD5 4f67e8f073716b243f64a0ed3b217987
SHA1 b15165ba029adc88d43b45191d91cd488f02ac35
SHA512 9b8a9f206d500faf310adf5509e820563a8870f5a93e58f48bfd320f6e579868817c71ca2de0b36bbf853253c2f1ffbf44e47e2a0f0fbd5707995e0b34103bbd
SSDEEP 1536:nNM6DlmQ6ipwnVTIjjk/AQHnHmL1tXnAtF6qQPt/Q+8iAHp+:nNM6v5pMsnuAoGL1tXnAtkwD0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

58:20:c4:31:62:29:fd:d0:e5:c7:3e:9e:06:b8:48:ba:68:22:3c:2b:34:ca:2e:09:f3:92:ec:de:f7:4f:d2:5c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 23, 2024

Digest

58:20:c4:31:62:29:fd:d0:e5:c7:3e:9e:06:b8:48:ba:68:22:3c:2b:34:ca:2e:09:f3:92:ec:de:f7:4f:d2:5c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Intel Corporation,OU=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Chains

Sep 15, 2021

CN=Intel Corporation,OU=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Subject

CN=Intel Corporation,OU=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Serial Number

a6:d3:c3:ef:46:15:3f:e1:eb:a3:2b:2c:bb:18:4c:87

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 12, 2021 - Apr 12, 2023

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Serial Number

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 22, 2015 - Jul 22, 2025

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 23, 2020 - Jan 22, 2032

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 15, 2020 - Dec 2, 2021

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0b:aa:c1:00:00:00:00:00:09

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

RecoveryF9.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 c762b592ebf3b1ca411a20b8915f72d2169f58a4102f6af21efa2a1f017bd5e1
MD5 a643487a204bd69f5d1d4193e62d0095
SHA1 6b05aa92d54f1c0558a5c522aff4749a93bf9864
SHA512 f0dd567ce3baf73692d0a866d242cb813998362caa021edba2fdc0d4d164ebf78cebf4c2f5c0df4b7c4d20af6c1e40e2911b4568d26086d4e4cf406fe1c1e1bb
SSDEEP 12288:q/2MDB0170Pz9xY8AtfPuktwEDSP55q9ukZSmjd4235:q/N0WHP29DPZ4235
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

789018

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Control Center\ControlCenter-20190828\RecoveryF9\RecoveryF9\obj\Release\RecoveryF9.pdb

SMV4_Service.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 52b01a29cae85ec47a3133e504ce824f6550e50facc8977440c2270f245a60a8
MD5 411eb7739836dc6937b70e0e34683f0f
SHA1 4003ab127c6790e53cc9a2b639305f0890e0b126
SHA512 7cc8b51d875554e6c650d9f77291d51b48a99a9f0bb59de537636ef5bc0407eb7cfab70b79a28b1cf1caf665e59fa1eb19ef861c58ea50665635824190a8fa6d
SSDEEP 384:4m7AlwfMs9sFf8sOa5cnV5YiIg1vDCOW0ab/aK1tw9BBBK84Ajjr5ZXhlipRNu+g:RAKfMU+ks/i7YiIg1o7bRhz/5Q
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

31938

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Steven\Desktop\ControlCenter\SMV4Service\obj\Release\SMV4_Service.pdb

Satellite.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 3a13e6bfe529efbaa2b7156a2451fc56198551fb5a53cada900a337da51b4d78
MD5 5355b79efae61b254ea4e3d4aedb92c1
SHA1 ad732b75b36cef10b7c74032f99137c58d5f59d7
SHA512 999fe1add88689c5e771656407459a1bf231aee8834a8e268aecb5d7e48251ea3aabbdf871d609cfc1d986d9b103d2e04cf9ee99437ee221e47b93238e8c7b35
SSDEEP 96:ULycDql1/1lqIdrhCe9dhBcLyi0XH7N+SV9z3K30AgzDnCNFpffWb/VzNt:ULyZ1/ZrhZdPxbNtV53o0FDnCNffWLv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

14270

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Code\UpdateAll\Satellite\obj\Release\Satellite.pdb

SetuUpInfDriver64.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 4009d57c2abd780e07fbfe808f58d5384803bc14b2ec4a8ef2c565fe4bd53eac
MD5 788ea7e0db417be7f5edfd092e7685e1
SHA1 819c9ba1358f94f935205112f812d18385099efa
SHA512 93c5449a517879dd6e7b1413451c3b789eef8f0136daf3623e2ba7f2794aea28d8c07210b03839df975aa44bce5dcffc86601e7797402d2ed3870aef3f5f6f0a
SSDEEP 384:6HDVXSjUpobRXeqvfZVpMBpCdxrZNXoshdm3/Yc/PC:8VXjpobffZV4pgXVs/Yc/PC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

20354

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Code\SetuUpInfDriver64\testInf\obj\Release\SetuUpInfDriver64.pdb

ShowAP.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 53ce52c13408c26e99e79414145bf5661d5e0085d8ccd2ba548b6bc8974c69c2
MD5 463ad7f61d22140786d8c86fd59d75a8
SHA1 08d8c58bd6f86c4a1a5b5a1df40e4b3113800580
SHA512 4c2f0994b6357ec5c06abd62425266819f48ca543dfa270f39865f72b6bc6c73b885bb4857b4435cd6d4606e2aa576bfd24ec49aa6133013e53b7fa38129c8ab
SSDEEP 192:eisnUwcKQMjWqjiAS6DPs/TD2EF7ClJyWoIvNY/FJrf3OQ2:eismKZqqGANsrSEFelJyWoIVY/F9f3OQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\AERO\Desktop\752\ShowAP\obj\Release\ShowAP.pdb

SmartDashboard.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0a6470db2966c48ded27389a11aa085e8f6c96e8b6a8931d3bb4edbcd19aeec2
MD5 ec55d2c6cf701b855121008558b28fcb
SHA1 6d6673da9f8cbc1a7bba84ffab3b43aa66bda02e
SHA512 c1986e64b20aba25317af4b071ae1285835c4d57afdf197c52879d38d00029fa3b0d7af44bf026ec2d26b5ec33076031ddb38623c137f1f91d8de4c24ef3bdb6
SSDEEP 6144:Qu7NYYANkVb68rxCDTyaOXV7htnABCmDXa6aZ/p54x24MDB0y2RnRl:QGNYYAN0CDTyDV76C69aZ/2MDB01dX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

529502

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\SmartDashboard\SmartDashboard\obj\Release\SmartDashboard.pdb

SmartManager.dll

SHA256 10f04c78e0911b26556fb52c213dfd318466f576192aebc4df476fb391893eaf
MD5 e40a2e85bece0708d3c27edc1ba301f9
SHA1 71f40b4ce3b5b9c7aa8663fede8ec5349313bac3
SHA512 42c3aeb76471fc8d628016f0b244fbfb7f9970d0a08a8b8e034a08a3710665da0b85124847ce4c4d544309136520eec315c24cc5e419f420559091698b0f1a4b
SSDEEP 6144:fPW5kFrHLPgUZ9to1Y4/rjx0XEp3bvE8VRXy6F:fzrPZ9to1hzjCXEpVVRC6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\SmartManager\obj\x64\Release\SmartManager.pdb

SmartUpdate.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5125976f7dc8509eef477e073a5f160d1bf8d0a0d68ba7210b421e7171fd4882
MD5 9ddebd1bcf81fb41326001ada2496cbe
SHA1 5bade37a3cbab60128a6a6707e55e9d42effe8c1
SHA512 41069f7adcf4a89c800d3fa38c892bd723b9a147435c3f61f277edbe84e8263fb94a830cb795f1a6a551d4cb7a66f038f18d6d30930c9dbd60e773b672fdf677
SSDEEP 6144:dVEtx2lvO6Y/p54x24MDB0y2R0xVk5i6BOiu9kBb+WxLSXN7nVvFfxLU+:/GX/2MDB01WjSBHb+WxLS97pJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

662686

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\SmartUpdate\obj\Release\SmartUpdate.pdb

System.Management.Automation.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1c6dd7935a15c026f69c6f687f21b83d06c69fa089ed26b10fe2a08e68fe1acb
MD5 6ca7d39d5e569cc91538dd29b88fdaea
SHA1 c669667bb4d7870bc8bb65365d30071eb7fb86fe
SHA512 dc43da507c93a121235134b7acc4508bcd45bb9084852d4d39ab508c53fc41a44d386340c303865c1200d43b0f5c1a401d98958fea9fa6ddab10c3fbd0587610
SSDEEP 24576:N+3JJmqlMky1OVC64CZfftlMDXXZ4bwgEaJiY93bVfZo0VxHccM81rNq0Rxg/pOP:NI1C6htl8X1gnJHRfL5q0Rxg/pO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

2681406

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

System.Management.Automation.pdb

UpdateAllRestoreDefault.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 c4037b262ee969d3f24cca094f4c98e925c5fe1a9388240e7018da0c6672e085
MD5 ddf6d67921820f5eb965e35192a21266
SHA1 5f98580e5feec04d9d6ce231ac8869cefd13c9e7
SHA512 928c8b99c6edfea475ab88769a8ef6592342bfaaecd61dd52e921913d82d8353c82161dcd26b597971f6b6e04f59acad5919307b18291ec2a54f52d074566579
SSDEEP 6144:ibW/p54x24MDB0y2Ry00Pp19xY/UAtzDPx4k00wEOcLUV1Wu:1/2MDB0170Pz9xY8AtfPuktwED+Wu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

584018

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\ControlCenter\ControlCenter-20210205\UpdateAll\UpdateAll\obj\Release\UpdateAllRestoreDefault.pdb

UtilityCenter.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 014cb822606755c3d4ebbdcbf6118102207e597fa9f72a33a2a2165815560235
MD5 23f0d98dde37b4137a20a9c0c9b32290
SHA1 01b8ff542e67727e427a9d65c3229f4fbb44f1ed
SHA512 a652a3987bb052f8bface8ba4e5ffd24b4f1560864e6ce57cd2f9f2021c8fcd76ba195557dd2219e61b270c1b569f23549ab3d0c9b4fdb6605f0c4488bf2d8d5
SSDEEP 6144:bPRP6LpbJucz9ZliZN/p54x24MDB0y2Rw:bPRP808Z+N/2MDB01i
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

359822

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Steven\Desktop\ControlCenter\SoftwareCenter\UtilityCenter\obj\Release\UtilityCenter.pdb

VC_redist.x64.exe

IMPHASH 1a5cdbf711fee14b077e599d13fddab2
SHA256 b1a32c71a6b7d5978904fb223763263ea5a7eb23b2c44a0d60e90d234ad99178
MD5 27e0d7f6c72adf9430418091d1de6ff0
SHA1 1786ee165231d491f209fd27b6e3029556af25bc
SHA512 c640d4f58fca15c4fd7253b77e7707ff5efc3cca24c41c4bafdd4c1a8d44f260207528fcb981dd671403801192ebad28c9e37cb8c1451f72e39daa5c458353e8
SSDEEP 393216:fRlptVYmfr7yBG/4ICAf58xUbKF5I4PKR5hf:fDpttD7yBG/QAOxPI4PKpf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

6c:64:f9:3b:0d:7c:57:11:e0:0b:9d:f4:22:2b:37:53:45:80:d2:fc:12:4c:c7:03:c8:78:3f:cb:22:55:03:05

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 23, 2024

Minor OS version

1

Major OS version

5

Entry point

188525

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

C:\agent\_work\8\s\build\ship\x86\burn.pdb

advapi32

RegCloseKey RegOpenKeyExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW InitiateSystemShutdownExW GetUserNameW RegQueryValueExW RegDeleteValueW ConvertStringSecurityDescriptorToSecurityDescriptorW DecryptFileW CreateWellKnownSid InitializeAcl SetEntriesInAclW ChangeServiceConfigW CloseServiceHandle ControlService OpenSCManagerW OpenServiceW QueryServiceStatus SetNamedSecurityInfoW CheckTokenMembership AllocateAndInitializeSid SetEntriesInAclA SetSecurityDescriptorGroup SetSecurityDescriptorOwner SetSecurityDescriptorDacl InitializeSecurityDescriptor RegSetValueExW RegQueryInfoKeyW RegEnumValueW RegEnumKeyExW RegDeleteKeyW RegCreateKeyExW GetTokenInformation CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext CryptAcquireContextW QueryServiceConfigW

user32

GetMessageW PostMessageW IsWindow WaitForInputIdle PostQuitMessage PeekMessageW MsgWaitForMultipleObjects PostThreadMessageW GetMonitorInfoW MonitorFromPoint IsDialogMessageW LoadCursorW LoadBitmapW SetWindowLongW GetWindowLongW GetCursorPos MessageBoxW CreateWindowExW UnregisterClassW RegisterClassW DefWindowProcW DispatchMessageW TranslateMessage

oleaut32

SysFreeString SysAllocString VariantInit VariantClear

gdi32

CreateCompatibleDC DeleteObject SelectObject StretchBlt GetObjectW DeleteDC

shell32

SHGetFolderPathW CommandLineToArgvW ShellExecuteExW

ole32

CoUninitialize CoInitializeEx CoInitialize StringFromGUID2 CoCreateInstance CoTaskMemFree CoInitializeSecurity CLSIDFromProgID

kernel32

GetCommandLineA GetCPInfo GetOEMCP CloseHandle CreateFileW GetProcAddress LocalFree HeapSetInformation GetLastError GetModuleHandleW FormatMessageW lstrlenA lstrlenW MultiByteToWideChar WideCharToMultiByte LCMapStringW Sleep GetLocalTime GetModuleFileNameW ExpandEnvironmentStringsW GetTempPathW GetTempFileNameW CreateDirectoryW GetFullPathNameW CompareStringW GetCurrentProcessId WriteFile SetFilePointer LoadLibraryW GetSystemDirectoryW CreateFileA HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap FindClose GetCommandLineW GetCurrentDirectoryW RemoveDirectoryW SetFileAttributesW GetFileAttributesW DeleteFileW FindFirstFileW FindNextFileW MoveFileExW GetCurrentProcess GetCurrentThreadId InitializeCriticalSection DeleteCriticalSection ReleaseMutex GetEnvironmentStringsW TlsGetValue TlsSetValue TlsFree CreateProcessW GetVersionExW VerSetConditionMask FreeLibrary EnterCriticalSection LeaveCriticalSection GetSystemTime GetNativeSystemInfo GetModuleHandleExW GetWindowsDirectoryW GetSystemWow64DirectoryW GetComputerNameW VerifyVersionInfoW GetVolumePathNameW GetDateFormatW GetSystemDefaultLangID GetUserDefaultLangID GetStringTypeW ReadFile SetFilePointerEx DuplicateHandle InterlockedExchange InterlockedCompareExchange CreateEventW ProcessIdToSessionId OpenProcess GetProcessId WaitForSingleObject ConnectNamedPipe SetNamedPipeHandleState CreateNamedPipeW CreateThread GetExitCodeThread SetEvent WaitForMultipleObjects InterlockedIncrement InterlockedDecrement ResetEvent SetEndOfFile SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime CompareStringA GetExitCodeProcess SetThreadExecutionState CopyFileExW MapViewOfFile UnmapViewOfFile CreateMutexW CreateFileMappingW GetThreadLocale IsValidCodePage FreeEnvironmentStringsW TlsAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers DecodePointer WriteConsoleW GetModuleHandleA GlobalAlloc GlobalFree GetFileSizeEx CopyFileW VirtualAlloc VirtualFree SystemTimeToTzSpecificLocalTime GetTimeZoneInformation SystemTimeToFileTime GetSystemInfo VirtualProtect VirtualQuery SetCurrentDirectoryW FindFirstFileExW GetFileType GetACP ExitProcess GetStdHandle LoadLibraryExW InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind SetLastError LoadLibraryExA

rpcrt4

UuidCreate

Name

.text

Size

294KB

Virtual Size

293KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

123KB

Virtual Size

122KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wixburn

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

WPF.FlipView.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 aa79b13de77b07917db8b087e15e747f733e8c9be437bd0525415ff028548270
MD5 7b553520b6b67ed57393fb0ec3abedd5
SHA1 347ca3135ed34e415c275fcdb942cf2bf9475fa8
SHA512 44be1c0c85acb18aa1f54ce418904f4c640c641425c4daaafba43cffb309e5234bce112a36e29eea2c0a940951f166778a3f4d83c8540f5fadfe450ca83c9db2
SSDEEP 192:VMCgn8g4evlN9rJ1SlbodKEg4rt59RRg9+oh6cT+VwCumcnhENnSAWxrw3qK/JAW:CCgn74gNgbgt5TIhYM/eExrwzsnIPi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

21474

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\ControlCenter\ControlCenter20200117\UpdateAll\WPF.FlipView\obj\Release\WPF.FlipView.pdb

WPFToolkit.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 aef9fcbb874fc82e151e32279330061f8f22a77c05f583a0cb5e5696654ac456
MD5 195ed09e0b4f3b09ea4a3b67a0d3f396
SHA1 01a250631397c93c4aab9a777a86e39fd8d84f09
SHA512 b801c03efa3e8079366a7782d2634a3686d88f64c3c31a03aa5ce71b7bf472766724d209290c231d55da89dd4f03bd1c0153ffeb514e1d5d408cc2c713cd4098
SSDEEP 6144:ABk34hZ9hNZbkDu0WtH7epyiNrt3329rzSkmN0OE0QxlmGJcdBI8rO7le2LvFVNs:OhuUiNrt33sSkmN0OE0QyGJeBwL/G5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

78:ad:59:01:6e:90:b6:bb:0e:e2:71:c2:d6:d0:1b:d7:70:a4:ac:e8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Mar 2, 2010

Minor OS version

0

Major OS version

4

Entry point

467006

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\dd\WPF_1\src\wpf\src\ControlsPack\WPFToolkit\obj\Release\WPFToolkit.pdb

XTUSetup.exe

IMPHASH d7e2fd259780271687ffca462b9e69b7
SHA256 762005e092af832c54d6ca9876939d6969b24caf2691b6c4a9cb733b3acb0f9a
MD5 18dc6db72fe4a6833cf2de1268a1fa0a
SHA1 436b785dc66a1d9d8a0541bfa4b338520c689cb5
SHA512 c00b7a3e46bf971cc65eac018a4bfea31c82be6f0fd117eed783fcaaaab669384ff6c7bf00c013bf1dcd4ae28458689e7a741758e605c0e843f810f821e56cf2
SSDEEP 393216:7fO3YyiaVNf8U5KyIY9wru1vcnLbr2cs5UBtvSBgFgQJZyLPKQo+PGewu9Cv:7fOnN06KyIkcnLbrHs5+SwgAZyLBo+Gb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

78:5a:ef:4d:a2:7c:23:11:83:68:0d:9b:5c:90:46:8b:c8:74:87:e3:17:5b:5c:39:19:9f:34:b7:3d:2b:1f:e8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Intel Corporation,OU=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Chains

Sep 16, 2021

CN=Intel Corporation,OU=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Subject

CN=Intel Corporation,OU=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Serial Number

a6:d3:c3:ef:46:15:3f:e1:eb:a3:2b:2c:bb:18:4c:87

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 12, 2021 - Apr 12, 2023

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Serial Number

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 22, 2015 - Jul 22, 2025

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 23, 2020 - Jan 22, 2032

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

1

Major OS version

5

Entry point

189094

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

C:\agent\_work\8\s\build\ship\x86\burn.pdb

advapi32

RegCloseKey RegOpenKeyExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW InitiateSystemShutdownExW GetUserNameW RegQueryValueExW RegDeleteValueW CloseEventLog OpenEventLogW ReportEventW ConvertStringSecurityDescriptorToSecurityDescriptorW DecryptFileW CreateWellKnownSid InitializeAcl SetEntriesInAclW ChangeServiceConfigW CloseServiceHandle ControlService OpenSCManagerW OpenServiceW QueryServiceStatus SetNamedSecurityInfoW CheckTokenMembership AllocateAndInitializeSid SetEntriesInAclA SetSecurityDescriptorGroup SetSecurityDescriptorOwner SetSecurityDescriptorDacl InitializeSecurityDescriptor RegSetValueExW RegQueryInfoKeyW RegEnumValueW RegEnumKeyExW RegDeleteKeyW RegCreateKeyExW GetTokenInformation CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext CryptAcquireContextW QueryServiceConfigW

user32

PeekMessageW PostMessageW IsWindow WaitForInputIdle PostQuitMessage GetMessageW TranslateMessage MsgWaitForMultipleObjects PostThreadMessageW GetMonitorInfoW MonitorFromPoint IsDialogMessageW LoadCursorW LoadBitmapW SetWindowLongW GetWindowLongW GetCursorPos MessageBoxW CreateWindowExW UnregisterClassW RegisterClassW DefWindowProcW DispatchMessageW

oleaut32

VariantInit SysAllocString VariantClear SysFreeString

gdi32

DeleteDC DeleteObject SelectObject StretchBlt GetObjectW CreateCompatibleDC

shell32

CommandLineToArgvW SHGetFolderPathW ShellExecuteExW

ole32

CoUninitialize CoInitializeEx CoInitialize StringFromGUID2 CoCreateInstance CoTaskMemFree CLSIDFromProgID CoInitializeSecurity

kernel32

GetCommandLineA GetCPInfo GetOEMCP CloseHandle CreateFileW GetProcAddress LocalFree HeapSetInformation GetLastError GetModuleHandleW FormatMessageW lstrlenA lstrlenW MultiByteToWideChar WideCharToMultiByte LCMapStringW Sleep GetLocalTime GetModuleFileNameW ExpandEnvironmentStringsW GetTempPathW GetTempFileNameW CreateDirectoryW GetFullPathNameW CompareStringW GetCurrentProcessId WriteFile SetFilePointer LoadLibraryW GetSystemDirectoryW CreateFileA HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap FindClose GetCommandLineW GetCurrentDirectoryW RemoveDirectoryW SetFileAttributesW GetFileAttributesW DeleteFileW FindFirstFileW FindNextFileW MoveFileExW GetCurrentProcess GetCurrentThreadId InitializeCriticalSection DeleteCriticalSection ReleaseMutex TlsAlloc TlsGetValue TlsSetValue TlsFree CreateProcessW GetVersionExW VerSetConditionMask FreeLibrary EnterCriticalSection LeaveCriticalSection GetSystemTime GetNativeSystemInfo GetModuleHandleExW GetWindowsDirectoryW GetSystemWow64DirectoryW GetEnvironmentStringsW VerifyVersionInfoW GetVolumePathNameW GetDateFormatW GetUserDefaultUILanguage GetSystemDefaultLangID GetUserDefaultLangID GetStringTypeW ReadFile SetFilePointerEx DuplicateHandle InterlockedExchange InterlockedCompareExchange LoadLibraryExW CreateEventW ProcessIdToSessionId OpenProcess GetProcessId WaitForSingleObject ConnectNamedPipe SetNamedPipeHandleState CreateNamedPipeW CreateThread GetExitCodeThread SetEvent WaitForMultipleObjects InterlockedIncrement InterlockedDecrement ResetEvent SetEndOfFile SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime CompareStringA GetExitCodeProcess SetThreadExecutionState CopyFileExW MapViewOfFile UnmapViewOfFile CreateMutexW CreateFileMappingW GetThreadLocale IsValidCodePage FindFirstFileExW FreeEnvironmentStringsW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers DecodePointer WriteConsoleW GetModuleHandleA GlobalAlloc GlobalFree GetFileSizeEx CopyFileW VirtualAlloc VirtualFree SystemTimeToTzSpecificLocalTime GetTimeZoneInformation SystemTimeToFileTime GetSystemInfo VirtualProtect VirtualQuery GetComputerNameW SetCurrentDirectoryW GetFileType GetACP ExitProcess GetStdHandle InitializeCriticalSectionAndSpinCount SetLastError RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RaiseException LoadLibraryExA

rpcrt4

UuidCreate

XtuCommon.dll

SHA256 01f95f9d7e34e6b5064d87d048e4782823482c126fe810cdc6f1bb0ccf846147
MD5 cdc1c8716722afa897abdfd34853d722
SHA1 19a951d6d3674e4bfaaf5a0921e822b876c6d8a3
SHA512 f343648ae999acf894442bd7b02ff0391e1d8d39aabc74b4fec9ed7011c8a4889b3dddabe6619204075a8b91e09c6b371990da222e72a5bb41d2cbc93cff7ab4
SSDEEP 12288:YbIDMBx8AoXXFLgsYegmHVcueSgZA3zfyoGs0:Bexmss6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

23:77:a8:2c:46:f0:a2:0d:97:0d:44:3c:16:ed:9e:19:4f:bf:34:92:95:cb:e3:85:58:e8:f6:ae:05:e6:1b:b7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 23, 2024

Digest

23:77:a8:2c:46:f0:a2:0d:97:0d:44:3c:16:ed:9e:19:4f:bf:34:92:95:cb:e3:85:58:e8:f6:ae:05:e6:1b:b7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Intel Corporation,OU=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Chains

Sep 15, 2021

CN=Intel Corporation,OU=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Subject

CN=Intel Corporation,OU=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Serial Number

a6:d3:c3:ef:46:15:3f:e1:eb:a3:2b:2c:bb:18:4c:87

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 12, 2021 - Apr 12, 2023

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Serial Number

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 22, 2015 - Jul 22, 2025

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 23, 2020 - Jan 22, 2032

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 15, 2020 - Dec 2, 2021

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0b:aa:c1:00:00:00:00:00:09

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

a_icon.ico

SHA256 67b4efe2d2e13e70fe12ca8ab47f3979792c841349b6fecd430b09c210dddc92
MD5 d10b8832843f31fd97354ffdeacf39a6
SHA1 a48e3f5bbbec92ad581bbf43f10795fc90d6f9c1
SHA512 e292516547de4f0d25e8c415a37cca6d3b543c4aaf54531662c89c2b7fbb0bbd37251636bf5d3276dd83b507ea429580e4f68f06e8cc3a60c15a55f9c5a33635
SSDEEP 768:EhPeAyLqsQ+lIrunB7OzLACuSX5m7FwaHQ1+2kF87nN9ASfxe35PEu5Qkwh6A4ZT:6VQY2Oz/uKiTw3kFqfx+RB5QkK4cy
MD5 SHA1 SHA512 SSDEEP

bcdedit.exe

IMPHASH 2137581c3b28d7b500b0c8eb08ee2057
SHA256 4d922e307aab064f072017593ca0d77f2599096696ef15c5e92137e915a51b8b
MD5 f9c28576dcb87442ae2a7ffd8e48d30e
SHA1 4b6fbd0608cff57205628c1fc72ac60a02bfdf68
SHA512 9807e3f1265db56e52e22089ad1f096774f2588fc8fa6776cd259d68f08cc7f1ad782df0a83d79b654b802449ea07388b4f6d23f9f7cf7b840a781d6eebf6fb4
SSDEEP 6144:Ac+I6NFfE7yesVdvc0pkhFf8NuH98Ka7ssAV:Ac+I6NR1esDOFEEH2l7sZ
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

PE Signature issue

Digest

dc:ef:9f:a2:59:66:1d:f6:e1:03:37:11:ac:12:18:d4:02:74:99:e0:b7:9f:d5:6f:5f:86:85:27:c4:3b:a7:7d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 23, 2024

Minor OS version

0

Major OS version

10

Entry point

189248

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bcdedit.pdb

msvcrt

_commode ?terminate@@YAXXZ _fmode __C_specific_handler _initterm __setusermatherr _cexit _exit memmove __set_app_type __wgetmainargs _amsg_exit _XcptFilter towupper iswspace _vsnwprintf wcschr _ui64tow_s _wcstoui64 wcstoul memcpy _wcsicmp _wtoi wcscpy_s memcmp _wcsnicmp fflush fwprintf _wsetlocale __iob_func _vsnwprintf_s wcscat_s _ultow_s wcsrchr wcsncpy_s wcsstr wcsnlen _wcsupr strncmp _snwscanf_s _wcslwr _aligned_free _aligned_malloc free malloc wcsncmp bsearch vswprintf_s _vscwprintf swprintf_s exit memset

ntdll

ZwOpenMutant ZwClose ZwQuerySystemInformation RtlAppendUnicodeToString ZwQueryAttributesFile RtlLengthSecurityDescriptor RtlSetOwnerSecurityDescriptor RtlSetDaclSecurityDescriptor ZwCreateFile ZwCreateKey ZwLoadKey RtlAddAccessAllowedAceEx RtlAllocateAndInitializeSid RtlLengthSid ZwDeleteValueKey ZwSaveKey RtlFreeSid ZwDeleteKey ZwEnumerateKey ZwQueryValueKey RtlCreateAcl ZwSetSecurityObject ZwUnloadKey RtlCreateSecurityDescriptor ZwSetValueKey ZwOpenKey LdrGetProcedureAddress ZwQueryVolumeInformationFile LdrGetDllHandle ZwQueryInformationProcess ZwDeleteFile ZwQueryInformationFile ZwOpenProcess NtQuerySystemInformation ZwQuerySymbolicLinkObject ZwDeviceIoControlFile ZwOpenSymbolicLinkObject ZwAllocateUuids NtAdjustPrivilegesToken NtOpenProcessTokenEx ZwOpenFile NtOpenThreadTokenEx RtlImpersonateSelf NtOpenSymbolicLinkObject NtOpenKey NtQuerySymbolicLinkObject NtDeviceIoControlFile NtSetValueKey NtQueryValueKey NtDeleteKey NtQueryBootEntryOrder NtQueryBootOptions NtSetSecurityObject NtTranslateFilePath NtOpenDirectoryObject NtQueryDirectoryObject NtEnumerateBootEntries NtCreateKey RtlUpcaseUnicodeChar RtlRunOnceComplete RtlRunOnceBeginInitialize RtlFindNextForwardRunClear RtlNumberOfSetBits RtlInitializeSRWLock RtlReleaseSRWLockExclusive RtlAcquireSRWLockExclusive ZwQueryKey ZwWaitForSingleObject RtlInitAnsiString NtSetInformationThread RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext NtClose NtOpenFile RtlStringFromGUID RtlDosPathNameToNtPathName_U RtlFreeUnicodeString RtlCompareMemory RtlGUIDFromString RtlInitUnicodeString RtlIpv6StringToAddressW RtlFreeHeap RtlNtStatusToDosError RtlAllocateHeap ZwReleaseMutant

api-ms-win-core-localization-l1-2-0

GetLocaleInfoW FormatMessageW

api-ms-win-core-heap-obsolete-l1-1-0

LocalFree

api-ms-win-core-libraryloader-l1-1-0

GetProcAddress LoadLibraryExW GetModuleHandleW FindResourceExW LoadResource FreeLibrary GetModuleFileNameW

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter SetLastError UnhandledExceptionFilter GetLastError

api-ms-win-core-console-l1-1-0

GetConsoleMode GetConsoleOutputCP WriteConsoleW

api-ms-win-core-file-l1-2-0

GetVolumeNameForVolumeMountPointW

api-ms-win-core-file-l1-1-0

CreateFileW QueryDosDeviceW ReadFile GetFileType WriteFile GetFinalPathNameByHandleW FlushFileBuffers SetFilePointerEx SetEndOfFile GetFileSizeEx

api-ms-win-core-processenvironment-l1-1-0

GetStdHandle SearchPathW

api-ms-win-core-string-l1-1-0

WideCharToMultiByte

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId TerminateProcess TlsSetValue GetCurrentThreadId GetCurrentProcess TlsGetValue TlsFree TlsAlloc

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount GetSystemTimeAsFileTime GetVersionExW

api-ms-win-core-synch-l1-1-0

EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount

api-ms-win-security-base-l1-1-0

GetSidLengthRequired IsValidSecurityDescriptor DestroyPrivateObjectSecurity GetSecurityDescriptorLength GetAce SetSecurityDescriptorGroup MakeSelfRelativeSD GetSidSubAuthority InitializeSecurityDescriptor GetSecurityDescriptorControl IsValidSid SetSecurityDescriptorOwner CreatePrivateObjectSecurityWithMultipleInheritance InitializeSid SetSecurityDescriptorDacl AddAccessAllowedAce GetLengthSid SetPrivateObjectSecurityEx InitializeAcl

cryptsp

CryptGenRandom CryptReleaseContext CryptAcquireContextA

api-ms-win-core-registry-l1-1-0

RegCloseKey RegOpenKeyExW RegQueryValueExW

api-ms-win-core-localization-obsolete-l1-1-0

GetSystemDefaultUILanguage GetUserDefaultUILanguage

api-ms-win-core-memory-l1-1-0

CreateFileMappingW MapViewOfFile UnmapViewOfFile

Name

.text

Size

183KB

Virtual Size

183KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

PAGE

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

105KB

Virtual Size

105KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

152KB

Virtual Size

152KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

boost/P75VD/i73060/creator.xml

SHA256 c32ddc0a25ca2a4731f69b6c9d11882a58f4faa34088f73d272235a377633f78
MD5 189ec941912e4545b65e394fa0beb69f
SHA1 452fabb656bb9729087eaabf145050952e0b3a2b
SHA512 2ef31d4fd673e199f5bc8989e6975b0e1908c50c675cc8e565ecc2d2d335c96c756c377b71cb8dfaf10fc1d01b3a8402d100635bc1941b1f5b894db831dbd7af
SSDEEP 192:i3qYwlIKdnpdQ3oyjypN9lyaiJvlxo/oiKDU5Z6aTmfO2hsF+0rOXT7RStfr1kYF:iNW8xG
MD5 SHA1 SHA512 SSDEEP

boost/P75VD/i73060/game.xml

SHA256 26fe16cc5a2143f0b757e23acc35037cd3764442dee6f4b1880391beb9888b7e
MD5 221a21d4d478e5038e5038db6ccfc20a
SHA1 dc3fec9e60a42dbc9cbe536d94194ea22d8fc7ab
SHA512 8861f2a9fbbd25f6a588554b05197aaa15c701fc6988a5e59c4c60e9e69cce0f293a37c9f85ede1be37f5755a2cca625f077a3a78e2ddf8dca2d6107daf35bcb
SSDEEP 3072:Js4lTM+8L9975NmcU/0IQsiD6aAR+lR3LRvvB69U1rl2GfGHukOYduOl3:Js4lTM+8L997llR3LZvB69U1rl7fQUYf
MD5 SHA1 SHA512 SSDEEP

boost/P75VD/i73060/meeting.xml

SHA256 a7f42d7ee1907a53f2019dc12acba23c22bb0bac91c4981fa1455d2d495c109d
MD5 2419f3b2a0205cdd6a7dab7a7874ee99
SHA1 eb2a619871c262bf2d501b1b674c2fe958d6ae2f
SHA512 1093d8a493b7da7a097c8e1e7cd9d192297a779bff0e8346d494e0b749f34ee3614a34279c9f06e11e0b13f19282ac20c9f4dc377201c3a46910e921c4fb955d
SSDEEP 96:0zh4TUL62rUA9n62rUX62rUv62rUQp62rU/62rUQ:G9L63m63X63v63y63/63Q
MD5 SHA1 SHA512 SSDEEP

boost/P75VD/i73060/performance.xml

SHA256 d384f738edd350ad6eb22a865bb10b8dd734c09528a5ccb13efad3ca67dbf923
MD5 7a9a79ca5af98d78f05755a04e67fae9
SHA1 7eba221cd6fa2f4dbc97af79196ca86a8a292331
SHA512 86d16e284d70ffcc739120f8b755bf1dae64b79197febfade220cb3009b350016c0ee521ce992ea67127fb9b92c217130ba8df95d1c212a26d0e7c9d33a3a054
SSDEEP 192:EtUbURUmUlUmUXUYuWUTcUhUGUcUuftxVcwygwEdL0Uv050rOV0twbwJ69j7pJsh:Sc+g
MD5 SHA1 SHA512 SSDEEP

boost/P75VD/i73070/creator.xml

SHA256 c32ddc0a25ca2a4731f69b6c9d11882a58f4faa34088f73d272235a377633f78
MD5 189ec941912e4545b65e394fa0beb69f
SHA1 452fabb656bb9729087eaabf145050952e0b3a2b
SHA512 2ef31d4fd673e199f5bc8989e6975b0e1908c50c675cc8e565ecc2d2d335c96c756c377b71cb8dfaf10fc1d01b3a8402d100635bc1941b1f5b894db831dbd7af
SSDEEP 192:i3qYwlIKdnpdQ3oyjypN9lyaiJvlxo/oiKDU5Z6aTmfO2hsF+0rOXT7RStfr1kYF:iNW8xG
MD5 SHA1 SHA512 SSDEEP

boost/P75VD/i73070/game.xml

SHA256 26fe16cc5a2143f0b757e23acc35037cd3764442dee6f4b1880391beb9888b7e
MD5 221a21d4d478e5038e5038db6ccfc20a
SHA1 dc3fec9e60a42dbc9cbe536d94194ea22d8fc7ab
SHA512 8861f2a9fbbd25f6a588554b05197aaa15c701fc6988a5e59c4c60e9e69cce0f293a37c9f85ede1be37f5755a2cca625f077a3a78e2ddf8dca2d6107daf35bcb
SSDEEP 3072:Js4lTM+8L9975NmcU/0IQsiD6aAR+lR3LRvvB69U1rl2GfGHukOYduOl3:Js4lTM+8L997llR3LZvB69U1rl7fQUYf
MD5 SHA1 SHA512 SSDEEP

boost/P75VD/i73070/meeting.xml

SHA256 a7f42d7ee1907a53f2019dc12acba23c22bb0bac91c4981fa1455d2d495c109d
MD5 2419f3b2a0205cdd6a7dab7a7874ee99
SHA1 eb2a619871c262bf2d501b1b674c2fe958d6ae2f
SHA512 1093d8a493b7da7a097c8e1e7cd9d192297a779bff0e8346d494e0b749f34ee3614a34279c9f06e11e0b13f19282ac20c9f4dc377201c3a46910e921c4fb955d
SSDEEP 96:0zh4TUL62rUA9n62rUX62rUv62rUQp62rU/62rUQ:G9L63m63X63v63y63/63Q
MD5 SHA1 SHA512 SSDEEP

boost/P75VD/i73070/performance.xml

SHA256 d384f738edd350ad6eb22a865bb10b8dd734c09528a5ccb13efad3ca67dbf923
MD5 7a9a79ca5af98d78f05755a04e67fae9
SHA1 7eba221cd6fa2f4dbc97af79196ca86a8a292331
SHA512 86d16e284d70ffcc739120f8b755bf1dae64b79197febfade220cb3009b350016c0ee521ce992ea67127fb9b92c217130ba8df95d1c212a26d0e7c9d33a3a054
SSDEEP 192:EtUbURUmUlUmUXUYuWUTcUhUGUcUuftxVcwygwEdL0Uv050rOV0twbwJ69j7pJsh:Sc+g
MD5 SHA1 SHA512 SSDEEP

boost/P75VD/i73080/creator.xml

SHA256 c32ddc0a25ca2a4731f69b6c9d11882a58f4faa34088f73d272235a377633f78
MD5 189ec941912e4545b65e394fa0beb69f
SHA1 452fabb656bb9729087eaabf145050952e0b3a2b
SHA512 2ef31d4fd673e199f5bc8989e6975b0e1908c50c675cc8e565ecc2d2d335c96c756c377b71cb8dfaf10fc1d01b3a8402d100635bc1941b1f5b894db831dbd7af
SSDEEP 192:i3qYwlIKdnpdQ3oyjypN9lyaiJvlxo/oiKDU5Z6aTmfO2hsF+0rOXT7RStfr1kYF:iNW8xG
MD5 SHA1 SHA512 SSDEEP

boost/P75VD/i73080/game.xml

SHA256 26fe16cc5a2143f0b757e23acc35037cd3764442dee6f4b1880391beb9888b7e
MD5 221a21d4d478e5038e5038db6ccfc20a
SHA1 dc3fec9e60a42dbc9cbe536d94194ea22d8fc7ab
SHA512 8861f2a9fbbd25f6a588554b05197aaa15c701fc6988a5e59c4c60e9e69cce0f293a37c9f85ede1be37f5755a2cca625f077a3a78e2ddf8dca2d6107daf35bcb
SSDEEP 3072:Js4lTM+8L9975NmcU/0IQsiD6aAR+lR3LRvvB69U1rl2GfGHukOYduOl3:Js4lTM+8L997llR3LZvB69U1rl7fQUYf
MD5 SHA1 SHA512 SSDEEP

boost/P75VD/i73080/meeting.xml

SHA256 a7f42d7ee1907a53f2019dc12acba23c22bb0bac91c4981fa1455d2d495c109d
MD5 2419f3b2a0205cdd6a7dab7a7874ee99
SHA1 eb2a619871c262bf2d501b1b674c2fe958d6ae2f
SHA512 1093d8a493b7da7a097c8e1e7cd9d192297a779bff0e8346d494e0b749f34ee3614a34279c9f06e11e0b13f19282ac20c9f4dc377201c3a46910e921c4fb955d
SSDEEP 96:0zh4TUL62rUA9n62rUX62rUv62rUQp62rU/62rUQ:G9L63m63X63v63y63/63Q
MD5 SHA1 SHA512 SSDEEP

boost/P75VD/i73080/performance.xml

SHA256 d384f738edd350ad6eb22a865bb10b8dd734c09528a5ccb13efad3ca67dbf923
MD5 7a9a79ca5af98d78f05755a04e67fae9
SHA1 7eba221cd6fa2f4dbc97af79196ca86a8a292331
SHA512 86d16e284d70ffcc739120f8b755bf1dae64b79197febfade220cb3009b350016c0ee521ce992ea67127fb9b92c217130ba8df95d1c212a26d0e7c9d33a3a054
SSDEEP 192:EtUbURUmUlUmUXUYuWUTcUhUGUcUuftxVcwygwEdL0Uv050rOV0twbwJ69j7pJsh:Sc+g
MD5 SHA1 SHA512 SSDEEP

boost/P75VD/i93080/creator.xml

SHA256 c32ddc0a25ca2a4731f69b6c9d11882a58f4faa34088f73d272235a377633f78
MD5 189ec941912e4545b65e394fa0beb69f
SHA1 452fabb656bb9729087eaabf145050952e0b3a2b
SHA512 2ef31d4fd673e199f5bc8989e6975b0e1908c50c675cc8e565ecc2d2d335c96c756c377b71cb8dfaf10fc1d01b3a8402d100635bc1941b1f5b894db831dbd7af
SSDEEP 192:i3qYwlIKdnpdQ3oyjypN9lyaiJvlxo/oiKDU5Z6aTmfO2hsF+0rOXT7RStfr1kYF:iNW8xG
MD5 SHA1 SHA512 SSDEEP

boost/P75VD/i93080/game.xml

SHA256 fc25b7c0b28d562caeed08610bc4c4bf8bc8109c6d7e6c9ba7c4a981a9d7b7d6
MD5 68c2dbfa25a067716d4804d6c46cebc8
SHA1 7e34f6cc13bf97b621b256aff835b5c757049fdb
SHA512 89ec4e919104ba50c1b439a3bdc54ec5c04161aa3f86e185026edc9c38fa81a49fa48bba9e8bb556a2a02865d3b75bab9faf6e2f34a2c828f135811c193f3013
SSDEEP 3072:y7vlTM+ZC49F5NmcU/0IQsiD6aAR+lkHLRvvB69U1jl2GfGHukOYduOl3:y7vlTM+ZC49FllkHLZvB69U1jl7fQUYf
MD5 SHA1 SHA512 SSDEEP

boost/P75VD/i93080/meeting.xml

SHA256 a7f42d7ee1907a53f2019dc12acba23c22bb0bac91c4981fa1455d2d495c109d
MD5 2419f3b2a0205cdd6a7dab7a7874ee99
SHA1 eb2a619871c262bf2d501b1b674c2fe958d6ae2f
SHA512 1093d8a493b7da7a097c8e1e7cd9d192297a779bff0e8346d494e0b749f34ee3614a34279c9f06e11e0b13f19282ac20c9f4dc377201c3a46910e921c4fb955d
SSDEEP 96:0zh4TUL62rUA9n62rUX62rUv62rUQp62rU/62rUQ:G9L63m63X63v63y63/63Q
MD5 SHA1 SHA512 SSDEEP

boost/P75VD/i93080/performance.xml

SHA256 d384f738edd350ad6eb22a865bb10b8dd734c09528a5ccb13efad3ca67dbf923
MD5 7a9a79ca5af98d78f05755a04e67fae9
SHA1 7eba221cd6fa2f4dbc97af79196ca86a8a292331
SHA512 86d16e284d70ffcc739120f8b755bf1dae64b79197febfade220cb3009b350016c0ee521ce992ea67127fb9b92c217130ba8df95d1c212a26d0e7c9d33a3a054
SSDEEP 192:EtUbURUmUlUmUXUYuWUTcUhUGUcUuftxVcwygwEdL0Uv050rOV0twbwJ69j7pJsh:Sc+g
MD5 SHA1 SHA512 SSDEEP

boost/P77VD/i73070/creator.xml

SHA256 c32ddc0a25ca2a4731f69b6c9d11882a58f4faa34088f73d272235a377633f78
MD5 189ec941912e4545b65e394fa0beb69f
SHA1 452fabb656bb9729087eaabf145050952e0b3a2b
SHA512 2ef31d4fd673e199f5bc8989e6975b0e1908c50c675cc8e565ecc2d2d335c96c756c377b71cb8dfaf10fc1d01b3a8402d100635bc1941b1f5b894db831dbd7af
SSDEEP 192:i3qYwlIKdnpdQ3oyjypN9lyaiJvlxo/oiKDU5Z6aTmfO2hsF+0rOXT7RStfr1kYF:iNW8xG
MD5 SHA1 SHA512 SSDEEP

boost/P77VD/i73070/game.xml

SHA256 26fe16cc5a2143f0b757e23acc35037cd3764442dee6f4b1880391beb9888b7e
MD5 221a21d4d478e5038e5038db6ccfc20a
SHA1 dc3fec9e60a42dbc9cbe536d94194ea22d8fc7ab
SHA512 8861f2a9fbbd25f6a588554b05197aaa15c701fc6988a5e59c4c60e9e69cce0f293a37c9f85ede1be37f5755a2cca625f077a3a78e2ddf8dca2d6107daf35bcb
SSDEEP 3072:Js4lTM+8L9975NmcU/0IQsiD6aAR+lR3LRvvB69U1rl2GfGHukOYduOl3:Js4lTM+8L997llR3LZvB69U1rl7fQUYf
MD5 SHA1 SHA512 SSDEEP

boost/P77VD/i73070/meeting.xml

SHA256 a7f42d7ee1907a53f2019dc12acba23c22bb0bac91c4981fa1455d2d495c109d
MD5 2419f3b2a0205cdd6a7dab7a7874ee99
SHA1 eb2a619871c262bf2d501b1b674c2fe958d6ae2f
SHA512 1093d8a493b7da7a097c8e1e7cd9d192297a779bff0e8346d494e0b749f34ee3614a34279c9f06e11e0b13f19282ac20c9f4dc377201c3a46910e921c4fb955d
SSDEEP 96:0zh4TUL62rUA9n62rUX62rUv62rUQp62rU/62rUQ:G9L63m63X63v63y63/63Q
MD5 SHA1 SHA512 SSDEEP

boost/P77VD/i73070/performance.xml

SHA256 d384f738edd350ad6eb22a865bb10b8dd734c09528a5ccb13efad3ca67dbf923
MD5 7a9a79ca5af98d78f05755a04e67fae9
SHA1 7eba221cd6fa2f4dbc97af79196ca86a8a292331
SHA512 86d16e284d70ffcc739120f8b755bf1dae64b79197febfade220cb3009b350016c0ee521ce992ea67127fb9b92c217130ba8df95d1c212a26d0e7c9d33a3a054
SSDEEP 192:EtUbURUmUlUmUXUYuWUTcUhUGUcUuftxVcwygwEdL0Uv050rOV0twbwJ69j7pJsh:Sc+g
MD5 SHA1 SHA512 SSDEEP

boost/P77VD/i73080/creator.xml

SHA256 c32ddc0a25ca2a4731f69b6c9d11882a58f4faa34088f73d272235a377633f78
MD5 189ec941912e4545b65e394fa0beb69f
SHA1 452fabb656bb9729087eaabf145050952e0b3a2b
SHA512 2ef31d4fd673e199f5bc8989e6975b0e1908c50c675cc8e565ecc2d2d335c96c756c377b71cb8dfaf10fc1d01b3a8402d100635bc1941b1f5b894db831dbd7af
SSDEEP 192:i3qYwlIKdnpdQ3oyjypN9lyaiJvlxo/oiKDU5Z6aTmfO2hsF+0rOXT7RStfr1kYF:iNW8xG
MD5 SHA1 SHA512 SSDEEP

boost/P77VD/i73080/game.xml

SHA256 26fe16cc5a2143f0b757e23acc35037cd3764442dee6f4b1880391beb9888b7e
MD5 221a21d4d478e5038e5038db6ccfc20a
SHA1 dc3fec9e60a42dbc9cbe536d94194ea22d8fc7ab
SHA512 8861f2a9fbbd25f6a588554b05197aaa15c701fc6988a5e59c4c60e9e69cce0f293a37c9f85ede1be37f5755a2cca625f077a3a78e2ddf8dca2d6107daf35bcb
SSDEEP 3072:Js4lTM+8L9975NmcU/0IQsiD6aAR+lR3LRvvB69U1rl2GfGHukOYduOl3:Js4lTM+8L997llR3LZvB69U1rl7fQUYf
MD5 SHA1 SHA512 SSDEEP

boost/P77VD/i73080/meeting.xml

SHA256 a7f42d7ee1907a53f2019dc12acba23c22bb0bac91c4981fa1455d2d495c109d
MD5 2419f3b2a0205cdd6a7dab7a7874ee99
SHA1 eb2a619871c262bf2d501b1b674c2fe958d6ae2f
SHA512 1093d8a493b7da7a097c8e1e7cd9d192297a779bff0e8346d494e0b749f34ee3614a34279c9f06e11e0b13f19282ac20c9f4dc377201c3a46910e921c4fb955d
SSDEEP 96:0zh4TUL62rUA9n62rUX62rUv62rUQp62rU/62rUQ:G9L63m63X63v63y63/63Q
MD5 SHA1 SHA512 SSDEEP

boost/P77VD/i73080/performance.xml

SHA256 d384f738edd350ad6eb22a865bb10b8dd734c09528a5ccb13efad3ca67dbf923
MD5 7a9a79ca5af98d78f05755a04e67fae9
SHA1 7eba221cd6fa2f4dbc97af79196ca86a8a292331
SHA512 86d16e284d70ffcc739120f8b755bf1dae64b79197febfade220cb3009b350016c0ee521ce992ea67127fb9b92c217130ba8df95d1c212a26d0e7c9d33a3a054
SSDEEP 192:EtUbURUmUlUmUXUYuWUTcUhUGUcUuftxVcwygwEdL0Uv050rOV0twbwJ69j7pJsh:Sc+g
MD5 SHA1 SHA512 SSDEEP

boost/P77VD/i93080/creator.xml

SHA256 c32ddc0a25ca2a4731f69b6c9d11882a58f4faa34088f73d272235a377633f78
MD5 189ec941912e4545b65e394fa0beb69f
SHA1 452fabb656bb9729087eaabf145050952e0b3a2b
SHA512 2ef31d4fd673e199f5bc8989e6975b0e1908c50c675cc8e565ecc2d2d335c96c756c377b71cb8dfaf10fc1d01b3a8402d100635bc1941b1f5b894db831dbd7af
SSDEEP 192:i3qYwlIKdnpdQ3oyjypN9lyaiJvlxo/oiKDU5Z6aTmfO2hsF+0rOXT7RStfr1kYF:iNW8xG
MD5 SHA1 SHA512 SSDEEP

boost/P77VD/i93080/game.xml

SHA256 fc25b7c0b28d562caeed08610bc4c4bf8bc8109c6d7e6c9ba7c4a981a9d7b7d6
MD5 68c2dbfa25a067716d4804d6c46cebc8
SHA1 7e34f6cc13bf97b621b256aff835b5c757049fdb
SHA512 89ec4e919104ba50c1b439a3bdc54ec5c04161aa3f86e185026edc9c38fa81a49fa48bba9e8bb556a2a02865d3b75bab9faf6e2f34a2c828f135811c193f3013
SSDEEP 3072:y7vlTM+ZC49F5NmcU/0IQsiD6aAR+lkHLRvvB69U1jl2GfGHukOYduOl3:y7vlTM+ZC49FllkHLZvB69U1jl7fQUYf
MD5 SHA1 SHA512 SSDEEP

boost/P77VD/i93080/meeting.xml

SHA256 a7f42d7ee1907a53f2019dc12acba23c22bb0bac91c4981fa1455d2d495c109d
MD5 2419f3b2a0205cdd6a7dab7a7874ee99
SHA1 eb2a619871c262bf2d501b1b674c2fe958d6ae2f
SHA512 1093d8a493b7da7a097c8e1e7cd9d192297a779bff0e8346d494e0b749f34ee3614a34279c9f06e11e0b13f19282ac20c9f4dc377201c3a46910e921c4fb955d
SSDEEP 96:0zh4TUL62rUA9n62rUX62rUv62rUQp62rU/62rUQ:G9L63m63X63v63y63/63Q
MD5 SHA1 SHA512 SSDEEP

boost/P77VD/i93080/performance.xml

SHA256 d384f738edd350ad6eb22a865bb10b8dd734c09528a5ccb13efad3ca67dbf923
MD5 7a9a79ca5af98d78f05755a04e67fae9
SHA1 7eba221cd6fa2f4dbc97af79196ca86a8a292331
SHA512 86d16e284d70ffcc739120f8b755bf1dae64b79197febfade220cb3009b350016c0ee521ce992ea67127fb9b92c217130ba8df95d1c212a26d0e7c9d33a3a054
SSDEEP 192:EtUbURUmUlUmUXUYuWUTcUhUGUcUuftxVcwygwEdL0Uv050rOV0twbwJ69j7pJsh:Sc+g
MD5 SHA1 SHA512 SSDEEP

boost/X5PVD/i73060/creator.xml

SHA256 c32ddc0a25ca2a4731f69b6c9d11882a58f4faa34088f73d272235a377633f78
MD5 189ec941912e4545b65e394fa0beb69f
SHA1 452fabb656bb9729087eaabf145050952e0b3a2b
SHA512 2ef31d4fd673e199f5bc8989e6975b0e1908c50c675cc8e565ecc2d2d335c96c756c377b71cb8dfaf10fc1d01b3a8402d100635bc1941b1f5b894db831dbd7af
SSDEEP 192:i3qYwlIKdnpdQ3oyjypN9lyaiJvlxo/oiKDU5Z6aTmfO2hsF+0rOXT7RStfr1kYF:iNW8xG
MD5 SHA1 SHA512 SSDEEP

boost/X5PVD/i73060/game.xml

SHA256 26fe16cc5a2143f0b757e23acc35037cd3764442dee6f4b1880391beb9888b7e
MD5 221a21d4d478e5038e5038db6ccfc20a
SHA1 dc3fec9e60a42dbc9cbe536d94194ea22d8fc7ab
SHA512 8861f2a9fbbd25f6a588554b05197aaa15c701fc6988a5e59c4c60e9e69cce0f293a37c9f85ede1be37f5755a2cca625f077a3a78e2ddf8dca2d6107daf35bcb
SSDEEP 3072:Js4lTM+8L9975NmcU/0IQsiD6aAR+lR3LRvvB69U1rl2GfGHukOYduOl3:Js4lTM+8L997llR3LZvB69U1rl7fQUYf
MD5 SHA1 SHA512 SSDEEP

boost/X5PVD/i73060/meeting.xml

SHA256 a7f42d7ee1907a53f2019dc12acba23c22bb0bac91c4981fa1455d2d495c109d
MD5 2419f3b2a0205cdd6a7dab7a7874ee99
SHA1 eb2a619871c262bf2d501b1b674c2fe958d6ae2f
SHA512 1093d8a493b7da7a097c8e1e7cd9d192297a779bff0e8346d494e0b749f34ee3614a34279c9f06e11e0b13f19282ac20c9f4dc377201c3a46910e921c4fb955d
SSDEEP 96:0zh4TUL62rUA9n62rUX62rUv62rUQp62rU/62rUQ:G9L63m63X63v63y63/63Q
MD5 SHA1 SHA512 SSDEEP

boost/X5PVD/i73060/performance.xml

SHA256 d384f738edd350ad6eb22a865bb10b8dd734c09528a5ccb13efad3ca67dbf923
MD5 7a9a79ca5af98d78f05755a04e67fae9
SHA1 7eba221cd6fa2f4dbc97af79196ca86a8a292331
SHA512 86d16e284d70ffcc739120f8b755bf1dae64b79197febfade220cb3009b350016c0ee521ce992ea67127fb9b92c217130ba8df95d1c212a26d0e7c9d33a3a054
SSDEEP 192:EtUbURUmUlUmUXUYuWUTcUhUGUcUuftxVcwygwEdL0Uv050rOV0twbwJ69j7pJsh:Sc+g
MD5 SHA1 SHA512 SSDEEP

boost/X5PVD/i73070/creator.xml

SHA256 c32ddc0a25ca2a4731f69b6c9d11882a58f4faa34088f73d272235a377633f78
MD5 189ec941912e4545b65e394fa0beb69f
SHA1 452fabb656bb9729087eaabf145050952e0b3a2b
SHA512 2ef31d4fd673e199f5bc8989e6975b0e1908c50c675cc8e565ecc2d2d335c96c756c377b71cb8dfaf10fc1d01b3a8402d100635bc1941b1f5b894db831dbd7af
SSDEEP 192:i3qYwlIKdnpdQ3oyjypN9lyaiJvlxo/oiKDU5Z6aTmfO2hsF+0rOXT7RStfr1kYF:iNW8xG
MD5 SHA1 SHA512 SSDEEP

boost/X5PVD/i73070/game.xml

SHA256 26fe16cc5a2143f0b757e23acc35037cd3764442dee6f4b1880391beb9888b7e
MD5 221a21d4d478e5038e5038db6ccfc20a
SHA1 dc3fec9e60a42dbc9cbe536d94194ea22d8fc7ab
SHA512 8861f2a9fbbd25f6a588554b05197aaa15c701fc6988a5e59c4c60e9e69cce0f293a37c9f85ede1be37f5755a2cca625f077a3a78e2ddf8dca2d6107daf35bcb
SSDEEP 3072:Js4lTM+8L9975NmcU/0IQsiD6aAR+lR3LRvvB69U1rl2GfGHukOYduOl3:Js4lTM+8L997llR3LZvB69U1rl7fQUYf
MD5 SHA1 SHA512 SSDEEP

boost/X5PVD/i73070/meeting.xml

SHA256 a7f42d7ee1907a53f2019dc12acba23c22bb0bac91c4981fa1455d2d495c109d
MD5 2419f3b2a0205cdd6a7dab7a7874ee99
SHA1 eb2a619871c262bf2d501b1b674c2fe958d6ae2f
SHA512 1093d8a493b7da7a097c8e1e7cd9d192297a779bff0e8346d494e0b749f34ee3614a34279c9f06e11e0b13f19282ac20c9f4dc377201c3a46910e921c4fb955d
SSDEEP 96:0zh4TUL62rUA9n62rUX62rUv62rUQp62rU/62rUQ:G9L63m63X63v63y63/63Q
MD5 SHA1 SHA512 SSDEEP

boost/X5PVD/i73070/performance.xml

SHA256 d384f738edd350ad6eb22a865bb10b8dd734c09528a5ccb13efad3ca67dbf923
MD5 7a9a79ca5af98d78f05755a04e67fae9
SHA1 7eba221cd6fa2f4dbc97af79196ca86a8a292331
SHA512 86d16e284d70ffcc739120f8b755bf1dae64b79197febfade220cb3009b350016c0ee521ce992ea67127fb9b92c217130ba8df95d1c212a26d0e7c9d33a3a054
SSDEEP 192:EtUbURUmUlUmUXUYuWUTcUhUGUcUuftxVcwygwEdL0Uv050rOV0twbwJ69j7pJsh:Sc+g
MD5 SHA1 SHA512 SSDEEP

boost/X5PVD/i73080/creator.xml

SHA256 c32ddc0a25ca2a4731f69b6c9d11882a58f4faa34088f73d272235a377633f78
MD5 189ec941912e4545b65e394fa0beb69f
SHA1 452fabb656bb9729087eaabf145050952e0b3a2b
SHA512 2ef31d4fd673e199f5bc8989e6975b0e1908c50c675cc8e565ecc2d2d335c96c756c377b71cb8dfaf10fc1d01b3a8402d100635bc1941b1f5b894db831dbd7af
SSDEEP 192:i3qYwlIKdnpdQ3oyjypN9lyaiJvlxo/oiKDU5Z6aTmfO2hsF+0rOXT7RStfr1kYF:iNW8xG
MD5 SHA1 SHA512 SSDEEP

boost/X5PVD/i73080/game.xml

SHA256 26fe16cc5a2143f0b757e23acc35037cd3764442dee6f4b1880391beb9888b7e
MD5 221a21d4d478e5038e5038db6ccfc20a
SHA1 dc3fec9e60a42dbc9cbe536d94194ea22d8fc7ab
SHA512 8861f2a9fbbd25f6a588554b05197aaa15c701fc6988a5e59c4c60e9e69cce0f293a37c9f85ede1be37f5755a2cca625f077a3a78e2ddf8dca2d6107daf35bcb
SSDEEP 3072:Js4lTM+8L9975NmcU/0IQsiD6aAR+lR3LRvvB69U1rl2GfGHukOYduOl3:Js4lTM+8L997llR3LZvB69U1rl7fQUYf
MD5 SHA1 SHA512 SSDEEP

boost/X5PVD/i73080/meeting.xml

SHA256 a7f42d7ee1907a53f2019dc12acba23c22bb0bac91c4981fa1455d2d495c109d
MD5 2419f3b2a0205cdd6a7dab7a7874ee99
SHA1 eb2a619871c262bf2d501b1b674c2fe958d6ae2f
SHA512 1093d8a493b7da7a097c8e1e7cd9d192297a779bff0e8346d494e0b749f34ee3614a34279c9f06e11e0b13f19282ac20c9f4dc377201c3a46910e921c4fb955d
SSDEEP 96:0zh4TUL62rUA9n62rUX62rUv62rUQp62rU/62rUQ:G9L63m63X63v63y63/63Q
MD5 SHA1 SHA512 SSDEEP

boost/X5PVD/i73080/performance.xml

SHA256 d384f738edd350ad6eb22a865bb10b8dd734c09528a5ccb13efad3ca67dbf923
MD5 7a9a79ca5af98d78f05755a04e67fae9
SHA1 7eba221cd6fa2f4dbc97af79196ca86a8a292331
SHA512 86d16e284d70ffcc739120f8b755bf1dae64b79197febfade220cb3009b350016c0ee521ce992ea67127fb9b92c217130ba8df95d1c212a26d0e7c9d33a3a054
SSDEEP 192:EtUbURUmUlUmUXUYuWUTcUhUGUcUuftxVcwygwEdL0Uv050rOV0twbwJ69j7pJsh:Sc+g
MD5 SHA1 SHA512 SSDEEP

boost/X5PVD/i93080/creator.xml

SHA256 c32ddc0a25ca2a4731f69b6c9d11882a58f4faa34088f73d272235a377633f78
MD5 189ec941912e4545b65e394fa0beb69f
SHA1 452fabb656bb9729087eaabf145050952e0b3a2b
SHA512 2ef31d4fd673e199f5bc8989e6975b0e1908c50c675cc8e565ecc2d2d335c96c756c377b71cb8dfaf10fc1d01b3a8402d100635bc1941b1f5b894db831dbd7af
SSDEEP 192:i3qYwlIKdnpdQ3oyjypN9lyaiJvlxo/oiKDU5Z6aTmfO2hsF+0rOXT7RStfr1kYF:iNW8xG
MD5 SHA1 SHA512 SSDEEP

boost/X5PVD/i93080/game.xml

SHA256 fc25b7c0b28d562caeed08610bc4c4bf8bc8109c6d7e6c9ba7c4a981a9d7b7d6
MD5 68c2dbfa25a067716d4804d6c46cebc8
SHA1 7e34f6cc13bf97b621b256aff835b5c757049fdb
SHA512 89ec4e919104ba50c1b439a3bdc54ec5c04161aa3f86e185026edc9c38fa81a49fa48bba9e8bb556a2a02865d3b75bab9faf6e2f34a2c828f135811c193f3013
SSDEEP 3072:y7vlTM+ZC49F5NmcU/0IQsiD6aAR+lkHLRvvB69U1jl2GfGHukOYduOl3:y7vlTM+ZC49FllkHLZvB69U1jl7fQUYf
MD5 SHA1 SHA512 SSDEEP

boost/X5PVD/i93080/meeting.xml

SHA256 a7f42d7ee1907a53f2019dc12acba23c22bb0bac91c4981fa1455d2d495c109d
MD5 2419f3b2a0205cdd6a7dab7a7874ee99
SHA1 eb2a619871c262bf2d501b1b674c2fe958d6ae2f
SHA512 1093d8a493b7da7a097c8e1e7cd9d192297a779bff0e8346d494e0b749f34ee3614a34279c9f06e11e0b13f19282ac20c9f4dc377201c3a46910e921c4fb955d
SSDEEP 96:0zh4TUL62rUA9n62rUX62rUv62rUQp62rU/62rUQ:G9L63m63X63v63y63/63Q
MD5 SHA1 SHA512 SSDEEP

boost/X5PVD/i93080/performance.xml

SHA256 d384f738edd350ad6eb22a865bb10b8dd734c09528a5ccb13efad3ca67dbf923
MD5 7a9a79ca5af98d78f05755a04e67fae9
SHA1 7eba221cd6fa2f4dbc97af79196ca86a8a292331
SHA512 86d16e284d70ffcc739120f8b755bf1dae64b79197febfade220cb3009b350016c0ee521ce992ea67127fb9b92c217130ba8df95d1c212a26d0e7c9d33a3a054
SSDEEP 192:EtUbURUmUlUmUXUYuWUTcUhUGUcUuftxVcwygwEdL0Uv050rOV0twbwJ69j7pJsh:Sc+g
MD5 SHA1 SHA512 SSDEEP

boost/X7GVD/i73060/creator.xml

SHA256 c32ddc0a25ca2a4731f69b6c9d11882a58f4faa34088f73d272235a377633f78
MD5 189ec941912e4545b65e394fa0beb69f
SHA1 452fabb656bb9729087eaabf145050952e0b3a2b
SHA512 2ef31d4fd673e199f5bc8989e6975b0e1908c50c675cc8e565ecc2d2d335c96c756c377b71cb8dfaf10fc1d01b3a8402d100635bc1941b1f5b894db831dbd7af
SSDEEP 192:i3qYwlIKdnpdQ3oyjypN9lyaiJvlxo/oiKDU5Z6aTmfO2hsF+0rOXT7RStfr1kYF:iNW8xG
MD5 SHA1 SHA512 SSDEEP

boost/X7GVD/i73060/game.xml

SHA256 26fe16cc5a2143f0b757e23acc35037cd3764442dee6f4b1880391beb9888b7e
MD5 221a21d4d478e5038e5038db6ccfc20a
SHA1 dc3fec9e60a42dbc9cbe536d94194ea22d8fc7ab
SHA512 8861f2a9fbbd25f6a588554b05197aaa15c701fc6988a5e59c4c60e9e69cce0f293a37c9f85ede1be37f5755a2cca625f077a3a78e2ddf8dca2d6107daf35bcb
SSDEEP 3072:Js4lTM+8L9975NmcU/0IQsiD6aAR+lR3LRvvB69U1rl2GfGHukOYduOl3:Js4lTM+8L997llR3LZvB69U1rl7fQUYf
MD5 SHA1 SHA512 SSDEEP

boost/X7GVD/i73060/meeting.xml

SHA256 a7f42d7ee1907a53f2019dc12acba23c22bb0bac91c4981fa1455d2d495c109d
MD5 2419f3b2a0205cdd6a7dab7a7874ee99
SHA1 eb2a619871c262bf2d501b1b674c2fe958d6ae2f
SHA512 1093d8a493b7da7a097c8e1e7cd9d192297a779bff0e8346d494e0b749f34ee3614a34279c9f06e11e0b13f19282ac20c9f4dc377201c3a46910e921c4fb955d
SSDEEP 96:0zh4TUL62rUA9n62rUX62rUv62rUQp62rU/62rUQ:G9L63m63X63v63y63/63Q
MD5 SHA1 SHA512 SSDEEP

boost/X7GVD/i73060/performance.xml

SHA256 d384f738edd350ad6eb22a865bb10b8dd734c09528a5ccb13efad3ca67dbf923
MD5 7a9a79ca5af98d78f05755a04e67fae9
SHA1 7eba221cd6fa2f4dbc97af79196ca86a8a292331
SHA512 86d16e284d70ffcc739120f8b755bf1dae64b79197febfade220cb3009b350016c0ee521ce992ea67127fb9b92c217130ba8df95d1c212a26d0e7c9d33a3a054
SSDEEP 192:EtUbURUmUlUmUXUYuWUTcUhUGUcUuftxVcwygwEdL0Uv050rOV0twbwJ69j7pJsh:Sc+g
MD5 SHA1 SHA512 SSDEEP

boost/X7GVD/i73070/creator.xml

SHA256 c32ddc0a25ca2a4731f69b6c9d11882a58f4faa34088f73d272235a377633f78
MD5 189ec941912e4545b65e394fa0beb69f
SHA1 452fabb656bb9729087eaabf145050952e0b3a2b
SHA512 2ef31d4fd673e199f5bc8989e6975b0e1908c50c675cc8e565ecc2d2d335c96c756c377b71cb8dfaf10fc1d01b3a8402d100635bc1941b1f5b894db831dbd7af
SSDEEP 192:i3qYwlIKdnpdQ3oyjypN9lyaiJvlxo/oiKDU5Z6aTmfO2hsF+0rOXT7RStfr1kYF:iNW8xG
MD5 SHA1 SHA512 SSDEEP

boost/X7GVD/i73070/game.xml

SHA256 26fe16cc5a2143f0b757e23acc35037cd3764442dee6f4b1880391beb9888b7e
MD5 221a21d4d478e5038e5038db6ccfc20a
SHA1 dc3fec9e60a42dbc9cbe536d94194ea22d8fc7ab
SHA512 8861f2a9fbbd25f6a588554b05197aaa15c701fc6988a5e59c4c60e9e69cce0f293a37c9f85ede1be37f5755a2cca625f077a3a78e2ddf8dca2d6107daf35bcb
SSDEEP 3072:Js4lTM+8L9975NmcU/0IQsiD6aAR+lR3LRvvB69U1rl2GfGHukOYduOl3:Js4lTM+8L997llR3LZvB69U1rl7fQUYf
MD5 SHA1 SHA512 SSDEEP

boost/X7GVD/i73070/meeting.xml

SHA256 a7f42d7ee1907a53f2019dc12acba23c22bb0bac91c4981fa1455d2d495c109d
MD5 2419f3b2a0205cdd6a7dab7a7874ee99
SHA1 eb2a619871c262bf2d501b1b674c2fe958d6ae2f
SHA512 1093d8a493b7da7a097c8e1e7cd9d192297a779bff0e8346d494e0b749f34ee3614a34279c9f06e11e0b13f19282ac20c9f4dc377201c3a46910e921c4fb955d
SSDEEP 96:0zh4TUL62rUA9n62rUX62rUv62rUQp62rU/62rUQ:G9L63m63X63v63y63/63Q
MD5 SHA1 SHA512 SSDEEP

boost/X7GVD/i73070/performance.xml

SHA256 d384f738edd350ad6eb22a865bb10b8dd734c09528a5ccb13efad3ca67dbf923
MD5 7a9a79ca5af98d78f05755a04e67fae9
SHA1 7eba221cd6fa2f4dbc97af79196ca86a8a292331
SHA512 86d16e284d70ffcc739120f8b755bf1dae64b79197febfade220cb3009b350016c0ee521ce992ea67127fb9b92c217130ba8df95d1c212a26d0e7c9d33a3a054
SSDEEP 192:EtUbURUmUlUmUXUYuWUTcUhUGUcUuftxVcwygwEdL0Uv050rOV0twbwJ69j7pJsh:Sc+g
MD5 SHA1 SHA512 SSDEEP

boost/X7GVD/i73080/creator.xml

SHA256 c32ddc0a25ca2a4731f69b6c9d11882a58f4faa34088f73d272235a377633f78
MD5 189ec941912e4545b65e394fa0beb69f
SHA1 452fabb656bb9729087eaabf145050952e0b3a2b
SHA512 2ef31d4fd673e199f5bc8989e6975b0e1908c50c675cc8e565ecc2d2d335c96c756c377b71cb8dfaf10fc1d01b3a8402d100635bc1941b1f5b894db831dbd7af
SSDEEP 192:i3qYwlIKdnpdQ3oyjypN9lyaiJvlxo/oiKDU5Z6aTmfO2hsF+0rOXT7RStfr1kYF:iNW8xG
MD5 SHA1 SHA512 SSDEEP

boost/X7GVD/i73080/game.xml

SHA256 26fe16cc5a2143f0b757e23acc35037cd3764442dee6f4b1880391beb9888b7e
MD5 221a21d4d478e5038e5038db6ccfc20a
SHA1 dc3fec9e60a42dbc9cbe536d94194ea22d8fc7ab
SHA512 8861f2a9fbbd25f6a588554b05197aaa15c701fc6988a5e59c4c60e9e69cce0f293a37c9f85ede1be37f5755a2cca625f077a3a78e2ddf8dca2d6107daf35bcb
SSDEEP 3072:Js4lTM+8L9975NmcU/0IQsiD6aAR+lR3LRvvB69U1rl2GfGHukOYduOl3:Js4lTM+8L997llR3LZvB69U1rl7fQUYf
MD5 SHA1 SHA512 SSDEEP

boost/X7GVD/i73080/meeting.xml

SHA256 a7f42d7ee1907a53f2019dc12acba23c22bb0bac91c4981fa1455d2d495c109d
MD5 2419f3b2a0205cdd6a7dab7a7874ee99
SHA1 eb2a619871c262bf2d501b1b674c2fe958d6ae2f
SHA512 1093d8a493b7da7a097c8e1e7cd9d192297a779bff0e8346d494e0b749f34ee3614a34279c9f06e11e0b13f19282ac20c9f4dc377201c3a46910e921c4fb955d
SSDEEP 96:0zh4TUL62rUA9n62rUX62rUv62rUQp62rU/62rUQ:G9L63m63X63v63y63/63Q
MD5 SHA1 SHA512 SSDEEP

boost/X7GVD/i73080/performance.xml

SHA256 d384f738edd350ad6eb22a865bb10b8dd734c09528a5ccb13efad3ca67dbf923
MD5 7a9a79ca5af98d78f05755a04e67fae9
SHA1 7eba221cd6fa2f4dbc97af79196ca86a8a292331
SHA512 86d16e284d70ffcc739120f8b755bf1dae64b79197febfade220cb3009b350016c0ee521ce992ea67127fb9b92c217130ba8df95d1c212a26d0e7c9d33a3a054
SSDEEP 192:EtUbURUmUlUmUXUYuWUTcUhUGUcUuftxVcwygwEdL0Uv050rOV0twbwJ69j7pJsh:Sc+g
MD5 SHA1 SHA512 SSDEEP

boost/X7VD/i93080/creator.xml

SHA256 c32ddc0a25ca2a4731f69b6c9d11882a58f4faa34088f73d272235a377633f78
MD5 189ec941912e4545b65e394fa0beb69f
SHA1 452fabb656bb9729087eaabf145050952e0b3a2b
SHA512 2ef31d4fd673e199f5bc8989e6975b0e1908c50c675cc8e565ecc2d2d335c96c756c377b71cb8dfaf10fc1d01b3a8402d100635bc1941b1f5b894db831dbd7af
SSDEEP 192:i3qYwlIKdnpdQ3oyjypN9lyaiJvlxo/oiKDU5Z6aTmfO2hsF+0rOXT7RStfr1kYF:iNW8xG
MD5 SHA1 SHA512 SSDEEP

boost/X7VD/i93080/game.xml

SHA256 fc25b7c0b28d562caeed08610bc4c4bf8bc8109c6d7e6c9ba7c4a981a9d7b7d6
MD5 68c2dbfa25a067716d4804d6c46cebc8
SHA1 7e34f6cc13bf97b621b256aff835b5c757049fdb
SHA512 89ec4e919104ba50c1b439a3bdc54ec5c04161aa3f86e185026edc9c38fa81a49fa48bba9e8bb556a2a02865d3b75bab9faf6e2f34a2c828f135811c193f3013
SSDEEP 3072:y7vlTM+ZC49F5NmcU/0IQsiD6aAR+lkHLRvvB69U1jl2GfGHukOYduOl3:y7vlTM+ZC49FllkHLZvB69U1jl7fQUYf
MD5 SHA1 SHA512 SSDEEP

boost/X7VD/i93080/meeting.xml

SHA256 a7f42d7ee1907a53f2019dc12acba23c22bb0bac91c4981fa1455d2d495c109d
MD5 2419f3b2a0205cdd6a7dab7a7874ee99
SHA1 eb2a619871c262bf2d501b1b674c2fe958d6ae2f
SHA512 1093d8a493b7da7a097c8e1e7cd9d192297a779bff0e8346d494e0b749f34ee3614a34279c9f06e11e0b13f19282ac20c9f4dc377201c3a46910e921c4fb955d
SSDEEP 96:0zh4TUL62rUA9n62rUX62rUv62rUQp62rU/62rUQ:G9L63m63X63v63y63/63Q
MD5 SHA1 SHA512 SSDEEP

boost/X7VD/i93080/performance.xml

SHA256 d384f738edd350ad6eb22a865bb10b8dd734c09528a5ccb13efad3ca67dbf923
MD5 7a9a79ca5af98d78f05755a04e67fae9
SHA1 7eba221cd6fa2f4dbc97af79196ca86a8a292331
SHA512 86d16e284d70ffcc739120f8b755bf1dae64b79197febfade220cb3009b350016c0ee521ce992ea67127fb9b92c217130ba8df95d1c212a26d0e7c9d33a3a054
SSDEEP 192:EtUbURUmUlUmUXUYuWUTcUhUGUcUuftxVcwygwEdL0Uv050rOV0twbwJ69j7pJsh:Sc+g
MD5 SHA1 SHA512 SSDEEP

cloudmatrix/Battery/CloudMatrixBattery.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 714c054a7507d4af266730df0268702da4948f50e03b8b1c6c084b2eb9a83958
MD5 44b07b4f93c1e020f790a9e3576577d7
SHA1 b34d0e75c8066608e34f040edf88f4232cc157ef
SHA512 f99d8d450832da3b86fb184e5ad9b4f7c6d1a113d38499b7569c3ddbd549ca8f89cdce4f5df76c30c0c75b0a0fe1d2edbb2471ec6af755d8961999e8077fe740
SSDEEP 3072:+znPwH4lgPLk1VORvzuG1zU4hbyqoIxAKsB4PtS/qY:BLuG1F9yTIxdyq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

101486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Battery\WpfAppSqliteBattery\WpfAppSqliteBattery\obj\Release\CloudMatrixBattery.pdb

cloudmatrix/Battery/EntityFramework.SqlServer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bd780bf0edc07a01ae381bdd874a87f0143ac7d1d3a5c74bff870d4f46af2587
MD5 0a63136cddcba92209170aba6915613c
SHA1 6167dfb910446bcc0c636ba96db7c2ad17cd3964
SHA512 89a85cccb9311f0a16fa6db83ecfaa5eae40b09969bd8f3e1ca87e586690bb89add56b4b9349428426fd7e314e42b6a87b52bef0b60748c81f4e6236b0a50253
SSDEEP 6144:bcK9UcUZcteorXMXB6zHK1fHYkIHPQG2puGeqVmjaVmnS4bfu65FZ:ycu05X8Ixu65D
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f7:f5:f9:09:b0:48:84:9a:a3:3b:f4:1a:70:3e:01:07:ca:71:16:ab:94:0e:c4:a1:40:85:d7:c7:c8:aa:fa:f7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 23, 2024

Minor OS version

0

Major OS version

4

Entry point

587894

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/EntityFramework.SqlServer/Release/net45/EntityFramework.SqlServer.pdb

cloudmatrix/Battery/EntityFramework.SqlServer.xml

SHA256 902f57044baf104dd9a491dadcba4c787b6f64531880dc3b11345d5758d7bd81
MD5 2d1549c365902d6cbee20e02a985b68b
SHA1 771acc938ba3adcc0ee7a44252b95fd62a2f5ac4
SHA512 08105286c2bc2491542dc9f1e0c937ef844aadcc9eea00b421e20836b895d04f42f76af4e761db0f392bd02c450b977222d6da549b74e5b125c42cec70d90175
SSDEEP 768:GQ+qoADHTaL/6pjITwXF/9/Ekevv4kYcjwrWx37rvLReLREJ/SajdtMwWSnCIgl+:iTJFHLYLCpEZrqUZqyqtUmF
MD5 SHA1 SHA512 SSDEEP

cloudmatrix/Battery/EntityFramework.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d3615e988314389d01def30feb6ae1dfba57635ca50f9f1d25e04d7dc6c29189
MD5 491ac51395b1ffcbe99695bebb077ef4
SHA1 89c2d1d75c2c0ade8c4976e0a1790d7bda3dd64e
SHA512 d99065fabf2889dfd7e379a9d47318014556af713801475d60de13efd2c21c40fb4bb0f4f0671870012f4fbd6f91166a6656f89c34e73c81e577246bedb3cfa9
SSDEEP 49152:5kgFnm2Gb1HONMg/uqwRyPxRSqcMQAMGwQOOhEQONq+4pHhmQl0b7AZwKKTGBsnd:9nmvEmqiWS34HhmQl0b1Zq7mRR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

41:48:03:cd:d3:f0:2b:c6:c3:5a:72:bc:7d:23:ed:3c:33:1c:67:3d:39:ee:f5:9f:a5:05:cf:eb:3b:aa:b2:c8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 23, 2024

Minor OS version

0

Major OS version

4

Entry point

4944990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/EntityFramework/Release/net45/EntityFramework.pdb

cloudmatrix/Battery/EntityFramework.xml

SHA256 521a3343fb43f50fde1108c047559d7b3fdd348a08ac56acd6116c2122a1d282
MD5 0a5e4e13df59e4473a58c1e2643675a8
SHA1 c6dccdb0008e04c7108a43cdb774b1136843b642
SHA512 7611cde36a9231b7fdfc6e093c9afbcee9b1a9f5a1355378725c42260495cadb2bb81a02ff41386a66a4471fcbb9dce7fc9dac7dfcdafc7acbbfbb4516ce73f5
SSDEEP 6144:iMZ0sHOLap7F3CeFlUmB9uWsSKjm30tzhJGEFim9dLlLRnWSynU759lknrfcHS0E:YwgoO6K7TMlXa2I8sjryyBnq3
MD5 SHA1 SHA512 SSDEEP

cloudmatrix/Battery/KillCloudMatrixBattery.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 8d195a2efe71c1c90a518260ba017c62c3cd55c953c884bf4bb8526d80cd0483
MD5 b06b03b1b41d9232da3ca80799202ab0
SHA1 6a043e3502b8d081312e2a96ac4b810ffe423eb5
SHA512 ef357d27d68ae7d91c98997dc622c144831be5b4d5991b0bdf38d4d808001e44e5b9a379c3ddfdd190a82805e19a2a8401e92e5623f86206d614a92aa8c70053
SSDEEP 192:LEgZeH9kq0B5Yz26c+YOXg6Q8stYcFwVc03KY:VUHOYz26/YmLQptYcFwVc03K
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12746

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Battery\WpfAppSqliteBattery\KillCloudMatrixBattery\obj\Release\KillCloudMatrixBattery.pdb

cloudmatrix/Battery/Newtonsoft.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3598cccad5b535fea6f93662107a4183bfd6167bf1d0f80260436093edc2e3af
MD5 4df6c8781e70c3a4912b5be796e6d337
SHA1 cbc510520fcd85dbc1c82b02e82040702aca9b79
SHA512 964d9813e4d11e1e603e0a9627885c52034b088d0b0dfa5ac0043c27df204e621a2a654445f440ae318e15b1c5fea5c469da9e6a7350a787fef9edf6f0418e5c
SSDEEP 12288:rktg1lrjC8rjICqbwNjR4xq7iiX19K7Df/SoOKQrIB+jfP:rggD7PIEjR4xq7iiXTK7D3So9AIB+jn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Digest

a7:cc:fe:41:40:99:65:07:53:c6:c7:f4:1c:e3:22:5f:f1:9e:7a:db:83:aa:c0:1c:bd:9b:44:a1:54:ff:58:a1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Chains

Apr 22, 2019

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Serial Number

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 27, 2018 - Apr 27, 2028

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Serial Number

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 25, 2018 - Oct 29, 2021

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Serial Number

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 4, 2017 - Jan 18, 2028

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

0

Major OS version

4

Entry point

672442

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

cloudmatrix/Battery/Newtonsoft.Json.xml

SHA256 f32ed922fe5b22dd693e160aee4f0dcab753ebd740bed40490ae4179274b4b49
MD5 ed67ac96769018255050ac0829ca459a
SHA1 b80fc9a5f7049703e752bf65fcce881ff93aa521
SHA512 77c769fefa227a7f2dde77e4c5024a52b1b6e7a8dc81adbd1c1538a4324a94ffa006e67202803f080ae2e13bbc26adfe403f7e12f0140cf0cf43892f2101bd27
SSDEEP 6144:XqqUEk/RikjaG0rH3jGHdl0/IYHJpgVIeR0R+CRFo9TA82mIKj+sJjoqoyO185QH:DU6
MD5 SHA1 SHA512 SSDEEP

cloudmatrix/Battery/OpenHardwareMonitorLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3e2eb922c2962bb01ab924d34ad19b60dfae5143b7b9fa790c8f33c49beca545
MD5 eaef621fec9c0797d11fcd0f66d0657b
SHA1 df366463af9449a61d7082c5e2213c7ce0831f7e
SHA512 2ea3b71871c6b35ce378196fedac48c0da4a7b51fa6bf94158fa6babcb32225693e432bccbd4ecbedd65b55a4a6ec9edb32ac41b63b3fac3467763a36efd55d7
SSDEEP 3072:GvsypM3CWeGNpRKjh/Bv+4z6tgw3N2iTuXHrDTsJB+vRqlowY9J:GvN2YGxKjZBfzCgIToHrDoB+uE
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

271070

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

cloudmatrix/Battery/ShowCloudMatrixBattery.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 523d4317c3d4b91ff479d0836fc392583c91e71328624f94153ff3e956ea4baf
MD5 613db8cdb20fd4b0890867c26a8424ce
SHA1 9fffdab2abb419ad1a3fe8bc1f2853e1e6a2e512
SHA512 bdacfea310e2c114a9a60fc15b5bf5d646697f98afbed20b36fdd7a4b9f582caf2ffea1f66dd8cff60feab5462354351935fdfddbcbc63b5bcd237c8be7936f0
SSDEEP 96:IalFT2K1di/d/B9zYT+vZkuoxCpgFptfcd6zNt:IalFT2Kq/9B5YWZFoYpgtfa8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13270

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\ControlCenter\ControlCenter-20191203\FusionKeyboard\ShowCloudMatrixBattery\obj\Release\ShowCloudMatrixBattery.pdb

cloudmatrix/Battery/System.Data.SQLite.EF6.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3f22eec308d94c2a284ed1562c26836f3b7412bf7410a98c941ed04652b55b9d
MD5 2d146045c4ce1ea24bc126d594571767
SHA1 bd29a6129c0568c4926671f8e8991bfa0f6af6ae
SHA512 2c5c20f95dcff5d570732982dac72e352d8768fb5c9132d56fa073161af9084f72ef0375dc1c480426a6045ab660b12559154948a1b0a798b1acae29fd2d8733
SSDEEP 1536:JBJjiZi/XR43K75s0n2VDbNt0hhPW+aAE+IMGphOYkLcyaQl6KP8cCD:NNh7r21v+IX+I1PGcd86KP8cE
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

190118

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\dev\sqlite\dotnet\obj\2015\System.Data.SQLite.EF6.2015\Release\System.Data.SQLite.EF6.pdb

cloudmatrix/Battery/System.Data.SQLite.Linq.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d6b5189c07b7d39fe25491f75fe4e85b451b83468babae7329addab9380219aa
MD5 ac00a144b31060f0af089fd63b816d35
SHA1 0f419ed3be43112944f39ce67969dcdae3925ca0
SHA512 64b1adccff895b44b69924a49f1d30177fa1593105fc48ba4ea9fe7fd43b3b93202df4fc83e082d9d6a0beab4031e14a6ed3ba32473a5973a3f822b3520887bc
SSDEEP 1536:JBJjiZi/XR43K75s0n2s5hbbIcn7EzIYt/hOYk/cyaaz6KP8c/F:NNh7r2G/QzIsFScdi6KP8c/F
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

189962

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\dev\sqlite\dotnet\obj\2015\System.Data.SQLite.Linq.2015\Release\System.Data.SQLite.Linq.pdb

cloudmatrix/Battery/System.Data.SQLite.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1843bbbb3121ab5065251ecae39b923089d36127e3d4e0a6093a6b57fe747e10
MD5 65676315f1d8dc51d6102272e048fdac
SHA1 71a2351fe18b46a7ae8e0be172ef609086aef02a
SHA512 0b24559f1bdb0b7aa598e6546fbc028500b6e010f28a0dbe8730fa7dcbe745f24dc5b241b51a334571c8a8f5a6e3297c74d618a9c0dc77bdc9ed739080d076e0
SSDEEP 6144:sruNWxFaLx73+nRo2GGmZ2CRGpAM3JUGuT5up6zOPLyU0SJFNFaFeFOFwcGF6cmg:LNWx6xz+nRo2GGWHQZMaLyJSJFNFaFeL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

360554

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\dev\sqlite\dotnet\obj\2015\System.Data.SQLite.2015\Release\System.Data.SQLite.pdb

cloudmatrix/Battery/System.Data.SQLite.dll.config

SHA256 cde00e0a0f52ed121d52c17338da42ffd9656d4f81a76df2dceda05c88f783ef
MD5 8ab01db32f56322275cbd0864feb5d55
SHA1 cbdb70f5fc04485af0d09ef7484faa7f8b3047bb
SHA512 e52a5e341309bae40a4f69d67226a92dfc42b08d4e815da3a7df7295d68da6dcad8973d32af84f269692bd98634c4657e1394366574f5ec299eb50fa3d1db468
MD5 SHA1 SHA512

cloudmatrix/Battery/System.Data.SQLite.xml

SHA256 f000772b9c37a4de4fc3138d3b69d9cdf6d1e47959fc633d09a50b6a48a1f4ed
MD5 4bbd1565de3f34b883afe41f3906930b
SHA1 8b5eb1754335a7d2591b752f6f65130846c0d7b9
SHA512 3ed7c8330bc1f177e9d5935499e14cfc5dda4fb7cec339006c7832fb994b718598840592f9c717691e841b9a891697260f8bddca381a77e0c5f684772331b5f4
SSDEEP 6144:hBKIcd92KTuJTE2bNQvk81FS6BXJRU1IClVTCqmSw+Z:A6
MD5 SHA1 SHA512 SSDEEP

polyglot

cloudmatrix/Battery/System.Data.SqlClient.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5ef1fed28bb433bdfbdf482647e4f298f72dfa80a9735e32025c97245bd57144
MD5 ddfdcb33f8e8e9ecfa1d1ecac93d7e27
SHA1 f396f58ea7282743c80db8ac3dafd53b1770805d
SHA512 d315577816f5f4b1ed756b9fad185700c87b56bd1dfe52dd9aa1c4121ba19519d629408880b7293f5c9ec89d631e5afa274571df20c1c5041eb2d5237377d298
SSDEEP 6144:dXFpBZHJLFrBxad7/bAkGF60FhFoFmF8cjcsc4FEFbFgcbFmFiF6FhFuFBFuFDF+:p7jP60FhFoFmF8cjcsc4FEFbFgcbFmF+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

a1:86:62:29:66:7b:ac:eb:77:0b:2e:ce:37:2c:27:80:f3:7c:21:3a:04:84:82:8f:d6:f4:15:fd:23:d6:7b:f5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 23, 2024

Minor OS version

0

Major OS version

4

Entry point

218898

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Data.SqlClient/net461-Windows_NT-Release/System.Data.SqlClient.pdb

cloudmatrix/Battery/System.Data.SqlClient.xml

SHA256 88dc1b784a4aba045065085cce3d315282c86a55ad05a663a5336a8515c9f95a
MD5 9f15d88c6c5830079ffb1001e09536c7
SHA1 a355a6a52432d737e70973734ac0b4a3f50a88d3
SHA512 30c3733e9dddd00330c3a086bd7895845ce93a41e73ff054f6550a3fd6ac6925bbcc01aa6591bd434d1fc9b4dafa2d9240635214f36e2172f1d93b27dd949a6e
SSDEEP 1536:vCOckvwkR5xRVqyvcOZR08EkDSZLT93q1Ect5AYGACmNb3jOiXS2mTwybJ3:vNwkR5R5RZE1LVVcJNg
MD5 SHA1 SHA512 SSDEEP

cloudmatrix/Battery/System.Windows.Controls.DataVisualization.Toolkit.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 aa5732b41c0f633993badf09afca15e0668bd888784cfea1249fb4ffd6da133d
MD5 406c457d3d29e3091a8594ba086e6e82
SHA1 56fe4d37fb6938a78f99e667eca79f8d6bfd2dca
SHA512 480d013c33ac8ccecc5a54bcf0eb06ae1bf910b5b269268b46fa1fa8720c9a1e397ae0c5bbcb6785cba3562be77115ab15969778d49d958c1272b64540fea6b8
SSDEEP 6144:mqZ4qEuVEAPKOuS8EsbVq+gjdyGSm49YaU8GkwS9WK4U0VEcLjLU/mp0:mqZ4qEdOuS9sbVKKm2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

356974

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Users\Aybe\Documents\GitHub\SilverlightWpfDataVisualization\Platforms\WPF4\obj\Release\System.Windows.Controls.DataVisualization.Toolkit.pdb

cloudmatrix/Battery/System.Windows.Controls.DataVisualization.Toolkit.xml

SHA256 4fa61a08dc7b5791400506d4f88aa72a1dcb6f0858cdc8ddc39f4e87bf861390
MD5 6a9ee40e8c10f20ed2761c5be130944e
SHA1 cdc757f407baa53b3e55b373b1b3a7f500b4130f
SHA512 503e98445a1f4f1af472d0cb072d67b4e3ee0f8e116ce4c02be58d416db1c137ec96fd7741c750f933b5aae4ca3194121c3235bdd980a7843220a4935d0e482d
SSDEEP 1536:GD0sPITh2l1RBCTJWcSuJ0BdnJGVunAoI2uQK+xzVTVrlzMt/uGLvKcKpjDjM5wG:efnPBdx/qM+9IXG85jLXl0Rp
MD5 SHA1 SHA512 SSDEEP

cloudmatrix/Battery/WPFToolkit.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4582c33bf2b82d9d122c418334bb39a0e0ec97a2db216888c3f2f13af8af44fc
MD5 2a526cb67bbe59b3b721f924d44d07b3
SHA1 01c646f68de8ba244370ae9baa6278e3a5929609
SHA512 c5094f5425e7300fbdf5b0d650f9b9f04da911b6802e49d64bf86a78b8f7c50b6dd641d2be56afc6eb983d4d11c42e759a4b0f1c655bc37da872a16ad04f8460
SSDEEP 6144:LWdhnYdYsdCqNuQ+bKWXPyguLtAgxKfrJN0OE0QHLv3OR9ImPpPholTFTo3knq84:id+RHNw+WnJN0OE0QuKmRPh+T0GzxPe
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

78:1c:3b:42:57:32:9e:41:b9:04:2b:e7:bc:37:09:a2:30:aa:29:f3

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jan 29, 2009

Minor OS version

0

Major OS version

4

Entry point

448206

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\dd\WPF_TSV_2\src\wpf\src\ControlsPack\WPFToolkit\obj\Release\WPFToolkit.pdb

cloudmatrix/Battery/x64/SQLite.Interop.dll

IMPHASH 8b65b647278c90a91a98d2cac8dfa8b1
SHA256 6231d0f17272b67842616f797416dd6c4c764f6c5f19132a688db9d4d212b019
MD5 e9e0ec1803156a133259f286de2cfe59
SHA1 2ae49e823b26e734f8829e079b3258cfe585fcd5
SHA512 0103084ca8724bef498eed87ed0a001bcc7dd97e2178c4f780e4c3f969ee005a7bc30a97781159da3b9cbf1bb9f02df6b926d6e6be0c9726de78c519d50e9e60
SSDEEP 49152:4KBZFqX8TvXzlaPmAA6rKmEOwksSf0WB:4K3/z0h
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6044

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\dev\sqlite\dotnet\bin\2015\x64\ReleaseNativeOnlyStatic\SQLite.Interop.pdb

kernel32

LockFile LeaveCriticalSection InitializeCriticalSection SetFilePointer GetFullPathNameA SetEndOfFile UnlockFileEx GetTempPathW CreateMutexW WaitForSingleObject CreateFileW GetFileAttributesW GetCurrentThreadId UnmapViewOfFile HeapValidate HeapSize MultiByteToWideChar Sleep GetTempPathA FormatMessageW GetDiskFreeSpaceA GetLastError GetFileAttributesA GetFileAttributesExW OutputDebugStringW FlushViewOfFile CreateFileA LoadLibraryA WaitForSingleObjectEx OutputDebugStringA DeleteFileW HeapReAlloc CloseHandle GetSystemInfo LoadLibraryW HeapAlloc HeapCompact HeapDestroy UnlockFile GetProcAddress CreateFileMappingA LocalFree LockFileEx GetFileSize DeleteCriticalSection GetCurrentProcessId GetProcessHeap SystemTimeToFileTime FreeLibrary WideCharToMultiByte GetSystemTimeAsFileTime GetSystemTime FormatMessageA CreateFileMappingW MapViewOfFile QueryPerformanceCounter GetTickCount FlushFileBuffers GetDiskFreeSpaceW WriteFile GetFullPathNameW AreFileApisANSI EnterCriticalSection HeapFree HeapCreate TryEnterCriticalSection ReadFile DeleteFileA RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx InterlockedFlushSList SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameA CompareStringW LCMapStringW GetACP GetTimeZoneInformation FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA GetStdHandle GetFileType GetStringTypeW SetStdHandle RaiseException GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW

advapi32

CryptCreateHash CryptDestroyKey CryptAcquireContextW CryptEncrypt CryptDuplicateKey CryptDecrypt CryptDeriveKey CryptHashData CryptDestroyHash

interop_compileoption_get interop_compileoption_used interop_libversion interop_sourceid sqlite3_activate_see sqlite3_aggregate_context sqlite3_aggregate_count sqlite3_auto_extension sqlite3_backup_finish sqlite3_backup_finish_interop sqlite3_backup_init sqlite3_backup_pagecount sqlite3_backup_remaining sqlite3_backup_step sqlite3_bind_blob sqlite3_bind_blob64 sqlite3_bind_double sqlite3_bind_double_interop sqlite3_bind_int sqlite3_bind_int64 sqlite3_bind_int64_interop sqlite3_bind_null sqlite3_bind_parameter_count sqlite3_bind_parameter_index sqlite3_bind_parameter_name sqlite3_bind_parameter_name_interop sqlite3_bind_pointer sqlite3_bind_text sqlite3_bind_text16 sqlite3_bind_text64 sqlite3_bind_value sqlite3_bind_zeroblob sqlite3_bind_zeroblob64 sqlite3_blob_bytes sqlite3_blob_close sqlite3_blob_close_interop sqlite3_blob_open sqlite3_blob_read sqlite3_blob_reopen sqlite3_blob_write sqlite3_busy_handler sqlite3_busy_timeout sqlite3_cancel_auto_extension sqlite3_changes sqlite3_changes_interop sqlite3_clear_bindings sqlite3_close sqlite3_close_interop sqlite3_close_v2 sqlite3_collation_needed sqlite3_collation_needed16 sqlite3_column_blob sqlite3_column_bytes sqlite3_column_bytes16 sqlite3_column_count sqlite3_column_database_name sqlite3_column_database_name16 sqlite3_column_database_name16_interop sqlite3_column_database_name_interop sqlite3_column_decltype sqlite3_column_decltype16 sqlite3_column_decltype16_interop sqlite3_column_decltype_interop sqlite3_column_double sqlite3_column_double_interop sqlite3_column_int sqlite3_column_int64 sqlite3_column_int64_interop sqlite3_column_name sqlite3_column_name16 sqlite3_column_name16_interop sqlite3_column_name_interop sqlite3_column_origin_name sqlite3_column_origin_name16 sqlite3_column_origin_name16_interop sqlite3_column_origin_name_interop sqlite3_column_table_name sqlite3_column_table_name16 sqlite3_column_table_name16_interop sqlite3_column_table_name_interop sqlite3_column_text sqlite3_column_text16 sqlite3_column_text16_interop sqlite3_column_text_interop sqlite3_column_type sqlite3_column_value sqlite3_commit_hook sqlite3_compileoption_get sqlite3_compileoption_used sqlite3_complete sqlite3_complete16 sqlite3_config sqlite3_context_collcompare_interop sqlite3_context_collseq_interop sqlite3_context_db_handle sqlite3_create_collation sqlite3_create_collation16 sqlite3_create_collation_v2 sqlite3_create_disposable_module sqlite3_create_disposable_module_interop sqlite3_create_function sqlite3_create_function16 sqlite3_create_function_interop sqlite3_create_function_v2 sqlite3_create_module sqlite3_create_module_v2 sqlite3_create_window_function sqlite3_cursor_rowid_interop sqlite3_data_count sqlite3_data_directory sqlite3_db_cacheflush sqlite3_db_config sqlite3_db_filename sqlite3_db_handle sqlite3_db_mutex sqlite3_db_readonly sqlite3_db_release_memory sqlite3_db_status sqlite3_declare_vtab sqlite3_dispose_module sqlite3_drop_modules sqlite3_enable_load_extension sqlite3_enable_shared_cache sqlite3_errcode sqlite3_errmsg sqlite3_errmsg16 sqlite3_errmsg_interop sqlite3_errstr sqlite3_exec sqlite3_expanded_sql sqlite3_expired sqlite3_extended_errcode sqlite3_extended_result_codes sqlite3_file_control sqlite3_finalize sqlite3_finalize_interop sqlite3_free sqlite3_free_table sqlite3_fts3_may_be_corrupt sqlite3_fts5_init sqlite3_fts_init sqlite3_get_autocommit sqlite3_get_auxdata sqlite3_get_table sqlite3_global_recover sqlite3_index_column_info_interop sqlite3_initialize sqlite3_interrupt sqlite3_json_init sqlite3_key sqlite3_key_v2 sqlite3_keyword_check sqlite3_keyword_count sqlite3_keyword_name sqlite3_last_insert_rowid sqlite3_last_insert_rowid_interop sqlite3_libversion sqlite3_libversion_number sqlite3_limit sqlite3_load_extension sqlite3_log sqlite3_malloc sqlite3_malloc64 sqlite3_malloc_size_interop sqlite3_memory_alarm sqlite3_memory_highwater sqlite3_memory_highwater_interop sqlite3_memory_used sqlite3_memory_used_interop sqlite3_mprintf sqlite3_msize sqlite3_msize_interop sqlite3_mutex_alloc sqlite3_mutex_enter sqlite3_mutex_free sqlite3_mutex_leave sqlite3_mutex_try sqlite3_next_stmt sqlite3_open sqlite3_open16 sqlite3_open16_interop sqlite3_open_interop sqlite3_open_v2 sqlite3_os_end sqlite3_os_init sqlite3_overload_function sqlite3_percentile_init sqlite3_prepare sqlite3_prepare16 sqlite3_prepare16_interop sqlite3_prepare16_v2 sqlite3_prepare16_v3 sqlite3_prepare_interop sqlite3_prepare_v2 sqlite3_prepare_v3 sqlite3_preupdate_count sqlite3_preupdate_depth sqlite3_preupdate_hook sqlite3_preupdate_new sqlite3_preupdate_old sqlite3_profile sqlite3_progress_handler sqlite3_randomness sqlite3_realloc sqlite3_realloc64 sqlite3_regexp_init sqlite3_rekey sqlite3_rekey_v2 sqlite3_release_memory sqlite3_reset sqlite3_reset_auto_extension sqlite3_reset_interop sqlite3_result_blob sqlite3_result_blob64 sqlite3_result_double sqlite3_result_double_interop sqlite3_result_error sqlite3_result_error16 sqlite3_result_error_code sqlite3_result_error_nomem sqlite3_result_error_toobig sqlite3_result_int sqlite3_result_int64 sqlite3_result_int64_interop sqlite3_result_null sqlite3_result_pointer sqlite3_result_subtype sqlite3_result_text sqlite3_result_text16 sqlite3_result_text16be sqlite3_result_text16le sqlite3_result_text64 sqlite3_result_value sqlite3_result_zeroblob sqlite3_result_zeroblob64 sqlite3_rollback_hook sqlite3_rtree_geometry_callback sqlite3_rtree_query_callback sqlite3_set_authorizer sqlite3_set_auxdata sqlite3_set_last_insert_rowid sqlite3_sha_init sqlite3_shutdown sqlite3_sleep sqlite3_snprintf sqlite3_soft_heap_limit sqlite3_soft_heap_limit64 sqlite3_sourceid sqlite3_sql sqlite3_status sqlite3_status64 sqlite3_step sqlite3_stmt_busy sqlite3_stmt_isexplain sqlite3_stmt_readonly sqlite3_stmt_status sqlite3_str_append sqlite3_str_appendall sqlite3_str_appendchar sqlite3_str_appendf sqlite3_str_errcode sqlite3_str_finish sqlite3_str_length sqlite3_str_new sqlite3_str_reset sqlite3_str_value sqlite3_str_vappendf sqlite3_strglob sqlite3_stricmp sqlite3_strlike sqlite3_strnicmp sqlite3_system_errno sqlite3_table_column_metadata sqlite3_table_column_metadata_interop sqlite3_table_cursor_interop sqlite3_temp_directory sqlite3_test_control sqlite3_thread_cleanup sqlite3_threadsafe sqlite3_total_changes sqlite3_totype_init sqlite3_trace sqlite3_trace_v2 sqlite3_transfer_bindings sqlite3_update_hook sqlite3_uri_boolean sqlite3_uri_int64 sqlite3_uri_parameter sqlite3_user_data sqlite3_value_blob sqlite3_value_bytes sqlite3_value_bytes16 sqlite3_value_double sqlite3_value_double_interop sqlite3_value_dup sqlite3_value_free sqlite3_value_frombind sqlite3_value_int sqlite3_value_int64 sqlite3_value_int64_interop sqlite3_value_nochange sqlite3_value_numeric_type sqlite3_value_pointer sqlite3_value_subtype sqlite3_value_text sqlite3_value_text16 sqlite3_value_text16_interop sqlite3_value_text16be sqlite3_value_text16le sqlite3_value_text_interop sqlite3_value_type sqlite3_version sqlite3_vfs_find sqlite3_vfs_register sqlite3_vfs_unregister sqlite3_vmprintf sqlite3_vsnprintf sqlite3_vtab_collation sqlite3_vtab_config sqlite3_vtab_nochange sqlite3_vtab_on_conflict sqlite3_vtshim_init sqlite3_wal_autocheckpoint sqlite3_wal_checkpoint sqlite3_wal_checkpoint_v2 sqlite3_wal_hook sqlite3_win32_compact_heap sqlite3_win32_is_nt sqlite3_win32_mbcs_to_utf8 sqlite3_win32_mbcs_to_utf8_v2 sqlite3_win32_reset_heap sqlite3_win32_set_directory sqlite3_win32_set_directory16 sqlite3_win32_set_directory8 sqlite3_win32_sleep sqlite3_win32_unicode_to_utf8 sqlite3_win32_utf8_to_mbcs sqlite3_win32_utf8_to_mbcs_v2 sqlite3_win32_utf8_to_unicode sqlite3_win32_write_debug sqlite3changegroup_add sqlite3changegroup_add_strm sqlite3changegroup_delete sqlite3changegroup_new sqlite3changegroup_output sqlite3changegroup_output_strm sqlite3changeset_apply sqlite3changeset_apply_strm sqlite3changeset_apply_v2 sqlite3changeset_apply_v2_strm sqlite3changeset_concat sqlite3changeset_concat_strm sqlite3changeset_conflict sqlite3changeset_finalize sqlite3changeset_fk_conflicts sqlite3changeset_invert sqlite3changeset_invert_strm sqlite3changeset_new sqlite3changeset_next sqlite3changeset_old sqlite3changeset_op sqlite3changeset_pk sqlite3changeset_start sqlite3changeset_start_strm sqlite3changeset_start_v2 sqlite3changeset_start_v2_strm sqlite3rebaser_configure sqlite3rebaser_create sqlite3rebaser_delete sqlite3rebaser_rebase sqlite3rebaser_rebase_strm sqlite3session_attach sqlite3session_changeset sqlite3session_changeset_strm sqlite3session_config sqlite3session_create sqlite3session_delete sqlite3session_diff sqlite3session_enable sqlite3session_indirect sqlite3session_isempty sqlite3session_patchset sqlite3session_patchset_strm sqlite3session_table_filter

Name

.text

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

249KB

Virtual Size

249KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

13KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

67KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

156B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

cloudmatrix/Battery/x86/SQLite.Interop.dll

IMPHASH 4cb59043491b2ca536e3ce19189f4918
SHA256 2f8589a28eeb614d1226e54b215643638d856eb8cc427fd558d48c9ac5192e74
MD5 c95a776fd42a6af13af6f92cfc2ed576
SHA1 d318aa5a375bd109065d15a73afee3e767a6eb3d
SHA512 dd7c7e331a38aa5d51e57fa975f3f42ba145678537e18c78a7e4df311ce50266e94cb3f15f60bdb36f4cd7953120005349c2e54b8cb5e5778a48a2d2e05e9af2
SSDEEP 24576:s4uZWjoUgeqGXFt7dPPPedAQh7wDsMrRQ3j5VJoRvbpCp3lULnTouCg:UZWjoKqu9EMt05/pVUDMuH
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5772

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\dev\sqlite\dotnet\bin\2015\Win32\ReleaseNativeOnlyStatic\SQLite.Interop.pdb

kernel32

LockFile LeaveCriticalSection InitializeCriticalSection SetFilePointer GetFullPathNameA SetEndOfFile UnlockFileEx GetTempPathW CreateMutexW WaitForSingleObject CreateFileW GetFileAttributesW GetCurrentThreadId UnmapViewOfFile HeapValidate HeapSize MultiByteToWideChar Sleep GetTempPathA FormatMessageW GetDiskFreeSpaceA GetLastError GetFileAttributesA GetFileAttributesExW OutputDebugStringW FlushViewOfFile CreateFileA LoadLibraryA WaitForSingleObjectEx OutputDebugStringA DeleteFileW HeapReAlloc CloseHandle GetSystemInfo LoadLibraryW HeapAlloc HeapCompact HeapDestroy UnlockFile GetProcAddress CreateFileMappingA LocalFree LockFileEx GetFileSize DeleteCriticalSection GetCurrentProcessId GetProcessHeap SystemTimeToFileTime FreeLibrary WideCharToMultiByte GetSystemTimeAsFileTime GetSystemTime FormatMessageA CreateFileMappingW MapViewOfFile QueryPerformanceCounter GetTickCount FlushFileBuffers GetDiskFreeSpaceW WriteFile AreFileApisANSI GetFullPathNameW EnterCriticalSection HeapFree HeapCreate TryEnterCriticalSection ReadFile DeleteFileA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedFlushSList RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameA CompareStringW LCMapStringW GetACP GetTimeZoneInformation FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA GetStdHandle GetFileType GetStringTypeW SetStdHandle DecodePointer GetConsoleCP GetConsoleMode SetFilePointerEx RaiseException WriteConsoleW

advapi32

CryptDeriveKey CryptDestroyKey CryptAcquireContextW CryptEncrypt CryptDuplicateKey CryptDecrypt CryptCreateHash CryptHashData CryptDestroyHash

_interop_compileoption_get@4 _interop_compileoption_used@4 _interop_libversion@0 _interop_sourceid@0 _sqlite3_backup_finish_interop@4 _sqlite3_bind_double_interop@12 _sqlite3_bind_int64_interop@12 _sqlite3_bind_parameter_name_interop@12 _sqlite3_blob_close_interop@4 _sqlite3_changes_interop@4 _sqlite3_close_interop@4 _sqlite3_column_database_name16_interop@12 _sqlite3_column_database_name_interop@12 _sqlite3_column_decltype16_interop@12 _sqlite3_column_decltype_interop@12 _sqlite3_column_double_interop@12 _sqlite3_column_int64_interop@12 _sqlite3_column_name16_interop@12 _sqlite3_column_name_interop@12 _sqlite3_column_origin_name16_interop@12 _sqlite3_column_origin_name_interop@12 _sqlite3_column_table_name16_interop@12 _sqlite3_column_table_name_interop@12 _sqlite3_column_text16_interop@12 _sqlite3_column_text_interop@12 _sqlite3_context_collcompare_interop@20 _sqlite3_context_collseq_interop@16 _sqlite3_create_disposable_module_interop@112 _sqlite3_create_function_interop@36 _sqlite3_cursor_rowid_interop@12 _sqlite3_errmsg_interop@8 _sqlite3_finalize_interop@4 _sqlite3_index_column_info_interop@32 _sqlite3_last_insert_rowid_interop@8 _sqlite3_malloc_size_interop@4 _sqlite3_memory_highwater_interop@8 _sqlite3_memory_used_interop@4 _sqlite3_msize_interop@8 _sqlite3_open16_interop@20 _sqlite3_open_interop@20 _sqlite3_prepare16_interop@24 _sqlite3_prepare_interop@24 _sqlite3_reset_interop@4 _sqlite3_result_double_interop@8 _sqlite3_result_int64_interop@8 _sqlite3_table_column_metadata_interop@44 _sqlite3_table_cursor_interop@12 _sqlite3_value_double_interop@8 _sqlite3_value_int64_interop@8 _sqlite3_value_text16_interop@8 _sqlite3_value_text_interop@8 sqlite3_activate_see sqlite3_aggregate_context sqlite3_aggregate_count sqlite3_auto_extension sqlite3_backup_finish sqlite3_backup_init sqlite3_backup_pagecount sqlite3_backup_remaining sqlite3_backup_step sqlite3_bind_blob sqlite3_bind_blob64 sqlite3_bind_double sqlite3_bind_int sqlite3_bind_int64 sqlite3_bind_null sqlite3_bind_parameter_count sqlite3_bind_parameter_index sqlite3_bind_parameter_name sqlite3_bind_pointer sqlite3_bind_text sqlite3_bind_text16 sqlite3_bind_text64 sqlite3_bind_value sqlite3_bind_zeroblob sqlite3_bind_zeroblob64 sqlite3_blob_bytes sqlite3_blob_close sqlite3_blob_open sqlite3_blob_read sqlite3_blob_reopen sqlite3_blob_write sqlite3_busy_handler sqlite3_busy_timeout sqlite3_cancel_auto_extension sqlite3_changes sqlite3_clear_bindings sqlite3_close sqlite3_close_v2 sqlite3_collation_needed sqlite3_collation_needed16 sqlite3_column_blob sqlite3_column_bytes sqlite3_column_bytes16 sqlite3_column_count sqlite3_column_database_name sqlite3_column_database_name16 sqlite3_column_decltype sqlite3_column_decltype16 sqlite3_column_double sqlite3_column_int sqlite3_column_int64 sqlite3_column_name sqlite3_column_name16 sqlite3_column_origin_name sqlite3_column_origin_name16 sqlite3_column_table_name sqlite3_column_table_name16 sqlite3_column_text sqlite3_column_text16 sqlite3_column_type sqlite3_column_value sqlite3_commit_hook sqlite3_compileoption_get sqlite3_compileoption_used sqlite3_complete sqlite3_complete16 sqlite3_config sqlite3_context_db_handle sqlite3_create_collation sqlite3_create_collation16 sqlite3_create_collation_v2 sqlite3_create_disposable_module sqlite3_create_function sqlite3_create_function16 sqlite3_create_function_v2 sqlite3_create_module sqlite3_create_module_v2 sqlite3_create_window_function sqlite3_data_count sqlite3_data_directory sqlite3_db_cacheflush sqlite3_db_config sqlite3_db_filename sqlite3_db_handle sqlite3_db_mutex sqlite3_db_readonly sqlite3_db_release_memory sqlite3_db_status sqlite3_declare_vtab sqlite3_dispose_module sqlite3_drop_modules sqlite3_enable_load_extension sqlite3_enable_shared_cache sqlite3_errcode sqlite3_errmsg sqlite3_errmsg16 sqlite3_errstr sqlite3_exec sqlite3_expanded_sql sqlite3_expired sqlite3_extended_errcode sqlite3_extended_result_codes sqlite3_file_control sqlite3_finalize sqlite3_free sqlite3_free_table sqlite3_fts3_may_be_corrupt sqlite3_fts5_init sqlite3_fts_init sqlite3_get_autocommit sqlite3_get_auxdata sqlite3_get_table sqlite3_global_recover sqlite3_initialize sqlite3_interrupt sqlite3_json_init sqlite3_key sqlite3_key_v2 sqlite3_keyword_check sqlite3_keyword_count sqlite3_keyword_name sqlite3_last_insert_rowid sqlite3_libversion sqlite3_libversion_number sqlite3_limit sqlite3_load_extension sqlite3_log sqlite3_malloc sqlite3_malloc64 sqlite3_memory_alarm sqlite3_memory_highwater sqlite3_memory_used sqlite3_mprintf sqlite3_msize sqlite3_mutex_alloc sqlite3_mutex_enter sqlite3_mutex_free sqlite3_mutex_leave sqlite3_mutex_try sqlite3_next_stmt sqlite3_open sqlite3_open16 sqlite3_open_v2 sqlite3_os_end sqlite3_os_init sqlite3_overload_function sqlite3_percentile_init sqlite3_prepare sqlite3_prepare16 sqlite3_prepare16_v2 sqlite3_prepare16_v3 sqlite3_prepare_v2 sqlite3_prepare_v3 sqlite3_preupdate_count sqlite3_preupdate_depth sqlite3_preupdate_hook sqlite3_preupdate_new sqlite3_preupdate_old sqlite3_profile sqlite3_progress_handler sqlite3_randomness sqlite3_realloc sqlite3_realloc64 sqlite3_regexp_init sqlite3_rekey sqlite3_rekey_v2 sqlite3_release_memory sqlite3_reset sqlite3_reset_auto_extension sqlite3_result_blob sqlite3_result_blob64 sqlite3_result_double sqlite3_result_error sqlite3_result_error16 sqlite3_result_error_code sqlite3_result_error_nomem sqlite3_result_error_toobig sqlite3_result_int sqlite3_result_int64 sqlite3_result_null sqlite3_result_pointer sqlite3_result_subtype sqlite3_result_text sqlite3_result_text16 sqlite3_result_text16be sqlite3_result_text16le sqlite3_result_text64 sqlite3_result_value sqlite3_result_zeroblob sqlite3_result_zeroblob64 sqlite3_rollback_hook sqlite3_rtree_geometry_callback sqlite3_rtree_query_callback sqlite3_set_authorizer sqlite3_set_auxdata sqlite3_set_last_insert_rowid sqlite3_sha_init sqlite3_shutdown sqlite3_sleep sqlite3_snprintf sqlite3_soft_heap_limit sqlite3_soft_heap_limit64 sqlite3_sourceid sqlite3_sql sqlite3_status sqlite3_status64 sqlite3_step sqlite3_stmt_busy sqlite3_stmt_isexplain sqlite3_stmt_readonly sqlite3_stmt_status sqlite3_str_append sqlite3_str_appendall sqlite3_str_appendchar sqlite3_str_appendf sqlite3_str_errcode sqlite3_str_finish sqlite3_str_length sqlite3_str_new sqlite3_str_reset sqlite3_str_value sqlite3_str_vappendf sqlite3_strglob sqlite3_stricmp sqlite3_strlike sqlite3_strnicmp sqlite3_system_errno sqlite3_table_column_metadata sqlite3_temp_directory sqlite3_test_control sqlite3_thread_cleanup sqlite3_threadsafe sqlite3_total_changes sqlite3_totype_init sqlite3_trace sqlite3_trace_v2 sqlite3_transfer_bindings sqlite3_update_hook sqlite3_uri_boolean sqlite3_uri_int64 sqlite3_uri_parameter sqlite3_user_data sqlite3_value_blob sqlite3_value_bytes sqlite3_value_bytes16 sqlite3_value_double sqlite3_value_dup sqlite3_value_free sqlite3_value_frombind sqlite3_value_int sqlite3_value_int64 sqlite3_value_nochange sqlite3_value_numeric_type sqlite3_value_pointer sqlite3_value_subtype sqlite3_value_text sqlite3_value_text16 sqlite3_value_text16be sqlite3_value_text16le sqlite3_value_type sqlite3_version sqlite3_vfs_find sqlite3_vfs_register sqlite3_vfs_unregister sqlite3_vmprintf sqlite3_vsnprintf sqlite3_vtab_collation sqlite3_vtab_config sqlite3_vtab_nochange sqlite3_vtab_on_conflict sqlite3_vtshim_init sqlite3_wal_autocheckpoint sqlite3_wal_checkpoint sqlite3_wal_checkpoint_v2 sqlite3_wal_hook sqlite3_win32_compact_heap sqlite3_win32_is_nt sqlite3_win32_mbcs_to_utf8 sqlite3_win32_mbcs_to_utf8_v2 sqlite3_win32_reset_heap sqlite3_win32_set_directory sqlite3_win32_set_directory16 sqlite3_win32_set_directory8 sqlite3_win32_sleep sqlite3_win32_unicode_to_utf8 sqlite3_win32_utf8_to_mbcs sqlite3_win32_utf8_to_mbcs_v2 sqlite3_win32_utf8_to_unicode sqlite3_win32_write_debug sqlite3changegroup_add sqlite3changegroup_add_strm sqlite3changegroup_delete sqlite3changegroup_new sqlite3changegroup_output sqlite3changegroup_output_strm sqlite3changeset_apply sqlite3changeset_apply_strm sqlite3changeset_apply_v2 sqlite3changeset_apply_v2_strm sqlite3changeset_concat sqlite3changeset_concat_strm sqlite3changeset_conflict sqlite3changeset_finalize sqlite3changeset_fk_conflicts sqlite3changeset_invert sqlite3changeset_invert_strm sqlite3changeset_new sqlite3changeset_next sqlite3changeset_old sqlite3changeset_op sqlite3changeset_pk sqlite3changeset_start sqlite3changeset_start_strm sqlite3changeset_start_v2 sqlite3changeset_start_v2_strm sqlite3rebaser_configure sqlite3rebaser_create sqlite3rebaser_delete sqlite3rebaser_rebase sqlite3rebaser_rebase_strm sqlite3session_attach sqlite3session_changeset sqlite3session_changeset_strm sqlite3session_config sqlite3session_create sqlite3session_delete sqlite3session_diff sqlite3session_enable sqlite3session_indirect sqlite3session_isempty sqlite3session_patchset sqlite3session_patchset_strm sqlite3session_table_filter

cloudmatrix/CloudMatrixControlCenter.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 94f53c501c97c58566de47edd613fcf5b60d61dd6c66a5a0d840decc4bcea733
MD5 43255856014a7bfc07f956aa11ddab84
SHA1 b13d48800611482c844cf415bf891bf41263e955
SHA512 9df62feac3b638b2098ba5a9ed473d7b98d567ef12a725f4f8a9adaa69eff6b1af22de0fa7b4074dd3d844db3e26c5d6146328582335b01ae164fcee619ebdea
SSDEEP 1536:GncPWBd/piJJdRi1BXIcLh3la+cDl9ZDBaI68xx64lnEBIyrDpdUUQf8aB+pC/dg:G5mni4WXKBaWC9YB+pC/dLfkmA0+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

185262

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\ControlCenter\ControlCenter-20200819\FusionKeyboard\CloudMatrix_ControlCenter\SystemGauge_X3_X5X5_v1.7.3_quiet\Oc_Gauge_Quiet\obj\x86\Release\CloudMatrixControlCenter.pdb

cloudmatrix/Newtonsoft.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 35c94923250929d5ee2c4fff30fdec672526838f926d23c3a4e6ce0f2cc6f42e
MD5 abd9c387aaba000866f8ccb82313635f
SHA1 746343a01d55f9246dfdf44a6e2daaf2370ade63
SHA512 07009db746515a0c7ec1220a946e304c8556316a8963659cc99bfffad1e8328b9f4b2b4a5feaf6da8c9f535abe9fc28fad457c42805a5a02aaa9d56326da4c61
SSDEEP 6144:4rtkJ+to6hOotBCfLFCost4ln0rWvr80jD+Rn32AlCNKmOunG1C+Mc7r0tqGR5au:RctYzFCoDln0rW23LyoSkQ0FoYAz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

516510

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Development\Releases\Json\Working\Newtonsoft.Json\Src\Newtonsoft.Json\obj\Release\Net40\Newtonsoft.Json.pdb

cloudmatrix/OpenHardwareMonitorLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3e2eb922c2962bb01ab924d34ad19b60dfae5143b7b9fa790c8f33c49beca545
MD5 eaef621fec9c0797d11fcd0f66d0657b
SHA1 df366463af9449a61d7082c5e2213c7ce0831f7e
SHA512 2ea3b71871c6b35ce378196fedac48c0da4a7b51fa6bf94158fa6babcb32225693e432bccbd4ecbedd65b55a4a6ec9edb32ac41b63b3fac3467763a36efd55d7
SSDEEP 3072:GvsypM3CWeGNpRKjh/Bv+4z6tgw3N2iTuXHrDTsJB+vRqlowY9J:GvN2YGxKjZBfzCgIToHrDoB+uE
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

271070

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

cloudmatrix/System.Net.Http.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 863d59611560be220258f1a6f9616ac317fbd702ff079f0aca37ab179753f76c
MD5 1b732edf3cc662368524932be97f7fb9
SHA1 196fa5c6c24e3227a2d061d830021d0f63c07846
SHA512 df422f36e4c4caa7fa06246ce339979c4a848d9dc2d85ec168a60db344786443d93f323d44929c1a86faf97ebc34cf8654e7bb0fc9202685eae88fbd025b8426
SSDEEP 3072:XzS560/yk/J3HssPaR/RtQTPjj6dTvKzvq7aH28dZOjc/Er6CORY9NYmsnBY:XqJ3HssPaR/RePjj6dT/idO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

178626

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Http.pdb

cloudmatrix/UploadCloudMatrix.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 280604df68fe30e2f9b35257ff8d2f268e3f09bbe51d535aeed0f019c27ebfc4
MD5 60ba311861c63273e1e450ccca080b1d
SHA1 d9baa9197271932e08dbaca83a9d9ef8b5cdbd44
SHA512 5f6dcb76de6a81d6f812ebf73c14f196fb8dc81baa02492e666969ffbfd50dd75dbf28dfc989edb87f48be70254974957bd6a032ac63b51a9e72d0e3b7a1fa37
SSDEEP 3072:Sht2tXiFXNvdXXdTri4WXKBaWC9oQDY87q+dYcJGcGvIi4WXKRaWC9S+:Sht2t1XTM8G+hJGRzXhA+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

216558

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Control Center\UploadCloudmatrix_AiService\SystemGauge_X3_X5X5_v1.7.3_quiet\Oc_Gauge_Quiet\obj\x86\Release\UploadCloudMatrix.pdb

color/P65/AUO31EB/D5800.icm

SHA256 58a724076e27a838a9a8c7187950770cab2c7634fc05953170b7e6e6c222c22a
MD5 9ae021c6b9caee44261705ff012d4254
SHA1 d5abbb2e89996273bd793a04ec76c74ba962dbb1
SHA512 5b08d5ad7bb8292b57852b24b10df014fb98af4f84336085c88822bc17f45f7843e83ad4d2d15258f13917939e80fbc6c81597170d6d1489f3687704b4644c9b
SSDEEP 12288:FQevC3xPUGNrMJQn7/38Xqs0QFsbrDcdksqbJri+CfNk8Ji8ZzHFsbrDcdksqbJL:iMKxPUsDMXq6eDcdks8Ju+CVk8Ji0LeP
MD5 SHA1 SHA512 SSDEEP

color/P65/AUO31EB/D6000.icm

SHA256 67a0431530795fc4280c9de4a39dc843547549fcb23507a9c2ee5a658f6760e1
MD5 f73e6df86ce591fc663d1a9f31285244
SHA1 5979ffc004c6aac16bd81c03dc34bb665003ee9f
SHA512 ff0060559cd4d8491a812fcfbd61d689f90a25646f03c9734295c9afe3078b6adbbc9e250436799e8b42d13500b9ae9728b9928a1b8208989b42b6e84980514a
SSDEEP 12288:K67JRysJQuchWAzIAaUi3//5uovhVAQEkRlNRmYM6DG/1vzRlNRmYM6DG/1S:K6tRquchWAzIAaRvXv/EkbNyHbNyO
MD5 SHA1 SHA512 SSDEEP

color/P65/AUO31EB/D6500.icm

SHA256 aae0cdc3ee62b82b27aed4cb2e01e15a33bd81cb565f75fe3ed436dd6caa35be
MD5 d99975c0a9cf0c34b6de33badd16469b
SHA1 58fca99b786365bbdd6dece15b9cbe8d74a8b2c0
SHA512 b21ac353abd77c220e94b0b82536454263857454b02b9da7f43368bc0fc251ba5dd762e26895f1eb93be4de190ad0360dec00cd14c06dae0672d2df472d0e3ec
SSDEEP 12288:DHN39Bxh3smD2s9NLEw23Bd/PDexsaF8oMw8vFo/3Bd/PDexsaF8oMw8vFoI:x39rAoLEf3BxPDexsKdj8vq3BxPDexsl
MD5 SHA1 SHA512 SSDEEP

color/P65/AUO31EB/D6800.icm

SHA256 edb10d586010f3599b22450addd392975dafc96ac038319eeaacbc05be5c7bf6
MD5 fbd6b275195fb00744c6e6e9302ef931
SHA1 3185530886681b106eb5c779f5c67a21f51de5f7
SHA512 0b541fc830f4d77e1d14e594b787d97de46b64b8df0539705ea125a4aeadf3587503442d24e92abcb3944129a8bde28db9c02690d5342163b845188c73e4ad8b
SSDEEP 12288:8qYJgU/QpJp/b8Ho0fTMeo+m1kswFJ1+2uRsIseOLQQo+m1kswFJ1+2uRsIseOLW:5YJgnpJpYHo0LMe4DwF+2GsIzvDwF+2C
MD5 SHA1 SHA512 SSDEEP

color/P65/AUO82ED/D5800.icm

SHA256 0fa0f7329daeb014bddc36f9eccc7a77f1acfcc4e66f970bbd651f245eea2e54
MD5 eca268abe280558875720e31a00c01a9
SHA1 8beafde6c66a4b463172186ca07003310d6f16b3
SHA512 0beb9a3a1218a81bd2105a2774144ab4f12511db7b35102be44aa0cdb2115b8435ba0540bbcc31911019293f9d71f404ea5acb5b8c0734d4a089d3501e80104f
SSDEEP 12288:UMBczWzWCyKg3T/9Y1fcqKbomSwgn/Ow3qoVDKpwmSwgn/Ow3qoVDKi:/q8Wx3T/+5cqKbomBgn/OqqXwmBgn/OI
MD5 SHA1 SHA512 SSDEEP

color/P65/AUO82ED/D6000.icm

SHA256 d57460cac9b7242d2ea998ae3cd127f4fc3cdb44de66084c69b68a7e9317f984
MD5 95d3341d933f68347bf2650438f9533f
SHA1 52146e74c25189e714e2ed01913f74d7c787161b
SHA512 ac4860b07c5037b17f147d96902586208e32536303848ba0582f8a7a563c5a73bf827f2dbff4452aa0bdc70ccfa6b99657ede7b19e37ace7f570dfde688d846d
SSDEEP 12288:V/96RxH2lGfsVyPNLuv7+e0TLhNGQ3yXyUIIJSXmbwhJ0ce0TLhNGQ3yXyUIIJSs:V/9AgDsoaXTlIQ3XUIIsJPtXTlIQ3XU9
MD5 SHA1 SHA512 SSDEEP

color/P65/AUO82ED/D6500.icm

SHA256 95cf5655ac408dd2e4db700e0abc13648431232960f767170da01ecbb491a0c6
MD5 298cfc9164a1022fdd6b571ed70cdb9e
SHA1 b7309d8f400af229b7dcc6b9edee42e542f43787
SHA512 d09a44c395281efbb498b7a4bea219109bab80b2e246638938fb86c0b69826678e358634a379ed06d5f9f1e2836328e32a491f2cc3c580e19f83debdcaccdbde
SSDEEP 12288:CQl5QEpqe1eclDTEWuGMkT8dEVtH5HQHLHIimJVE3zRGMkT8dEVtH5HQHLHIimJr:3l5weHdL6kTQutZHQHLoBVUbkTQutZHr
MD5 SHA1 SHA512 SSDEEP

color/P65/AUO82ED/D6800.icm

SHA256 5ba3254c8455c908f4532b898cba67d55899a8acc06429e62688ac9225b234cc
MD5 11c9b9bbeda11ab077a6055eb785498b
SHA1 0ef4613d7bf19d1d53e23588856c3cde69c10b03
SHA512 26b37b58f7a1eeee70aa6cf795b549dacb21dd8d08bf9dc85d7edd8ae9733723ef34ee4d9471b8be1755ad2a9dd4a576a6c9a71e90e5b9ff223c7ad402d89e3b
SSDEEP 12288:kR5W/DC/5i5x7yJlJ1D/NhkWq8o+lQyuqu/NhkWq8o+lQyB:kR5WOgj7yfTDldciuxldciB
MD5 SHA1 SHA512 SSDEEP

color/P65/BOE06FB/D5800.icm

SHA256 672694dfc327a03612db1479305b51a2c9aefca36ea5953dab6faa4991fba6b9
MD5 b732828ebce4cd95d054c1b5636c1d8d
SHA1 d8e2ee51e80021df5aabd685c3980b6ac970b522
SHA512 f0b7497182e187429f296c8a7e448b4f523abf7c9d1971fb9f0ce32f77f448960c9f766d237dd54097bec73775501ecef3665d42ed18899010593d67c2c97f7f
SSDEEP 12288:gg9M8MxiRxG/espzvuM1+eJxqJ2CgYn9TiROUO+AZkYo2CgYn9TiROUO+Ac:gg68Mb/esH1BxyLEROWAZkYILEROWAc
MD5 SHA1 SHA512 SSDEEP

color/P65/BOE06FB/D6000.icm

SHA256 42da0254c884d2b1d8641d5eb8687f62c016b90bd77a9de40e3d697b4ca6389e
MD5 e6c53ba0fbea5871348cfd97494a88c5
SHA1 993015f88b9612040c4bbb7ea929333709933f53
SHA512 d6873342d06982750b35213ff25ab161bbf0d4b858b5ad4b158758e8b85bbad428f64c48b9b92cce7f0bb0f052b6355ac1215603a304daab43f5d0990c87c436
SSDEEP 12288:8RwrlHpRlo9xZ5RarJwugFLcEdBZ9WHjw5Rabq+W9/fW9jdsdBZ9WHjw5Rabq+Wv:GUHS9RErJwugdcWBZGjKRaY/fW9jd+Bh
MD5 SHA1 SHA512 SSDEEP

color/P65/BOE06FB/D6500.icm

SHA256 c781b518f77ac2c9dbe9a020c6db70ef0338ff542993e3672e1755c26e16fd40
MD5 98c717e2bea794bad2bd6ba3d0645a4a
SHA1 7d1e4ebe6fc8a5bc43bf309d7655aecced9e27b7
SHA512 af87d5a28c94c7d57e4cd8c3ce64db4e8abddae9f268dcb6c7c813ca7f2a5093c07a9e8ea756dce357c48bb2d199d0c229c9b1b337afef6b54bdf973298ea1e8
SSDEEP 12288:HyyRCILDfGPDY+0qSOamW3VomaDYiF0DZhtxxG+ghUpCmaDYiF0DZhtxxG+ghUp6:UgTGPb0qSZmYoI3pCI3p6
MD5 SHA1 SHA512 SSDEEP

color/P65/BOE06FB/D6800.icm

SHA256 5da02452261cd0648c0d0a2de09ffad42a72405fb12df36c3aa8d87007a347c4
MD5 8e1267f7b6bbf5184076689f34959e85
SHA1 1f55b378f8f07f255ebdb7205f8a5ae8976fa528
SHA512 f4347ed0f1aa7bca823c41c35ac4ec96ee9500c8b074c50715ebfd2408f82f0a185f8fa14114b953723cfccae78128c67abbeea02727b7e269870c5b23c7abc7
SSDEEP 12288:9LtVn0CWqKUNkA0FIv1+H8ZVdedhpcW6QyyRueFn02OredhpcW6QyyRueFE:9ZD7KUJ0FOIaVMpS+oe+6pS+oe6
MD5 SHA1 SHA512 SSDEEP

color/P65/CMN15D7/D5800.icm

SHA256 4251c08b04c9b5cfddff100a1781720885cd408b2d427a9642524f17aa7b9e7b
MD5 9a2beac6a80038b94b05695b5735528e
SHA1 b209850c1c399f1c7c10be6f7cfefd5ca61faad3
SHA512 be6cb1381d46e0e89859ba06e0e825d2c46aee1c8fcc8674b71089fbed966f8eb501f8c10dd2604ca7483793695fe296a933758000bf687b7ee3ab474eab9f28
SSDEEP 12288:11R0cAZGCEfgc76sAKUdyBosKVja+DXTgb0Wk2VdSwZsfT+MRxmBQTRaLMRuc:11ao9IDsDUeo1RDM0l2vTZA1O8RESuc
MD5 SHA1 SHA512 SSDEEP

color/P65/CMN15D7/D6000.icm

SHA256 fdc920b1fdf9a621c732471112e79273ca5080bca04c06c93c46e6376c131820
MD5 4d0a8a4a17c1ef5bbb2357b896698611
SHA1 dc01f3f4d980c5a69f0375871bcc2d505c8d6846
SHA512 fe233dcd82eb367220764a2f2da610233bad75fba96c5a9a8dfb564c8f1c65f91e1834d365e978682c27aa356260b4f6068767bf71543f51c55c3f6b6ffe1a67
SSDEEP 12288:ffB/lyOB9xi7NV+koBaXWIVb8/p+t/Co+xg5r+MtZhuXNc2jYU2t05:3BLX0ckuaXXVQ/gt/Co+m5rvGNc2ct25
MD5 SHA1 SHA512 SSDEEP

color/P65/CMN15D7/D6500.icm

SHA256 79571105017d0935a3eb58453f294bfccdb08cf1b75d78e39984d2af1ab40c15
MD5 a3a744e55f3fa6faa3d11473efb7809c
SHA1 e665bfa5c6d7f255fea960cf99c2b6a2b416627a
SHA512 311986c2573311e1a3bf0522f3dc1c9c8accc46678b92867bee545b8301053f2d0b179d658868d84cb23084cb13b093b51ffdf10250a9134a9ddfc787cc7d3e9
SSDEEP 12288:gkmWr4WcmDjF3NM7ANnNnG6TQI0+RbDtq0qd7kT4sGfQ8XyXFtIxsJKU+UuR4SRu:gsrLjF3ND1vT3/t8kT4xyX0xUv0zRu
MD5 SHA1 SHA512 SSDEEP

color/P65/CMN15D7/D6800.icm

SHA256 63e6d5d94837c4d1fb90c535c7b22785cf89f3479f93085836f00d86a9c3a557
MD5 65f1d099aadc28c283088dca086a6690
SHA1 4c59014d1eb6d987d687c0daa443715346df0279
SHA512 677a907416f0f72d079143abdcb2bbe07a7997bc8fb264afb4952a55b70963603d3b82c2b76017f34cb76b6f7dda812a463176e7bb8278ca86369bb52f69088c
SSDEEP 12288:/mj122gDRKMNw7mIeP/ThPS+14NBUo0TrgTss1NOfh/y6lhZil6UYCo2Icmb6k:Oj122glJk+14NlB1o5ZPZy7eKS
MD5 SHA1 SHA512 SSDEEP

color/P65/LGD05C0/D5800.icm

SHA256 a3f7d58bf7a6eff40b2a876bdc984b4f366ba113415303fe09c0daab55167d25
MD5 7fcf374667ddf64594639a72f316f628
SHA1 a3a6a28f6f2b29a0addf76e83e8c9d9ea3cbd8d9
SHA512 ef2589da3dca072956cf36a5796f06635ea69925ceb2741820a1f432c3a46c75e05b5f3df299d324d4a983f8b66dd3758005812fd771f5123bd491c8971f0a0f
SSDEEP 12288:wOSSjGvRR9uZkkETpjLCvdrxcTtiPnYyTUB6JQQceZ9+bliPnYyTUB6JQQceZ9+8:wtzJR9u0TGmTEZTc66r4ZTc66r8
MD5 SHA1 SHA512 SSDEEP

color/P65/LGD05C0/D6000.icm

SHA256 65caf1a9f18eea02f32cd4bf48843e663cc810258a176cd0c2d8bfe605c573ea
MD5 9f89e41b9b0c33dde5d9067c2378822f
SHA1 a78419e31b102b1027ca9438929e92776842a9ca
SHA512 a4ac21a406bd0bb970abaec144f5a0bc32a94abe4bb58e35e95717a6744325ecc889623fc61b36bb72217f12d149e88b037a404301e7932e15d6a1f919a78b09
SSDEEP 12288:LltX/4ejt4lqKw1feeGMRURvbpqqGkqzelbzWxJzTBp7LDOXBJrkXtuGkqzelbzY:LgCt4lA1fl6vbUq4xJzfDXdu4xJzfDd
MD5 SHA1 SHA512 SSDEEP

color/P65/LGD05C0/D6500.icm

SHA256 f571ca6ab69b42cc93d8f150fc1dec861e33aebc732551de998292ab5917a85d
MD5 2df24b99e1e625dfee40fb241d495685
SHA1 9a150cbee40ea7e9d9602405058ecd7cc031a6ff
SHA512 be2a15c3f05f6e3bea822ba57ffbabc200bf3a713e26334c2197216a7f77aa1982ca34b3a3c963cea026ac2e0e6a5ad477aee012c2cd6d5af0da1c653a603349
SSDEEP 12288:CjEmppQFZwGGLKAQfzLjRLbhYod1NfzLjRLbhYoC:OEmppFBULp/JLpm
MD5 SHA1 SHA512 SSDEEP

color/P65/LGD05C0/D6800.icm

SHA256 b2658ff8bbe52c65d29cbba2be967618dad34fc828a326d685b0e5fdfe841acd
MD5 7b4fc96d66f04f5b52990c154fbe9b42
SHA1 84bd2da3b46c0510c12e280110310af03dbbb43d
SHA512 2da82faea650622c630947644239da03ca0e51d13e7e02b0d4082d5f5ea232e3cc3479ae64fe6701c1b595a2750c266b65b7ee3211da41341deb424f9b650102
SSDEEP 12288:8iWa0hZc91pdwF9dHGZtSjCYvbGeMiiEk2TiGZtSjCYvbGeMiiEkN:8i4o9zdwFzLCYzGeMIoCYzGeMX
MD5 SHA1 SHA512 SSDEEP

color/P65/LGD05CF/D5800.icm

SHA256 0f978d3027ce95798d9274559b2f4a336eefe789bdb79053205d2b9de084411e
MD5 c305ebae6b6c093776a5b411ffd8f11b
SHA1 901333f5d6b95f5a3778dba49688763b399f2755
SHA512 5b972920a2347f556ae170522f861043cec23b61b748362236519c25ada2f115afbe2d558c34d5541966f9810fbbcfa6e698cccda2bed9da95af3ad1840c7efe
SSDEEP 12288:g6mX8njex9PzcfGIig6SvS5hCvOgnNg6SvS5hC6:g6myj8YfjV3BmV36
MD5 SHA1 SHA512 SSDEEP

color/P65/LGD05CF/D6000.icm

SHA256 b592c9ece1464a313121d5cb5fb6935cccec9613c49b873c722a48939c30614b
MD5 5b31189fda089a7171c855eba5565c7c
SHA1 b17d58fcf36ffa7584b9d0084e235a05a2da4d67
SHA512 cac17988000e5f21cb6f1d148fd61462d79bb04a9c4689303cc5768f56f9cb71886bd42edfb24d164c489b4a61565988405fa86918323d0b4a6183c6c01f551e
SSDEEP 12288:K80mPVNDvZIxDPEXUBmcBLV7N9F0OxtyeALKRPNSbUljY9ROxtyeALKRPNSbUljK:hJPrlXEQcBLVZ9FDtFvPakjftFvPakjK
MD5 SHA1 SHA512 SSDEEP

color/P65/LGD05CF/D6500.icm

SHA256 13d8f17c27e42515d47b94460f4c80ba7e1efa918eb4f949f4dafd38c9fb6a56
MD5 a0e46a844f7d25f9663292a001c95233
SHA1 5379e5bebd272050605c9e5370e5d6b4c8abf55f
SHA512 89a26611e6667320cf06be6cfa926f48e233f2f2d9e2cb4c424173776253180177c9feedc1f7d917337a216df619c64817bdad8034c6e1a3d745deaf5e3521f4
SSDEEP 12288:kedejt6vbLHcHeaPDGNEzyn7g+LEytVE6YFtDfcxMaSmp9vin++LEytVE6YFtDf1:kAeIvbD2NrKcs/YFFuMaSmXvI+s/YFFN
MD5 SHA1 SHA512 SSDEEP

color/P65/LGD05CF/D6800.icm

SHA256 0648129a91b49d98bdc4244bd9f0cd27d4c2e20d46b3c2a463b73750605165cf
MD5 1f3d17b34ddf30a02ef12358b24121e9
SHA1 9bd494b8285cafeda26a803419d09aaafcf54b45
SHA512 6a3b719aed04e908ef0d65f7ff64ff00d455838fec891d71b2779ebe6f9585f2d0fabaddb7f0c0d1373bf6b5071da3fdc9e67923b883936c6b0691b9891703d8
SSDEEP 12288:t77serXnjntpJbrZBmF2wXNwYs8htJOWnl1uZYQPdw3ef3L6vcN5wrwZHtlTAQPE:9rjRhEkwdlhtICbQ/rL/+UTrL/+UM
MD5 SHA1 SHA512 SSDEEP

color/P65/LGD05E8/D5800.icm

SHA256 c2227efa28276834730262077b76271a7394d9f8eaca78cb1a250b7dd1895cf0
MD5 dfe2138489bbc871fcfff203fbfcd05d
SHA1 7fbb0e5e81e7e41c154db7ffa78298862cd10892
SHA512 3ec30904f90aab0ccdb8c884e6ba5832e9cb16aebfc43890535d75a2eba6739a18f01e511fcdb7ed8dbdc56a61c10201c6131aa6185842c4d92a494b2ff4ae6c
SSDEEP 12288:EsZ/C7l9HPoIt2PAU27SBh3ZP+dEIlQTh1NxJjkhXZdmIsUBEIlQTh1NxJjkhXZl:EZ7rgItx7Q3ZWaI+NPxJwhXZIIYI+NP2
MD5 SHA1 SHA512 SSDEEP

color/P65/LGD05E8/D6000.icm

SHA256 9c0f33d93e89d772bf75a5923afbc52266720d2bdd949ac35829b53ffea42933
MD5 86bf77b5ebed1ca776a6576ff32b6ed4
SHA1 fe1a9f8fa4735892a50797edf6b4e90ad48f84e9
SHA512 13e381045f9064352ea4ca1634d8ac4033f6a81481ef3c7105036181533b2b25d5cbb2708e3a0e56d20837365df6a55a886a00eaad2933bcbcc17fea40213d63
SSDEEP 12288:7Zk14bX1msFPbG8XGQ2YIDr0G6R9dmHYmpGiOSeaR9dmHYmpGiOSE:G+L1mPnQfWr0m4eGB8m4eG5
MD5 SHA1 SHA512 SSDEEP

color/P65/LGD05E8/D6500.icm

SHA256 d920f89017a73e3ac5a61ad6b0ee83a37b25ffa47c76cf8f67d23c70408e5824
MD5 b28e230c25b384cfa4bb08b9aa2917b3
SHA1 31d87424f0dc7757c3dccbac7338de9b25551f06
SHA512 4386fd1c001f1638170f3aae39a0e0fab883f910908d8a7f22d65abf7f4ca4ed0a28186421e273c485edbcd5dae51432ed8c752494faba3fb3f8a4bcfc3183de
SSDEEP 12288:eBLP9f21XMRlkA1BNAkyUNIq+utmQYvUNIq+utmQM:+LP9eXMRlL7NAAiRutXNiRutXM
MD5 SHA1 SHA512 SSDEEP

color/P65/LGD05E8/D6800.icm

SHA256 569d95d99471e197ff30cae8537b1d272b067a5ef27ca7e79c25f9835d6529a5
MD5 eee5306ad09a0529b3e64f666cf2d133
SHA1 d299b7279ad1f4cea2961c23e3f1494318eee438
SHA512 175edeba8c84ecb8ed52ca67bea1221540802b5df22a60e3834a3ae23c887f23dcd0718317941e9329520250b858e4d13216c9be713ef88da6e64a08038917b3
SSDEEP 12288:zx+mwcck3ZSvGBC2nUQj5zA8G4y6wfyX0gtc/RzW7VVwYG4y6wfyX0gtc/RzW7Vm:zx3wDk3ZaIKQtz/CXCCXL
MD5 SHA1 SHA512 SSDEEP

color/P65/SDCA029/D5800.icm

SHA256 1d7deeae3814dd59d3a6b7add4904466045c1f761326ec6399a2019daa6a8203
MD5 e081757204d9511cd1d3859f1cdea2cc
SHA1 cc76aa9c4ef7766a76eff7c2e505ddb512f5c6a0
SHA512 e70f2eac6422dda08456b4472f20444e26707668dd34d4e9f42e9533e0142377c65ce681cb3e2336e6de7acda45852d017dc616c4cf2f412f18936f9d7533d5e
SSDEEP 12288:oGrM2XQptxiG52dbjmD0785ZYi9Ab7vQAOEeCezuuJavdI9BLdb7vQAOEeCezuu9:oJ2XgtB2db/YMi9AXpOE3eqJmjLdXpOF
MD5 SHA1 SHA512 SSDEEP

color/P65/SDCA029/D6000.icm

SHA256 a7d7e645308067492c48585a6099bcd3da934fc05776990637d11e9e7c0fede3
MD5 fed48c703b1e07cac080465bcbd75dcb
SHA1 c8e3b0091187f17e459e4e2fd5d5a28b8bf8fa18
SHA512 96423fb06424454270ec47ef95812a8780ccf97563546307859b7861e4f277892b0caa2161707178f8368ea1457de8d4a499af9f4089e224bfb771ccd0c67cb5
SSDEEP 12288:PyPP7jLsZyuSKc0CBWfXV5TXXjrE/PB2ewe5S55IXy0CLF+XV5TXXjrE/PB2ewe7:676n7ztyPC5Ii0C2yPC5I/
MD5 SHA1 SHA512 SSDEEP

color/P65/SDCA029/D6500.icm

SHA256 1368f69aef1e73e0a3b38b6022f253a3128c13a3ef21095477fd1fbc5438a875
MD5 56dddbd0425bf0e8c3c5b4a708c1d1fb
SHA1 2620f436c27e544f7130d3944ae5ab1d3f27956f
SHA512 74ef8052ca5bbb89514f3e0b4769017eed47ce4f3a7fa82bd1e8fc1fe48ecd8523e423429bf8666cef055c113c5e1a89b1b95f161f2a0f282359eac36e04db3d
SSDEEP 12288:A+5RuuTTkKtVgYl5lo7U3PV9wREGimRrGblek5++REGimRrGblekd:A+iOHlo4ARlZE++RlZS
MD5 SHA1 SHA512 SSDEEP

color/P65/SDCA029/D6800.icm

SHA256 06ff703b314846f9bd81c12c990d6e5449961afdf772c7e02707bfb89a03828f
MD5 99cdb231268b8acbf172fcfc54f962d7
SHA1 685393854dcd5ef4828c5c4ad53f984290a42e38
SHA512 752ee0f962f4aad80a5998fe3c0895cfa6786377a9eef3111b9ec5725391f87b169855d3d66ffda7a5f99debccf7db2ce1eb3e6ea0b03fb4001d1d0f331408e6
SSDEEP 12288:1bP5rHCzPYo+RyUWiq6HH6yk3iXbmLgzcz7xJtQav3:1bPgURegX0O0td
MD5 SHA1 SHA512 SSDEEP

color/P65/SHP14C5/D5800.icm

SHA256 d596b7e6965adf98f523dbadb7a9dd2124e9f6fdf97ad53f6c0c23292dae8dfd
MD5 7c7cb8882354dc7b77effd2f0af71d2d
SHA1 c47de520c35e7ffbe55b63aa326e4462a26129d6
SHA512 748dfad2ca7000fe19c07e779e6af3083bebb908bf2042a091797d14b269f3202a9ccf3037dfc1ec5fcfb52d251db331871a9fd687c285312eadfe4ab95f982c
SSDEEP 12288:IgEsKmvXq3zknKb5GKK1c0HX+yPJo+Tck9PHX+yPJo+Tcki:IGTvqjb0d1c07PJ5lP7PJ5a
MD5 SHA1 SHA512 SSDEEP

color/P65/SHP14C5/D6000.icm

SHA256 c7f5118fc06b487a9c42f51f29758011caa64c4b188245c4a9de33ce721c4f4b
MD5 198cf075e91edcbb4a152aa16189bc78
SHA1 f6897aa2ac0453f96fa4422e2a94ec07dff02ba0
SHA512 ababb22b8b0da4314fc521eb8e5b0404e300d718fd3d105703f48adb4d74a01cdbf91ee202156141b758f0f43389942e311c8174a4796f262ac372a7fa895b45
SSDEEP 12288:Uroe+5urK5JV26i1+EJE4MD2SBVNQeHHNulRmbI0kA3JE4MD2SBVNQeHHNulRmbP:IdyJVn4O9jNdyEBxZO9jNdyEL
MD5 SHA1 SHA512 SSDEEP

color/P65/SHP14C5/D6500.icm

SHA256 1e3d699cc27ed393492e00200c0d0271e9bd29f6ef7e483b95517bf191b7033a
MD5 7b7517ec312f8596774900852200f717
SHA1 3cf282c5104457e3f5b21bbd1125fb8605a29f12
SHA512 be587d2790dd6e6ec0c4efbb362418495d176d87014af3eed238c247cd9ad47d3b45772182fffe2ab1ea768805a57e407ad873573e4e7adf6f0e793de59669a9
SSDEEP 12288:+V2Sj1MBYkdIB77yW5nYMfaBsJKJ6y9XwOrhiblZNpy/y9XwOrhiblZN+:+V2y6BYyE7yWhYHagHwYQbPuSwYQbPE
MD5 SHA1 SHA512 SSDEEP

color/P65/SHP14C5/D6800.icm

SHA256 e4bcfbe2f3be92443032497bc7c98787678431af4fc39eb41f3f6204039b262b
MD5 46062bc823d32d25465972b238010993
SHA1 dfed1053845157e03edd9e7ee2e78e3364aaf931
SHA512 90a011080332be5767822191f7e123fc26377b1d8b3d70e5ed6a3dc7fb642da242e5e5a498794669b8d31f8b6bd7302412e6124fc5be78f25e97544c7d3dcc51
SSDEEP 12288:j4toZ12BNtFMD9JoOes5BjFhiGmEJXcqOes5BjFhiGmEJQ:q3BNE9JptnFJX+tnFJQ
MD5 SHA1 SHA512 SSDEEP

color/P75/AUO42EB/D5800.icm

SHA256 8d315b6d2f1c29ac74d6fce500a6282db55d1d69cd38b7be171890c7f5d6d2da
MD5 6a4e4f6108b4e790144d8d59eaa30f52
SHA1 999705098d91749af5a9f4d16d80e274412da683
SHA512 e7e38a2760c3ae8498aa6b14c2181ffc4a627d62e409aac9ffd96c90e9b36bcefb8c207c4fc900bd34af27ef8732aa498de22c0cfde258439b43e08c2efa3cb8
SSDEEP 12288:Lv4bVTnm0hJad73YLOCE8M9MqRZ3gGSY2vr1uQFrDpqa8EN3gGSY2vr1uQFrDpm:MV7m0YoXVqcvpbFrDkT1vpbFrDY
MD5 SHA1 SHA512 SSDEEP

color/P75/AUO42EB/D6000.icm

SHA256 fd09ad4d9e54e3c8fe244ef2bf8f6b2c3c68921979c7935cd2a92e83120b18ff
MD5 1eb2353f699d709cdbfd8f5f0a777f50
SHA1 0c8fc7533b75f99353eb53664dba07a63214350d
SHA512 7d89d6b1f41e31cb26f97b2fd0ae6435bae656722bc96d9b3dda47d5cdca4ae62ab9c713a6db108b4f0a6cf24c27ddadc329e14bda5d0a6a0de6029cd96301c2
SSDEEP 12288:OM3To5aHxxpVnpks1gH4rEJhJ6ZTouExLJGhNYJ6ZTouExLB:OGTOaHPpVqEg6E8douExLGndouExLB
MD5 SHA1 SHA512 SSDEEP

color/P75/AUO42EB/D6500.icm

SHA256 528451512e420d0ff172667874ad0ee600e193129b3444c22e5222909c88ba8a
MD5 f61d17b3a9b137fc904d6923a93aec88
SHA1 d10bfe87f5f6c41a58715896d983d3b4ed5cc978
SHA512 09fa5dfdc23d82436d4383351c1555fd7b66c607e0299f8ffd7372ba768fdce740d7f6fc04ef0a5ebb43ce96cf5b920e26d02055f7c7f66543d3fab9289c0888
SSDEEP 12288:85Tx29Ft4R0Nckve5kBxl/c3IHC9nW7CespQdzF7xl/c3IHC9nW7CesU:8wFt4R0NdWQTcChWodTcChWY
MD5 SHA1 SHA512 SSDEEP

color/P75/AUO42EB/D6800.icm

SHA256 37672d9d5cdf1b2fe0c5dd10f90d2014f916184ba60b701aa0f7b8cacdb2c27d
MD5 ee6f7d0cda486e220c43c0bc81a1ddef
SHA1 de350de5600baae7b7721484179884a849286e08
SHA512 a577d01ca641561c60a106e5d377926cf74e6120756e19cdc72289cad0c6d4849632934a9122a0d0bba9e03acf2729008a4f2c31d590743110456a6153b3f733
SSDEEP 12288:Ty4cZMGdeqBY1yKw9d+/svbxYikAR1sDYTFZikAR1sDYTQ:Ty5ZTTB/dTjxTk21sDYTFYk21sDYTQ
MD5 SHA1 SHA512 SSDEEP

color/P75/AUO7A8C/D5800.icm

SHA256 525fc3d805a055a30af0ae24dba41be7cd2a8569286aa575f3cded2ce7283c95
MD5 d40cafe9734f1bbbd5b58c0f2c6c849d
SHA1 0041a6cb711db0986ffd8f2d8ecf819643c14e2b
SHA512 6a89cd657004954d4f4974047c11fed829bb0c382d17299e7e8b0864661e407b475e023709e50e9803a7d0bc694563fc19d57663fb2ac772cb77880262e3c8ec
SSDEEP 24576:r1QNIyAKw5EuRpjg219gQfDtlgR6sEyd8BmmPtlgR6sEyd8Y:ruNIyAKw5EuRpjJ1/fY81ySK81ySY
MD5 SHA1 SHA512 SSDEEP

color/P75/AUO7A8C/D6000.icm

SHA256 eba8847249978c6733031cc78510fe4362fd67e81b3fc4a0bd774f1f07cf70b7
MD5 dc8bf378e66c98e45d02cb8d632cfddd
SHA1 59618105220bb613530a94ff46ff4b54e2eec37f
SHA512 aaa29724cbd581377cc12ded2e3c0391ab5c9969ab78137a07d661b65440362b4d29843e4fe6a2bc52acceef4e80e38728e0692e430d191e7d85ebe1748c400f
SSDEEP 24576:Dc0UDtmQLTHKVh6gvvaDwulk7vaDwulkb:YpxmMHY6qaDwulkTaDwulkb
MD5 SHA1 SHA512 SSDEEP

color/P75/AUO7A8C/D6500.icm

SHA256 3dcee80fd99b636bea9aab001724fdc02efe2c58968e8e5f0392050d699eb10b
MD5 f3b3ab9d8e78f14f6cc8d337bbdea679
SHA1 96624aecb24cc532d6fccacbe9bfc639bde06b38
SHA512 cc4c13b77b1a6abac077f6f8525df83e097ad14105752b490eac24991e76544375c6ac88cd070ec837c9a9ce2691a127b868e428fff5704acb5e1b38902c9cb3
SSDEEP 24576:wFehYBbnXq2c4kUs56487Z5E9GFN2uT7Z5E9GFN2uA:lYbna34kOOGUuvOGUuA
MD5 SHA1 SHA512 SSDEEP

color/P75/AUO7A8C/D6800.icm

SHA256 3509572c7fa249ad318e54ca0869f3c11c4b9379c8d62d86e065f5e5e00a6219
MD5 ce809eb718ba2d1fc42dc9884d2b1023
SHA1 36e4b296faf52d07adfe6a8ba35e5f96e01205e8
SHA512 328063099373fd0220ed321f1c6f7882add28d32608f4d81777e3ed631ffe08953d0ef242771a5c84984506aae6c82b9fa7cb546faf23a521208553a2b5ba77c
SSDEEP 12288:TuV8TLp/iLw+nnIn0r+2FJmj6dtgERLStCfczO87QCSjSKKuStCfczO87QCSjN:TMsFiU2q0rZrEi6QZ+KKRi6QZp
MD5 SHA1 SHA512 SSDEEP

color/P75/AUOB78D/D5800.icm

SHA256 0ed5e75ace0956d2c9ba2f5268b13c67e8f8c791e735e1a31cb501912aac8639
MD5 75a6b7f346f6d53bcdaeba053e3f18e1
SHA1 df9362798541720b1ab7ea7f675ff1d84d6517f3
SHA512 2d28e5cb9cb640678c7f9e581f4ca5b234c5411cd1b65ef7e33a7a07ab72cc7e5e894f14ddc546ce214848a5edb7b7382fb0f5af79fb2157b26d9978fd3fab56
SSDEEP 12288:1betDsWq0f+BrUKcrz01VCnrAMYlkXdvP3g6wdHdu7oxoEN0sBQCIt33/u7oxoEX:FWqPBrUR01yrNYlkXxKd90ny633/0ny1
MD5 SHA1 SHA512 SSDEEP

color/P75/AUOB78D/D6000.icm

SHA256 14cff8a512718054639405a723bd895900734320f0eedf40e3f948f426a07b77
MD5 eb78e5e5c1da253618f771790888e515
SHA1 9b4df1d22257d8fae81c15168ffa245a1e3a202c
SHA512 5caf2a57f673004fff3fd81037952bc07234023e16b0b2ce5be8708cfcf764a3316b16b0a82c4e955a47d5a46c789d4c7a8f9e4fa555f11359e13812202a4d82
SSDEEP 24576:Qt6g6hEYF/73cjWJk61K5mkoAhEnem9AhEnemK:a6mYFjA0k5mkXsIsE
MD5 SHA1 SHA512 SSDEEP

color/P75/AUOB78D/D6500.icm

SHA256 a2c47f4aa2e281154f7eb31c36a13aec9d4bfdde1256133727a0cfbc1e2aeef4
MD5 272836f13b17d2999ea2d3805026e4c2
SHA1 484753fbf287e517069405725540d8ba1e6ba86d
SHA512 59d7ba088d8241d39c9dcf08d20b1a0745bd542ce028e9dd2e40516c910a2b38dfef57c70e05da8f5a6f4dc9202871b7dbe34b5c4f9e3660412d6b5efb5663d9
SSDEEP 24576:wN4H89ELojCOGEOzjleO9kNwFzYuPLE8FpWuPLE8FpW3:HH89E+COROz397zNE8FpFE8FpO
MD5 SHA1 SHA512 SSDEEP

color/P75/AUOB78D/D6800.icm

SHA256 2415cf0efad022d96b5a95bbd7815dc089c37eedd92af0bc995421aedc8b4c36
MD5 118d7b943570b58aabecd742880953de
SHA1 56ba9a28e0d9c4c14d8a65b30ee2534a2609ab5a
SHA512 da05e4731a946582c39dedd57b8c216832b97682d250f293c7eb7c35339547fd4fc7358157050e072aa8197022360e97f34a1955b242a896e491fe1545aea62f
SSDEEP 12288:3qioKeyHiGHWZI3ZSUb9dzLbjKi5I1Ms6rr2RXRZdQC1Zk4idQC1Zk4T:9VRCiWO3FiiaDsOGz
MD5 SHA1 SHA512 SSDEEP

color/P75/AUODE8E/D5800.icm

SHA256 9dbd88c6431a31540c103af15247729ebf3e0a00d0985c812d2224865924d239
MD5 99eb19a31d180a018e014505d1d3c025
SHA1 0f97e327be4f40b0a028252afe4be8941b814ef2
SHA512 02719ad86069238c9e2b326c67fc52def41d5fc4a0c5defc1ab3b06f2cf34c0a53dc2ae073e4eb169ca5ed6136a7bf15fa394b24f41dc02308cb333a25cbbdee
SSDEEP 12288:j//f8a1fiZjriZNfVfAPER5KR6dZr7rmWK2pnBTaaVPp6dUPHK1HXDaaVPp6dUPE:j//EKiV2ftfAcR5fTmWIMXyVGMXyVt
MD5 SHA1 SHA512 SSDEEP

color/P75/AUODE8E/D6000.icm

SHA256 687009732637808bffcfd4e2a68a0e60b253beacffb98f91f13e6903f6fc33c6
MD5 b43f5b262d31f752cd4ceb4c2136a099
SHA1 cfee631b046834aa27041074b63ce107435e0645
SHA512 b69ba598d50546d9ab7272d803c8182a237516743f9b46af03e3248bb4f5efc3e9a28558c396a200dab0ea0a10d78d81a6d838fefd6d962117dc8694e701ea9e
SSDEEP 12288:1aCKBShBWk0/dqTT+OVJNrNUY639SDgVj9NwIJjKKVVj9NwIJC:ZWkQdEraYuBdjwIJpdjwIJC
MD5 SHA1 SHA512 SSDEEP

color/P75/AUODE8E/D6500.icm

SHA256 230b703f6cdc9c1c626a9c9e76b4818ee92060a3bcf0ecccb01ae616ebd47d3c
MD5 37ada909bb68615da4cec19041961e34
SHA1 687f2ae4355331784feeb072d309d3738d4576ef
SHA512 48e98ce2890a0295d7f1c1c8fbc24c65fadf2c665e7577ca0c692f081d9ac86737a3defa517a1e4d3669578d67fe4f59900f199a9f5f43fb4af78415f377fccb
SSDEEP 24576:oNl/gAYo3Ay2Z923X5REx5yawuC1ZPCkVR3awuC1ZPCkVRJ:MgAYflQ3pRNzjPTVhzjPTV7
MD5 SHA1 SHA512 SSDEEP

color/P75/AUODE8E/D6800.icm

SHA256 f097cd6a071cab0b272ffd907b85921e93954fd5a0c65bb17dc73c794acb369c
MD5 7a170833bc14f9d5a3b490d010457f9f
SHA1 2cb8c68dbbed300e74163afbaa019e7600a60f90
SHA512 19d0109f3d353c395ec8c2e88d030717a4b4ecde64442a36832a099439204403e89f885b41608bd1a83dda214a446f73c18bfb4dc36a226a9a4248fbfccc622a
SSDEEP 12288:VOXZgP/5LzYJNPikwSb8AUzWXzPPUmPl/mqfVw4tBDA7tr0w0xDD2mqfVw4tBDAC:vhQqkx4AUzYPPiAr6tFaDDHAr6tFS
MD5 SHA1 SHA512 SSDEEP

color/P75/BOE084D/D5800.icm

SHA256 7e0eddfa4b2c5454a1c49ee15715368e2dd269c5c92524e5cb8affad3c3f1806
MD5 3223b55834f96edb5e206e9d00e96555
SHA1 231e68edbdcd1f376cede7f53d88f4cf8ab655f6
SHA512 988ed25adc1dba9c2296bf19b731b9be2a9f17504f55afffebc29f56d2b000f7dc5fd0d350aea7cd8c5fc6999c746140044e1b45d7a074b58624449a34d557b9
SSDEEP 12288:YMWWd40wWBXikif2LzQdLf7wRpXw/6N2ZKGtPbamn2HzT/ElXKGtPbamn2HzT/EW:xWWJwwXicKjIcg2ztnMzrAFtnMzrAw
MD5 SHA1 SHA512 SSDEEP

color/P75/BOE084D/D6000.icm

SHA256 b206950e37d1ca41b00a7951adc3b24e84a6aa4c2d90fd96f58344dec83356f5
MD5 8fc4266d9b6e82e18425610ac8ec87cf
SHA1 81e7925a7a03b7bbb0e5b0a38b9887a5b887d3ce
SHA512 f5d9340cdbd760f77960a3de82cbfd687f3f4551aab06fa9fd08a0b9e4418950dd98aa4c3ce8dad50b2800a176e8f41b178fa4107cdd40ff0c599e42711f620c
SSDEEP 24576:sTXQC5lgwojTLJLi/nqyesmkSIGvSLhelnv8I5D7XrrFvSLhelnv8I5D7w:sv6NJLi/n8sfSBvSLheln0I9rrFvSLhR
MD5 SHA1 SHA512 SSDEEP

color/P75/BOE084D/D6500.icm

SHA256 3c98b4e52f3473903693d560bafd598c1ea22a8781588a524cec11b765555821
MD5 dacb36a7dc6e8b02dc868acb6c6e4365
SHA1 dcc5210b831f2b9733dad23167d18fcb9d9007b1
SHA512 fd591744cf7328e231738d34c2e3c011b719769c2b05de2c398a386ff5b732a81d0bca8761eff7b0ca2107befcd43a5462380dd43c9a7101425dbab5249de3e7
SSDEEP 24576:p9RqSGZBhepS0pCMmRWTBlYEzpCMmRWTBlYEk:L4xaYy0E9Yy0Ek
MD5 SHA1 SHA512 SSDEEP

color/P75/BOE084D/D6800.icm

SHA256 07578ecd33f6101d4466b318d9d9732f25d0b0763e1c70b77651bb3884f5f2bc
MD5 99d49ae9c877f2710bdea4b361bdd102
SHA1 e133f6acd9720948825b13a4585b57c208b0a879
SHA512 f6b01df8cb3ecf7ab511b3edf4be50be15eac91752ed62aabc25ae3b3bb140fc7979d24d2c1f7e8d6ccb185878e4c096740273e54faf05576bd5f7513692ab5a
SSDEEP 24576:nYAhm1Z0GOLLXaQSdKRm2mOSXYEAzZrH6dtByziCKAhdKKdtByziCKAhP:lWZOXkKYRXYEAa4ziCvhdKK4ziCvhP
MD5 SHA1 SHA512 SSDEEP

color/P75/BOE09AF/D5800.icm

SHA256 d23cd6a74ae9820be0679d0d89f47bc59888a8c3abf52d7d3ddc7d7adb85409f
MD5 259070a9160cfa88806197089c7373a6
SHA1 455ecc202e20391ef426cabad0c4dcee4b18c6e5
SHA512 fed88aa9105e4e606f1cd0f70b4372dc46db93b28ea8db81bb8ddc11ba6353480e5c07277922c3ee2fe72fce07ecb12dd7b49ab97bb5c38ef53c8e6463fa276f
SSDEEP 24576:dnN5RKrI6ZY1Ec/zJ/aGWtB5fJjuJ+dLnJjuJ+dL0:YY1z/9/LCB5AJJJN
MD5 SHA1 SHA512 SSDEEP

color/P75/BOE09AF/D6000.icm

SHA256 1120c7dbf144473868448c385cd563ca3782efb8a6f56211243dd9f6421757ce
MD5 1c54eb2a2bf8a92a83e2ae3628621ff9
SHA1 23ddb9b055c7880b9c4e4593ce1c8a0fdc62109e
SHA512 9f25160d9baa1883bd10942e993f5e2bfe1f6cc84c5124c5dc32042f204e7b0c6f7228ddaf07ae3794a7ff2271c148891c2ee64ddefeb6595b6083d2ad869432
SSDEEP 24576:1IjjRIBF5t1qmfC6on5CheWImEPen1wDQiwBCmEPen1wDQiwBW:1IfAF5OmfC6oncOP21UP21c
MD5 SHA1 SHA512 SSDEEP

color/P75/BOE09AF/D6500.icm

SHA256 3cc8bf66b5f02ad0f67773a65d72a2c4a7cca65abc5a309967923a2bb39e5e15
MD5 411a32f395e8d5b39008fc809bfd0219
SHA1 afcb044bb6fb47d034f614f0d3a9555c9bbd8e98
SHA512 557d31e2a1f590debb7116b8cf030af4beef954c47ae4883d2cef79f808816589dd2ed8c07128b2132aca915c92e4c04b7cc0af2302f339fa5e7c51e2651d20f
SSDEEP 24576:Y8HgkrnZF8Htg+v3d0F5dp9JAXVnb33odp9JAXVnA:Y8AkrnZF8Ng63dy7uXVnb33KuXVnA
MD5 SHA1 SHA512 SSDEEP

color/P75/BOE09AF/D6800.icm

SHA256 e5e255403816ea02b3cb8dbcf2d21190dff86562a05815c09ac673f81df909a3
MD5 baf39d6e99f41e0da39985620efe3022
SHA1 9a510d3605c6fad23c5b689e645d808174d2d753
SHA512 1d4632e4f94520a087c4404388eaeaf635257b6a795983687730296ee7a445143d5d97f663406c3e61a0201b3baada54199e01d1bf4cca3e829d3d4bfffd6f5e
SSDEEP 24576:8sGiT49ogvkSjnZm1640eCQLL9m1640eCZ:fGM43HjnD4XLLP4a
MD5 SHA1 SHA512 SSDEEP

color/P75/BOE09B9/D5800.icm

SHA256 47e0d35feac0a9d3c0e984e97c112b874a88e733c94af2069131b31eddca8867
MD5 953ec97996440e72bb5e33e2340486fa
SHA1 13b72b0884462259549e3397529897cec1658744
SHA512 096676e49a41d9966519cf9cada5c1d22ab0862281b44e3024d84614454a52423a76fb2898afcc89c749596c07d3b70661ae8dd11c77c9cc04abcb0fe5a60666
SSDEEP 24576:6rXIf5+KajCf5/LEc/D63lFadLMLBdEmZadLMLBdEmc:f42/D63l4dMDXsdMDXc
MD5 SHA1 SHA512 SSDEEP

color/P75/BOE09B9/D6000.icm

SHA256 4c6beeab93a28128852aa7cb25aa85c2e300a2fad7c5f15e65abd21ce02a86b6
MD5 b40f597c80a67f3931b21d20647d93ae
SHA1 1f6ca96b07abb1a1c05797223ab6bd4cfbf291bd
SHA512 fb6c487c24b11ee5e176b657d2758dcde7cd669be205a9e1f39e10bf0f512cc21b87fd23df36a2385037367255795f268e987f0065de04ac312367c811f6d9ff
SSDEEP 24576:lsbuyP4u76tQE7tJNCqp4VR0uru7N/3gSN/3gW:gz787tJNCqQruGZW
MD5 SHA1 SHA512 SSDEEP

color/P75/BOE09B9/D6500.icm

SHA256 86dd722a9e36c0133fb1a90509fd35d8c5e756ed8d4fc649c38ec85e3949e56c
MD5 8355f8af1270b1e3599a523d53ef7ac0
SHA1 7b792a0aaa19312e4c771d8a0972dbf6b9ab8aea
SHA512 f44e6995f846ef12b68f62eece7140d8436c75813f2d39940767f768f0e1d800241c3e7cec899513fa4319a848111f2eeb203a172bc45245be390ba527127e38
SSDEEP 24576:y5BorVuuRHo8ElRj9tp2Ug/vwtp2Ug/vN:yj4pRHo82RBL0vwL0vN
MD5 SHA1 SHA512 SSDEEP

color/P75/BOE09B9/D6800.icm

SHA256 75ff3fe2f2a66b165885ddccff67e0d40a41705f40ba9d7e8f3ce6372c3b0710
MD5 262dab112595fd9e54d6b1491bcf2460
SHA1 a10f157cdc8432215c18f8fb93a22cd8c2e935f0
SHA512 bfa67307732eac726b628b155291881d295d2d5c8be7a332a90fda1c7a01803603c6f93b82740d9fdaff56a36c60729d2f694ddf1cedfd094f6de2411cc3a5bb
SSDEEP 24576:Sqf4BibpiMDDPeJAVUgVKhawyWz1GD7EW7EW7EUyWz1GK:UmppDDPeOV8z1e7b7b7dz1J
MD5 SHA1 SHA512 SSDEEP

color/P75/BOE09C2/D5800.icm

SHA256 ff7da4350b3da9296658dec536b466ad424ad641023e57d9244112b305b200af
MD5 c41e8c73b119bc7cd2244b2905a91a2c
SHA1 74fdc37259a810c5eedd6b8f68440e84256b2929
SHA512 288ba96fab3dcf2ef9eb5651e1a0cfee47e078cc0bb3eb2bf6b168385da991e47a252230963b885c6d4f700eb10e6f1d4bcc18a76d859c5934e304f4dce83ca9
SSDEEP 12288:iKQZK9Hzz0kLIqEZgVI31BqoI4YXvMvv3ALVGKHla6QIqnDNuBS/QQBBea6QIqnK:XX30dZgVefqP4AGIL+hPDNf/jhPDNf/A
MD5 SHA1 SHA512 SSDEEP

color/P75/BOE09C2/D6000.icm

SHA256 b1c3a5567ecd3e5dce295540f13d948bae349401eabf2a2866bbb39a32be97f4
MD5 d7b30d157254ade1287d88cd9f23d63a
SHA1 a380f4682d2ca93a512ee349858bee822f66215e
SHA512 80e226dcf3f52f1cb5b4d9904cccd06d755f4b134e39b77febabcba87b2a8853dbe73d4cc790d64b91878fdf36ecfd8dedd2319d9cad56cc154518238776241f
SSDEEP 12288:CzxMLbGqtxgRetln82+SJS+nj64qjJT0q6tX9X9nD1SbOTKhc3lUYSHnZD1SbOTW:z/TxUmifJ9exzKhmlUbnZxzKhmlUbnL
MD5 SHA1 SHA512 SSDEEP

color/P75/BOE09C2/D6500.icm

SHA256 10e19a332305cf768870ca50137ec72e37763bc160b15a5dbccfa3996fe19f05
MD5 30f7cb6df69cb08e979df8e46ab533e8
SHA1 bb08a5ed603234a82be8e45784ddfb59aa102164
SHA512 497ac18d904b3a850576d409e65d281f7ef9c941666697200f32578bec687292b4cca5a77da8a8890d0e5da767ff1c30a6773408e90ecbe4ebc58d84e868f563
SSDEEP 12288:ZOInras2d4ZlpCjKPdPdAzN0ogfm2/gg9B9+S5skHt5aF25F7rIlSXc33JS5skHF:DnBSj+GaoJUP9+S5e237ahS5e237aw
MD5 SHA1 SHA512 SSDEEP

color/P75/BOE09C2/D6800.icm

SHA256 6b730c964ed59439e044ec5e154de4b514e19d18266c068f162edfed436620c6
MD5 03e0c39c0d0de5af94d9dabb50ea3ce2
SHA1 a8a1b25217974d1f77a9320e62d3d6f47d884444
SHA512 4609e38118e20dedcd07d0bd8eecd3628afe6021373b977562ef29d8ecd8501d1388f4db28af823dd19caee85fe6fa10805d64f7f90cb0a172a81ff2ff92e3df
SSDEEP 12288:aUCUYnMMKr2RXRRQA9XlJsmKVg0v3XM/zwKVH3oA0lH1BDFLEX6dQa5qpxXgouFz:yDR1RPB9qgZfH3oL91BczrXlzrXm
MD5 SHA1 SHA512 SSDEEP

color/P75/CMN152A/D5800.icm

SHA256 42b5d7941620e63ec85b364cfd48cd126d9a5713a7d3149b582921f07255d6f7
MD5 36c252e22480e51c4cc5009552410893
SHA1 353445d94811beaf5ed2a48c57e134e0dac024e2
SHA512 39ed4094bbbc7e48c86e13eff8db88ba8a4cc83c8a8b0c091aad77c54dddd91fb29f907e03f7f4d035bd94585997e85735119f1adbf4fc6771e21cf3058fe9ed
SSDEEP 24576:plsKKxcympoygHE4nZuXb2lfVV6ZuXb2ln:pNKx/UhgHzyb2l4yb2ln
MD5 SHA1 SHA512 SSDEEP

color/P75/CMN152A/D6000.icm

SHA256 99878bba3d8a435fd3ff0afdb9ba7866ea37f8b7c579ba9b3bd0611e87bf1aeb
MD5 654b2a2d7de49df8aaf795b626fe0a3e
SHA1 267bc7c361b1cece926a9156ab2303a48d4420c6
SHA512 f7d4a8b6f521661a816ef482e5f3a118c0b70235be4945cd9c46e9595c6c07d5a48e741c3b6fc499ee5603385a897bc7d8c92b6ddc4f45336b564648ef83722e
SSDEEP 24576:gKLH4R/KA16NHOr1DxaAlK5tEw5RX/zjK3koK3kN:gQhNHOrDJ0tE6X/zjK3BK3o
MD5 SHA1 SHA512 SSDEEP

color/P75/CMN152A/D6500.icm

SHA256 85a43f7f54bc461427a45ddf4a4fa75385df244b620ac23c7af93996d92821b9
MD5 0e9df99ac7918dfeea212ac43f33605c
SHA1 e264991043470c05253195269c4f21cdf384c3ce
SHA512 7896b0f37d4e02e219705bfdd910f0fd51d8354aa99f8892437406004dafd57254b6e1365657dee2bdca622dffb078c1bb940de20f2c21ca1969f7e0332277a5
SSDEEP 24576:p6BqMc2Y5yC+uXZ3Nlo0D4Acrst485CfW2crst485CfW6:pJ2kyCdVNlo0/t48gfW2/t48gfW6
MD5 SHA1 SHA512 SSDEEP

color/P75/CMN152A/D6800.icm

SHA256 cebf5fcc1e9c0561ccb70822d64684c147ee2b0d053ebb6bbd5b8ecfa650cc73
MD5 006ebe05e2e1fb4c3e949fe6a7e28c66
SHA1 3c6f32a41ea3563d8b3e70c0cda8f9426068edc9
SHA512 69118fea76bfa39a43e313a7a6d04266e10f6402706e483bdd773d126802e9b34796dee591df24e9257c599ec804ddefdbd75380a7ac4fb1844af45b1a5597f5
SSDEEP 24576:uCQFxrY1dbN4N+tq1aGrdobrVuDaGrdobrVuD:uCQXrY1dmIUQ4dofVuW4dofVuD
MD5 SHA1 SHA512 SSDEEP

color/P75/LGD05E8/D5800.icm

SHA256 c2227efa28276834730262077b76271a7394d9f8eaca78cb1a250b7dd1895cf0
MD5 dfe2138489bbc871fcfff203fbfcd05d
SHA1 7fbb0e5e81e7e41c154db7ffa78298862cd10892
SHA512 3ec30904f90aab0ccdb8c884e6ba5832e9cb16aebfc43890535d75a2eba6739a18f01e511fcdb7ed8dbdc56a61c10201c6131aa6185842c4d92a494b2ff4ae6c
SSDEEP 12288:EsZ/C7l9HPoIt2PAU27SBh3ZP+dEIlQTh1NxJjkhXZdmIsUBEIlQTh1NxJjkhXZl:EZ7rgItx7Q3ZWaI+NPxJwhXZIIYI+NP2
MD5 SHA1 SHA512 SSDEEP

color/P75/LGD05E8/D6000.icm

SHA256 9c0f33d93e89d772bf75a5923afbc52266720d2bdd949ac35829b53ffea42933
MD5 86bf77b5ebed1ca776a6576ff32b6ed4
SHA1 fe1a9f8fa4735892a50797edf6b4e90ad48f84e9
SHA512 13e381045f9064352ea4ca1634d8ac4033f6a81481ef3c7105036181533b2b25d5cbb2708e3a0e56d20837365df6a55a886a00eaad2933bcbcc17fea40213d63
SSDEEP 12288:7Zk14bX1msFPbG8XGQ2YIDr0G6R9dmHYmpGiOSeaR9dmHYmpGiOSE:G+L1mPnQfWr0m4eGB8m4eG5
MD5 SHA1 SHA512 SSDEEP

color/P75/LGD05E8/D6500.icm

SHA256 d920f89017a73e3ac5a61ad6b0ee83a37b25ffa47c76cf8f67d23c70408e5824
MD5 b28e230c25b384cfa4bb08b9aa2917b3
SHA1 31d87424f0dc7757c3dccbac7338de9b25551f06
SHA512 4386fd1c001f1638170f3aae39a0e0fab883f910908d8a7f22d65abf7f4ca4ed0a28186421e273c485edbcd5dae51432ed8c752494faba3fb3f8a4bcfc3183de
SSDEEP 12288:eBLP9f21XMRlkA1BNAkyUNIq+utmQYvUNIq+utmQM:+LP9eXMRlL7NAAiRutXNiRutXM
MD5 SHA1 SHA512 SSDEEP

color/P75/LGD05E8/D6800.icm

SHA256 569d95d99471e197ff30cae8537b1d272b067a5ef27ca7e79c25f9835d6529a5
MD5 eee5306ad09a0529b3e64f666cf2d133
SHA1 d299b7279ad1f4cea2961c23e3f1494318eee438
SHA512 175edeba8c84ecb8ed52ca67bea1221540802b5df22a60e3834a3ae23c887f23dcd0718317941e9329520250b858e4d13216c9be713ef88da6e64a08038917b3
SSDEEP 12288:zx+mwcck3ZSvGBC2nUQj5zA8G4y6wfyX0gtc/RzW7VVwYG4y6wfyX0gtc/RzW7Vm:zx3wDk3ZaIKQtz/CXCCXL
MD5 SHA1 SHA512 SSDEEP

color/P75/LGD0625/D5800.icm

SHA256 5571b4e52a6c7dfa3fb0f27090d782fe712373a246cfafa342cc5391853debbe
MD5 e3079f050feeaff3c581e669d2236298
SHA1 5307df3c7fe36df0acae3fade27622bda5fc7264
SHA512 f3ef9306b3c9b51b2b351e9074da502f83cd4f36d7f9e086ad9b7c11b3d61e57db3e079a315a253590696075b936cc8e3fb79637a315c191baef7f8898abc280
SSDEEP 24576:JpMRdzGouzDpyvnh5H0Ne2cVIpNOyigpEUCypNOyigpEUCR:euzQZ5H0g2cn8EX8E5
MD5 SHA1 SHA512 SSDEEP

color/P75/LGD0625/D6000.icm

SHA256 14f4ef872eaff457b7e3daa3bb8ca5685797b22eebaa73dd7888e46975128f46
MD5 17742faf82c89ae5ef438f3cff8071f1
SHA1 77a2f85eac0810fc41c177c12c4b0904130ba150
SHA512 9886f894fd19a4c8983488de501507a2fd3e341fec7e7a1bdbd78be301f19d9596879859b7ca0107693324d92494b0a8059ee43d79966bf073ec957d43474ab0
SSDEEP 24576:KrDUNuqvLq7r9ucVzzXnKHv43fBnS5nIgGXX63fBnS5nIgR:W0vLAr91XnCA3JS5nIg/3JS5nIgR
MD5 SHA1 SHA512 SSDEEP

color/P75/LGD0625/D6500.icm

SHA256 5b24add663b093194972e5bab4cff4623fd5873aaae00a0b046f6866dd2d42b0
MD5 a61caf642f15c2ec1df72d6520492da1
SHA1 55b3c95bf05a0ceaa69d297ead303cac3837066c
SHA512 d820d6bbe627e86ff8068bd34296945d02b6d32d24090136ef53d64f0fdeb3d4211aea441c33d4010c07edfe5c8b4b60d150c2646ab30b26c18e31a86e18c3d0
SSDEEP 24576:K0zgMB+OW4vn5Rh6XB4C8DUtojyjyjPB4C8DUtr:aELWK5a8DPuux8D4
MD5 SHA1 SHA512 SSDEEP

color/P75/LGD0625/D6800.icm

SHA256 dc4cd90fec19e30b027fe75d965116205afef1aa5f14dc6c02c2e41ef606cc0a
MD5 518bcb96751e6ad2478e9d77e4b17ad3
SHA1 b12e4ae3849fa085dad20922a5ee6eb33315512b
SHA512 aa790c667048309b75fab5198edff59ad3fe925091724ee35d11e0afa70f15bedddba5eb8028e16dfbac19e564e5f6e2fd7542bb6784a9425ed36cebc737ba01
SSDEEP 24576:jWI6cIsGRDfWQ0k4+/M8uM31NM8uM312k:j7IsGLlU8J1m8J1v
MD5 SHA1 SHA512 SSDEEP

color/P75/LGD066E/D5800.icm

SHA256 61a6667852c2f421cf96ce349085ecaaaf8328fbc88f5db7bf6b488997bd784d
MD5 d6daa76db8315f50a3fd6b539acdd790
SHA1 203bb92f72b5f9524e21c7ba38ce47f0848c20f3
SHA512 5bdab3de07876023a12f617e3bc5ad82f04179750d5a6ad94b4609cea051d81fb7ebff3ba179e32fa00ad3fc816ca993b77d98af8ca1d7407d27c5b691a595d1
SSDEEP 24576:aFReahJIPljtUUQjPpH5vv4tdIJ2ZNHSyGlL8HSyGlLA:Ssah6jtIPpH5X49HSQHS0
MD5 SHA1 SHA512 SSDEEP

color/P75/LGD066E/D6000.icm

SHA256 3e582cce62fe320a85f406bfcb1726d933f33006a173ca15400f9580d5a0e3b6
MD5 a43e182d55edfd9cb8ff51bc60f1497e
SHA1 297fd9351689cda5de52dc01db31b0d130dbff55
SHA512 093dd2b51501b65946bedf92c8297a8dd167d6bd4e2af955caf51b92a28c8f3c93eaacc5cdc01baa6377b9f85a5c48a09e308d4d1fc227460685d2641afa4266
SSDEEP 24576:/PVYG0glLIaVCKD1hmMEalVFMS6DPalVFMS6Dd:OM4KZhmMT7MSd7MSU
MD5 SHA1 SHA512 SSDEEP

color/P75/LGD066E/D6500.icm

SHA256 992b2b4b35941769b88bdc0ce7c0598ad5ee5712ef317a9795f5b75a139232ee
MD5 064de724cc74df073843b1e19d277734
SHA1 d396aa8f9b2c9beaf41f3a49bf8bd125d96262fa
SHA512 76035dfb65bceef094cb42dee331c3dbc780637a2ca1e772e6a98f1e01dce6ae4e2ddb556fca184a0d00c2ff9d5aa19c2c0824369214c91abd4d50a3f0f6544d
SSDEEP 24576:zpQs9cMNT65JusSW06z6h6Jk8B395w9rYL00wk8B395w9rYi:1QsuM8uspLWMJkS++L00wkS++i
MD5 SHA1 SHA512 SSDEEP

color/P75/LGD066E/D6800.icm

SHA256 3e8489671ad2120fad5ab117612a49095faaea622ae54ad89fa86584b9e11f5f
MD5 07330ea62d1699c743ca42db97e53220
SHA1 45aeeb98555611387600371b08adf74ff63fd02a
SHA512 c0444a2b7e51838dc48ab6164ac341383d9614124e1726eb626108c30371083d77d3cd2d194242513fe80adb7c77cb7e559bb46824bb41e3bc21836d99e7a8c8
SSDEEP 24576:c1ItZYltD22WyIXdwMDpuPa+R6Txl8xiOR6Txl8xiS:slVdodwtCH5X5S
MD5 SHA1 SHA512 SSDEEP

color/P75/SDC4143/D5800.icm

SHA256 ebbf5e195cc9565c3b80e2abad35f2914c3b0d5d0e370abc9367a24fb820b125
MD5 87d4605980480891bce52bc4a5f6f6b8
SHA1 0dde7d490fb4adf9794ac52570871c2905654d78
SHA512 c3ecb3fe0ec1c020df518cee449ea45b6a41de15d9accec0b36ac379110614fa35cfb2ea7363f7b5d2171d4fd907d61d09b360a722c431e1cc299514cf8dd3d9
SSDEEP 24576:DUPxbUZXmnq9CReULfg0Hzi4lijJ396989uAn2FmIAn2FmE:YPxbUAq9CRX7600J396989spr
MD5 SHA1 SHA512 SSDEEP

color/P75/SDC4143/D6000.icm

SHA256 19b806f2387ac37c61729854ae23438446a8f2e112fa9abeaad69ffe667307f4
MD5 cb1bc241e805c959930c9a34d8d45c12
SHA1 63f2f0e42119924d5b115fc7d1932a4136b1d251
SHA512 fd3c93ade39e2bc59902e1790e5277d3ef865e17e32b17759ee4351c243151b87b3b790df7dce0cf502e0f3c83b0738e4bc3fedb303d78a917798b8a510a9d86
SSDEEP 24576:6DTbHimUlcWzt5cG1R/ltdvO1ppU1R/ltdvOx:uivcEcG1RN21ppU1RN2x
MD5 SHA1 SHA512 SSDEEP

color/P75/SDC4143/D6500.icm

SHA256 dc8f24593cedada145639f530c5ca24a2a7199d0f75277564cee2325ef13b056
MD5 220a53f132c13fe950a0d3d785e1ecf3
SHA1 b87fcdeb49236f0a88ce5e1d1c09a5e37edf2bef
SHA512 920af7a074ac9550292b17496acfc8fa49f4983d6b350fe4350fd059cd6d9dee3fbc30a791bc8dce92f17113aec3f4960b7e1b2185a6edddf356be61afd5b040
SSDEEP 24576:5jNHh0NcGr1DKcRjSYmtCqVA1M/fbuur1M/f3:5jdccGxj4CT1M/fX1M/f3
MD5 SHA1 SHA512 SSDEEP

color/P75/SDC4143/D6800.icm

SHA256 1f2a975248ecb7cf21cbfbf08b67fe5d54cbcdcaf55d7c2486707b4816001dcb
MD5 3439a2e8d1f88e3b04767743fa9287d1
SHA1 f88fe0eb2da2cdaf91b3e28a9d3a637eef38e03f
SHA512 01d1f0f91c9db39db08ac8ba8b7afb1f9762fa52a93279c8fab89e6916a97fb244c73600a81d531791370a668b995ca90607cd2311f89e4e50fdff18426783c0
SSDEEP 24576:jopilbJ1sCfpCWXYnb9e3kNaHNNNNNie3kNak:j0qT7+nb9ikNaHNNNNNiikNak
MD5 SHA1 SHA512 SSDEEP

color/P75/SDC415F/D5800.icm

SHA256 954830b4fcef0173923d8775abff673c25d360c174b38c62833a7b2fca833a92
MD5 f11ab157e90f99d3234a7f4e97a9fc4b
SHA1 663571b0f56db493e7d3bf57de98e1a65bc3b019
SHA512 84f640175354d46b03ced05bb8be265a85d2e52494c1354fc768f0c1d14de3c7c546fdf67d5f99fa45abc3e993b827eee5f9bf51faaf7ad6ae18dbe7eec334dd
SSDEEP 24576:WOlQ863wAef5najAjAjXTuW7SlpMM4xXO5O5OUTuW7SlpMM4x0:SVw/ajAjAj14MM0XO5O5Ow4MM00
MD5 SHA1 SHA512 SSDEEP

color/P75/SDC415F/D6000.icm

SHA256 a69f5a6536e9d047c0b1948c753bfeca9ba0c8e0483fbfabb5942f878cfdf38f
MD5 2852ca0d1d2e319ba7286be518026cb9
SHA1 6715946f439105298aef923778e113f9ed99baea
SHA512 7e1a5a60303cccbde99e257c18ca5c2ef197012a08bec82e2c31a1fc7e216da5d807a5ad265746c93402fc249b5358bfe42ee136b31e0bafe291212c863d1d08
SSDEEP 24576:4UfWT2h1dE+xdYe+eVaGh6FpB6jl5gggggVpB6jli:fe2xE8YBfpB4l5gggggVpB4li
MD5 SHA1 SHA512 SSDEEP

color/P75/SDC415F/D6500.icm

SHA256 0993c81e647f2a12d3f47138189a2db5090bac5310d337452ef2f371c96c81c1
MD5 a5a59ff6103510faad6276f375e8eed6
SHA1 aa99d5b8c8f17e76ee2246818f76f7ad094d85e0
SHA512 afe0c4972574d256a37ad077d61230b08885ff4b250abe8ad5faa03904c95cb036378a82f39020e6c1a517c6f0037df740aae9b04126588735b164549ee25c5c
SSDEEP 24576:1vn/H2xZCiLrr/vQGtvNMwE9QoC771MwE9Qoc:tnP2xMSvuy77Gs
MD5 SHA1 SHA512 SSDEEP

color/P75/SDC415F/D6800.icm

SHA256 b81ba687420bb148c30054140030cef7d14a0cd77f0382fa2738a55b89e8a461
MD5 554d5dfe93981ae38e1b07810a393fb4
SHA1 c4c5cb29a940fed544facb51559433b8f6295b4a
SHA512 6c8306101c6195796d2804e0d3830fb22d67fd73680cc461ae77853f24fb6aad419c13e3a420ab3bf7498fdbcae865c21c72cd60bb9afe93ffdb46e052851137
SSDEEP 24576:PFB0tVa1CAXt9Hxcq1o1o1sJJUu1S0UrUrULJJUu1SZ:PF6m9XtFxPWWsT03AALT0Z
MD5 SHA1 SHA512 SSDEEP

color/P75/SDCA029/D5800.icm

SHA256 1d7deeae3814dd59d3a6b7add4904466045c1f761326ec6399a2019daa6a8203
MD5 e081757204d9511cd1d3859f1cdea2cc
SHA1 cc76aa9c4ef7766a76eff7c2e505ddb512f5c6a0
SHA512 e70f2eac6422dda08456b4472f20444e26707668dd34d4e9f42e9533e0142377c65ce681cb3e2336e6de7acda45852d017dc616c4cf2f412f18936f9d7533d5e
SSDEEP 12288:oGrM2XQptxiG52dbjmD0785ZYi9Ab7vQAOEeCezuuJavdI9BLdb7vQAOEeCezuu9:oJ2XgtB2db/YMi9AXpOE3eqJmjLdXpOF
MD5 SHA1 SHA512 SSDEEP

color/P75/SDCA029/D6000.icm

SHA256 a7d7e645308067492c48585a6099bcd3da934fc05776990637d11e9e7c0fede3
MD5 fed48c703b1e07cac080465bcbd75dcb
SHA1 c8e3b0091187f17e459e4e2fd5d5a28b8bf8fa18
SHA512 96423fb06424454270ec47ef95812a8780ccf97563546307859b7861e4f277892b0caa2161707178f8368ea1457de8d4a499af9f4089e224bfb771ccd0c67cb5
SSDEEP 12288:PyPP7jLsZyuSKc0CBWfXV5TXXjrE/PB2ewe5S55IXy0CLF+XV5TXXjrE/PB2ewe7:676n7ztyPC5Ii0C2yPC5I/
MD5 SHA1 SHA512 SSDEEP

color/P75/SDCA029/D6500.icm

SHA256 1368f69aef1e73e0a3b38b6022f253a3128c13a3ef21095477fd1fbc5438a875
MD5 56dddbd0425bf0e8c3c5b4a708c1d1fb
SHA1 2620f436c27e544f7130d3944ae5ab1d3f27956f
SHA512 74ef8052ca5bbb89514f3e0b4769017eed47ce4f3a7fa82bd1e8fc1fe48ecd8523e423429bf8666cef055c113c5e1a89b1b95f161f2a0f282359eac36e04db3d
SSDEEP 12288:A+5RuuTTkKtVgYl5lo7U3PV9wREGimRrGblek5++REGimRrGblekd:A+iOHlo4ARlZE++RlZS
MD5 SHA1 SHA512 SSDEEP

color/P75/SDCA029/D6800.icm

SHA256 06ff703b314846f9bd81c12c990d6e5449961afdf772c7e02707bfb89a03828f
MD5 99cdb231268b8acbf172fcfc54f962d7
SHA1 685393854dcd5ef4828c5c4ad53f984290a42e38
SHA512 752ee0f962f4aad80a5998fe3c0895cfa6786377a9eef3111b9ec5725391f87b169855d3d66ffda7a5f99debccf7db2ce1eb3e6ea0b03fb4001d1d0f331408e6
SSDEEP 12288:1bP5rHCzPYo+RyUWiq6HH6yk3iXbmLgzcz7xJtQav3:1bPgURegX0O0td
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP14C5/D5800.icm

SHA256 d596b7e6965adf98f523dbadb7a9dd2124e9f6fdf97ad53f6c0c23292dae8dfd
MD5 7c7cb8882354dc7b77effd2f0af71d2d
SHA1 c47de520c35e7ffbe55b63aa326e4462a26129d6
SHA512 748dfad2ca7000fe19c07e779e6af3083bebb908bf2042a091797d14b269f3202a9ccf3037dfc1ec5fcfb52d251db331871a9fd687c285312eadfe4ab95f982c
SSDEEP 12288:IgEsKmvXq3zknKb5GKK1c0HX+yPJo+Tck9PHX+yPJo+Tcki:IGTvqjb0d1c07PJ5lP7PJ5a
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP14C5/D6000.icm

SHA256 c7f5118fc06b487a9c42f51f29758011caa64c4b188245c4a9de33ce721c4f4b
MD5 198cf075e91edcbb4a152aa16189bc78
SHA1 f6897aa2ac0453f96fa4422e2a94ec07dff02ba0
SHA512 ababb22b8b0da4314fc521eb8e5b0404e300d718fd3d105703f48adb4d74a01cdbf91ee202156141b758f0f43389942e311c8174a4796f262ac372a7fa895b45
SSDEEP 12288:Uroe+5urK5JV26i1+EJE4MD2SBVNQeHHNulRmbI0kA3JE4MD2SBVNQeHHNulRmbP:IdyJVn4O9jNdyEBxZO9jNdyEL
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP14C5/D6500.icm

SHA256 1e3d699cc27ed393492e00200c0d0271e9bd29f6ef7e483b95517bf191b7033a
MD5 7b7517ec312f8596774900852200f717
SHA1 3cf282c5104457e3f5b21bbd1125fb8605a29f12
SHA512 be587d2790dd6e6ec0c4efbb362418495d176d87014af3eed238c247cd9ad47d3b45772182fffe2ab1ea768805a57e407ad873573e4e7adf6f0e793de59669a9
SSDEEP 12288:+V2Sj1MBYkdIB77yW5nYMfaBsJKJ6y9XwOrhiblZNpy/y9XwOrhiblZN+:+V2y6BYyE7yWhYHagHwYQbPuSwYQbPE
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP14C5/D6800.icm

SHA256 e4bcfbe2f3be92443032497bc7c98787678431af4fc39eb41f3f6204039b262b
MD5 46062bc823d32d25465972b238010993
SHA1 dfed1053845157e03edd9e7ee2e78e3364aaf931
SHA512 90a011080332be5767822191f7e123fc26377b1d8b3d70e5ed6a3dc7fb642da242e5e5a498794669b8d31f8b6bd7302412e6124fc5be78f25e97544c7d3dcc51
SSDEEP 12288:j4toZ12BNtFMD9JoOes5BjFhiGmEJXcqOes5BjFhiGmEJQ:q3BNE9JptnFJX+tnFJQ
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP14FC/D5800.icm

SHA256 7b2c3f80528503fdd10d7c74a1d94eea4ecfe8e933da8101326815e7c5bb1915
MD5 26d96ed67ab0661640266897c6526836
SHA1 7c94f380d6c1d8275baf188afd3ed39d33c836d0
SHA512 0d8b64828c8fc4ce8201a169358aa3efb3337bcde46af62cdda7e2bfa7827f55d6cf42185d18736f5054e4fba04cbd0b029f75b096854ae170305455cf02c89b
SSDEEP 24576:XLv+oOPcN92S0DS7vjbA67uw7DGBgDQBwNUAl6B1ssuBgDQBwNUAl6By:XLvXAm9JcaM4HdDAwNYB1ssVDAwNYBy
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP14FC/D6000.icm

SHA256 ac4409d91faf77cb94895e2ce2bbe4f3aa5472ad62fad81ac6d9558c3d027e3e
MD5 b8b57e57f5f33dac23cddec187035ef4
SHA1 3bc2dd9b5b7ed6456532d87314fd91ef0f2e9241
SHA512 35bd85c0e56769f4f6b1bf3b18ec5f9b1c7a4afc3695c3ab7a1f668296d1153fc3a3b822023d88d792d87ec221f50380b1b5901cd6fbb5af59f91278ade6588a
SSDEEP 24576:/oES+mDWzfCQnjBXJiqe/9yEKFAH13cl/4BAH13cl/4U:7SFV+pcpKAZg4BAZg4U
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP14FC/D6500.icm

SHA256 689786be13d086a1efd7f3f58290ec7e1a9953cf211449d394e09ec0c6f5a548
MD5 b12e6c148fed87090b9902a0e4db3ced
SHA1 37d46006529f5ef672f09fc0f99653f7ccd1070a
SHA512 9d75a820a6874444d4aa590a5a93ae5102fb7b9a627bbcdabfe39325dce5bf43f401f784db32b4194f2135bd4af2c5977eb1405477b528e8d1f82f056346d71a
SSDEEP 24576:4wMa4tMc5jaILbdGUQBsPdWRMfF9sPdWRMfFe:KacNrRGUQ6P80FmP80Fe
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP14FC/D6800.icm

SHA256 c984c4a923174dafc082390f3d443bef63e4b0c5675f91355789134a24407d3f
MD5 18ce9a96c336d0560948886f1e4d5320
SHA1 9e366f16615d563b54e29dbfef38d52b0ba86d00
SHA512 a29faf9a0b7361ac240d2e5991f02ce97aefc224d705d1c0545a916cb7aa500e293bed59e46fed4b5b9bda6203923914e3dcedee589484e965d361a0bd833f3c
SSDEEP 12288:NKHF7osdZ2g8xvWOHE36QXZTgQodAWMyDJc4OshC6kNPzfsCmtOxCCNHHHnhC6kR:N2bdZ2HsOqtXyD+bmAgJbmAgM
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP152C/D5800.icm

SHA256 0af3384d01a9746aa029fb6e33afafe789d8d3d4031aed636bb41cfe9dfc8bfd
MD5 756d9a51516a130924a6a92e8d62dd77
SHA1 fa13ab3c14923c45d28e4f74236b43dc02b85a20
SHA512 4b3a02b3aee7cac7c8efc015c4cce8dccbe279b27dbada41acb261671c8c7aedb3eb47d9f127381c4dac43ca9443ded0abaa4cd6f1f94538a2f7156fc7dd9a84
SSDEEP 12288:bjV29TePy5Pr2IOvo8qbDMHCpViSagepGGRjAOYOOvv1ViSagepGGRjAOYOs:bo9kyw1qvMiC3FjAxvvu3FjAr
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP152C/D6000.icm

SHA256 e08f5ad054bf629fe8bd1800f5d3614503fe61d9aefb6c26c84e11509bcfce93
MD5 48b64975b90ed3b0bc35a2b2e34dd3cf
SHA1 3679bf39ddd54f4dec2151736d692558c3e555d3
SHA512 531672dd290e4d8b13d05dc4c7c662a2900493b985112811a72cb55ca435be7bb5febd566c267a44a4de4a747806531636f47728eb0d0f666091056debe554f4
SSDEEP 24576:LLFn1kt1VuoCzKBRromrWEIC//eomrWEI7:910VKzKBxPiC//ePi7
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP152C/D6500.icm

SHA256 b694140d6427a55cc92c58a900415edcee16a94bd35267ba2748798d67ee4271
MD5 7c48c2ac727d1824aa6f7e5007545a28
SHA1 43f9000344d33750b0d9963dcd459423396b7c78
SHA512 11af9df252fa55c2dcb6221a6c2189b4c06e7dd5a2472e02ee6182583020488409238a3da2f311cce02be7d7a1d7b1bf2295ae531544cdeaf99e2102f3d0721d
SSDEEP 24576:B+OwQqzkY1+XmsAuToyp4QGzHhjyp4QGzHhK:B+BQqz6nVptfptR
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP152C/D6800.icm

SHA256 efaa80cc2fef95eff34b9b2ac1610da7ed01ed289637f249880062cdac90c264
MD5 daefc153d50761467309163d8ff76e06
SHA1 7ac586f3bcf6fbcbf4ca2ff70c086a8fa9836940
SHA512 138dae798fd9d9e8cfcb81862390e1830cfed3123b60414bc54f83e68166183b904959e1aa973e3f091db44f8308157a5bb856210cb989fa0dcf147f47e7437e
SSDEEP 24576:J+4NUYZf502q6Dt4FOgUPB9GQ8vOvTUERmq7vvTUERmq7M:J+YH6Gt4sgCBBLUIjvLUIjM
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP1532/D5800.icm

SHA256 75c3891f46577858408eb8f77b7ee1a5083b8ee6565287c12757877a1c23a962
MD5 140939333ded9948dac95e3ee86596fd
SHA1 101652981305535fde83974d37fc0dad833a6fb2
SHA512 60bbda627becc135008471e85fe2e0060212565c892e29dd9d7554e06704b8567730fd80299ca8113e05dbdd8835733b789ae1ca11709589bd92cb02259db7b1
SSDEEP 24576:3ok/gFOKI0raQhlFvZO5OZkSXArdmzbkSXArdmzz:YyKa8hScS0
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP1532/D6000.icm

SHA256 bbb057680649bf3f449f4f3e444b5bc35034e33dff633444dc04297bd991e769
MD5 f9b11529e857f5feccefd72023cd0b13
SHA1 3bbc9cefeac3f62c6a5f5b3c1173f325a9257574
SHA512 38da71f5e818680df6d11292f16183fdf0d0ae02b14d536d9d7c68809bd6f3430b92f0c7234744940977206f3364a0d1cbeb480d2f25e0297c895b304e28c321
SSDEEP 24576:FJz6l8Jmo8owNEUaZLKBiCc0nuRB3Z6uRB3Zs:Hti7ExRKBiVpJXJs
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP1532/D6500.icm

SHA256 7f0a4ab05e4b38513576b45513d298e09525adb305edf675ecb71acaec1fdffe
MD5 f9ca0bc51a6d0e4c56ce948e879b892f
SHA1 10984f48aae89e04f9010dd97fe71d2d9c59a7bb
SHA512 1311ffe519c53c9439afa807c9aa68548f24d331dfed0ccf5e5e5a7242ec59d53e9a6806808210520f11c6771d24d310a7ad34506d8eb5e2ef888f6bdc38ba73
SSDEEP 24576:i1q9ISrm5NnRek41JIUx6etxkjn93P611Qkjn93Pa:li5hvetx6611Q6a
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP1532/D6800.icm

SHA256 6449fc6032af4b2099d925391724467196d4ea7a72a28cb045ed532490ad8fe4
MD5 8b550c98b74d8298dbc5edaba1a97aca
SHA1 f6b0b5644c83cd123fc6e6b924028696f8daf603
SHA512 d5ecd45675584bccc0bf89d25098bfb3e9e5a1e2b0cab7671e7e3a0f804f501e3a5bc4c97971caff6e00774a5ff31a2f7e8f1452e5e994356c3b21e86a7038a0
SSDEEP 12288:1vQI631z2Z0S/Web3KD8LWKoPHOdHOSHOZ9chS9Bdr9chS9Bdx:1oIZ0KWFDPOlOyOZ9kQXr9kQXx
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP1553/D5800.icm

SHA256 0666480802a1ca65d78d48daa1f9824807748ca609223b1f9dba2fbba39ecebe
MD5 16ab742f62cce8c03e40fca6dc529ea8
SHA1 a67c1582d06d38364671add4bf8b8aaf2f5f5913
SHA512 f0f87e11d8f7e442f12a544397e128bf071d9ab91b2b2f6ead41a661dd7a30e570d436761df5c43d6aaa91f7be8dc2879e7598839effdc7f64b34fae95d6e7a2
SSDEEP 24576:af1uJpgmcTJVTWkc+WcKvfxU1AeWcKvfxU1AZ:VrcTzRcLvfxU1yvfxU10
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP1553/D6000.icm

SHA256 83f10e7cb7d224376c8627c0e3ecaa60a137655e0f5b424e4d1261db08d8d459
MD5 8a96a7e2fb3c5d12841a28a35f2ab108
SHA1 db585e81c81d08f09726dbc340b537e6f10e13da
SHA512 96441a7146547de80d0951e5021b55060ac82fb7bda9c4a6a92eda608f5b95bf1cb56f8b4d81db3ee7ce4148eb6b2b6df06dbfb776c1185fa407565cd2753087
SSDEEP 24576:YSO3lOoQDrUo0ZZE03SeGZx8DBsD3rdeuuxxzBsD3rdeuf:YrVOJz0nBivZx84euuxxIeuf
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP1553/D6500.icm

SHA256 d57e138e6a9f0f619ad991cab9ec32eaa2d4f70d21400753af4fd71c0a44a20f
MD5 e0dabaf7024f12d91f4f079838c00312
SHA1 b780e91b318be0bd6b65f1c089ef80823f142922
SHA512 9902baafe8772e90e4e1501ef65670d1c20ee491d47bfa37b80e70fd43ecf229f8752d3661605b16e75c4e6030e8e1419fff259fa3e161df6de5e20b8e295fdd
SSDEEP 24576:ZPj+ptrZoX6Mu9IAPLigoQ11F4Ojsl11F4OjsY:ZCpFZoX6P9nnGOjaGOj1
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP1553/D6800.icm

SHA256 b60371b07945fc0fbe1b193431185a17f2317a88476a29271420a0a6289e1b8b
MD5 ea8b290ce7865fe10f96cb2ace1c54c0
SHA1 8652c55bfea8dc5c1946ac5c8c5af098be32befc
SHA512 f9b78b41546d0556a21a39cd3ebe3d972e8c6bdd81a9d0f1bbea1f1edb4be3544704c4b340ec4f069f452ec0ee1097b372828d48c14801f3a45df000bc8d82a4
SSDEEP 12288:nvUXbE4+WjeRQWP8XujQ4Zz9AKujWveB6C1iN5kGNwIveB6C1iN5kGNwl:n2SWYP8Xb4MKujRBJUeGNwnBJUeGNwl
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP1559/D5800.icm

SHA256 9ebbad1c13940e59f4b7df4a6731d41cc1ec1aa36b1f44cd53af6760b39505ba
MD5 f21abcf21e5c1074766c89e8baf061bf
SHA1 6031bccb7dfc1df9f3ed9175362265081ad1c411
SHA512 e315ef86efaf0f216a3adeb0aa37914e2c736e328cab2f069d1c87ef2b1029137a10f80445b6862473744aacf9aa46ac08f23b34f0a6ca03a57ce8e5d43c8e2a
SSDEEP 24576:8It0Y6KLqJUB3Gt0gbsw2iIkqE0/dBIHpZCeIkqE0/dBIHpZC9:1l9+Jbt/0k+dKpZCrk+dKpZC9
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP1559/D6000.icm

SHA256 9a2b914c2cd181176aad636dd5e9f39b4a90077f54d38ab1c67d01f678a90824
MD5 b435f7cb22f4bc3c184fc46dd5702d0f
SHA1 ab78170d6680b590fea8d35cdb162940be247d04
SHA512 58425a43c201dbee7e4ef0735fdcd91e08162a16f71e23f76b31b73ddd45f4bc816d525b40fbd49cd141b3bb916b579b65c0b22ace0b4449c5a333d2444b2698
SSDEEP 24576:xi6aNJ1jzRCXhKGvGOjH+lmKZQSVH+lmKZQSP:xi68RuvTrUmKZQShUmKZQSP
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP1559/D6500.icm

SHA256 44f3bed0e29ddf11b301b304c45efed024feb9c076f01a30c71b36c837243e24
MD5 b547da2cfab4bca9a19e511a86f342e4
SHA1 20e38dd0ebcead5645123c25c275fa347e3f9341
SHA512 47ca26a812162ae3f4c79d65411c06fb3fdedef424a2012cb192d7fc165ea102c42982d04f0f1c92e2ca256c5e8166662ac5a7f10f99d9e62818fad8c3a10d22
SSDEEP 12288:aPHSgrjQhSJZraA3JdjomIDnmr+Qes+Km4uB8z9vnqCzq3ZsnW9vnqCzq3Zsn6:afSgcSCeLmnMos+Km4uB8zpLm3tpLm3j
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP1559/D6800.icm

SHA256 444337977073d6389dd7900b566603d0b94ed792e5362253a029e97100c670c9
MD5 abe8463453434575ea59c1ab4564721c
SHA1 521ed7dc0cf5b7ebb1c5e826e02b476b2cb08a4a
SHA512 e6b59899b7c6f1b10d9b0a1888492829d49b0649e70a9dcd50594236d448ade34d083b099a13d70493d1f4373a126045ce8badbfbe8b3a6e9c83bd868dfa947c
SSDEEP 24576:PIQEZzrKFblcH34QmI/V0QnK6iYGnKGnu:PIQOzOFyIQN/nK6iYLb
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP155D/D5800.icm

SHA256 86e6b0c33dcf5256ce9a49a3fd81d742a4c868c7342154192d127c9facbdcff3
MD5 d15c2668fed573a586f0cb5b94c10432
SHA1 3bccdc6569b2e50f98a55c2f5941fa79586411be
SHA512 4d8ac3638388e8634dbfeeec3fd09b16fc37404b608bfdd5a5d85a4f502eab481bac6e937d8020b7c2273e8c40f3a1f659eb70be58f00c43a187ad8dd18f517d
SSDEEP 24576:MsccUGLgFw0NFl/Wdn3K3Z319qe8gmLK348ekX9qe8gmLK348ekJ:MsccUGLn2Fl+e/hmU4U/hmU40
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP155D/D6000.icm

SHA256 ea60ef77ada64323f118498cdf6c7fdb9d3a269190481397e2b44f8c55b22377
MD5 ce36e0cd45a5ba5c27f318ebb258c069
SHA1 fd39ce12fed29704fbaa1b7f1f752c75e3d9c6cb
SHA512 70296f08d388c7b3e8cb3ee6feb7dffcd7b0e7b6f1714b2caf14cd80a18bd4ad41c84c2f8347a1c1ce2273296630cfaef13eb0dd44e420d7d0ea7cbc8c7ba063
SSDEEP 24576:U7zCr2ZoYflIjlXumKlZOisYJuGN92buGN92S:U/IEmkZbsYJuM92buM92S
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP155D/D6500.icm

SHA256 06690e0e58b8902a6c7f55087510df0d06a983a2c482ae6b7b5c7795bd43a1a3
MD5 8390d57f6804f45e910e757d8bfb4562
SHA1 f144845164b25da74294f194f7b2bbbbc6587057
SHA512 c7f583b23ca5dbcf1d5c4aaef23b22c4e60b5caa57f56aa230c7dc5af3b0b20735f10ed858fc4e5243847a2f163c16f7d05f3e9cf6cdb53d9a31d1b70aad82e1
SSDEEP 12288:uA2MZ8Bsd5z67XnkqWCBa07GZ27gbaFArAV3vPoWQYU7s5RDSYl/vvPvPoWQYU7Q:uArHsCCg0iZ27gbaFlVB0s5RPVB0s5RH
MD5 SHA1 SHA512 SSDEEP

color/P75/SHP155D/D6800.icm

SHA256 2bea6a1501a69f2a93b6ebbba14e4fde696e5247b322a6081367cc19b45b7f33
MD5 d259359ab2160b1122f8758c5efb3003
SHA1 8d7603ff7d0586782268fb8f2ce3eeee954ea353
SHA512 da3600c077a3e3ebca16f5aaa3832023af20393ccf030a91d33950700b1f7e22c180924fca2f61e69084ef5ac850ff5810edd91d6ee1ef11fb389ec3cef843c7
SSDEEP 24576:84QjfYXeJplPjFlUA5QHzxyViefkQSzhYFKyViefkQSzhYFQ:tXOBjFlHQHzxyVieChYgyVieChYy
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO329B/D5800.icm

SHA256 82f3134f65202e26f33fbe18124e63035a902b9bd4755e1d33d5250c568b471f
MD5 06c56b6a5b2dc340b3b5c478790d428d
SHA1 8f9952a3157360d8418e8896d3c4e4b521275878
SHA512 d18a53f0382b1b9fe72e2f6e04315459843e67001e6178fada5e07b3289081fd4e9d442745db44e41f9a5a150282ce23579c3b00c10e358f8f89cf0a47a3bdae
SSDEEP 24576:V0J6AX5V/kgZ7cf+yXeq9zuxQyXeq9zux7:u6ws6c2yXeq9zuxQyXeq9zux7
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO329B/D6000.icm

SHA256 a2f515f4422cf1aa1de3969e3e81b03bdb771ddcdd8000deb287e171a3d0bad6
MD5 06c24bb050a2ae6fb513012d606b274f
SHA1 17bee2441befbc80feaef9439390f35157728d49
SHA512 6f8c9e33ef6f24cb4aea1d083f5d94ae7afc5c981c60edd87b7a5f94932f77a4a286a42b571f57b9a063710cc4f519089f6dc5d1205f41770a17900f3aef7df1
SSDEEP 12288:XFvZ/wEBiALF2GY0p9DRRyxOeuRbhnCu2JZM4wogEL40ODrgxOeuRbhnCu2JZM40:dZ/wE0bW9DkAF92JZMQODrCAF92JZMQg
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO329B/D6500.icm

SHA256 7796a56f597cce470dd66ed72f6ea73b6f9b3a8c772411d8bd8567db70fe6005
MD5 6e48ebd8375a299b9e7c85ffcec6b3d4
SHA1 15d37a51e3134437e2f7e1e0f518c8faa1255ee5
SHA512 7a1f5dd0cea1ee2c410db1ed938758f495aae7336c657fe1e55b2a4e206ff4182f6e1f178ec6455a92d6379404c6c279f7f8aa1a4aa06815af32de104260132d
SSDEEP 12288:vnS+tuPgyPliTNoKoowsta5QBxOvHxQFUfewsta5QBxOvHxQFUfm:/S+tuIyPMT3d0Xy+E0Xy+m
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO329B/D6800.icm

SHA256 90d10c1ec0c6d5e82a664ddb142065ae2b466e0c4c23a812c31a3d0e3b369123
MD5 252bed21b0f155fae94a9455308db3f3
SHA1 ab7d1e3ef68dc46cf0aee65e163d9a5c100fcc15
SHA512 43a1d65f4334639f02d1a7adfee07ae13904ab0fe97a60e649b906f2638348942060c5b814804be94067c53088dc9e3e6a5364c873b1285fd7dee87bc942484e
SSDEEP 12288:+x3AlLHwdQQ6JJWqtzzupZoV/DYWIDmWn4xSWbKoCupZoV/DYWIDmWn4xSWbKr:MMLQUJttzKIhk3CWmbKSIhk3CWmbKr
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO3A9A/D5800.icm

SHA256 766b762bb2296a419f72d45ed0064313aaeae646c2b2fda0283ae045be623ab6
MD5 3686c5ddbee6fcf5f740d117c70e6cad
SHA1 a5f9775763b4466ba7dd87699bee56f4e797e6e0
SHA512 a36be2edc04d733d3b64c435bc2661e0c20125e1e5e328b30328b4ae279dcbbb0103a4da02f9cafe585abbf353e8236bebaa2dc3157272a2c28db1ffeb3d4e47
SSDEEP 24576:wujtDoLGfuOBM2Qeawoep8qyOue7VO8qyOue7Vt:PJUaJBye8dq4e5Tq4e5t
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO3A9A/D6000.icm

SHA256 65fe071399af14bb8acfdff9d4d2e0b2607c00f17e0907cc5a3fb6c3bc033453
MD5 45107f6c411df3b1435dc4c99f9783ea
SHA1 f5c05d3d1dc634a0553883dfa6b684dc8dd5d3ec
SHA512 2a25dde6d97728e5ef98c370f5e64e452c2553c2623dec1dd1a35e2ac9ade5456a55978b11c597bf1448918c47a0f1cdd40b022a4e5592772e58a2b339c3e459
SSDEEP 24576:+z+R3ZubdBYFt25Sfnc206MsR1wEK7kGuuxD5ILlGuuxD5ILz:+z+R3ZABgtQSfnDMm1VckAxV2lAxV2z
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO3A9A/D6500.icm

SHA256 b883e808d5bec17a8656d1be0ba1288339df45abc423a1c332fce430e6f04d82
MD5 ae75bcd2c13076a13715d5099f9c112d
SHA1 bcca4b32206714a32476ecbd73e4a88fa12c7692
SHA512 151d30bd3bde02434acd8019096db898affc23c11efa3ec3adcb871586939894869e576ad4f5915d157036fc53452d8a2d28435420f26022924e5f66a99fd71b
SSDEEP 24576:K4FP0eFARzvRPS835GoPxGV8mpVCZ7qa44bxGV8mpVCZ7qi:KW80Uq8JVuCgauCgi
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO3A9A/D6800.icm

SHA256 9250dbe20ef0b45822f12e15b337f8e11dac15925121546fb7ba4c6a11f3237b
MD5 8cabefde896aec304b24cb59b73d2db3
SHA1 d45822c3158c76a56ae9e66643396f74f7aa2126
SHA512 1621c911a0f38bfea42b3ca71e1e0c818f6122f379c69ae426a1f9c12b161fb9b70beccb43f1010ef440097e02f224ced72c236959b6ed9ad96926e9b29f8bbd
SSDEEP 12288:kGAbL1EkBi7XgIgUy52OybI1BT7trOdrHykTuCoadtd3VOBRkKvMy10WWGCoadtO:kFbLOkBCw2ykOyghtor+AhWkG7AhWkGL
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO509D/D5800.icm

SHA256 0fc2decfebe4b6b74c82299191ab19b80ebb2fd42bd73235e2e3252c739da71b
MD5 ee2bc2b26d868ed7892f720c0c4bce76
SHA1 4db40e625e330dddac33e4bf87a05da8af776c00
SHA512 c9b5ad591faa31767d685845e9e3d66b173441eeaa8659eadbe39d872dc191beb216c0270efca8c5de9d2fec7db4883436d3d797fe116cd692917e4090d55a0d
SSDEEP 12288:tTGp4Mk7sdZeOKaYo4VWPD9ot+2Ktq/siJBS3LvGM998+u2i2Ktq/siJBS3LvGMl:Ru41uNMWLUGtq/sigmtq/sigB
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO509D/D6000.icm

SHA256 6762fef83fdb5a7505e0c869ed39e05a55d8f176c323b28e84a6893b55e96f5d
MD5 72367fb76ed91a94947702f3b3609b6b
SHA1 0aeb2f8c1bd2b172469e1bcd0053d11ccf485f60
SHA512 dca605560dfa616cf12ee1616bc0178bcb0b230950b0662dc4890ffb097f4762d678ff36351ca534974db4e8b706c88ebeed58ab9c5ca6106e857ea715a9f625
SSDEEP 12288:P/GxUNSIU74hndHnMsEoqUEsFkyKp9Epxkcr+GqUEsFkyKp9Epxkct:P+mgVcldHnMls2p9UqXs2p9UF
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO509D/D6500.icm

SHA256 fb1b2a87d815ed92d6faee48d59f9b95d5dcc93c56c14999cc86860cf6d59abf
MD5 e8bb44471cad92377cfc9aa8eb0a126d
SHA1 4f30dfb14ded3ff7431837533014ea23bdda4658
SHA512 9cd23c3ecd7cc062aedbd6dcce1fab1e36e2024522a31204771b6ff679baf86642437c59adcdd33a28bbb67beb12819f5a2530471f89b307aac581eec6e038c3
SSDEEP 12288:DRcFkIPp/0sgJHLrC+RuVpOqMci8NI5C+RuVpOqMci8Nb:DGFkiwJHDCUZcMCUZcb
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO509D/D6800.icm

SHA256 f7e7e544a2f99eeee4620a2e83d373de0eeb66f8c4d78e93aa26992e70287b58
MD5 38e2802216e79b48feef3c3ca36a28ab
SHA1 bb6dbfcfb7c8e68390b6bce77df5f7b99db5a6c9
SHA512 15e2015c3b7925fc72784d7f20cbd706ed6ded81c9cd8248dc20fb2b7bf367a6ea6cd3b5d793256bdde18ee46c732815fb6864881ba80890a73587875b9a3827
SSDEEP 12288:sZUmwkzFS50RFg1jB9DedbKFmR9SBAtRV1jB9DedbKFmR9SBAtRV:sU5041t9dQrSBij1t9dQrSBiz
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO519D/D5800.icm

SHA256 cb1815e9f14f2b8698775dcd6679cfb6cf1f47968eb3f75b2840a48b68b7b6f7
MD5 ed47bb1ebb4f5589ef3995a9cd8993dc
SHA1 fc9776fe21df718a5cb41b42cbcfeedc57bfa925
SHA512 d9697623217baa82f570421463f3670d4e70d01588ca61d34a03b7ee283b127ddd99a583ad2ae02c2a507411adb675bcccd8b0adf5c1f4bbc10f5e7a030e8954
SSDEEP 12288:rBjtUWpSa/mgr1LNi+Ul/ALfiyHC7FTqdO8UL6ppXTqdO8ULI:ZtUWgaegbi3GiMC7dqdOEppDqdOu
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO519D/D6000.icm

SHA256 fd1c9c94fd1abe818d3c3a99cc597f6273279145bea2f02e9461ed4d70f95059
MD5 f155076d9bb9f0a80926fc858a84b68c
SHA1 2003ed046e6c3ec78b1c4228eedfa965d85e45f2
SHA512 db45de280398524517d527623a5a0cbb23c6697be6452aed4b4ba75ba6f01f0115716953b85f7b6f5dc1bd14a10939dcd113fd03ec6e01fc05478954148f8ffa
SSDEEP 24576:x9VFTyb1jsRN/h3latI7q7M050hEY50hE/P:xfF+b1js3BFe7Mn
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO519D/D6500.icm

SHA256 27fc20838b6007c092c3a395877308d94e57c42125014724bffde3f9c8c6afa6
MD5 05f0e7b193bc4ce1f377957674d71ee0
SHA1 18f5049fb69a2ff6726065740c58abba5cfdc6be
SHA512 f2be5971f2401d057bcfdbebd60a4e6fd639b8c1d31012eb951ef2127e67b13d5276972f6c4e816a4161ec890b619dcd28f714701160636ba0584acb5d3b3c8f
SSDEEP 24576:W8GTmJR0vTYMoR5yDDhjxXeuwLpbzG8VeuwLpbzG8V:W8s4ETw0DquwddEuwddV
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO519D/D6800.icm

SHA256 764f2e37e368cb275acdadd7ab26c96fc812ce417a64febc555ae7c161d66ef6
MD5 2aa38b72b8f020f881e277a85a2d0a12
SHA1 0d7e0b9138c1b37a312a5fd584d6cb04d734734d
SHA512 59bda5bdcf8e99724c2dc896d095e34134ddbbee82d8c5d17e493a536f471e3289d5c99740c69b1f9a9ec4a4bfe0eab21fa876fe6f8e737fd6f02246a5b4e416
SSDEEP 12288:F8zXdJtV9GdLmEr4pdlxcYj3IlEOgrgsYOfyR2ONdjoRfQ46dYZ1HQ46dYZ1F:CzDtvwLmTdl3bOgr3ONpoz6dYx6dY9
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO748F/D5800.icm

SHA256 b641ea1f7ceeaf09eed72d95e6aa2e40015ab34e42e1f30926f516aed4dff0b1
MD5 d260fd73be29c20d3cb1753488351a26
SHA1 f808d785690cc73c24bc59cab9f528ae055bc3fc
SHA512 eb06bf23320cdbbf570e1a5fa6b3b755c8392f9beceff314b30f6724a453c54d0db4b427c6bfcbbc39b1fa8b981509fc1c2ea4cc8d69ca2f7b8fa8b7946591e4
SSDEEP 24576:rJe4iHN17Vp1S2/MUhJ4hVuDtGUhJ4hVuDtv:r/it9VpNP4zotlP4zotv
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO748F/D6000.icm

SHA256 c67ee11c110d96aaa4e5916d71088e10c1e8d9b93770e20fb69c1bd008355c31
MD5 87593128db8987612ac01f2fd4468f68
SHA1 9dbbdb625e9de642e5376ec0699303ac33d32893
SHA512 55de68f3ce90f95abfe04c67619e6e504d6fd0b77960bfad266a22923bf75b0b86edf228a4de1aa26b3a84bdc30643fc5379da5ff11a0e06c54e5543971aacda
SSDEEP 24576:CUJvZXwT0Xl5MilXu7Zc3u9Vo/Kb3u9Vo/KG:HJbM9S+fb+fG
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO748F/D6500.icm

SHA256 a72fede1d9add444528e1f3991586f5e87a475487f3e1cb1868f8c3dcbb315ea
MD5 f0832567e147bf10a839079cff8f2e0e
SHA1 0222f37a4bd7caaf17db547c0670e33a80d7ce67
SHA512 14b19fe071d1232fc5f918e17416cf89bae69d6b1ffc0ab469a890c43b79ae9ed4e61e40df33e4208edd84e3c0e3b23c6093082df86a7bc5ccb79d806d99d1ef
SSDEEP 24576:o8oFzgyJmo5RrZ3Or6YNjQ3XPNgpu6H2S5q2kye85gpu6H2S5q2kye8U:oB3solA6UM3XP6wg2Sc2kye8ewg2Sc22
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO748F/D6800.icm

SHA256 d7a1b6eb0be023b7ab24aebc461041565abfb37952b71fce0d5a30e96189fe03
MD5 fec0d7ae0a486d591f837c909c1c3f5e
SHA1 8f8abe5587254be930accf68e998a926884301ac
SHA512 086c5806c38bffa8cb3c76a6bb6f21cd262b64bfb42f00325937c024d4a545335e1b268b73e237aa2c5ace02f3ea94b6608fa5e0f92cfea15de9940734586341
SSDEEP 24576:HOMxBE5E8oAdg69Myrvi4yP9H2eeJi4yP9H+:HOMx+5P935yP52eevyP5+
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO8E8D/D5800.icm

SHA256 c1d0a36b7648d1fbb8f0c76a422a7737e023aa6e1ebebcafd133612550b42829
MD5 fdc8945ee6354fff44a2eb9281c35274
SHA1 422e3e1ce59a97a9184cae429622860969f1ba6c
SHA512 0bbade6c4b88a9f7ce1f77a86c3caf58c07cee60e4f31c0284e06d07253300ed2e2b952ebd143c535a13b39fa59bfc69a8cdd55d6344ce94f90bc94f8161845d
SSDEEP 12288:nosR27p6B5NX4cSlzCrRAosJHS7gj9jEoZjMN3eWc50kT2QrFaksftOBoOw56iRl:nrO6CuVArxjEo9G3eR/ak1wcD/ak1wcY
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO8E8D/D6000.icm

SHA256 e609c9345f0d9967126bc1c623acfdb16fc0881b38e59c460ed5f1016a2466d4
MD5 568e728a484b7690b52b01ae35a79690
SHA1 639a0b99e36d5deb7007456306b95ba5cc38329f
SHA512 e7aef943ea26602178a10bb9fe933463adbef55030f2f4bfea098008720f33fda20acd6cc9c7b9a2a977ee7d165b38bd73c38dd1fe3582284c1d38a544a28ad2
SSDEEP 12288:mgdtZ242Kp0R/RVXpk48x0zey9VU4roEJfrB3mjozPTVU4roEJfrB3mjozPm:zv242rTkLxWH3JTBgYL3JTBgYm
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO8E8D/D6500.icm

SHA256 b886b37dc5c55f9816275d115ba24903b25d09641f75610e3774eca4994548fa
MD5 2040006b64510ef93b88bb586e8e2afe
SHA1 a4feddd9eef108a59e9af15972734fefc5fe25b8
SHA512 9f255039be4b5e74153b654e6127899c0a35051969d692bcb0eb8475b06337c5e4dd952a27be6732c6942dc320fa8eeaf71f52dafe7260b84c44804b13e6369a
SSDEEP 24576:vvokGiPoyUqcRudvbP7E2bRdVv3dvbP7E2bRdVvC:vv2PlRudvbPRRdVv3dvbPRRdVvC
MD5 SHA1 SHA512 SSDEEP

color/P77/AUO8E8D/D6800.icm

SHA256 058dce2775326294730648d80b5638300f6b754e2f0df60ae23c3bc852523edc
MD5 9a78062a1f17a2843b26114aff2b5dfc
SHA1 8e4d4cbe654ef3dcd81d21d2eb1f9a1b821abb2c
SHA512 85c1f756fcc109b65164609f29866a05bd08b878f254bf6f7ac3467c4ab00b28354f00e93d6c35ea3021cd8c1e17f249cdceee5ab4381874783b5b42a99130fc
SSDEEP 24576:cBx/TDfS3zysp1ujnMHW9qOZwSNGcPNl/wSNGcPNld:c3XfSDRpKMHWnwGpFlwGpFD
MD5 SHA1 SHA512 SSDEEP

color/P77/AUOBE8E/D5800.icm

SHA256 0f00f85d11153e4ac07c385de7f51a27a1a9f5afcb5b9a4869ffb74891ed3e60
MD5 b58a478b92107794cda02997b579cbff
SHA1 910215a36104670ea435d9653390d5c82327a0b9
SHA512 00e3c3eb9f046de39bf917ad1a1994d0acab81a005364b507b49d67d0d1163f07d18099d72679f2e52179cbb7a512bed7616a06f43f2a2abbab9dcfcce598778
SSDEEP 24576:1e0127xr4WlakbKSbo1DeVvbF50TYLLmvbF50TR:1y7xrBlakmSbYDeVvbGYLLmvbGR
MD5 SHA1 SHA512 SSDEEP

color/P77/AUOBE8E/D6000.icm

SHA256 db9a9724a03344741572ed2cad6aa55cd2401f556ec7c7f6dea11ec572e6cf10
MD5 f29632e19bdffe5ab3a7c56454271655
SHA1 b9f54170622bd2c4fe7da0a47192542bdea66871
SHA512 16ecf0942c2357fd66756444f00062ee9861308afc639b9168b43cdaa947454a9f57b3b63977fd754359ba7ab0ffe2635df6197b7f3b1b80baab66c4ee0bfb0e
SSDEEP 24576:hSTuO+4hnjFLtGfGuhyOOdEsQZty4OdEsQZtyy:snn9tGfGugzasCtytasCtyy
MD5 SHA1 SHA512 SSDEEP

color/P77/AUOBE8E/D6500.icm

SHA256 bf22a5ff77c8251785a109b435bcae34742062242c192c418ae34045c4af4fa5
MD5 621323fa0d039e6d16eb45c4fb3aad1e
SHA1 206626178dc741a14fb97eb25e9cb7f193ef257b
SHA512 fa743cff99a7577fb5799d4318250bdec8da431df6518f9585699e66e58b4690015e4b199bbfabb9160eb24d4019d75a9c38113ffed2bcc5345d7b1c9266116a
SSDEEP 24576:XZwNGz0eGHqB084suinDehpSGORSinDehpSGOR5:XrHoGqaDjFDjl
MD5 SHA1 SHA512 SSDEEP

color/P77/AUOBE8E/D6800.icm

SHA256 1d7014f645cd64ca647d0a37039595b6ffa1bcc2731046f5d4776908f6428659
MD5 949e6cfd5af0f3167d267a02f1d39609
SHA1 e8fb45b2ef117b16f64ae5513b5c16655f04d41a
SHA512 96e06da105d82fe279762fbef66158d43e9892bf3cc94d62ec013cc7aeba093c3c1b61c9f2db540b31fa183e1f62454296c4665f3df98a72008771507b14f993
SSDEEP 12288:lxB/QMyZp5XV72fvd2J5wuZuys1X38OWQOEE95lIlb45KO511zE95lIlb45KOH:Dx2XF2fvkJaGs1UEE9AbvOVE9AbvOH
MD5 SHA1 SHA512 SSDEEP

color/P77/AUODE8E/D5800.icm

SHA256 9dbd88c6431a31540c103af15247729ebf3e0a00d0985c812d2224865924d239
MD5 99eb19a31d180a018e014505d1d3c025
SHA1 0f97e327be4f40b0a028252afe4be8941b814ef2
SHA512 02719ad86069238c9e2b326c67fc52def41d5fc4a0c5defc1ab3b06f2cf34c0a53dc2ae073e4eb169ca5ed6136a7bf15fa394b24f41dc02308cb333a25cbbdee
SSDEEP 12288:j//f8a1fiZjriZNfVfAPER5KR6dZr7rmWK2pnBTaaVPp6dUPHK1HXDaaVPp6dUPE:j//EKiV2ftfAcR5fTmWIMXyVGMXyVt
MD5 SHA1 SHA512 SSDEEP

color/P77/AUODE8E/D6000.icm

SHA256 687009732637808bffcfd4e2a68a0e60b253beacffb98f91f13e6903f6fc33c6
MD5 b43f5b262d31f752cd4ceb4c2136a099
SHA1 cfee631b046834aa27041074b63ce107435e0645
SHA512 b69ba598d50546d9ab7272d803c8182a237516743f9b46af03e3248bb4f5efc3e9a28558c396a200dab0ea0a10d78d81a6d838fefd6d962117dc8694e701ea9e
SSDEEP 12288:1aCKBShBWk0/dqTT+OVJNrNUY639SDgVj9NwIJjKKVVj9NwIJC:ZWkQdEraYuBdjwIJpdjwIJC
MD5 SHA1 SHA512 SSDEEP

color/P77/AUODE8E/D6500.icm

SHA256 230b703f6cdc9c1c626a9c9e76b4818ee92060a3bcf0ecccb01ae616ebd47d3c
MD5 37ada909bb68615da4cec19041961e34
SHA1 687f2ae4355331784feeb072d309d3738d4576ef
SHA512 48e98ce2890a0295d7f1c1c8fbc24c65fadf2c665e7577ca0c692f081d9ac86737a3defa517a1e4d3669578d67fe4f59900f199a9f5f43fb4af78415f377fccb
SSDEEP 24576:oNl/gAYo3Ay2Z923X5REx5yawuC1ZPCkVR3awuC1ZPCkVRJ:MgAYflQ3pRNzjPTVhzjPTV7
MD5 SHA1 SHA512 SSDEEP

color/P77/AUODE8E/D6800.icm

SHA256 f097cd6a071cab0b272ffd907b85921e93954fd5a0c65bb17dc73c794acb369c
MD5 7a170833bc14f9d5a3b490d010457f9f
SHA1 2cb8c68dbbed300e74163afbaa019e7600a60f90
SHA512 19d0109f3d353c395ec8c2e88d030717a4b4ecde64442a36832a099439204403e89f885b41608bd1a83dda214a446f73c18bfb4dc36a226a9a4248fbfccc622a
SSDEEP 12288:VOXZgP/5LzYJNPikwSb8AUzWXzPPUmPl/mqfVw4tBDA7tr0w0xDD2mqfVw4tBDAC:vhQqkx4AUzYPPiAr6tFaDDHAr6tFS
MD5 SHA1 SHA512 SSDEEP

color/P77/AUOE295/D5800.icm

SHA256 ef5f959899b4296aba1ab6a24798e1e6d0c9037d430752ae7dd773f727bb628d
MD5 c7e4c71d1326620b00ab467a82e2bcc8
SHA1 da02411fa2288e6aa1767586eefbff51e2cdc751
SHA512 83c8d3daf251ab1b764631564319b180d1ef3ca5f8d30670c71052c34946ec2731b64256604898027d43a5946a29eddccbeaed9f8fae3f095a1eb4ba6a071819
SSDEEP 24576:wrExpfgo5oVbcUri/BJWARRyrh9WARRyrhq:wrEx+k+IUe/B4KRasKRaq
MD5 SHA1 SHA512 SSDEEP

color/P77/AUOE295/D6000.icm

SHA256 a584341ebe9eabc715430fe5e701f3d2e991be88d8668d9081995769bcd3a277
MD5 a948967b9e528feeb9ee0ede7d9fc3c4
SHA1 59fa6ef62849fe2cb3ebb032e31c0ef52f85c74c
SHA512 2f1b908204386bbf6f2b437812d42a30677cac48e75c74573b4766d02a29a447d98d277d196aa0bfcf1b81e0af0f0b13461d9dd09c96b7884636d09604b5050f
SSDEEP 24576:WigiP34nWFur9vqRUzWxOJVKaNdIHPVKaNdIHk:pKWFudqCiONmjNmk
MD5 SHA1 SHA512 SSDEEP

color/P77/AUOE295/D6500.icm

SHA256 6b278f3b7673f87aec1ed8e1a19414e99f9977b4b280586a5504ceb4443bf779
MD5 371b59fae918e2fea2f50959675e8410
SHA1 220807ffbb7f3c570f2f6a187a0d53dcf953ad06
SHA512 4ee2508bd3af7796f0b6f4dbbf65704d4e8ce25e6f2fe18945d595073587d9bf5b52165236b5e0a0fe64af775aca0108583eb54c2c84defef6e431377de07fbf
SSDEEP 24576:JGpBVp3SPZIVSvrBrTHUEls9tcjUEls9tcH:m9SPa4TBrjg9Qg9w
MD5 SHA1 SHA512 SSDEEP

color/P77/AUOE295/D6800.icm

SHA256 6ea2c657bd3ac3f9aa865825159d7efdf8cd996fdf050bd70650d98a1e2ab3c3
MD5 ed668e156be96cf09aa13330ce1c943e
SHA1 e7d901cf97502a4cf89ac7e34a5c43a15904132e
SHA512 09ff5515b35f8a2d21a1e3b52c6f1f1b7fc1c3509c1e26fa77ae683086d16da057e12fb70c1b1fe5648601a7235908384a144409576eb2685a7ede1a6345e5f4
SSDEEP 24576:YykX6F0kiqPKJw4v9v/vVbYyvBjKZLbYyvBjKZ7:4KKtF3Dp+bp+1
MD5 SHA1 SHA512 SSDEEP

color/P77/LGD05E2/D5800.icm

SHA256 b4c86e23e4b6ba70a2644f73c2d1bbbe4110522fc0d3b5e7f439fe6a0202b19e
MD5 6f7e7afd3a315fa7e5c492ef5b2ef583
SHA1 3c88cce414b9ff13d79e6bef4ace5414a5716960
SHA512 79fd3eef0c705672317e13b6314964635bb2b5332e646d4c10c9c09c5a3050d321750d7492d7a16bc747305f4a3f17d0ba988e87305b8e87fc287f42d4b4aff4
SSDEEP 12288:I/0kZhQizqZvG6ftNxkRFBH4FHBldyaFjYfkH4FHBldyaFj8:I/0kDgZefRFB4FHBv7F0f+4FHBv7Fw
MD5 SHA1 SHA512 SSDEEP

color/P77/LGD05E2/D6000.icm

SHA256 6ce9739732eef083b5003eeca75cc69a600b41320f03951a221f3544b59d88f3
MD5 fd1305f9efcd9b7b6f6d82bdbc129a4a
SHA1 5a0c86fab244f83bd155221a1a376deafefa4f36
SHA512 7399a973934c830863012e7c9305d4bec5ded78eccf2d245c2ddcf439f4987ad95fb0635486da37630253738e581fb4f031e21623c35d3d02e4da6f4cd1be4b8
SSDEEP 24576:AV0EXAaLXbkhaYmsmL1i9thn6qZ8L1i9thn6s:C0Ew2XbkhHf36s36s
MD5 SHA1 SHA512 SSDEEP

color/P77/LGD05E2/D6500.icm

SHA256 a80a18548fb30c1d61fc8201ca20672e35e519ef6ee808e57d4a2dc3065e961c
MD5 13907ab2309b025e6b0088ef098e67fe
SHA1 329bd716b4d9ba5cdc841c41b6f4a7a661fcbad9
SHA512 97f367dd9e679e5ecae53b579f7335f65486cedcc77c158e722c66524f739d30d97a05acb76967cc845d7b102c069706700d5a957d0c3e0d879d69db78a940f9
SSDEEP 12288:4ruN6kc1VW3uA3TP/MBt1gl+hHSxT/K3gsiKbwmRhHSxT/K3gsiKn:euN611A3XjP0/1gl+cTCrb1cTCrn
MD5 SHA1 SHA512 SSDEEP

color/P77/LGD05E2/D6800.icm

SHA256 f7b86bdcccd514763ef440050a67ae3e36b9e9287c1fb83ca08136b5519a31d9
MD5 965736a57014f1eb4fd316a55f6c19aa
SHA1 5b7481dcfd15e2fe62afa76d9088f3274bff22a0
SHA512 046c5b3adb51c50636639fd445911e2548f3977a71085cc4382cb6fcf55f664717d13f13512b7ddbdc7897d907831825964a10dcd50abf633a30cba0c6789c70
SSDEEP 12288:HHMxquFU/RNIWXYQ2SGhVAirtKHVoERM9ZT2SGhVAirtKHVoERM9Zx:nY3FHWXY5Skf0oR9Z6Skf0oR9Zx
MD5 SHA1 SHA512 SSDEEP

color/P77/LGD0615/D5800.icm

SHA256 75ae022089218adf19738a4262e8406e2203966123e495b8d86278e4d4ee9e9a
MD5 605b7e2c88a82307e3c1aff980fa3ba4
SHA1 5fd9f909cb831492e165f725b44dfacb43a98240
SHA512 d5fe78904332beb743ddf61071b6304e8a4dc80f2c176c028a7dbecb40f47ec042c48ab7818ea104764b777ab95fd3da82ecabae0dba516b374a7a5aa0ee9aa6
SSDEEP 24576:0+Fbbv3tPioxlfDpZGLoB1UmrakawGhSZGLoB1UmrakawGhy:9NvtpZGL0UoaDKZGL0UoaDa
MD5 SHA1 SHA512 SSDEEP

color/P77/LGD0615/D6000.icm

SHA256 ea94e4979b95014638a94fbe4672275ff260545d96c38fc7a063c08fa19a9e03
MD5 d1f79dc3bdfd89d85143f02b834fddf6
SHA1 0cba6afb9d1bb6fad201847a30ca7351c017c8d4
SHA512 0e21cc88485ecfc26028cff0123799e5bcad6e4a36651d659997a5fab1d2c6404808850f8ef80a92643f3752cddd5314d56dc2f5ce2e5327898d5d86101f754f
SSDEEP 12288:rYthBg3sfdu3Ec8tWhWDb4wE7JywtN75DIcVI9IN9f3iE7JywtN75DIcVI9IN9fz:yHop8cSMwIgkN9EcTyIgkN9EcTz
MD5 SHA1 SHA512 SSDEEP

color/P77/LGD0615/D6500.icm

SHA256 d619e7d5222544313dcb58e270a43b596680d34ba7b2cc1e2cd841da64d1f642
MD5 96ed630126d939d4286b046c40b30fdf
SHA1 1c0168fa53616235bf6380bf142b394678bf02f0
SHA512 6b55cf84afd6fd53a79d6ed74509ac418f74bffa1a91f89e7a0067cbee0529c5c1414a050b094ed9907e7ce143de6a9cbbdb86a96adcd1811bec6764137ed481
SSDEEP 24576:hRZEQOC1GpYSo8dIGm+f3/NX//IGm+f3/Nz:1kC1GySo8dPf/lPf/J
MD5 SHA1 SHA512 SSDEEP

color/P77/LGD0615/D6800.icm

SHA256 3e880e5570075fbd4c8acdb2c50ed164eed8f8e59ea46209481e2da3cad3488c
MD5 600f437753cc340bc90db5c7642376db
SHA1 3e4638adafda652cf6e02698f9582920ae5f8ded
SHA512 be19e27b474c88ead8f80309cd954f37113ab6ffb346a2f1e374e3ad4ca6975bf9fcd135b740e27a8a46222ca2a406c1b9a8bf8c1feca8f4eb61433ccb8531fd
SSDEEP 12288:HGI6Q8fqvSxnrE/0h+7tpJyREKuKpQFSI3LvWVUxERmnqs0QFSI3LvWVUxERmnqO:H572rg0SCE4+FSI6VUxwsZFSI6VUxwO
MD5 SHA1 SHA512 SSDEEP

color/P77/LGD065B/D5800.icm

SHA256 caf15e03f17ea3e26a78f1daee0881e593c6a306397b4813f04f0925ef040cb7
MD5 bf04e0657bbc10ebd4c0cf0bb8774cca
SHA1 7560ab4d112e4cb2f42d7a69b69ec70914d5f909
SHA512 547b7647cd60841e5044697647782fbcff5995ff3e5b1c5b518877265f576aea675cb270366ac01d7ad8d4f205de7144f80f7e672ed11e84182bf55c6b7feb42
SSDEEP 24576:pClawpoX+Kk76ezUbSCivdF+nBtIE1HE1TE1LsKOHbzQruisKOHbzQruV:MZoxkBzIivHmqEpEZEHAzQr5AzQrO
MD5 SHA1 SHA512 SSDEEP

color/P77/LGD065B/D6000.icm

SHA256 5f0fd56d8b4d926a9e9e79c04fcd393bc31c45285bb6f639858f41a30832272c
MD5 ef97299ec585a87b293eb13950fc0d7a
SHA1 691edbf5787343c9e08adc0f1c413dd37cf9c520
SHA512 a83b235208b6ff2d95cb8a1b764f1a571791ffa6bcc508c3f52effa466bd4f6a3fc4a24dd38f25e6dda0f4fe4db08abeb82fea974f22fcf3bb2dbb6bfea70f3e
SSDEEP 24576:06Gh7DqRevZoj1tdl1GYj1iodl1GYj1iC:cZItdl1HjIodl1HjIC
MD5 SHA1 SHA512 SSDEEP

color/P77/LGD065B/D6500.icm

SHA256 36df9f999a68a24cdc5f66558ef862dd5c72a8998d80d1cfee44c9a4f7015fbf
MD5 a632762a9e3fea5f42b91a6811061d64
SHA1 7b9752ffc1c856870702284c756f1b058d2aca6a
SHA512 8112406b5b462c5cad495ba98e9f6dcef16c6437df20fa96ea15506dd33792f0e4276cc02e569e1c879c984fc66d6a72b082d3b25c509287ac5fb4bfb8b01664
SSDEEP 24576:tJiF28VtcAyKKFVsRBs3zTVtcAyKKFVsK:SU87cAP7RaH7cAP7K
MD5 SHA1 SHA512 SSDEEP

color/P77/LGD065B/D6800.icm

SHA256 16a726b04f0568ff967ef295de774b114950ffdc5edc8c105371f7c32322d6b9
MD5 253b70ee3edbc10d4582d02e0386904f
SHA1 430d809da6a8a8ab913f63cb8451306d4c15ef2f
SHA512 3611adbbad028c2f2a20177b30e338c9bf287d2956c78369f6db4b795cc1d528ebeb1fce0ea22a2acd8e67fd14d6214d8056fc83ba0c89b04f0c894c1996ae2e
SSDEEP 12288:kfDUnVckkRknPDB5ftfm7uL3HZC2iRnduo4oF8ejvEQG3k0+FCJNeH/ApVTyOOkv:2AVZkRmB5f9mp2Ef4Ql/EcOOe/Ey
MD5 SHA1 SHA512 SSDEEP

color/P77/LGD066C/D5800.icm

SHA256 52a54c3f21fa7e0b812c6dd2292fe9cca4b5d576fbbf2315fba32400f3055949
MD5 1ea231a7f6684bb9437e41ad9d2e3d9a
SHA1 a8dae76693bc743e97362f9de55c5f2dde4425e5
SHA512 81b8753f6395abd3c89be87db9da3ba69c5f1770c3b32daa4245a9d6bbcdea1aa9c67ea31e039d3c3a8cad421648d821b4c5285cb7dbe1857a44d985c80d48fa
SSDEEP 24576:x/ESqtknJnZqJGaJZsiNDn/JGaJZsiNDnS:xReKZIl5la
MD5 SHA1 SHA512 SSDEEP

color/P77/LGD066C/D6000.icm

SHA256 e64346aadcb31b7098b902b78306a91abaf18d2e8e3e0176930ee2563a90bd25
MD5 8b36447a5e6f40498090517ca92d3296
SHA1 63680d36e3e22f3553fb62ab09d98d74bf98e4e5
SHA512 1f53b5f563110b69894119e2f6131ececd6c331d8d047157ab8687f3a8dca1c98a2eff6ab0468bbded1b2df9f8922ccf04e14b6530c79713c1ea769d048fe5d5
SSDEEP 24576:O0yqAlcdGrff5NSfmAzMxQ+rD5iWQ+rD5id:hM5YHaiPaid
MD5 SHA1 SHA512 SSDEEP

color/P77/LGD066C/D6500.icm

SHA256 d5e476b07ef6003097dacf356c0100bf362fc09c482c2bc2f92d02b2f3145ac4
MD5 c6a64dace0d533cd9683fa88ab8db4ee
SHA1 1857f1eb2b700a89edddbf62d53aea6657bcaa44
SHA512 8e5fe3aa2d8fc65dedd967723284ee6469499a0db1a92e1cc1282e4e21ca1a1aba44766093e3893a5fedfdbba89499ccb584e8b25d3ca1793d764f17bff365fc
SSDEEP 24576:nN8IGosWS7jrRClz3EFeUmwMMbz3EFeUmX:nNSonSj4zZwMMbzZX
MD5 SHA1 SHA512 SSDEEP

color/P77/LGD066C/D6800.icm

SHA256 73ef43dacea92c0be23956d59004e13c17a1e2097f64b762241c94a556e7aa99
MD5 9d9eceef8ccf5537022adec7654f3b77
SHA1 18d369cc1b02671e57de4e7217fe16b25402e49c
SHA512 d4dc4fc8958551a2a748130e3f021be418554dee437c366ae5a90c1afbb81fd4f2e60f0f5fad381f51c0c5633d3f1d7e5b7ea6150e32f72ed7a9481d11cbf6b1
SSDEEP 24576:ozos4U1fBZ8gR/mZ20+8k2yfKMxeqoQGqOENRxKLqn4n4n/xKLn:o3fhmo0an9eRQNJAApw
MD5 SHA1 SHA512 SSDEEP

color/P77/SHP14DC/D5800.icm

SHA256 82194aef964aa82749ca413b0f3e1eb801ff199b28813cb50431b0291bedd927
MD5 4537195d82934e504ebf40294029bc94
SHA1 1a9b6e86a6d8c74f92ce939b00219374cce720d6
SHA512 4b2a87964a283247d4b9265966621425ecb10fccaca62f4cd9fc8dd4243594b1d0084ed68ecaedb3397c4d0dbedc99285a1da8e02008ad68ca29bbd1454c995d
SSDEEP 24576:t/mTY0DnYLkNkL78yM6MkcIeMxC8E3GDIeMxC8E3GM:tWzYLVL78FbIBE2DIBE2M
MD5 SHA1 SHA512 SSDEEP

color/P77/SHP14DC/D6000.icm

SHA256 77d65781c4e1e96b15d0ace5d6e8d5b3021f342112937ae91ca8e998a576ede2
MD5 26c58847c8b6574ff9f3b34e4a7f85fd
SHA1 e897053c3d89d3ddf9adc82a057b3f73ee7ededd
SHA512 fc0c9e2d180a840693605bf78f687932345d42b1476fa5cac3990e574b91afe0431058487d31c5e13a0f24f8af9249370755259cce243e55784e4553b1030e0f
SSDEEP 24576:PxNbDawUrMLmSb3OmjoA0HhgUPcHhgUPAH:7bYAOmjxRUPJUP4
MD5 SHA1 SHA512 SSDEEP

color/P77/SHP14DC/D6500.icm

SHA256 0d9ee86144eea6ebaae9363efe2dec21b966514de815ec42fc2fbc82839cb03a
MD5 0a9c93f45c4dfb6c7b0a8afdcd24ea74
SHA1 19a48f4b7c0d00f53269ad089931d568f3fd980e
SHA512 c62ff8560bfff51bdc5442101a9c180e5f2cb8f20ff557bde4e3ab3f9506d67429d312c470dfc894531abe0442a48ae630b4b658e2a14ae8b5bafbafd1a3cdfe
SSDEEP 24576:OPGZkvHwXkRVJrkSnGU71ObaubHdIlGU71ObaubHdIE:OPGCvQX63V1waubHdY1waubHdR
MD5 SHA1 SHA512 SSDEEP

color/P77/SHP14DC/D6800.icm

SHA256 6a14bc3d9bd958ed20612f3501e93ff147e9c5a648d6102244234e02d6ed6fe5
MD5 fe4fc0ccf8f32ac23789993ebbbc88bd
SHA1 3a54c375d69f0e2e1b42c564653cf31cd614a26e
SHA512 682ec16df8a6dee83aec7da0a8c89847c83e37e7c03968d02d050385a4e461ae6cef49bfd5f13d3ba800a94a54e93276b2d8830972421911330c5c6a9ffe6ad1
SSDEEP 12288:RXTvQFtK8AakrlmZ5+2A0zQer1ODQPFgiZo6kH56n3vv1/ECBmk4DH56n3vv1/EI:RDvQF9ANe5zr1ODQdXkHi1OLHi1OO
MD5 SHA1 SHA512 SSDEEP

color/P77/SHP14E1/D5800.icm

SHA256 16b8280cb276cf6834f687761eeb5586d10b43ac7d17743dbcdac1be031874a0
MD5 fb31d6b564c2c30a6a7786e2c198dc5c
SHA1 8b65b1bfbe6978c65a22708795f28c2cdac62898
SHA512 947a72a687ce56a904f93134723cc3f53f8ad39fa596e5454c708c9dedfd8b304510a08145aa7f58cc1b20534d28d2632bf1ac4889bbebb451cded4049244ec0
SSDEEP 24576:hByZ4TWuMXZlnYETPA0H6aO90UPA0H6aO90b:M4TexvzA0kA0d
MD5 SHA1 SHA512 SSDEEP

color/P77/SHP14E1/D6000.icm

SHA256 d4f9011bd8ca409f65e700cabde6973c29348492f567ef20824199e77a753206
MD5 c6ba2c1966f230e266c8310bed891415
SHA1 32233a412dffa053fece12fcda79ead619e46152
SHA512 9e2ce724666da6271528205faa507f506156cf3a5ba953ff3d9c5edfd1124846bddf228cadcc566a7ccda3da3a7f2785a34aa24bd5aa46a1e1036934d6783baf
SSDEEP 24576:K7iOO6k5iE6IWBpl1vUPp37fQZlc3a7fQZlc3y:KGOO6RE611vM17fQXCa7fQXCy
MD5 SHA1 SHA512 SSDEEP

color/P77/SHP14E1/D6500.icm

SHA256 835aaedff2236a792b52bae5821ca8f349d4b52b2a31890cd051421b311d5c4d
MD5 37fb3d831077b8e72b5d7c5498903c12
SHA1 a5d655301d0daf9631d4906add674e275c18f99a
SHA512 e03aaab89c10a9285102a31bb579fffabb68aa9d247ce94569ef5b9b516ef8aa121be33dc0808e28f075503eaa9112c8e911ef79946ae173bd7efd1d042ea051
SSDEEP 24576:UIizA2dGtkiMjZPJ2ViHT2kPX7EbEEBxT2kPX7EbEEBo:UI2dGtePJ5KkDGxKkDGo
MD5 SHA1 SHA512 SSDEEP

color/P77/SHP14E1/D6800.icm

SHA256 3d570b71ee6e5a87c1efe6ff2e02ffc9718c8f3f74c6551cf11af80cc8a3d1ea
MD5 a3799ad82985f5a613439f5c38802bc6
SHA1 3f3fcaf4116cebc9ececb5b0586856eb026e6848
SHA512 ca826f191c611136c07b81b17a63e12d304a30ca343af1052d22f5df05d3250a8bc6b1675ad8b18aba669a8698181c759ea588feee61a6640c57c9ea5a5bffb5
SSDEEP 24576:jX4VEuOUoEbkrKzkLDJpt3dBKQ+6Zc7+nDJX0rDrDr33dBKQ+6Zc7+nDJXT:jRuOGlklpt3dMQ+ucCh0nn73dMQ+ucCl
MD5 SHA1 SHA512 SSDEEP

color/P77/SHP155B/D5800.icm

SHA256 73ca44459047ef66f1192c2c12b8bb2e9536d6a0ee5277800d87a4dc12f5ea5c
MD5 c223b266747e830ccd8285e80434a45d
SHA1 d94dd615c13c2c1b36ab0e543091ed72129519dd
SHA512 d2a7ca27d3b1f28d86d87b075d63fbff3bfe227506de4e9c09b9389c7061706c5cee55caaaff0d0ca23cdb6f09ff3152c782f99668b09c17f239aa9e1c1a64bf
SSDEEP 24576:NekhJ6sjo1ZZBk1UcsMh+JMKZszt+JMKZszC:Nek+scZqUm+8t+8C
MD5 SHA1 SHA512 SSDEEP

color/P77/SHP155B/D6000.icm

SHA256 80ce2912895aed0095b7fef7b75602972d626b93fe6635c99ca1baba987caa53
MD5 acf302bfbc3fabb009477db16169d3ce
SHA1 c5886a065c11dd0c347a334c6a8a316abf1fd352
SHA512 b15addb04359ae86d0f28ac9027cd086fa2e00dc53a1d7cc6bc8c125ede09ebab0ec8f97887c1964cfbd89024a01199ba448a120ac27136bdc39b9c92530b537
SSDEEP 24576:SBCt3uUgVPXCIzmYkFI+DG0aykQNwDUHDG0aykQNwDU/:SBCt3KtzhkFIIkxIkxy
MD5 SHA1 SHA512 SSDEEP

color/P77/SHP155B/D6500.icm

SHA256 53d019dcc41024b8c4ced7bde136d296c07a064361d36f50b1c9807114cb8b85
MD5 82ca01cda76b1c74d45384023dd9d05f
SHA1 64f1520bdfb54430bc303f71278d09823454ac28
SHA512 8b2c42105e63d9172c772559dc71d6fcbcc8bf58c441cadefed96d85413678aab68550c8b90abcedaeb0150887f57cffccc335e3c402b8ffa3ef282db73917a7
SSDEEP 24576:vTSEbYhvQrZZQlGj0CwIE5Papf1D1zcPpf1D1zci:bSEYQrZZyCwJ5Gf910f91D
MD5 SHA1 SHA512 SSDEEP

color/P77/SHP155B/D6800.icm

SHA256 f6e7cb67e883aca2c4f64363e5d34edb6264656a6d2656733e8e30b58e8a0d24
MD5 12c0c1c9948fde0c5f08af541d29f49e
SHA1 2c91f50b0cb55da499ecf425563adab503e63767
SHA512 2ece0fb5698f8ab2e673075014a80ace13e2239f924aa7bdb15dfeb04b69077905bd933883cc7af0b632705e2e0c5b2fb7649a4d42397f3bcf560ea66724277d
SSDEEP 12288:DDMikxJPXMnvOjchII4hIzYUbJwajrdT/hG6d9Dx/On17eSLWPuccZG6d9Dx/On3:PmxJP8hhIvUYYdd9xo1veuccJ9xo1ve2
MD5 SHA1 SHA512 SSDEEP

color/X7V9/AUO329B/D5800.icm

SHA256 82f3134f65202e26f33fbe18124e63035a902b9bd4755e1d33d5250c568b471f
MD5 06c56b6a5b2dc340b3b5c478790d428d
SHA1 8f9952a3157360d8418e8896d3c4e4b521275878
SHA512 d18a53f0382b1b9fe72e2f6e04315459843e67001e6178fada5e07b3289081fd4e9d442745db44e41f9a5a150282ce23579c3b00c10e358f8f89cf0a47a3bdae
SSDEEP 24576:V0J6AX5V/kgZ7cf+yXeq9zuxQyXeq9zux7:u6ws6c2yXeq9zuxQyXeq9zux7
MD5 SHA1 SHA512 SSDEEP

color/X7V9/AUO329B/D6000.icm

SHA256 a2f515f4422cf1aa1de3969e3e81b03bdb771ddcdd8000deb287e171a3d0bad6
MD5 06c24bb050a2ae6fb513012d606b274f
SHA1 17bee2441befbc80feaef9439390f35157728d49
SHA512 6f8c9e33ef6f24cb4aea1d083f5d94ae7afc5c981c60edd87b7a5f94932f77a4a286a42b571f57b9a063710cc4f519089f6dc5d1205f41770a17900f3aef7df1
SSDEEP 12288:XFvZ/wEBiALF2GY0p9DRRyxOeuRbhnCu2JZM4wogEL40ODrgxOeuRbhnCu2JZM40:dZ/wE0bW9DkAF92JZMQODrCAF92JZMQg
MD5 SHA1 SHA512 SSDEEP

color/X7V9/AUO329B/D6500.icm

SHA256 7796a56f597cce470dd66ed72f6ea73b6f9b3a8c772411d8bd8567db70fe6005
MD5 6e48ebd8375a299b9e7c85ffcec6b3d4
SHA1 15d37a51e3134437e2f7e1e0f518c8faa1255ee5
SHA512 7a1f5dd0cea1ee2c410db1ed938758f495aae7336c657fe1e55b2a4e206ff4182f6e1f178ec6455a92d6379404c6c279f7f8aa1a4aa06815af32de104260132d
SSDEEP 12288:vnS+tuPgyPliTNoKoowsta5QBxOvHxQFUfewsta5QBxOvHxQFUfm:/S+tuIyPMT3d0Xy+E0Xy+m
MD5 SHA1 SHA512 SSDEEP

color/X7V9/AUO329B/D6800.icm

SHA256 90d10c1ec0c6d5e82a664ddb142065ae2b466e0c4c23a812c31a3d0e3b369123
MD5 252bed21b0f155fae94a9455308db3f3
SHA1 ab7d1e3ef68dc46cf0aee65e163d9a5c100fcc15
SHA512 43a1d65f4334639f02d1a7adfee07ae13904ab0fe97a60e649b906f2638348942060c5b814804be94067c53088dc9e3e6a5364c873b1285fd7dee87bc942484e
SSDEEP 12288:+x3AlLHwdQQ6JJWqtzzupZoV/DYWIDmWn4xSWbKoCupZoV/DYWIDmWn4xSWbKr:MMLQUJttzKIhk3CWmbKSIhk3CWmbKr
MD5 SHA1 SHA512 SSDEEP

color/X7V9/AUO509D/D5800.icm

SHA256 916f0040b33f76c7e2936065e8e2bf23839eeccb803189cbae362fab30aee767
MD5 c39684fe10b681a37900df8dcd98f5d6
SHA1 4bd14eab8917b9934afd6a167436936cd9abc6f4
SHA512 414c18184757bc9ad737c9b30772cceff488c4f4bd292b81c82625c923677682fd1ddf196b56116ef4392c762a3d47d8e827e432a045f6c15db62ce93a219b7e
SSDEEP 12288:PkaAF5+KUTa/ZSb0p21oHtSncZsZSb0p21oHtSncO:s95+6ZLB0ZLBY
MD5 SHA1 SHA512 SSDEEP

color/X7V9/AUO509D/D6000.icm

SHA256 3fabba789fe63a8fe72c9b7ee4c1d787f34170f517506ccb69cf43c208b5ce59
MD5 7537b06ef4039ba4dd4f6528109c7927
SHA1 83473f36ef75532978ce113f3498162c374561da
SHA512 20ec8ff66729289caa2952c32439ff78c3dfa3a3fdfff85bd35c6977c93a58481d9935c1cd8125bd17c27df9f8da3d9dd0355d40f639307ea28892e8b32ab113
SSDEEP 12288:zb0PwdO5n/VOIYzi6KGaGr6nbxr9oA5FDGnULVCfeMspLSnbxr9oA5FDGnULVCf7:zid+i6KGAb4UFPkfeSb4UFPkfe8
MD5 SHA1 SHA512 SSDEEP

color/X7V9/AUO509D/D6500.icm

SHA256 909ba3e0bfeec4e469860a0dd9c2483f173aab7e2352dab4e6f6529482f1e4ce
MD5 523b73c11721d8203ce8e4f7b3e9feae
SHA1 34fd9bab4eefcc10dbf8912312968bb7ade65284
SHA512 46131bcec59194baba684fc74461e35d6ef10a8694ff1fecf3d06e6bea3c45ba589a12983e45da79c08c9677c22806f4f9dd29c9aaef4353f970763d40eda932
SSDEEP 12288:46DiZvpMfC3gK0HljTh8l7XeNtNSzsYVP6Ef67XeNtNSzsYVP6Ef7:4XpZwK0BdGb4T86b4T87
MD5 SHA1 SHA512 SSDEEP

color/X7V9/AUO509D/D6800.icm

SHA256 934d76faf4f4d0349b183fef758c3e2a7008fac756cd629dd5893abf6b6d9015
MD5 ad3c498353241e0230a3e7ea570d689d
SHA1 413a1066312cda3533e235ad836bc195385ae342
SHA512 1c4edf18debe5b7fa11fe95d2eb90daaa9e3a9885d3d3281a2246ca0a8bba89c448b63a007141b66e183284ab9860845c0c32511a0c5a77167c7d1818bf8be5a
SSDEEP 12288:8T8dIhhgvtnG/0Xe9Mz/aO+sg0REOJz0ErNZa2vvypE+sg0REOJz0ErNZa2vvyA:i8dIhhwDzSHsn0ERZ9XIsn0ERZ9Xv
MD5 SHA1 SHA512 SSDEEP

color/X7V9/AUODE8E/D5800.icm

SHA256 9dbd88c6431a31540c103af15247729ebf3e0a00d0985c812d2224865924d239
MD5 99eb19a31d180a018e014505d1d3c025
SHA1 0f97e327be4f40b0a028252afe4be8941b814ef2
SHA512 02719ad86069238c9e2b326c67fc52def41d5fc4a0c5defc1ab3b06f2cf34c0a53dc2ae073e4eb169ca5ed6136a7bf15fa394b24f41dc02308cb333a25cbbdee
SSDEEP 12288:j//f8a1fiZjriZNfVfAPER5KR6dZr7rmWK2pnBTaaVPp6dUPHK1HXDaaVPp6dUPE:j//EKiV2ftfAcR5fTmWIMXyVGMXyVt
MD5 SHA1 SHA512 SSDEEP

color/X7V9/AUODE8E/D6000.icm

SHA256 687009732637808bffcfd4e2a68a0e60b253beacffb98f91f13e6903f6fc33c6
MD5 b43f5b262d31f752cd4ceb4c2136a099
SHA1 cfee631b046834aa27041074b63ce107435e0645
SHA512 b69ba598d50546d9ab7272d803c8182a237516743f9b46af03e3248bb4f5efc3e9a28558c396a200dab0ea0a10d78d81a6d838fefd6d962117dc8694e701ea9e
SSDEEP 12288:1aCKBShBWk0/dqTT+OVJNrNUY639SDgVj9NwIJjKKVVj9NwIJC:ZWkQdEraYuBdjwIJpdjwIJC
MD5 SHA1 SHA512 SSDEEP

color/X7V9/AUODE8E/D6500.icm

SHA256 230b703f6cdc9c1c626a9c9e76b4818ee92060a3bcf0ecccb01ae616ebd47d3c
MD5 37ada909bb68615da4cec19041961e34
SHA1 687f2ae4355331784feeb072d309d3738d4576ef
SHA512 48e98ce2890a0295d7f1c1c8fbc24c65fadf2c665e7577ca0c692f081d9ac86737a3defa517a1e4d3669578d67fe4f59900f199a9f5f43fb4af78415f377fccb
SSDEEP 24576:oNl/gAYo3Ay2Z923X5REx5yawuC1ZPCkVR3awuC1ZPCkVRJ:MgAYflQ3pRNzjPTVhzjPTV7
MD5 SHA1 SHA512 SSDEEP

color/X7V9/AUODE8E/D6800.icm

SHA256 f097cd6a071cab0b272ffd907b85921e93954fd5a0c65bb17dc73c794acb369c
MD5 7a170833bc14f9d5a3b490d010457f9f
SHA1 2cb8c68dbbed300e74163afbaa019e7600a60f90
SHA512 19d0109f3d353c395ec8c2e88d030717a4b4ecde64442a36832a099439204403e89f885b41608bd1a83dda214a446f73c18bfb4dc36a226a9a4248fbfccc622a
SSDEEP 12288:VOXZgP/5LzYJNPikwSb8AUzWXzPPUmPl/mqfVw4tBDA7tr0w0xDD2mqfVw4tBDAC:vhQqkx4AUzYPPiAr6tFaDDHAr6tFS
MD5 SHA1 SHA512 SSDEEP

color/X7V9/LGD05E2/D5800.icm

SHA256 b4c86e23e4b6ba70a2644f73c2d1bbbe4110522fc0d3b5e7f439fe6a0202b19e
MD5 6f7e7afd3a315fa7e5c492ef5b2ef583
SHA1 3c88cce414b9ff13d79e6bef4ace5414a5716960
SHA512 79fd3eef0c705672317e13b6314964635bb2b5332e646d4c10c9c09c5a3050d321750d7492d7a16bc747305f4a3f17d0ba988e87305b8e87fc287f42d4b4aff4
SSDEEP 12288:I/0kZhQizqZvG6ftNxkRFBH4FHBldyaFjYfkH4FHBldyaFj8:I/0kDgZefRFB4FHBv7F0f+4FHBv7Fw
MD5 SHA1 SHA512 SSDEEP

color/X7V9/LGD05E2/D6000.icm

SHA256 6ce9739732eef083b5003eeca75cc69a600b41320f03951a221f3544b59d88f3
MD5 fd1305f9efcd9b7b6f6d82bdbc129a4a
SHA1 5a0c86fab244f83bd155221a1a376deafefa4f36
SHA512 7399a973934c830863012e7c9305d4bec5ded78eccf2d245c2ddcf439f4987ad95fb0635486da37630253738e581fb4f031e21623c35d3d02e4da6f4cd1be4b8
SSDEEP 24576:AV0EXAaLXbkhaYmsmL1i9thn6qZ8L1i9thn6s:C0Ew2XbkhHf36s36s
MD5 SHA1 SHA512 SSDEEP

color/X7V9/LGD05E2/D6500.icm

SHA256 a80a18548fb30c1d61fc8201ca20672e35e519ef6ee808e57d4a2dc3065e961c
MD5 13907ab2309b025e6b0088ef098e67fe
SHA1 329bd716b4d9ba5cdc841c41b6f4a7a661fcbad9
SHA512 97f367dd9e679e5ecae53b579f7335f65486cedcc77c158e722c66524f739d30d97a05acb76967cc845d7b102c069706700d5a957d0c3e0d879d69db78a940f9
SSDEEP 12288:4ruN6kc1VW3uA3TP/MBt1gl+hHSxT/K3gsiKbwmRhHSxT/K3gsiKn:euN611A3XjP0/1gl+cTCrb1cTCrn
MD5 SHA1 SHA512 SSDEEP

color/X7V9/LGD05E2/D6800.icm

SHA256 f7b86bdcccd514763ef440050a67ae3e36b9e9287c1fb83ca08136b5519a31d9
MD5 965736a57014f1eb4fd316a55f6c19aa
SHA1 5b7481dcfd15e2fe62afa76d9088f3274bff22a0
SHA512 046c5b3adb51c50636639fd445911e2548f3977a71085cc4382cb6fcf55f664717d13f13512b7ddbdc7897d907831825964a10dcd50abf633a30cba0c6789c70
SSDEEP 12288:HHMxquFU/RNIWXYQ2SGhVAirtKHVoERM9ZT2SGhVAirtKHVoERM9Zx:nY3FHWXY5Skf0oR9Z6Skf0oR9Zx
MD5 SHA1 SHA512 SSDEEP

color/X7V9/LGD0615/D5800.icm

SHA256 75ae022089218adf19738a4262e8406e2203966123e495b8d86278e4d4ee9e9a
MD5 605b7e2c88a82307e3c1aff980fa3ba4
SHA1 5fd9f909cb831492e165f725b44dfacb43a98240
SHA512 d5fe78904332beb743ddf61071b6304e8a4dc80f2c176c028a7dbecb40f47ec042c48ab7818ea104764b777ab95fd3da82ecabae0dba516b374a7a5aa0ee9aa6
SSDEEP 24576:0+Fbbv3tPioxlfDpZGLoB1UmrakawGhSZGLoB1UmrakawGhy:9NvtpZGL0UoaDKZGL0UoaDa
MD5 SHA1 SHA512 SSDEEP

color/X7V9/LGD0615/D6000.icm

SHA256 ea94e4979b95014638a94fbe4672275ff260545d96c38fc7a063c08fa19a9e03
MD5 d1f79dc3bdfd89d85143f02b834fddf6
SHA1 0cba6afb9d1bb6fad201847a30ca7351c017c8d4
SHA512 0e21cc88485ecfc26028cff0123799e5bcad6e4a36651d659997a5fab1d2c6404808850f8ef80a92643f3752cddd5314d56dc2f5ce2e5327898d5d86101f754f
SSDEEP 12288:rYthBg3sfdu3Ec8tWhWDb4wE7JywtN75DIcVI9IN9f3iE7JywtN75DIcVI9IN9fz:yHop8cSMwIgkN9EcTyIgkN9EcTz
MD5 SHA1 SHA512 SSDEEP

color/X7V9/LGD0615/D6500.icm

SHA256 d619e7d5222544313dcb58e270a43b596680d34ba7b2cc1e2cd841da64d1f642
MD5 96ed630126d939d4286b046c40b30fdf
SHA1 1c0168fa53616235bf6380bf142b394678bf02f0
SHA512 6b55cf84afd6fd53a79d6ed74509ac418f74bffa1a91f89e7a0067cbee0529c5c1414a050b094ed9907e7ce143de6a9cbbdb86a96adcd1811bec6764137ed481
SSDEEP 24576:hRZEQOC1GpYSo8dIGm+f3/NX//IGm+f3/Nz:1kC1GySo8dPf/lPf/J
MD5 SHA1 SHA512 SSDEEP

color/X7V9/LGD0615/D6800.icm

SHA256 3e880e5570075fbd4c8acdb2c50ed164eed8f8e59ea46209481e2da3cad3488c
MD5 600f437753cc340bc90db5c7642376db
SHA1 3e4638adafda652cf6e02698f9582920ae5f8ded
SHA512 be19e27b474c88ead8f80309cd954f37113ab6ffb346a2f1e374e3ad4ca6975bf9fcd135b740e27a8a46222ca2a406c1b9a8bf8c1feca8f4eb61433ccb8531fd
SSDEEP 12288:HGI6Q8fqvSxnrE/0h+7tpJyREKuKpQFSI3LvWVUxERmnqs0QFSI3LvWVUxERmnqO:H572rg0SCE4+FSI6VUxwsZFSI6VUxwO
MD5 SHA1 SHA512 SSDEEP

color/X7V9/LGD065B/D5800.icm

SHA256 caf15e03f17ea3e26a78f1daee0881e593c6a306397b4813f04f0925ef040cb7
MD5 bf04e0657bbc10ebd4c0cf0bb8774cca
SHA1 7560ab4d112e4cb2f42d7a69b69ec70914d5f909
SHA512 547b7647cd60841e5044697647782fbcff5995ff3e5b1c5b518877265f576aea675cb270366ac01d7ad8d4f205de7144f80f7e672ed11e84182bf55c6b7feb42
SSDEEP 24576:pClawpoX+Kk76ezUbSCivdF+nBtIE1HE1TE1LsKOHbzQruisKOHbzQruV:MZoxkBzIivHmqEpEZEHAzQr5AzQrO
MD5 SHA1 SHA512 SSDEEP

color/X7V9/LGD065B/D6000.icm

SHA256 5f0fd56d8b4d926a9e9e79c04fcd393bc31c45285bb6f639858f41a30832272c
MD5 ef97299ec585a87b293eb13950fc0d7a
SHA1 691edbf5787343c9e08adc0f1c413dd37cf9c520
SHA512 a83b235208b6ff2d95cb8a1b764f1a571791ffa6bcc508c3f52effa466bd4f6a3fc4a24dd38f25e6dda0f4fe4db08abeb82fea974f22fcf3bb2dbb6bfea70f3e
SSDEEP 24576:06Gh7DqRevZoj1tdl1GYj1iodl1GYj1iC:cZItdl1HjIodl1HjIC
MD5 SHA1 SHA512 SSDEEP

color/X7V9/LGD065B/D6500.icm

SHA256 36df9f999a68a24cdc5f66558ef862dd5c72a8998d80d1cfee44c9a4f7015fbf
MD5 a632762a9e3fea5f42b91a6811061d64
SHA1 7b9752ffc1c856870702284c756f1b058d2aca6a
SHA512 8112406b5b462c5cad495ba98e9f6dcef16c6437df20fa96ea15506dd33792f0e4276cc02e569e1c879c984fc66d6a72b082d3b25c509287ac5fb4bfb8b01664
SSDEEP 24576:tJiF28VtcAyKKFVsRBs3zTVtcAyKKFVsK:SU87cAP7RaH7cAP7K
MD5 SHA1 SHA512 SSDEEP

color/X7V9/LGD065B/D6800.icm

SHA256 16a726b04f0568ff967ef295de774b114950ffdc5edc8c105371f7c32322d6b9
MD5 253b70ee3edbc10d4582d02e0386904f
SHA1 430d809da6a8a8ab913f63cb8451306d4c15ef2f
SHA512 3611adbbad028c2f2a20177b30e338c9bf287d2956c78369f6db4b795cc1d528ebeb1fce0ea22a2acd8e67fd14d6214d8056fc83ba0c89b04f0c894c1996ae2e
SSDEEP 12288:kfDUnVckkRknPDB5ftfm7uL3HZC2iRnduo4oF8ejvEQG3k0+FCJNeH/ApVTyOOkv:2AVZkRmB5f9mp2Ef4Ql/EcOOe/Ey
MD5 SHA1 SHA512 SSDEEP

color/X7V9/LGD066C/D5800.icm

SHA256 52a54c3f21fa7e0b812c6dd2292fe9cca4b5d576fbbf2315fba32400f3055949
MD5 1ea231a7f6684bb9437e41ad9d2e3d9a
SHA1 a8dae76693bc743e97362f9de55c5f2dde4425e5
SHA512 81b8753f6395abd3c89be87db9da3ba69c5f1770c3b32daa4245a9d6bbcdea1aa9c67ea31e039d3c3a8cad421648d821b4c5285cb7dbe1857a44d985c80d48fa
SSDEEP 24576:x/ESqtknJnZqJGaJZsiNDn/JGaJZsiNDnS:xReKZIl5la
MD5 SHA1 SHA512 SSDEEP

color/X7V9/LGD066C/D6000.icm

SHA256 e64346aadcb31b7098b902b78306a91abaf18d2e8e3e0176930ee2563a90bd25
MD5 8b36447a5e6f40498090517ca92d3296
SHA1 63680d36e3e22f3553fb62ab09d98d74bf98e4e5
SHA512 1f53b5f563110b69894119e2f6131ececd6c331d8d047157ab8687f3a8dca1c98a2eff6ab0468bbded1b2df9f8922ccf04e14b6530c79713c1ea769d048fe5d5
SSDEEP 24576:O0yqAlcdGrff5NSfmAzMxQ+rD5iWQ+rD5id:hM5YHaiPaid
MD5 SHA1 SHA512 SSDEEP

color/X7V9/LGD066C/D6500.icm

SHA256 d5e476b07ef6003097dacf356c0100bf362fc09c482c2bc2f92d02b2f3145ac4
MD5 c6a64dace0d533cd9683fa88ab8db4ee
SHA1 1857f1eb2b700a89edddbf62d53aea6657bcaa44
SHA512 8e5fe3aa2d8fc65dedd967723284ee6469499a0db1a92e1cc1282e4e21ca1a1aba44766093e3893a5fedfdbba89499ccb584e8b25d3ca1793d764f17bff365fc
SSDEEP 24576:nN8IGosWS7jrRClz3EFeUmwMMbz3EFeUmX:nNSonSj4zZwMMbzZX
MD5 SHA1 SHA512 SSDEEP

color/X7V9/LGD066C/D6800.icm

SHA256 73ef43dacea92c0be23956d59004e13c17a1e2097f64b762241c94a556e7aa99
MD5 9d9eceef8ccf5537022adec7654f3b77
SHA1 18d369cc1b02671e57de4e7217fe16b25402e49c
SHA512 d4dc4fc8958551a2a748130e3f021be418554dee437c366ae5a90c1afbb81fd4f2e60f0f5fad381f51c0c5633d3f1d7e5b7ea6150e32f72ed7a9481d11cbf6b1
SSDEEP 24576:ozos4U1fBZ8gR/mZ20+8k2yfKMxeqoQGqOENRxKLqn4n4n/xKLn:o3fhmo0an9eRQNJAApw
MD5 SHA1 SHA512 SSDEEP

color/X7V9/SHP14DC/D5800.icm

SHA256 82194aef964aa82749ca413b0f3e1eb801ff199b28813cb50431b0291bedd927
MD5 4537195d82934e504ebf40294029bc94
SHA1 1a9b6e86a6d8c74f92ce939b00219374cce720d6
SHA512 4b2a87964a283247d4b9265966621425ecb10fccaca62f4cd9fc8dd4243594b1d0084ed68ecaedb3397c4d0dbedc99285a1da8e02008ad68ca29bbd1454c995d
SSDEEP 24576:t/mTY0DnYLkNkL78yM6MkcIeMxC8E3GDIeMxC8E3GM:tWzYLVL78FbIBE2DIBE2M
MD5 SHA1 SHA512 SSDEEP

color/X7V9/SHP14DC/D6000.icm

SHA256 77d65781c4e1e96b15d0ace5d6e8d5b3021f342112937ae91ca8e998a576ede2
MD5 26c58847c8b6574ff9f3b34e4a7f85fd
SHA1 e897053c3d89d3ddf9adc82a057b3f73ee7ededd
SHA512 fc0c9e2d180a840693605bf78f687932345d42b1476fa5cac3990e574b91afe0431058487d31c5e13a0f24f8af9249370755259cce243e55784e4553b1030e0f
SSDEEP 24576:PxNbDawUrMLmSb3OmjoA0HhgUPcHhgUPAH:7bYAOmjxRUPJUP4
MD5 SHA1 SHA512 SSDEEP

color/X7V9/SHP14DC/D6500.icm

SHA256 0d9ee86144eea6ebaae9363efe2dec21b966514de815ec42fc2fbc82839cb03a
MD5 0a9c93f45c4dfb6c7b0a8afdcd24ea74
SHA1 19a48f4b7c0d00f53269ad089931d568f3fd980e
SHA512 c62ff8560bfff51bdc5442101a9c180e5f2cb8f20ff557bde4e3ab3f9506d67429d312c470dfc894531abe0442a48ae630b4b658e2a14ae8b5bafbafd1a3cdfe
SSDEEP 24576:OPGZkvHwXkRVJrkSnGU71ObaubHdIlGU71ObaubHdIE:OPGCvQX63V1waubHdY1waubHdR
MD5 SHA1 SHA512 SSDEEP

color/X7V9/SHP14DC/D6800.icm

SHA256 6a14bc3d9bd958ed20612f3501e93ff147e9c5a648d6102244234e02d6ed6fe5
MD5 fe4fc0ccf8f32ac23789993ebbbc88bd
SHA1 3a54c375d69f0e2e1b42c564653cf31cd614a26e
SHA512 682ec16df8a6dee83aec7da0a8c89847c83e37e7c03968d02d050385a4e461ae6cef49bfd5f13d3ba800a94a54e93276b2d8830972421911330c5c6a9ffe6ad1
SSDEEP 12288:RXTvQFtK8AakrlmZ5+2A0zQer1ODQPFgiZo6kH56n3vv1/ECBmk4DH56n3vv1/EI:RDvQF9ANe5zr1ODQdXkHi1OLHi1OO
MD5 SHA1 SHA512 SSDEEP

color/X9S/AUO109B/D5800.icm

SHA256 7988a4542a2ce02a7440fbb8abc57b397d0d8324ae94ff9b350bce51537389cc
MD5 319072e9f991a5ce79f173b400a4f18a
SHA1 4fd9ecb20c297bec481c553bc3a43a3fde4ea11f
SHA512 833d55ba70ab188f21c1f35e7aa5df97a055f74b7a1ec8358a8c212f697354928ace1d220471ff67c6cfe8dc174093c1d41b257679c1eb0b77ca2c4a7f6d2c6a
SSDEEP 12288:QBam6gtYLSpCCiyFAPfDGTVU9A6jH2oB3flANDvYrNTVU9A6jH2oB3flA/:QpX5aP6RiRB3flUDvYrNRiRB3fls
MD5 SHA1 SHA512 SSDEEP

color/X9S/AUO109B/D6000.icm

SHA256 996870678a436ae26a376ef77047dccd1b13a562a747511871b4a82fc68f3b83
MD5 ffbbe2bc3bcc5db90b83394066eff73d
SHA1 c58b4140d31410c9c563dfa239f42ca2b24663c7
SHA512 15038ea6c82fe0dbcbf9f9b7a9af0c0ed1055dcb7db031007541de44decbeb1e4ef6fa42a47287aa3dcc81ab1e1fc8c8fab0c7c7794a7fa0cb42c4191c3bc7df
SSDEEP 12288:f4qlURmRMriiikEbN6k/QoE+qze61QmHhuqR8xMh2Do2+qze61QmHhuqR8xM0:frlU4N6k4Ne8JBd8xscoGe8JBd8xd
MD5 SHA1 SHA512 SSDEEP

color/X9S/AUO109B/D6500.icm

SHA256 aa80441c966170dba0f86ce8cb26a4424011d2022693b9276b862dbf1bc9eb9d
MD5 89f1212bfdf43fb080048d54a129543d
SHA1 5c51930c258d180ed5d1d5247c12ca39348644c8
SHA512 015f3bb8e3d080ae5d5281a6b157816375bb9d45eb0c66e32775246a3e32275bcb503e8c329ac1dc10a581d1ebc0e8efe1828384a8b443b777415832cad5dc41
SSDEEP 12288:jeQJZeB00DleNANL3YiAWCr+iTwv44Zle1quFYiTwv44Zle1qz:jeQGDlwK3YPWAJTwvpne19BTwvpne1i
MD5 SHA1 SHA512 SSDEEP

color/X9S/AUO109B/D6800.icm

SHA256 c2357e7b383f85d5e7d4ba1960120fcfc844bb5f07cea6d0148ce08e718df9b5
MD5 22db4fe1ab051161f8d25ec453fb6be4
SHA1 794d2d7a15b834f3cfed918f84b3c62deb7dcc55
SHA512 87a4769e440f0a38a9cf686808d9e30b86cfde6a9206a5f3e2240a607191982172bea6e4e1c5daef48551ad2808b864310a12f56edc6a3ae3e4fa7112de2de29
SSDEEP 12288:OP25F7gVGCVULvOYU8CGPs63y4C7bJSns0qlOclHnlHGPs63y4C7bJSns0qlOclk:OPm7gVlVOV6G063LIOUtG063LIOV
MD5 SHA1 SHA512 SSDEEP

color/X9S/AUO1396/D5800.icm

SHA256 784a7282c66da828f46fe010a943ecc19d7609bb465ebc9b529e4e0ab5253d34
MD5 bcf1d13cb85d5b942615449487c05c68
SHA1 8b07b080c3d1145d2d104fedb1d97b6aa8cf0987
SHA512 e0b9a042a2d8f5c51cae9e0fa0bdbadbd0f18cef61e81744262012bce5dc22d63d576b7c7ca7d87c319b9a8713785850329ad072107fd6735b99f7c3d0125105
SSDEEP 12288:GArWC5XZmpHNFLXwSFsaMVS/naI1GWDZSWtlaMVS/naI1GWDZm:xXJZeXASFsa3n6WDZxtla3n6WDZm
MD5 SHA1 SHA512 SSDEEP

color/X9S/AUO1396/D6000.icm

SHA256 b4f2e1879486edc871ec0d7abd353560fa399120e46c12f0f82ec76d4d675363
MD5 e3a6f04168e984938947d3d34672d999
SHA1 c7fa05fbfac8dbf936405f853d5ba44350c01811
SHA512 ee0339b5a175cfead993d4d127357bcf559e69b7a94c24a5f92b2bf4bd41b713dd3d77293953253b32d523c2be1de4fb6dd6b193ff7a8c1d41982a36c491e073
SSDEEP 24576:NX0AtG5LUOi8Xr7kIKGEJrHBvEnwey88CyikIKGEJrHBvEnwey88CyR:NX0ThUOxb7kIK9qbGwkIK9qbGr
MD5 SHA1 SHA512 SSDEEP

color/X9S/AUO1396/D6500.icm

SHA256 1564f7e040d577006c18dfc667d6da94ba556e55b03f8a15b92c96cc9b875c9b
MD5 a4023c788d6e5c216a8b704ef3fa59ca
SHA1 2f2931d51a3d208dea31d88c651e02ae18465872
SHA512 591869f58e5a4410a28879469bf3c374864d61e138e859cd3d01cfe6014418cc8f703b5371c811d35dc4f482b8bea2fe0070e43acb722946421e52140585025e
SSDEEP 24576:4kq+fhH+00DheLmS0oMEAOOrC0473pfg3BeLmS0oMEAOOrC0473pfg3B:vqghH+00D4dgEp7NndgEp7Ni
MD5 SHA1 SHA512 SSDEEP

color/X9S/AUO1396/D6800.icm

SHA256 e064d091d02bdfa93b7b59984983ad06e0afb70696b1b54ffab3352e44b9539c
MD5 28b996fc30e864ccfb07033a8f005da2
SHA1 a1e8e8ce92dfb99dfc51e620f2a56d77fab10edc
SHA512 6878f9c7064fdb8d213473a5e807fd38d68fb5f05f13264dfc57acc07c0d75ea3de6da14a87a4579947e96a87d210fd840d3dbdcc9a6e9884c2a14e0b9c42325
SSDEEP 24576:19HsIl5QVqWyvWUfQNWBDn1zicmiry+/yvWUfQNWBDn1zicmirN:19H9ldefNsnhmiG+qefNsnhmi5
MD5 SHA1 SHA512 SSDEEP

color/X9S/AUO139B/D5800.icm

SHA256 e087f4e0c325f3c050fb0e59370f0f857568e23315f582b1ced4a36a70c73686
MD5 11b253113bb8aed9d52723b09caf05c7
SHA1 1b13a51051829ba50f2ad2f8da3091044312cc4e
SHA512 493022ec9c2748d79a9ae635396659d13399d37c09550c89760f51b4c85382bb18918f4f51451c9dd8d54424fdbaf56cc63e59c28f10ffa760630ee605a981e0
SSDEEP 24576:H3rYnhwp2lPngxQ5f5mEwCIzRkOl7y/MD3x:7wm29g2tYZyBE3x
MD5 SHA1 SHA512 SSDEEP

color/X9S/AUO139B/D6000.icm

SHA256 0ee308795f80e8f7c856a91ebbd30c90b73036f54898819f9a450a40ebd3a933
MD5 0390c088087a39666204d13c7614bd55
SHA1 9735a13a3f7b1f1cc8e70fc517d2ca4bdfd96b1c
SHA512 c9145a9c7f54a2054f2f16f42f60e17759ce7e8d1305caaf3711273c48928dbb2de54254ba64eebf76eeb896f8a8166bf8e6f2ae0cb6c9faf9ea92b1dfa7b443
SSDEEP 24576:Q8hQk7UBAgd40WB781CJduhw2R9vb9LDSf:ECUBAR0ePOnRphDm
MD5 SHA1 SHA512 SSDEEP

color/X9S/AUO139B/D6500.icm

SHA256 f6ef8846c7d9600b28406b480537ae9332d21e81bb2846dba87343288ef27e18
MD5 39b3a865b8f8f32d645ee43a132b919c
SHA1 0c3cff1cd01677057bb6ba13503ca2b4b2248bae
SHA512 f89f0e76e930e40eb09f4f4c7d7f37bd806299724e2e6a71429424505e3c5d8ab174e873493201537eb153e55bd40e35c763e796e32dcbc4caa72aae15a7aff6
SSDEEP 12288:q9r+aNX1ZnYLZPJcOWypbTBeecUwXZK1XOypuywMv+sGIFAVFhAEdb:qzLYdyO5pbTBewhH8MvDzAhHb
MD5 SHA1 SHA512 SSDEEP

color/X9S/AUO139B/D6800.icm

SHA256 bfc7a2765faa8587d6a354cecb2c1d8ad63534f4cbfcad26dd820c13aee6a714
MD5 5d21ed0719bd3e4fe1826b399de5bf1a
SHA1 46d03c728a0b82f43489b9ca1e547cf7071c8ea7
SHA512 d017740b95777c90a0a774744db691f7671a5ba60fff2a9cd375bcf9978271cd3e4cf98b54b50797d407705ed4fe911f27624bfd0346c836bb493856cf0eba3d
SSDEEP 12288:qKsN2Ws9BpW+4tUKPYTGzkRxv4d2egBQ3T0d8Q9+3g3GaTt+2dVVYUvPtMX+Skua:c2W0BprKPPgGzQvpeYQ3hQcj9PkZ
MD5 SHA1 SHA512 SSDEEP

color/X9S/AUO309D/D5800.icm

SHA256 74974ce5b7fb0504f048ae986a7afa0f078fb10d71eee73615c528f0e7a17ccf
MD5 5affc3f8f8ecd17758147ad8625c9f06
SHA1 d0d0160c3e6a3e85f71194365464597ac506cc65
SHA512 8cfe903a1b976fdc6eac2f83a4f29afc5c3c91be40a06625264b39976321846807a20f5ea82b1b40878d5fdebefb35e7013619c1e9ab1136a1e23025bcd4f4e2
SSDEEP 12288:1hDij4xle3GH7R9c/d/42dFWB9ye61uYT/HmIck6he80hV2dFWB9ye61uYT/HmIl:SjSMW+wE0rbEuILB80hVE0rbEuILB80n
MD5 SHA1 SHA512 SSDEEP

color/X9S/AUO309D/D6000.icm

SHA256 3902bb5ed0a29b21890b9eeaa310a93582d3624eb92ac87f0be57ecf15ed3cf9
MD5 b60f4d9030551186cf11f9626f9e99b3
SHA1 4d8386be5dd1ae4fd7707dd722aa1b5ef378e855
SHA512 a9a24347b4881f546695910749036311f7ad9782ec36a5c8e405ed991f56670225c46b608e336fb57b2c4b9114a4c87c73ee00cffb199d9ea72a948a2bcd61a1
SSDEEP 12288:rgz+VcGHOB2LKyJlgRSWA3+ulgVdRfDAaHSWA3+ulgVdRfD+:MCVcim6tJKA3BlgVdR7A3BlgVdRS
MD5 SHA1 SHA512 SSDEEP

color/X9S/AUO309D/D6500.icm

SHA256 304dac642f3d7b28b6e28c7ccd0cd01cfef534b40f572835c085bb28e0fab753
MD5 0e18f22298fc0bfe08e7c0d6e4f76487
SHA1 38a1817effce3ff5fa7863d95ca1247f2b78325a
SHA512 5f9bbd3dc88aa60ab035e3b6dcd996bfdf070f88a482f22b99bb2e7089b90f1dcf70413b4c923c3218280483703ca1284840684f1feacf2446fd6cfd060508d3
SSDEEP 12288:vKlOp0FAltwydc4M7LMVS6d58bNJXS1HVgCoABHxaVS6d58bNJXS1HVgCoABHz:ClOpFltNdcH3b6dWJC1HoABX6dWJC1H3
MD5 SHA1 SHA512 SSDEEP

color/X9S/AUO309D/D6800.icm

SHA256 80356c15002689e433f948180aac00d3e8f711e29e43457906117ac2105b2b42
MD5 fcc03a783a5eeacd83f20357928ca7e7
SHA1 edc2c78a479a210036a3230dbe6330e1d3111c38
SHA512 1a5136cead067c235f2e9b4461f7330883febe160157894f04b4bd96fcfc100573afe9e8ddd1522daa63773d1f1874ce7181a78cb841cef3205f2619bb17f73f
SSDEEP 12288:BckYbL0gSCtjmWLMIsBv8soPsHTO8vEbYppt2V17DoPsHTO8vEbYppt2Va:BXYL/BO0GzL8Uppa1/zL8Uppaa
MD5 SHA1 SHA512 SSDEEP

devcon.exe

IMPHASH e51c98ef74588417cce26448a7352a75
SHA256 e830b1266010bb56807c5330e4b720ed82a7a78f557a69eaa4594439b7912fdd
MD5 f40af690c8c4ef25e7774889c574743d
SHA1 a559f9be11692178897e29bb5b077a7fa21dc74b
SHA512 5ef5e1c0528c4558c932857088c60b3fe512d856edfb39d7a935065c8b4d0c57728fbf804adc3c1e4438ee6646f428a06f578d8cebf422341fb9b1397c90a0d8
SSDEEP 768:HD3HTM6Y0pY/qiVZP5YuAU0xH9TLKmXj84XhF88YSQF53tnoy82BSOe9oKSJ2SLl:zPpY/qiVZKxn84XhFde73tnoyF4O7W
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

6

Entry point

28492

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

devcon.pdb

advapi32

OpenProcessToken RegQueryValueExW LookupPrivilegeValueW AdjustTokenPrivileges InitiateSystemShutdownExW RegCloseKey CloseServiceHandle OpenSCManagerW OpenServiceW RegDeleteValueW RegSetValueExW

kernel32

GetCurrentProcess FormatMessageW lstrlenW GetLastError CloseHandle LocalFree GetDateFormatW FreeLibrary LoadLibraryW FileTimeToSystemTime GetProcAddress GetFullPathNameW FindFirstFileW GetFileAttributesW FindClose FindNextFileW GetWindowsDirectoryW Sleep UnhandledExceptionFilter GetTickCount GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetModuleHandleW SetUnhandledExceptionFilter TerminateProcess

msvcrt

wcschr _wcsicmp towlower _wcsnicmp fputs __iob_func wcsrchr fputws ?terminate@@YAXXZ memset _commode _fmode __C_specific_handler _initterm __setusermatherr _cexit _exit exit __set_app_type __wgetmainargs _amsg_exit _XcptFilter wprintf ??2@YAPEAX_K@Z towupper ??3@YAXPEAX@Z iswalpha

ntdll

RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext

ole32

CLSIDFromString

setupapi

SetupScanFileQueueW SetupDiGetClassDevsExW SetupDiGetDeviceRegistryPropertyW SetupDiSetClassInstallParamsW SetupDiClassNameFromGuidExW CM_Reenumerate_DevNode_Ex SetupCopyOEMInfW SetupDiSetDeviceRegistryPropertyW SetupDiGetINFClassW CM_Disconnect_Machine SetupDiBuildClassInfoListExW SetupDiCreateDeviceInfoW SetupDiCreateDeviceInfoList CM_Connect_MachineW CM_Locate_DevNode_ExW CM_Get_DevNode_Status_Ex SetupDiBuildDriverInfoList SetupDiGetDeviceInstallParamsW SetupDiOpenDevRegKey SetupDiSetSelectedDriverW SetupGetStringFieldW CM_Get_Res_Des_Data_Size_Ex SetupDiEnumDriverInfoW CM_Free_Log_Conf_Handle CM_Get_Device_ID_ExW CM_Get_Next_Res_Des_Ex SetupCloseFileQueue SetupDiGetDriverInstallParamsW CM_Get_Res_Des_Data_Ex SetupDiOpenClassRegKeyExW SetupCloseInfFile SetupOpenFileQueue SetupDiCallClassInstaller SetupDiDestroyDriverInfoList SetupOpenInfFileW CM_Free_Res_Des_Handle CM_Get_First_Log_Conf_Ex SetupDiSetDeviceInstallParamsW SetupFindFirstLineW SetupDiGetDriverInfoDetailW SetupDiGetClassDescriptionExW SetupDiClassGuidsFromNameExW SetupDiOpenDeviceInfoW SetupDiGetDeviceInfoListDetailW SetupDiCreateDeviceInfoListExW SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList

user32

CharNextW CharPrevW LoadStringW

drup_info.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4f3dc137e03d765c24e24e5db1e6af42f2bbd9f39a0e2dab03194b663f40adb8
MD5 c615616c72f7ce7806e47f9e4af2148c
SHA1 2ff7f113024bc919ccbba7c742c0cfcf88e85289
SHA512 a46f3169eb1c7001029b160ec0b22b7418497c29499c98c8d3837b2f153890d3ed07bea8737d8a4e187abd4fe4cbf99fe236b4bf0906812cf777d3463aa106ce
SSDEEP 768:g+4ZJE4AjcTBP8ZBJBV1mdflNbZ1fUmtfZjNDTzd1mc1fHqFZi1Bi/ajrs:2JE4PzFjrs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

78386

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\drup_info\drup_info\obj\Release\drup_info.pdb

dtyWork.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 3f0982f0d8cfe5e1534cfc679e024994a043e1fb15d0187e8edeede3a775298a
MD5 2b5401f1a90a2d95d44079e13eced59c
SHA1 650e5b1cced1bbf332c1d04182f4ccb678d50b8d
SHA512 492c8b8fb8a8f499f2f70671cb315ad6bf5839defe4b532eb249fa9d35001cdc9841dfe2d92bd96c08d4a4985fd6b5d06c73114638b7189f2be1bd00a8a010e4
SSDEEP 192:G6guEdmbhmHk6GQrnEOtD8uVhhrG24u2e87ulwbfxlRbETJIYanfapNa:GPwok6GQrxxhx4u2JSlwbfxlRITJtqfE
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17818

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Steven\Desktop\ControlCenter\dtyWork\dtyWork\obj\Release\dtyWork.pdb

g_icon.ico

SHA256 164e8693352bb55d37d5a6502f0b1b940d1f00b61fc0f7e6c92424fbb30dc035
MD5 88661670a328230f23a67252d5a3ec42
SHA1 4b98e498568e667587c3509f3046df8e61c5e32a
SHA512 894d174be13921a3eca14dbb2c935e5d8f00404ff0fb98bac0671249a191bf784a9acce1667c5716e134dfef461f0f1f0a23cfa16629ac59582690736a645ac3
SSDEEP 768:r4Vn6QoMlnS9GklbP+SLaNIEjqvks89Od7bjAv0lcu9iENCSt:aw93l3LbCV9OBPAGkzk
MD5 SHA1 SHA512 SSDEEP

glicense.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b6330df091fbb62b9854fa40296cf2c33dca3c7c88d0c48945dac5826cee85ab
MD5 bd5eae5b7416cfb70fb99227445f4766
SHA1 f1e500a5e6d2e2c054140de55507edc9a860184f
SHA512 e40ad08b31cda0dba217b57d2c43cc209e0061a5e6c930ee3bac6181f3409cb790c4a63a54a08ae3df79e7998d407ca47022c0a0c0c1b83382e16c14decb9ac2
SSDEEP 3072:ebNJvhy7AuzTLyWbVz4xEdcw4ML5tB0iY2E8H7O1j7gUO2Rc989aP69iqYbm:wNJc/p54x24MDB0y2Rp3Yq3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

8e:eb:0f:55:b0:f8:12:11:06:40:71:80:6d:a1:1e:ab:00:17:71:cf

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=22044755,CN=GIGA-BYTE TECHNOLOGY CO.\, LTD.,O=GIGA-BYTE TECHNOLOGY CO.\, LTD.,STREET=5F\, NO. 6\, BAOQIANG RD.\, XINDIAN DIST.,L=NEW TAIPEI,ST=NEW TAIPEI,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 21, 2020

SERIALNUMBER=22044755,CN=GIGA-BYTE TECHNOLOGY CO.\, LTD.,O=GIGA-BYTE TECHNOLOGY CO.\, LTD.,STREET=5F\, NO. 6\, BAOQIANG RD.\, XINDIAN DIST.,L=NEW TAIPEI,ST=NEW TAIPEI,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Serial Number

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Jun 15, 2016 - Jun 15, 2024

Subject

SERIALNUMBER=22044755,CN=GIGA-BYTE TECHNOLOGY CO.\, LTD.,O=GIGA-BYTE TECHNOLOGY CO.\, LTD.,STREET=5F\, NO. 6\, BAOQIANG RD.\, XINDIAN DIST.,L=NEW TAIPEI,ST=NEW TAIPEI,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

29:ee:c0:10:88:50:32:0f:9d:18:66:d8

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 11, 2019 - Nov 11, 2022

Subject

CN=GlobalSign TSA for Advanced - G3 - 003-02,O=GMO GlobalSign K.K.,C=JP

Serial Number

50:67:fa:46:ce:6c:fe:95:15:a6:9e:b2

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 14, 2018 - Mar 18, 2029

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:31:89:c6:50:04

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 2, 2011 - Mar 29, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

4

Entry point

238786

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Steven\Desktop\ControlCenter\SoftwareCenter\glicense\obj\Release\glicense.pdb

profileMatrix1.txt

SHA256 cfe94754220fb524f05b3d1dab95431a9e7d82f8287676fdfeff129bc7e1a017
MD5 f84fe3b887330f7ac29e0e828ca9a12a
SHA1 f8aa764f7b2c0d9db030a3f17249269548c67815
SHA512 09e8e32555afda2965c03a2c87811dbc3476d9fa5bf814574ef7c7d86ff3b12e86ab4becac3cf96f0f9095f71193d17b3485016fcb9df087547f67074e796457
MD5 SHA1 SHA512

sc_record.xml

SHA256 bca3424f45f61d5945637a13279f475605ad06a79d7dd7058b741ac8a54bef34
MD5 4410ec3ffaff3eb75be7fb8005ca8b6a
SHA1 2a487b45a2b07118a7337116aa307b573e3a81f2
SHA512 82d6893e6e7d53931d1b2e9221ee964eefabbce8bcf1a0718db128050c0ad6e7faefb775228b1e9c54723a602753db18e368fc054b11e9f416f23bdfe876f487
MD5 SHA1 SHA512

sendWinKey.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b95a56896dd22195c0925616e9e26c6511fa9fa58320e23917e171840d8b1036
MD5 0cce140a3fdca89a3bc22ba537e7322e
SHA1 e8436ee12980bc0f5498726c46a7dbcb6a889333
SHA512 ac7306122679038e902c9cc61949760d19abfc3bacb90c27735923bf827e2103725638f031792fa75b625a9d50e253bbe80c6b4f1f9fb17f785538020ba8d2a4
SSDEEP 3072:xGL2TU0kROgOmN8qx+geFhjHTvWNecAJPJxPeQM4GGcafAXXkrWEEEEEED0gGE6Z:M2bG7yrGbG7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

130062

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Code\AorusFusion_V3.3.5\AorusKeyboard\sendWinKey\obj\x86\Release\sendWinKey.pdb

shotcut.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 debae77c46aa479f6481dfe031606e65479bb8d28a827dda967ccf9cffc8d686
MD5 b7c95a0e4ce366696f27bac5e2862fc9
SHA1 40375eb4e19bb315ea7a88f3460715dc7c41e052
SHA512 335e58b7923664516c25e9d1c3c863579b8c88143ed068cb3ed19c28d3096203a17f34f406a441449a505b853b38edae96740c6686090a5b5c22267a2729992b
SSDEEP 768:f6OHIH0oNVaBUOoem5rN/NrVnFrNtZNrl31Ltfe4oSgWbKRlNgxEdLJ+/4fXwf/M:f6OoH0waBUwO/oSgLlax+Y48AVT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

52006

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\shotcut\obj\Release\shotcut.pdb

switchProfile.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 ce8c5e48b480f041ee2b545546b3c6df11512c1f73cada8b5d9b6b950f841610
MD5 ebdc38b6df589682dd5cc60dbbd4f724
SHA1 6e68747d0fceb8b5002c9d49a228490d776cfc0b
SHA512 9d4910ce02029384e6c6ed37e3212535e6dc10447b4222ba755fecae444b13e8e52b963db1e16ed4000f83ee27218c965660421567186b4598a1f38669275df5
SSDEEP 3072:L+9GL2TU0kROgOmN8qx+geFhjHTvWNecAJPJxPeQM4GGcafAXXkrWEEEEEED0gGu:N2bG7I2bG7iypB/8aDOrmDqpB/8aD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

441342

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Code\controlcenter-20190827\FusionKeyboard\SwitchProfile\macrokey2016\obj\x86\Release\switchProfile.pdb

testUsercontrolDll.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b020209ce6afd338ee003f6a2d8b3e0a0cad93e3d8290b9b199356d04eb00a1b
MD5 1384d3c7693ae31b98f8d867bb010407
SHA1 55d6273687dee96e90454cc086c0af622f718d34
SHA512 4fea4af455a64a641bd926016f4cfded084aa6a06e90685079c71341b9f6dae07fc7aa44417467dfa4e86a5787bc80f0e2aaf2f4f60731808b671c7f15e9ae9c
SSDEEP 24576:yKCZM22EIuUSOwPFQay9Fi/HAFPfTHNwQE/kvimGf+CnFK/D1:yKCZVIuHR9TOFivQHLNm/kvimGf+8c/p
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1379622

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\christopher.wang\Documents\Visual Studio 2015\Projects\testUsercontrolDll\testUsercontrolDll\obj\Release\testUsercontrolDll.pdb

tpfw.exe

IMPHASH b92006e98bcc529346f1e09762d43673
SHA256 6f194a49518e34174ad8c5579ec1b1683d1fd0f6bd2baebaaf8ba4edc69caf7f
MD5 2fb152ff7f38ccfb1c5307321bdc46bb
SHA1 3a0a811287cd2391ec5be0092fe001d6ecc17a3f
SHA512 306d8f371769886df0385ed884592f369039d204d6827483e066a59a8f7878850bdbc835ca46a247377d3b63b0d3f63c883b148afa5b8b29413514eb2a3e3816
SSDEEP 6144:+fjmpzRKoq+zC7htRChD9i5bijSUSeU1gRGqczv+8ed0xgH6K6CzK0iu1KY9:+KpzR2ixhDA2iz28ed05J0nl9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

266700

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\work\1.project\19. windows update\upgradetool_v2.0_giga\upgradetool_giga專用\release\UpgradeTool.pdb

hid

HidD_GetInputReport HidD_FlushQueue HidD_GetAttributes HidD_GetHidGuid

kernel32

SetFilePointer FlushFileBuffers LockFile UnlockFile SetEndOfFile GetThreadLocale DuplicateHandle GetCurrentProcess GetVolumeInformationA GetFullPathNameA InterlockedIncrement TlsGetValue GlobalReAlloc GlobalHandle TlsAlloc TlsSetValue LocalReAlloc TlsFree GlobalFlags GetCPInfo GetOEMCP SetErrorMode HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc VirtualAlloc HeapReAlloc GetProcessHeap GetStartupInfoA RtlUnwind RaiseException ExitProcess HeapSize HeapDestroy HeapCreate VirtualFree SetHandleCount GetStdHandle GetFileType GetACP GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetTimeZoneInformation GetStringTypeA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle GetLocaleInfoW SetEnvironmentVariableA CreateEventA ResetEvent WriteFile GetLastError WaitForSingleObject CancelIo CreateFileA CloseHandle WideCharToMultiByte SizeofResource LockResource LoadResource FindResourceA lstrlenA OutputDebugStringA LocalFree LocalAlloc SetEvent InitializeCriticalSection CreateThread DeleteCriticalSection TerminateThread ReadFile GetModuleFileNameA LoadLibraryA GetProcAddress Sleep GetTickCount EnterCriticalSection LeaveCriticalSection GetFileAttributesA FindFirstFileA FindClose GetStringTypeW FreeResource QueryPerformanceFrequency GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA lstrcmpA WritePrivateProfileStringA GetCurrentProcessId InterlockedDecrement GetModuleFileNameW GetFileTime GetFileSize GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcmpW GetModuleHandleA GetVersionExA SetLastError GlobalFree GlobalAlloc GlobalLock GlobalUnlock MulDiv GetCommandLineA CompareStringA QueryPerformanceCounter InterlockedExchange CompareStringW FileTimeToLocalFileTime FileTimeToSystemTime GetVersion FormatMessageA GetLocalTime MultiByteToWideChar

user32

SetRect SetParent GetDCEx LockWindowUpdate DestroyMenu LoadCursorA GetSysColorBrush InflateRect SetCursor GetMessageA TranslateMessage GetCursorPos ValidateRect SetRectEmpty IsZoomed PostQuitMessage EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA EnableMenuItem CheckMenuItem RegisterWindowMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetLastActivePopup DispatchMessageA BeginDeferWindowPos EndDeferWindowPos UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState IsWindowVisible UpdateWindow GetMenu GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos CopyRect PtInRect DefWindowProcA CallWindowProcA OffsetRect IntersectRect GetWindowPlacement GetWindowRect GetFocus SetWindowPos SetWindowLongA GetDlgCtrlID SendMessageA EnableWindow MessageBoxA IsWindow SetWindowTextA IsDialogMessageA SendDlgItemMessageA GetWindowTextLengthA GetWindowTextA InvalidateRect ReleaseCapture WindowFromPoint SetCapture GetTopWindow UnregisterClassA GetForegroundWindow GetWindowThreadProcessId SetForegroundWindow IsIconic ShowWindow SystemParametersInfoA CharUpperA LoadIconA GetSystemMetrics GetClientRect DrawIcon FillRect KillTimer PostMessageA GetWindow SetFocus GetDesktopWindow GetActiveWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow GetWindowLongA GetDlgItem IsWindowEnabled GetParent GetNextDlgTabItem EndDialog GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu SetTimer CreateWindowExA

gdi32

CreateSolidBrush GetDeviceCaps GetClipBox SetTextColor SetBkColor GetObjectA CreateBitmap SaveDC RestoreDC SetBkMode SetMapMode ExcludeClipRect IntersectClipRect DeleteObject SelectClipRgn CreateRectRgn PtVisible RectVisible TextOutA ExtTextOutA Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx DeleteDC CreatePatternBrush GetStockObject GetTextMetricsA GetTextExtentPoint32A CreateRectRgnIndirect PatBlt SetRectRgn CombineRgn GetBkColor

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegQueryValueA RegEnumKeyA RegDeleteKeyA RegSetValueExA RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegOpenKeyA RegCloseKey

shlwapi

PathFindExtensionA PathFindFileNameA PathStripToRootA PathIsUNCA

ole32

CLSIDFromString

oleaut32

VariantClear VariantChangeType VariantInit

setupapi

SetupDiGetClassDevsA SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailA SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo CM_Get_Device_IDA SetupDiGetDeviceRegistryPropertyA SetupDiSetClassInstallParamsA SetupDiChangeState

ubssrv_oc_only.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 612b4ce84a2b66d6ad22928eab60390a803ec5844f3f797e71c42d7a9d762d58
MD5 dd08437b66fbc20a7f1809dcb813b757
SHA1 39160fd0dfdd7db3264a181b0e415016006ab664
SHA512 0d31a4b31d33f146f9f3a309716bc8e2becb6d77f3fb9bfbff86ffed1952fa57a0403a7481e727fde14a05038cb329193a7e8a084bc22074609f3657920fc6f2
SSDEEP 192:x6UEcQBf1kw3gvySvEX0oHnsyFf66Q6D:xGpf0vEX0oHsCflQ6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

14778

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Steven\Desktop\ControlCenter\GamingCenter\ubssrv_oc_only\obj\Release\ubssrv_oc_only.pdb

uninst.exe.nsis

SHA256 8b71b79a96c34e2d19f2471f949fadf6989e54db0eb75b004dd6318f7f804b6c
MD5 03a75e1f5d8d371d4f45842a208003aa
SHA1 3dc54f59d5a77f7e051d5bcd70f297becdda38d2
SHA512 463ab982fb21e221dcf2e4102f9485aa1894fa53fb04737b1208310a952c51ec73539b2b19816e9c40bf7ca22fa0f3f96535a692b0430a484e66791f73fd01cb
SSDEEP 384:THdmnTx4GHO7MIJ2ZnCUWrqmMEM1q2MX2x7zcUw:T9M+fMIgnCJsH1qV9
MD5 SHA1 SHA512 SSDEEP

urgent.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 db2006b86e406870bed3b042e9a446d54a74a888f8da091c22c52fdaf1a754de
MD5 c9b2943e1b76a565f8a323793e2e1fea
SHA1 32007ac797a6b722db25814ad5bfc96464fe240d
SHA512 5547b3ffb263eaac685bd26b8f1d3ea85dd712ac758a0d42e99a0ab6f37d102ef539542c12783141a437a128f5c5b4417cdb73bc325082f2ab530afed5e1a54a
SSDEEP 384:V33d42kcZKHoatPJ5fADUrPT7KwSxgZtb5llI3/YcaPC:t3dXkcZBYDKqb1E/YcaPC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

18578

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Steven\Desktop\ControlCenter\urgent\urgent\obj\Release\urgent.pdb

vcredist_x64.exe

IMPHASH 8e2588a9cf43886de3449dfff03137b6
SHA256 7434bf559290cccc3dd3624f10c9e6422cce9927d2231d294114b2f929f0e465
MD5 77c0f604585fb429c722be111ca30c37
SHA1 bdb645ebaf3c91eceb1a143be6793ca57e6435c3
SHA512 1de6aaaf0390d3def3bf07e8186454e6a480b1f0c800ed99c4dc737198a48c1fddb03ea9530bac9d4acbe4459cd20faf80693ed08baaa91cc817c58ad2ae911e
SSDEEP 393216:0UAlp+dkBSuF2SfUfn6Hw/bVz1+rNi51oxDIGYfNZApwm:0Jp+Ty2SfUfn2wjVpSN01oxsff4Z
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

18:ce:f9:4b:85:85:4d:1c:1a:85:7e:90:4c:f8:e0:59:13:06:52:91:b5:0c:7d:b4:53:3b:7f:86:36:ba:37:3a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 23, 2024

PE Signature issue

Digest

3e:f1:02:48:bf:e8:34:f6:89:f2:ca:80:40:5f:e9:fc:1c:e2:cd:70

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 25, 2017

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c6:78:80:36:01:75:1a:69:72:00:00:00:00:00:c6

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 18, 2016 - Nov 2, 2017

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 17, 2016 - Feb 17, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Minor OS version

1

Major OS version

5

Entry point

165012

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

E:\delivery\Dev\wix37\build\ship\x86\burn.pdb

gdiplus

GdiplusShutdown GdiplusStartup GdipDeleteGraphics GdipFree GdipCloneImage GdipDisposeImage GdipGetImageWidth GdipGetImageHeight GdipCreateBitmapFromResource GdipCreateFromHDC GdipSetInterpolationMode GdipDrawImageRectI GdipAlloc

advapi32

QueryServiceConfigW CryptAcquireContextW CryptCreateHash CryptHashData CryptGetHashParam CryptDestroyHash CryptReleaseContext RegDeleteKeyW RegCreateKeyExW RegEnumKeyExW RegEnumValueW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken ConvertStringSecurityDescriptorToSecurityDescriptorW RegCloseKey RegDeleteValueW RegQueryValueExW GetUserNameW InitiateSystemShutdownExW CreateWellKnownSid InitializeAcl SetEntriesInAclW DecryptFileW ChangeServiceConfigW ControlService CloseServiceHandle QueryServiceStatus OpenServiceW OpenSCManagerW RegQueryInfoKeyW RegSetValueExW SetEntriesInAclA SetSecurityDescriptorGroup RegOpenKeyExW GetTokenInformation CheckTokenMembership AllocateAndInitializeSid FreeSid LookupAccountNameW SetNamedSecurityInfoW InitializeSecurityDescriptor SetSecurityDescriptorDacl SetSecurityDescriptorOwner

user32

GetMessageW PeekMessageW PostMessageW IsWindow PostQuitMessage GetWindowLongW SetWindowLongW DefWindowProcW UnregisterClassW DispatchMessageW TranslateMessage IsDialogMessageW MsgWaitForMultipleObjects WaitForInputIdle LoadCursorW BeginPaint EndPaint GetCursorPos MonitorFromPoint GetMonitorInfoW ReleaseDC MessageBoxW PostThreadMessageW RegisterClassW CreateWindowExW

oleaut32

VariantClear VariantInit SysAllocString SysFreeString

gdi32

GetDeviceCaps CreateDCW

shell32

ShellExecuteExW SHGetFolderPathW CommandLineToArgvW

ole32

CoTaskMemFree CoCreateInstance CoInitialize CoUninitialize CoInitializeEx StringFromGUID2 CoInitializeSecurity CLSIDFromProgID

kernel32

GetCurrentProcess InitializeCriticalSection TlsFree DeleteCriticalSection CloseHandle TlsGetValue Sleep GetLastError ReleaseMutex TlsSetValue TlsAlloc GetCurrentThreadId GetVersionExW GetModuleHandleW ReadFile SetFilePointerEx CreateFileW GetCurrentProcessId GetProcessId WriteFile ConnectNamedPipe SetNamedPipeHandleState lstrlenW CompareStringW LocalFree CreateNamedPipeW WaitForSingleObject OpenProcess lstrlenA RemoveDirectoryW GetFileAttributesW ExpandEnvironmentStringsW LeaveCriticalSection EnterCriticalSection FreeLibrary GetProcAddress VerifyVersionInfoW VerSetConditionMask GetComputerNameW GetTempPathW GetSystemDirectoryW GetSystemWow64DirectoryW GetVolumePathNameW HeapAlloc GetSystemDefaultLangID GetUserDefaultLangID GetDateFormatW GetSystemTime InterlockedExchange LoadLibraryW InterlockedCompareExchange GetExitCodeThread CreateThread SetEvent WaitForMultipleObjects CreateEventW ProcessIdToSessionId InterlockedIncrement InterlockedDecrement GetStringTypeW SetFileAttributesW FindClose FindNextFileW FindFirstFileW CreateProcessW SetCurrentDirectoryW GetCurrentDirectoryW GetExitCodeProcess SetThreadExecutionState CopyFileExW HeapSetInformation MapViewOfFile CreateFileMappingW CreateMutexW SetEndOfFile ResetEvent SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime CreateFileA GetSystemTimeAsFileTime VirtualFree VirtualAlloc DeleteFileW GetThreadLocale GetTimeZoneInformation TerminateProcess UnhandledExceptionFilter SystemTimeToTzSpecificLocalTime SystemTimeToFileTime GlobalAlloc IsProcessorFeaturePresent GetTickCount QueryPerformanceCounter HeapCreate SetLastError EncodePointer GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetEnvironmentStringsW GlobalFree MoveFileExW CopyFileW GetFileSizeEx GetModuleHandleA RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode HeapSize HeapReAlloc LCMapStringW MultiByteToWideChar SetStdHandle WriteConsoleW FlushFileBuffers GetLocalTime UnmapViewOfFile IsDebuggerPresent DuplicateHandle HeapFree FormatMessageW GetTempFileNameW GetWindowsDirectoryW CompareStringA FreeEnvironmentStringsW GetModuleFileNameW GetStdHandle DecodePointer ExitProcess SetUnhandledExceptionFilter GetStartupInfoW GetCommandLineW GetFullPathNameW CreateDirectoryW GetProcessHeap

cabinet

ord22 ord20 ord23

crypt32

CertGetCertificateContextProperty CryptHashPublicKeyInfo

msi

ord88 ord17 ord125 ord116 ord115 ord118 ord8 ord171 ord205 ord45 ord137 ord141 ord238 ord190 ord169 ord90 ord173 ord111 ord70

rpcrt4

UuidCreate

wininet

InternetCloseHandle HttpAddRequestHeadersW HttpOpenRequestW InternetErrorDlg InternetReadFile HttpSendRequestW InternetSetOptionW InternetOpenW HttpQueryInfoW InternetCrackUrlW InternetConnectW

wintrust

WinVerifyTrust WTHelperGetProvSignerFromChain WTHelperProvDataFromStateData CryptCATAdminCalcHashFromFileHandle

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

Name

.text

Size

229KB

Virtual Size

228KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

104KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wixburn

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

wrapDll.dll

IMPHASH 6ba43958b591ebee9c9ecb58548b4e5e
SHA256 401f682a9389fd2edee108557edef58da3a4d7ded3e9226fe222700f7d3c696b
MD5 e7abfa8ab4c93a881a8e6409f7587bcf
SHA1 c802717791cd918d546ef0aa70f64da1953a5504
SHA512 5638dbc58915c8ea55c413cdd464878811ab4549ff5db57b4ebf1e929e0fb3ff6801f5054c3292cb02acf626325c7586aa6e08e70d44b257bc1039cb669c9acc
SSDEEP 3072:0VOXBOWMzVNKWlVgMaWO/5W1yvJM0ZAgYYyWOYsQSkiPovhG3mo2cWGgqI8FUanV:bMaWO/tJfZAgYRWOYsQSkiPovhG3mo2k
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

45499

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Steven\Desktop\ControlCenter\SoftwareCenter\SoftwareCenter\bin\Release\wrapDll.pdb

vcruntime140

memmove __CxxQueryExceptionSize __CxxExceptionFilter __CxxRegisterExceptionObject _purecall __CxxUnregisterExceptionObject strchr __FrameUnwindFilter memset __current_exception_context __current_exception __std_type_info_destroy_list __C_specific_handler _CxxThrowException __std_exception_destroy __std_exception_copy __CxxDetectRethrow

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __stdio_common_vsnprintf_s __stdio_common_vfprintf __stdio_common_vfwprintf

api-ms-win-crt-runtime-l1-1-0

_initterm abort _errno _execute_onexit_table _cexit _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll _initterm_e _initialize_onexit_table _invalid_parameter_noinfo_noreturn terminate

api-ms-win-crt-heap-l1-1-0

malloc _callnewh free

kernel32

InitializeSListHead DisableThreadLibraryCalls GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent IsDebuggerPresent GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext WideCharToMultiByte TerminateProcess Sleep

advapi32

RegOpenKeyW

ole32

CLSIDFromString StringFromCLSID CoInitialize CoUninitialize CoCreateInstance

oleaut32

SysFreeString

msvcp140

?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Xinvalid_argument@std@@YAXPEBD@Z

api-ms-win-crt-string-l1-1-0

wcscpy_s strncmp isalnum isspace tolower isalpha

api-ms-win-crt-convert-l1-1-0

strtol atoi

mscoree

_CorDllMain

Name

.text

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.nep

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

76KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

588B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

248B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

420B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

write64reg.exe

SHA256 1789239dc231f74f30c19802fd0c565212f7249b7126e32d90e29313ecb8761f
MD5 a4aae55ea6f4c92b997edf9dd125dbb9
SHA1 c74a76f040e52531ac58d911fb4e3df964a6bb7d
SHA512 35080c2baec7d301f46da8892706d6347fec23a5396eadb6f450b7aa5831970793e17143860696bb84fc3a1286a28e8cd0766104bc4193f2e217803069985a9c
SSDEEP 96:XY/S24KuuSszAuhsgspHWnAVjDSieI0dDiG8ELNyMfyRT8Rxr5LX3PpklVLzNt:guUko5A9Si5aDiiUMbRxrZhqVN
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\ControlCenter\ControlCenter20190716\FusionKeyboard\write64reg\write64reg\obj\x86\Release\write64reg.pdb

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

ControlCenter_Ver_22.12.20.01.exe

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/ioSpecial.ini

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/nsExec.dll

advapi32

user32

kernel32

generic

$TEMP/KillCloudMatrixBattery.exe

mscoree

dotnet

$TEMP/KillFusionServer.exe

mscoree

dotnet

$WINDIR/SysWOW64/acpimof.dll

generic

AacHal_x64.dll

setupapi

kernel32

advapi32

ole32

oleaut32

winusb

generic

AiBoost.dll

mscoree

dotnet

Aorus15Keyboard.dll

mscoree

dotnet

CPUOC.dll

mscoree

dotnet

ColourSliderLibrary.dll

mscoree

dotnet

ComHeader.dll

mscoree

dotnet

ControlCenter.exe

PE Signature issue

mscoree

dotnet

CoreAudioApi.dll

mscoree

dotnet

CoreX11.dll

mscoree

dotnet

CoreX12.dll

mscoree

dotnet