General

  • Target

    EDR-Agent-Personal_1.1.19.15_windows_x64.exe

  • Size

    261.5MB

  • MD5

    fd2e879c19d3b6046d1399e8f1b4aec9

  • SHA1

    794001f1311a378ff3a4e38ad5fbc8dc83c9c4a5

  • SHA256

    17f6db60e10ee09d7cc2b51b9147a828ec9990a50c4e1c682d26432dd924f24e

  • SHA512

    eaf4d0f3513ee4db4756cbe98aaacfb3d877b16e99cc5c97048cd55e7b37681aca4f4fe81761afd11737f164c008eb8e8a06a16bfc8fb4395ce1e6aeecaa592b

  • SSDEEP

    6291456:pZmFDn45ofGEjXDVTrMB/YvdHwjTb/7TPAZmFDn45ok:pZe456Pvm/IdHgTDgZe45X

Score
3/10

Malware Config

Signatures

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

Files

  • EDR-Agent-Personal_1.1.19.15_windows_x64.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NsisCompChecker.dll
    .dll windows:6 windows x86 arch:x86

    e8ae300ff0169803ae353083e7d9bf0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NsisEdrThread.dll
    .dll windows:6 windows x86 arch:x86

    0ba57245203e0d94172188352e19f651


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/bg.bmp
  • $PLUGINSDIR/bgrepair.bmp
  • $PLUGINSDIR/compatible.json
  • $PLUGINSDIR/global_sign.cer
  • $PLUGINSDIR/installconfig.ini
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    c1c7505e1e6e929ebb6b9100e55b050a


    Headers

    Imports

    Exports

    Sections

  • $_134_/EDRClient.exe
    .exe windows:6 windows x64 arch:x64

    fd0d9b6b9ad7d9b70d2e57bcb41b230e


    Code Sign

    Headers

    Imports

    Sections

  • $_134_/EDRDaemon.exe
    .exe windows:6 windows x64 arch:x64

    d34e41394aae6d79f11e5dd294965fed


    Code Sign

    Headers

    Imports

    Sections

  • $_134_/EDRDriverInstaller.exe
    .exe windows:6 windows x64 arch:x64

    6d8cbf7d70a8163fa52d16128855e0d4


    Code Sign

    Headers

    Imports

    Sections

  • $_134_/EDRManager.exe
    .exe windows:6 windows x64 arch:x64

    a40af44f7326d502df92699f6edab391


    Code Sign

    Headers

    Imports

    Sections

  • $_134_/EDRMaster.exe
    .exe windows:6 windows x64 arch:x64

    2ebcab837b9f0b7d3524595873fa976c


    Code Sign

    Headers

    Imports

    Sections

  • $_134_/EDRScanner.exe
    .exe windows:6 windows x64 arch:x64

    f8753fe2a1b7f3c8b4ba872542d43f1b


    Code Sign

    Headers

    Imports

    Sections

  • $_134_/EDRUpdater.exe
    .exe windows:6 windows x64 arch:x64

    28c93fcbe3cdd3138a694225d0bb57e5


    Code Sign

    Headers

    Imports

    Sections

  • $_134_/LICENSE.txt
  • $_134_/clean.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/bg1.bmp
  • $PLUGINSDIR/bg2.bmp
  • $PLUGINSDIR/installconfig.ini
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    c1c7505e1e6e929ebb6b9100e55b050a


    Headers

    Imports

    Exports

    Sections

  • $_134_/decoy_config/decoy/1Dotb0qKqi.xlsx
    .xlsx office2007
  • $_134_/decoy_config/decoy/4ZTUcYOFOi.pptx
    .pptx office2007
  • $_134_/decoy_config/decoy/CEevXDI8Hv.pdf
    .pdf
  • $_134_/decoy_config/decoy/gvV5dXBQIs.txt
  • $_134_/decoy_config/decoy/hh34oruZpb.jpg
    .jpg
  • $_134_/decoy_config/decoy/oKsybnAmpE.docx
    .docx office2007
  • $_134_/decoy_config/decoy/uaCRsvHbiZ.tex
  • $_134_/decoy_config/decoy/yXuOzfwTSu.PNG
    .png
  • $_134_/decoy_config/setup.bat
    .bat .vbs
  • $_134_/decoy_config/uninstall.bat
    .bat .vbs
  • $_134_/etc/ai_ransom_detector_config.json
  • $_134_/etc/ca.cer
  • $_134_/etc/ca.crl
  • $_134_/etc/compatible.json
  • $_134_/etc/config.ini
  • $_134_/etc/driver_config.json
  • $_134_/etc/engineConfig/cde_rsa_public_key.pem
  • $_134_/etc/engineConfig/config
  • $_134_/etc/global_sign.cer
  • $_134_/etc/global_sign.crl
  • $_134_/etc/huawei_ca.cer
  • $_134_/etc/huawei_ca.crl
  • $_134_/etc/installconfig.ini
  • $_134_/etc/whitelist_kernel.xml
  • $_134_/nsp/edrDnsNsp2.dll
    .dll windows:6 windows x64 arch:x64

    d54be9d360ef7230a655fccdaa5ff9a6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_134_/plugin/cde/cde_engine.dll
    .dll windows:6 windows x64 arch:x64

    93b64f13db66d8d783dbec13afa65a61


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_134_/plugin/cde/cde_ole.dll
    .dll windows:6 windows x64 arch:x64

    98e3b672a84df5fcd75a8329a102ed6a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_134_/plugin/cde/cde_pak.dll
    .dll windows:6 windows x64 arch:x64

    aeed4967c20de9d334c12edbfe900b9e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_134_/plugin/cde/cde_scanh.dll
    .dll windows:6 windows x64 arch:x64

    4f6be47829b8131938370bd1a1b0582f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_134_/plugin/cde/cde_scanm.dll
    .dll windows:6 windows x64 arch:x64

    6eda5651e10a51a0da09a20c8e56c95e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_134_/plugin/cde/cde_scanx.dll
    .dll windows:6 windows x64 arch:x64

    ea71da62e90a75143ff7a8caba87fe3b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_134_/plugin/cde/cde_snl.dll
    .dll windows:6 windows x64 arch:x64

    9375b3a78f9ff10c17147d954eb8b75f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_134_/plugin/cde/cde_update.dll
    .dll windows:6 windows x64 arch:x64

    310cfcd1b841840cce677bebd8e2b68e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_134_/plugin/cde/cde_zip.dll
    .dll windows:6 windows x64 arch:x64

    2bab5256a2af62554b18ffe08f24bf9b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_134_/plugin/cde/db/c000.dat
  • $_134_/plugin/cde/db/h10000.dat
  • $_134_/plugin/cde/db/h10001.dat
  • $_134_/plugin/cde/db/h10100.dat
  • $_134_/plugin/cde/db/h10101.dat
  • $_134_/plugin/cde/db/h30000.dat
  • $_134_/plugin/cde/db/h30001.dat
  • $_134_/plugin/cde/db/h40000.dat
  • $_134_/plugin/cde/db/h40001.dat
  • $_134_/plugin/cde/db/h50000.dat
  • $_134_/plugin/cde/db/h50001.dat
  • $_134_/plugin/cde/db/h60000.dat
  • $_134_/plugin/cde/db/h60001.dat
  • $_134_/plugin/cde/db/h70000.dat
  • $_134_/plugin/cde/db/h70001.dat
  • $_134_/plugin/cde/db/hf0001.dat
  • $_134_/plugin/cde/db/hf0101.dat
  • $_134_/plugin/cde/db/hf0200.dat
  • $_134_/plugin/cde/db/m001.dat
  • $_134_/plugin/cde/db/m002.dat
  • $_134_/plugin/cde/db/m003.dat
  • $_134_/plugin/cde/db/m004.dat
  • $_134_/plugin/cde/db/m005.dat
  • $_134_/plugin/cde/db/m006.dat
  • $_134_/plugin/cde/db/m00x.dat
  • $_134_/plugin/cde/db/n000.dat
  • $_134_/plugin/cde/db/n001.dat
  • $_134_/plugin/cde/libxml2.dll
    .dll windows:6 windows x64 arch:x64

    c60cda969a37de9a1f8d740b41489e97


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_134_/plugin/hips/GSP.sdb
  • $_134_/plugin/hips/hips_db.dat
  • $_134_/plugin/hips/sdb_config
  • $_134_/resource/BgImages/bg.bmp
  • $_134_/resource/BgImages/bgrepair.bmp
  • $_134_/resource/BgImages/unbg1.bmp
  • $_134_/resource/BgImages/unbg2.bmp
  • $_134_/resource/tray_icons/init.ico
  • $_134_/resource/tray_icons/normal_status.ico
  • $_134_/resource/tray_icons/offline.ico
  • $_134_/resource/tray_icons/online.ico
  • $_134_/resource/tray_icons/register_fail.ico
  • $_134_/resource/tray_icons/scan_offline.ico
  • $_134_/resource/tray_icons/scan_online.ico
  • $_134_/settings/signer_whitelist.json
  • $_134_/update/current/core/updater.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NsisCompChecker.dll
    .dll windows:6 windows x86 arch:x86

    e8ae300ff0169803ae353083e7d9bf0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/installconfig.ini
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    c1c7505e1e6e929ebb6b9100e55b050a


    Headers

    Imports

    Exports

    Sections

  • $_43_/EDRClient.exe
    .exe windows:6 windows x64 arch:x64

    fd0d9b6b9ad7d9b70d2e57bcb41b230e


    Code Sign

    Headers

    Imports

    Sections

  • $_43_/EDRDaemon.exe
    .exe windows:6 windows x64 arch:x64

    d34e41394aae6d79f11e5dd294965fed


    Code Sign

    Headers

    Imports

    Sections

  • $_43_/EDRDriverInstaller.exe
    .exe windows:6 windows x64 arch:x64

    6d8cbf7d70a8163fa52d16128855e0d4


    Code Sign

    Headers

    Imports

    Sections

  • $_43_/EDRManager.exe
    .exe windows:6 windows x64 arch:x64

    a40af44f7326d502df92699f6edab391


    Code Sign

    Headers

    Imports

    Sections

  • $_43_/EDRMaster.exe
    .exe windows:6 windows x64 arch:x64

    2ebcab837b9f0b7d3524595873fa976c


    Code Sign

    Headers

    Imports

    Sections

  • $_43_/EDRScanner.exe
    .exe windows:6 windows x64 arch:x64

    f8753fe2a1b7f3c8b4ba872542d43f1b


    Code Sign

    Headers

    Imports

    Sections

  • $_43_/EDRUpdater.exe
    .exe windows:6 windows x64 arch:x64

    28c93fcbe3cdd3138a694225d0bb57e5


    Code Sign

    Headers

    Imports

    Sections

  • $_43_/LICENSE.txt
  • $_43_/clean.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/bg1.bmp
  • $PLUGINSDIR/bg2.bmp
  • $PLUGINSDIR/installconfig.ini
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    c1c7505e1e6e929ebb6b9100e55b050a


    Headers

    Imports

    Exports

    Sections

  • $_43_/decoy_config/decoy/1Dotb0qKqi.xlsx
    .xlsx office2007
  • $_43_/decoy_config/decoy/4ZTUcYOFOi.pptx
    .pptx office2007
  • $_43_/decoy_config/decoy/CEevXDI8Hv.pdf
    .pdf
  • $_43_/decoy_config/decoy/gvV5dXBQIs.txt
  • $_43_/decoy_config/decoy/hh34oruZpb.jpg
    .jpg
  • $_43_/decoy_config/decoy/oKsybnAmpE.docx
    .docx office2007
  • $_43_/decoy_config/decoy/uaCRsvHbiZ.tex
  • $_43_/decoy_config/decoy/yXuOzfwTSu.PNG
    .png
  • $_43_/decoy_config/setup.bat
    .bat .vbs
  • $_43_/decoy_config/uninstall.bat
    .bat .vbs
  • $_43_/etc/ai_ransom_detector_config.json
  • $_43_/etc/ca.cer
  • $_43_/etc/ca.crl
  • $_43_/etc/compatible.json
  • $_43_/etc/config.ini
  • $_43_/etc/driver_config.json
  • $_43_/etc/engineConfig/cde_rsa_public_key.pem
  • $_43_/etc/engineConfig/config
  • $_43_/etc/global_sign.cer
  • $_43_/etc/global_sign.crl
  • $_43_/etc/huawei_ca.cer
  • $_43_/etc/huawei_ca.crl
  • $_43_/etc/installconfig.ini
  • $_43_/etc/whitelist_kernel.xml
  • $_43_/nsp/edrDnsNsp2.dll
    .dll windows:6 windows x64 arch:x64

    d54be9d360ef7230a655fccdaa5ff9a6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_43_/plugin/hips/GSP.sdb
  • $_43_/plugin/hips/hips_db.dat
  • $_43_/plugin/hips/sdb_config
  • $_43_/resource/BgImages/bg.bmp
  • $_43_/resource/BgImages/bgrepair.bmp
  • $_43_/resource/BgImages/unbg1.bmp
  • $_43_/resource/BgImages/unbg2.bmp
  • $_43_/resource/tray_icons/init.ico
  • $_43_/resource/tray_icons/normal_status.ico
  • $_43_/resource/tray_icons/offline.ico
  • $_43_/resource/tray_icons/online.ico
  • $_43_/resource/tray_icons/register_fail.ico
  • $_43_/resource/tray_icons/scan_offline.ico
  • $_43_/resource/tray_icons/scan_online.ico
  • $_43_/settings/signer_whitelist.json
  • $_43_/win10_driver/EdrDriver.inf
  • $_43_/win10_driver/EdrDriver.sys
    .sys windows:10 windows x64 arch:x64

    22e7cb8146335182d5c54b733f8728f0


    Code Sign

    Headers

    Imports

    Sections

  • $_43_/win10_driver/edrdriver.cat
  • $_43_/win7_driver/EdrDriver.inf
  • $_43_/win7_driver/EdrDriver.sys
    .sys windows:10 windows x64 arch:x64

    22e7cb8146335182d5c54b733f8728f0


    Code Sign

    Headers

    Imports

    Sections

  • $_43_/win7_driver/edrdriver.cat
  • EDRClient.exe
    .exe windows:6 windows x64 arch:x64

    fd0d9b6b9ad7d9b70d2e57bcb41b230e


    Code Sign

    Headers

    Imports

    Sections

  • EDRDaemon.exe
    .exe windows:6 windows x64 arch:x64

    d34e41394aae6d79f11e5dd294965fed


    Code Sign

    Headers

    Imports

    Sections

  • EDRDriverInstaller.exe
    .exe windows:6 windows x64 arch:x64

    6d8cbf7d70a8163fa52d16128855e0d4


    Code Sign

    Headers

    Imports

    Sections

  • EDRManager.exe
    .exe windows:6 windows x64 arch:x64

    a40af44f7326d502df92699f6edab391


    Code Sign

    Headers

    Imports

    Sections

  • EDRMaster.exe
    .exe windows:6 windows x64 arch:x64

    2ebcab837b9f0b7d3524595873fa976c


    Code Sign

    Headers

    Imports

    Sections

  • EDRScanner.exe
    .exe windows:6 windows x64 arch:x64

    f8753fe2a1b7f3c8b4ba872542d43f1b


    Code Sign

    Headers

    Imports

    Sections

  • EDRUpdater.exe
    .exe windows:6 windows x64 arch:x64

    28c93fcbe3cdd3138a694225d0bb57e5


    Code Sign

    Headers

    Imports

    Sections

  • EdrCheckBox.dll
    .dll windows:6 windows x64 arch:x64

    8a2e520c063e62bd033a5d2fb302a867


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrComboBox.dll
    .dll windows:6 windows x64 arch:x64

    b7a224efc5a0d773c4451a9bab92b368


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrDynamicBorderWidget.dll
    .dll windows:6 windows x64 arch:x64

    9c8bdcccf25065e11c333bb7db9ca25a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrLineEdit.dll
    .dll windows:6 windows x64 arch:x64

    e8e601c8c1d8148eb73e472d374a3d58


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrPageButton.dll
    .dll windows:6 windows x64 arch:x64

    dd279a061c242925edb9c68fef9b0238


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrPngMoviePlayer.dll
    .dll windows:6 windows x64 arch:x64

    18ea177c6c2915b1f369e94c8fe8d049


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrProgressBar.dll
    .dll windows:6 windows x64 arch:x64

    4c7e8055628d6717f8ce288d9c019103


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrPushButton.dll
    .dll windows:6 windows x64 arch:x64

    cc03754842dd0a7603e8271b7ea99e93


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrRadioButton.dll
    .dll windows:6 windows x64 arch:x64

    3445474bb3e234fb69c913f7ae5dd5ba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrScanExt.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    26427981e938cbacade517850665f2c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrSimplePageBar.dll
    .dll windows:6 windows x64 arch:x64

    d2444b3ef3d8e0eb3e1290b469e7aadd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrSwitchButton.dll
    .dll windows:6 windows x64 arch:x64

    90525e3110bb14e61d46153b52267d1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrTableView.dll
    .dll windows:6 windows x64 arch:x64

    42fb947c95f70b401ed251eef8e15ca7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrTableWidget.dll
    .dll windows:6 windows x64 arch:x64

    2fad0c940127c6585de664c5eef72128


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    0a8a5a1775856382fbd4ca459a43145a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Gui.dll
    .dll windows:6 windows x64 arch:x64

    c0e44197213f4b6d1bc767e31e804c13


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Widgets.dll
    .dll windows:6 windows x64 arch:x64

    beaf0a6e49f3ee05dd421bb6d55dab92


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • decoy_config/decoy/1Dotb0qKqi.xlsx
    .xlsx office2007
  • decoy_config/decoy/4ZTUcYOFOi.pptx
    .pptx office2007
  • decoy_config/decoy/CEevXDI8Hv.pdf
    .pdf
  • decoy_config/decoy/gvV5dXBQIs.txt
  • decoy_config/decoy/hh34oruZpb.jpg
    .jpg
  • decoy_config/decoy/oKsybnAmpE.docx
    .docx office2007
  • decoy_config/decoy/uaCRsvHbiZ.tex
  • decoy_config/decoy/yXuOzfwTSu.PNG
    .png
  • decoy_config/setup.bat
    .bat .vbs
  • decoy_config/uninstall.bat
    .bat .vbs
  • hips.dll
    .dll windows:6 windows x64 arch:x64

    50d25854967676a70da293b05e6869c0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ico.ico
  • mon32.dll
    .dll windows:6 windows x86 arch:x86

    cb90b276b73784922fa9906a354bdf26


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mon64.dll
    .dll windows:6 windows x64 arch:x64

    cb90b276b73784922fa9906a354bdf26


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nsp/edrDnsNsp2.dll
    .dll windows:6 windows x64 arch:x64

    d54be9d360ef7230a655fccdaa5ff9a6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/imageformats/qgif.dll
    .dll windows:6 windows x64 arch:x64

    0e3fdaaeacb4a15cabbb58495a94fa63


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    736575e6d379a81c9c255bff91445d8c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resource/BgImages/bg.bmp
  • resource/BgImages/bgrepair.bmp
  • resource/BgImages/unbg1.bmp
  • resource/BgImages/unbg2.bmp
  • resource/tray_icons/init.ico
  • resource/tray_icons/normal_status.ico
  • resource/tray_icons/offline.ico
  • resource/tray_icons/online.ico
  • resource/tray_icons/register_fail.ico
  • resource/tray_icons/scan_offline.ico
  • resource/tray_icons/scan_online.ico
  • win10_driver/EdrDriver.inf
  • win10_driver/EdrDriver.sys
    .sys windows:10 windows x64 arch:x64

    22e7cb8146335182d5c54b733f8728f0


    Code Sign

    Headers

    Imports

    Sections

  • win10_driver/edrdriver.cat
  • win7_driver/EdrDriver.inf
  • win7_driver/EdrDriver.sys
    .sys windows:10 windows x64 arch:x64

    22e7cb8146335182d5c54b733f8728f0


    Code Sign

    Headers

    Imports

    Sections

  • win7_driver/edrdriver.cat
  • $_134_/win10_driver/EdrDriver.inf
  • $_134_/win10_driver/EdrDriver.sys
    .sys windows:10 windows x64 arch:x64

    22e7cb8146335182d5c54b733f8728f0


    Code Sign

    Headers

    Imports

    Sections

  • $_134_/win10_driver/edrdriver.cat
  • $_134_/win7_driver/EdrDriver.inf
  • $_134_/win7_driver/EdrDriver.sys
    .sys windows:10 windows x64 arch:x64

    22e7cb8146335182d5c54b733f8728f0


    Code Sign

    Headers

    Imports

    Sections

  • $_134_/win7_driver/edrdriver.cat
  • EDRClient.exe
    .exe windows:6 windows x64 arch:x64

    fd0d9b6b9ad7d9b70d2e57bcb41b230e


    Code Sign

    Headers

    Imports

    Sections

  • EDRDaemon.exe
    .exe windows:6 windows x64 arch:x64

    d34e41394aae6d79f11e5dd294965fed


    Code Sign

    Headers

    Imports

    Sections

  • EDRDriverInstaller.exe
    .exe windows:6 windows x64 arch:x64

    6d8cbf7d70a8163fa52d16128855e0d4


    Code Sign

    Headers

    Imports

    Sections

  • EDRManager.exe
    .exe windows:6 windows x64 arch:x64

    a40af44f7326d502df92699f6edab391


    Code Sign

    Headers

    Imports

    Sections

  • EDRMaster.exe
    .exe windows:6 windows x64 arch:x64

    2ebcab837b9f0b7d3524595873fa976c


    Code Sign

    Headers

    Imports

    Sections

  • EDRScanner.exe
    .exe windows:6 windows x64 arch:x64

    f8753fe2a1b7f3c8b4ba872542d43f1b


    Code Sign

    Headers

    Imports

    Sections

  • EDRUpdater.exe
    .exe windows:6 windows x64 arch:x64

    28c93fcbe3cdd3138a694225d0bb57e5


    Code Sign

    Headers

    Imports

    Sections

  • EdrCheckBox.dll
    .dll windows:6 windows x64 arch:x64

    8a2e520c063e62bd033a5d2fb302a867


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrComboBox.dll
    .dll windows:6 windows x64 arch:x64

    b7a224efc5a0d773c4451a9bab92b368


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrDynamicBorderWidget.dll
    .dll windows:6 windows x64 arch:x64

    9c8bdcccf25065e11c333bb7db9ca25a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrLineEdit.dll
    .dll windows:6 windows x64 arch:x64

    e8e601c8c1d8148eb73e472d374a3d58


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrPageButton.dll
    .dll windows:6 windows x64 arch:x64

    dd279a061c242925edb9c68fef9b0238


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrPngMoviePlayer.dll
    .dll windows:6 windows x64 arch:x64

    18ea177c6c2915b1f369e94c8fe8d049


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrProgressBar.dll
    .dll windows:6 windows x64 arch:x64

    4c7e8055628d6717f8ce288d9c019103


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrPushButton.dll
    .dll windows:6 windows x64 arch:x64

    cc03754842dd0a7603e8271b7ea99e93


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrRadioButton.dll
    .dll windows:6 windows x64 arch:x64

    3445474bb3e234fb69c913f7ae5dd5ba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrScanExt.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    26427981e938cbacade517850665f2c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrSimplePageBar.dll
    .dll windows:6 windows x64 arch:x64

    d2444b3ef3d8e0eb3e1290b469e7aadd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrSwitchButton.dll
    .dll windows:6 windows x64 arch:x64

    90525e3110bb14e61d46153b52267d1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrTableView.dll
    .dll windows:6 windows x64 arch:x64

    42fb947c95f70b401ed251eef8e15ca7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EdrTableWidget.dll
    .dll windows:6 windows x64 arch:x64

    2fad0c940127c6585de664c5eef72128


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    0a8a5a1775856382fbd4ca459a43145a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Gui.dll
    .dll windows:6 windows x64 arch:x64

    c0e44197213f4b6d1bc767e31e804c13


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Widgets.dll
    .dll windows:6 windows x64 arch:x64

    beaf0a6e49f3ee05dd421bb6d55dab92


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • decoy_config/decoy/1Dotb0qKqi.xlsx
    .xlsx office2007
  • decoy_config/decoy/4ZTUcYOFOi.pptx
    .pptx office2007
  • decoy_config/decoy/CEevXDI8Hv.pdf
    .pdf
  • decoy_config/decoy/gvV5dXBQIs.txt
  • decoy_config/decoy/hh34oruZpb.jpg
    .jpg
  • decoy_config/decoy/oKsybnAmpE.docx
    .docx office2007
  • decoy_config/decoy/uaCRsvHbiZ.tex
  • decoy_config/decoy/yXuOzfwTSu.PNG
    .png
  • decoy_config/setup.bat
    .bat .vbs
  • decoy_config/uninstall.bat
    .bat .vbs
  • hips.dll
    .dll windows:6 windows x64 arch:x64

    50d25854967676a70da293b05e6869c0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ico.ico
  • mon32.dll
    .dll windows:6 windows x86 arch:x86

    cb90b276b73784922fa9906a354bdf26


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mon64.dll
    .dll windows:6 windows x64 arch:x64

    cb90b276b73784922fa9906a354bdf26


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nsp/edrDnsNsp2.dll
    .dll windows:6 windows x64 arch:x64

    d54be9d360ef7230a655fccdaa5ff9a6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/imageformats/qgif.dll
    .dll windows:6 windows x64 arch:x64

    0e3fdaaeacb4a15cabbb58495a94fa63


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    736575e6d379a81c9c255bff91445d8c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resource/BgImages/bg.bmp
  • resource/BgImages/bgrepair.bmp
  • resource/BgImages/unbg1.bmp
  • resource/BgImages/unbg2.bmp
  • resource/tray_icons/init.ico
  • resource/tray_icons/normal_status.ico
  • resource/tray_icons/offline.ico
  • resource/tray_icons/online.ico
  • resource/tray_icons/register_fail.ico
  • resource/tray_icons/scan_offline.ico
  • resource/tray_icons/scan_online.ico
  • win10_driver/EdrDriver.inf
  • win10_driver/EdrDriver.sys
    .sys windows:10 windows x64 arch:x64

    22e7cb8146335182d5c54b733f8728f0


    Code Sign

    Headers

    Imports

    Sections

  • win10_driver/edrdriver.cat
  • win7_driver/EdrDriver.inf
  • win7_driver/EdrDriver.sys
    .sys windows:10 windows x64 arch:x64

    22e7cb8146335182d5c54b733f8728f0


    Code Sign

    Headers

    Imports

    Sections

  • win7_driver/edrdriver.cat