Malware Analysis Report

2025-08-10 21:37

Sample ID 240529-jld72sgb92
Target 4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe
SHA256 22de283c85e7024d2b7678710d4ac6d533e33cac1aaf896016ff421a0971c67c
Tags
persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

22de283c85e7024d2b7678710d4ac6d533e33cac1aaf896016ff421a0971c67c

Threat Level: Shows suspicious behavior

The file 4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe was found to be: Shows suspicious behavior.

Malicious Activity Summary

persistence

Executes dropped EXE

Loads dropped DLL

Adds Run key to start application

Unsigned PE

Suspicious behavior: EnumeratesProcesses

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-29 07:45

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-29 07:45

Reported

2024-05-29 07:47

Platform

win10v2004-20240508-en

Max time kernel

149s

Max time network

127s

Command Line

"C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe"

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\AdobeAW\aoptiloc.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Parametr = "C:\\AdobeAW\\aoptiloc.exe" C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\Parametr = "C:\\GalaxXY\\boddevsys.exe" C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\AdobeAW\aoptiloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe

"C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe"

C:\AdobeAW\aoptiloc.exe

C:\AdobeAW\aoptiloc.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3852,i,1067197275908310731,12785105794523264014,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:8

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 99.56.20.217.in-addr.arpa udp
US 8.8.8.8:53 23.159.190.20.in-addr.arpa udp
NL 23.62.61.72:443 www.bing.com tcp
US 8.8.8.8:53 55.36.223.20.in-addr.arpa udp
US 8.8.8.8:53 72.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 241.150.49.20.in-addr.arpa udp
US 8.8.8.8:53 157.123.68.40.in-addr.arpa udp
US 8.8.8.8:53 56.126.166.20.in-addr.arpa udp
US 8.8.8.8:53 11.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 205.47.74.20.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 8.8.8.8:53 200.197.79.204.in-addr.arpa udp

Files

C:\AdobeAW\aoptiloc.exe

MD5 8a507a88733ecf490507e6c802843ba5
SHA1 c4150ddcea72eaab827f7dd94ac33f8199159788
SHA256 636ce8987a9123f0a4380f81c815d38772da6b530198741bc3cb5e7e1ccd5747
SHA512 83d873fa626f8fbeebcca87aa70723ce4cdd89a7236d78ba136b48468d9ef8ab0176d8e25efd7507be49168bc7005f3cf21c4e92fa8ade36af8fcffdeae1deb9

C:\Users\Admin\253086396416_10.0_Admin.ini

MD5 a89683ecaa989b715b4e714b7636e5eb
SHA1 53bcc32b0abd37da1327e6a598f665d07de476bf
SHA256 badf56ea55edf8b32f155317cf9e7eb6980722a5227147a8e78a491ce0f66818
SHA512 79acf2c0bbd59002badfdeeb603d46f61c98f0950f9662a037b1600979d8a41d0646020b5530b07efe22b72cbee592629d2bbd7264b91ab3852a68422fb46ab2

C:\GalaxXY\boddevsys.exe

MD5 a24d07f66e772e6d4aabddbc12edaf22
SHA1 b08151be2c76ec954a9705d8c983edfa28d20651
SHA256 450f3553ef592c5332d0f992ffb02a92cd4c091b4ed4b5c61a6bcfb613b9a505
SHA512 8a83008c9d13d536c9560b47cb28e3125001593f54a475bca7782c808b0966616f8dcae976c803e1197253a032ae01e962c53a973efa2e7e8054a26c5d66f3ce

C:\GalaxXY\boddevsys.exe

MD5 01359f4dc854a3ff30c67d76506b6e97
SHA1 09d9c2349d383cd9d68a1dc8057cbd2947a2fcca
SHA256 742a81f22ec440d0ad92ac22a2e1cc354eb4c72c0da239a06506fd18bf314121
SHA512 bb9466bd9a66c051aaac962d81f9703add2bbfdd8dcf8478e02cbb508c94dc577d93f81bce5c42485e1303d6ddcfc0ba9144448536bfad43cd2c411a96358d80

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-29 07:45

Reported

2024-05-29 07:47

Platform

win7-20240221-en

Max time kernel

150s

Max time network

122s

Command Line

"C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe"

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\IntelprocM8\adobloc.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Windows\CurrentVersion\Run\Parametr = "C:\\IntelprocM8\\adobloc.exe" C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce\Parametr = "C:\\VidCF\\optidevsys.exe" C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A
N/A N/A C:\IntelprocM8\adobloc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe

"C:\Users\Admin\AppData\Local\Temp\4b49d88054efbff37b189fabd922ccb0_NeikiAnalytics.exe"

C:\IntelprocM8\adobloc.exe

C:\IntelprocM8\adobloc.exe

Network

N/A

Files

\IntelprocM8\adobloc.exe

MD5 e1bded21054965778b830a1fe78ef900
SHA1 380a55958d904ccbc7997a3190cdfc506ae75778
SHA256 3c32b5dc63d840dddd79d03a10daec26f2a6b44009ab2237b283f571cb023a6f
SHA512 608f214f3d474c06b5faf6b63c76130236524c231c44959b372a948218f6e2185df6b7de77c613827dc3f60480485e5c1ceef513bb98c12e7a952802a8ef4183

C:\Users\Admin\253086396416_6.1_Admin.ini

MD5 d57c98f5ca7e79622a199c8bdb4db283
SHA1 270a9abb33a94830206f659c5117e868d35daa9f
SHA256 16780748bdf1a0f9d5ee2df84088a3e5bc5750c1c9c3f28558dcab21b551e0f3
SHA512 1523f3c482f64404c2c27144601116527551375baef9f3a652d48db5fd8db97024d7114de36a2ef2698a63bb1473e996730a8ef4ade2766d45b1f3317f0477c6

C:\VidCF\optidevsys.exe

MD5 c054f22c6789660b028f0dc5d93becd9
SHA1 6fe381b18dbce95dfef87c8e587c3df636b585f2
SHA256 052b7db70ec910a3b34cb746dba5640a15675fa27b3830ea924007ac3332f16c
SHA512 cef1323d87f0d3704f1b380271418ca46a4ca78f3d750aa09ce172a97bc88d1f3d73b210dd93aae1355f9d936635d8e387837758cf2d59a9ceaacbb4fbda2ccc