487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 01:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe
Size 4.0MB
Sample240613-b3c3bazbqa
SHA256 487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41
MD5 b2a7ae7539ed90aae3203c73a53609d9
SHA1 44ec2747b2ebded2c6aeaf75df4511a16d49a593
SHA512 a8d11e4d524753f12eebee11625203ff1af75905483ceb050573695381f45fec3fc3c1d21912ab41e4b80cf0e3151ed0d2c30865fe1c2efa17b77352a3d6e4c7
SSDEEP 49152:i7TCDjYomhI2unsJuwSuvuYoKr1ExUH8jlS/Tp7ESvai:BjBNNwSujP1ExUH8jlS/Tp7ESvai
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation	487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe

Executes dropped EXE 4 IoCs

pid	Process
532	Logo1_.exe
2112	487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe
3684	PCISETUP.exe
3876	PCISETUP64.EXE

Enumerates connected drives 3 TTPs 21 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\N:	Logo1_.exe
File opened (read-only)	\??\M:	Logo1_.exe
File opened (read-only)	\??\J:	Logo1_.exe
File opened (read-only)	\??\H:	Logo1_.exe
File opened (read-only)	\??\G:	Logo1_.exe
File opened (read-only)	\??\Y:	Logo1_.exe
File opened (read-only)	\??\U:	Logo1_.exe
File opened (read-only)	\??\R:	Logo1_.exe
File opened (read-only)	\??\X:	Logo1_.exe
File opened (read-only)	\??\S:	Logo1_.exe
File opened (read-only)	\??\E:	Logo1_.exe
File opened (read-only)	\??\V:	Logo1_.exe
File opened (read-only)	\??\O:	Logo1_.exe
File opened (read-only)	\??\K:	Logo1_.exe
File opened (read-only)	\??\Q:	Logo1_.exe
File opened (read-only)	\??\P:	Logo1_.exe
File opened (read-only)	\??\L:	Logo1_.exe
File opened (read-only)	\??\I:	Logo1_.exe
File opened (read-only)	\??\Z:	Logo1_.exe
File opened (read-only)	\??\W:	Logo1_.exe
File opened (read-only)	\??\T:	Logo1_.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Windows Mail\wab.exe	Logo1_.exe
File opened for modification	C:\Program Files\Windows Security\_desktop.ini	Logo1_.exe
File created	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\_desktop.ini	Logo1_.exe
File created	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_neutral_~_kzf8qxf38zg5c\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\nl-nl\_desktop.ini	Logo1_.exe
File created	C:\Program Files\Google\Chrome\Application\110.0.5481.104\VisualElements\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\am_ET\_desktop.ini	Logo1_.exe
File created	C:\Program Files\VideoLAN\VLC\locale\kab\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\nb-no\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\js\nls\ja-jp\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\da-dk\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\ko-kr\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Test\Modules\Example2.Diagnostics\1.0.1\Diagnostics\Simple\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\fr-ma\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\hu-hu\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\fi-fi\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\js\nls\ja-jp\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\en-gb\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\pl-pl\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\_desktop.ini	Logo1_.exe
File created	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\accessibilitychecker\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\he-il\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\js\nls\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Locales\_desktop.ini	Logo1_.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\AppxMetadata\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\files\dev\libs\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\themes\dark\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\ro-ro\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\pt-br\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\ja-jp\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\sl-si\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\zh-tw\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\pl-pl\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\tr-tr\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\js\nls\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Common Files\Microsoft Shared\Filters\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\onenoteshare.exe	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\collect_feedback\js\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files-select\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Common Files\Microsoft Shared\TextConv\_desktop.ini	Logo1_.exe
File created	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-white\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\sl-sl\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\themes\dark\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\themes\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\en-il\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\en-il\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\he-il\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\pt-br\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\fr-fr\_desktop.ini	Logo1_.exe
File created	C:\Program Files\VideoLAN\VLC\locale\fur\LC_MESSAGES\_desktop.ini	Logo1_.exe
File created	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\PeopleAppAssets\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\en-gb\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\it-it\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\es-es\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ko-kr\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\en-ae\_desktop.ini	Logo1_.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Views\_desktop.ini	Logo1_.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\it-it\_desktop.ini	Logo1_.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\ja-jp\_desktop.ini	Logo1_.exe

Drops file in Windows directory 4 IoCs

description	ioc	Process
File created	C:\Windows\rundl132.exe	487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe
File created	C:\Windows\Logo1_.exe	487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe
File opened for modification	C:\Windows\rundl132.exe	Logo1_.exe
File created	C:\Windows\vDll.dll	Logo1_.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082
Runs net.exe

Suspicious behavior: EnumeratesProcesses 20 IoCs

pid	Process
532	Logo1_.exe
532	Logo1_.exe
532	Logo1_.exe
532	Logo1_.exe
532	Logo1_.exe
532	Logo1_.exe
532	Logo1_.exe
532	Logo1_.exe
532	Logo1_.exe
532	Logo1_.exe
532	Logo1_.exe
532	Logo1_.exe
532	Logo1_.exe
532	Logo1_.exe
532	Logo1_.exe
532	Logo1_.exe
532	Logo1_.exe
532	Logo1_.exe
532	Logo1_.exe
532	Logo1_.exe

Suspicious use of WriteProcessMemory 22 IoCs

description	pid	Process	procid_target
PID 2824 wrote to memory of 2708	2824	487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe	82
PID 2824 wrote to memory of 2708	2824	487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe	82
PID 2824 wrote to memory of 2708	2824	487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe	82
PID 2824 wrote to memory of 532	2824	487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe	83
PID 2824 wrote to memory of 532	2824	487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe	83
PID 2824 wrote to memory of 532	2824	487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe	83
PID 532 wrote to memory of 2548	532	Logo1_.exe	85
PID 532 wrote to memory of 2548	532	Logo1_.exe	85
PID 532 wrote to memory of 2548	532	Logo1_.exe	85
PID 2548 wrote to memory of 4060	2548	net.exe	87
PID 2548 wrote to memory of 4060	2548	net.exe	87
PID 2548 wrote to memory of 4060	2548	net.exe	87
PID 2708 wrote to memory of 2112	2708	cmd.exe	88
PID 2708 wrote to memory of 2112	2708	cmd.exe	88
PID 2708 wrote to memory of 2112	2708	cmd.exe	88
PID 532 wrote to memory of 3440	532	Logo1_.exe	56
PID 532 wrote to memory of 3440	532	Logo1_.exe	56
PID 2112 wrote to memory of 3684	2112	487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe	92
PID 2112 wrote to memory of 3684	2112	487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe	92
PID 2112 wrote to memory of 3684	2112	487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe	92
PID 3684 wrote to memory of 3876	3684	PCISETUP.exe	93
PID 3684 wrote to memory of 3876	3684	PCISETUP.exe	93

C:\Windows\Explorer.EXE
C:\Windows\Explorer.EXE
1⤵
PID:3440
- C:\Users\Admin\AppData\Local\Temp\487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe
  "C:\Users\Admin\AppData\Local\Temp\487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe"
  2⤵
  - Drops file in Windows directory
  - Suspicious use of WriteProcessMemory
  PID:2824
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\$$a518B.bat
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2708
  - - C:\Users\Admin\AppData\Local\Temp\487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe
      "C:\Users\Admin\AppData\Local\Temp\487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe"
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Suspicious use of WriteProcessMemory
      PID:2112
    - - C:\WCH.CN\CH35XDRV\PCISETUP.exe
        
        "C:\WCH.CN\CH35XDRV\PCISETUP.exe"
        5⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3684
      - C:\WCH.CN\CH35XDRV\SETUPX64\PCISETUP64.EXE
        
        C:\WCH.CN\CH35XDRV\SETUPX64\PCISETUP64.EXE
        6⤵
        Executes dropped EXE
        
        PID:3876
- - C:\Windows\Logo1_.exe
    C:\Windows\Logo1_.exe
    3⤵
    - Executes dropped EXE
    - Enumerates connected drives
    - Drops file in Program Files directory
    - Drops file in Windows directory
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:532
  - - C:\Windows\SysWOW64\net.exe
      net stop "Kingsoft AntiVirus Service"
      4⤵
      Suspicious use of WriteProcessMemory
      PID:2548
    - - C:\Windows\SysWOW64\net1.exe
        
        C:\Windows\system32\net1 stop "Kingsoft AntiVirus Service"
        5⤵
        
        PID:4060

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

GoogleUpdateCore.exe

Path C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateCore.exe
Size 251KB
SHA256 c8c24b307d23d58001ae39665d1111bf51b8717847c2e399ce52593d417eb060
MD5 66b4c7cc26abfb93731e18ad8bcd3be6
SHA1 3f5f088d501ae5c628ddef7b184833f7d4f3741c
SHA512 fab64e7176dda37caa14c5808db98b36d6bcefd840f24f3de21508bb0b3715ea5ef0408c93958cd39cb5dc264454edba30d0b263ccbb54ca5c44b496d27ef7e4
SSDEEP 6144:4VfjmNHgiC4bXqsTk90qC1AOb7eswf1Px++fD8PJ:i7+AitXqsTkiR7twRx+gD8PJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

7z.exe

Path C:\Program Files\7-Zip\7z.exe
Size 570KB
SHA256 d011fda8165fc5b2e786cc2dddf54de62e5dc43d20922d41cbc5ddc5ef616088
MD5 7802d08004d13d6da956b7e699c69e97
SHA1 a4697b6b2dc1a988b92df617249c47b3b5efacd8
SHA512 cce3a6565bc187a5bad4f3c1b237a57c0687c2bb519eaaa964fee2e5af3719f5c587e083e2dc5bdd0ad40c539b362d399acd0fe4dab9e7486bc93a1bfbcfe7d0
SSDEEP 6144:4VfjmNCE7cV3iwbAFRWAbd4nf0H05yqE6Hl0ChW0+ksllAXBu0lWGWUJJQ4t0BHk:i7+57a3iwbihym2g7XO3LWUQfh4Co
MD5 SHA1 SHA512 SSDEEP

Submit Download

windowsdesktop-runtime-8.0.2-win-x64.exe

Path C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe
Size 636KB
SHA256 82e5b0001f025ca3b8409c98e4fb06c119c68de1e4ef60a156360cb4ef61d19c
MD5 2500f702e2b9632127c14e4eaae5d424
SHA1 8726fef12958265214eeb58001c995629834b13a
SHA512 f420c62fa1f6897f51dd7a0f0e910fb54ad14d51973a2d4840eeea0448c860bf83493fb1c07be65f731efc39e19f8a99886c8cfd058cee482fe52d255a33a55c
SSDEEP 12288:Pp7+H5mWukhI2jFMSjysAS9X/GsfTDYrGiqNLBryHi3H2g78C9Qz1DnmQ:R7u5mWpI2jFM5sFzfTpi4LsHof7T9sH
MD5 SHA1 SHA512 SSDEEP

Submit Download

$$a518B.bat

Path C:\Users\Admin\AppData\Local\Temp\$$a518B.bat
Size 722B
SHA256 3a6e0d9c115bf10930f216f9671b76a67e504c1e11df7bde976b5212f47ea4eb
MD5 e58230981f65afe91fdbabf522ce5aa6
SHA1 cfd3e74ebff08d0e0794b4aad09b89f64c088ec8
SHA512 c1744399462e883fd28d381c359154bba9de266e5a7b273f3313fa968299d6033e23cc9f988316ca036bc14b6b863c000d3966dab42d2ece055d78ea50139599
MD5 SHA1 SHA512

Submit Download

487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe.exe

Path C:\Users\Admin\AppData\Local\Temp\487d983ce419f7f20ec7bf626203c9ee801940aa8f4cccd7eb0487fbd820fa41.exe.exe
Size 4.0MB
SHA256 0965e9211f47953fede4d9d7c8b929fced504f7e0414b1974cae5865fbb589cd
MD5 d80d575a6276df9481def2de49481ca9
SHA1 fcf09f99d54c6931cf1f3e1d77f902528c39fb53
SHA512 6210f6347519da1eb193456894ab6046687daacc3a806bada241fff4eb86a64bdac4d7ccbb856dd470d60435f5cc727b474fdf566e48442930c4677829d257c7
SSDEEP 49152:ICDjYomhI2unsJuwSuvuYoKr1ExUH8jlS/Tp7ESvai:vjBNNwSujP1ExUH8jlS/Tp7ESvai
MD5 SHA1 SHA512 SSDEEP

Submit Download

Makefile

Path C:\WCH.CN\CH35XDRV\DRV_1S\LINUX\Makefile
Size 722B
SHA256 cda1ad01c9be377a982ef2eab791fc0d15add3e2d7ceebf863b50e39b86d6c2d
MD5 b529ac382c29f9f654e067caee0753a8
SHA1 6ebe96bea5e1131adae535c5515ea03b363c4605
SHA512 9ad7a6d2ac109f94d54d18396f25ef2918be6517e4039423cc21f26475dab3bdb06a9770dd1aa0466e20ce5783f96540b3f1f2c19b4624500ec6ef3ba4b6f044
MD5 SHA1 SHA512

Submit Download

README

Path C:\WCH.CN\CH35XDRV\DRV_1S\LINUX\README
Size 7KB
SHA256 9d90cf2794f5ce5ac1b73aafeef3d00789694d3126915bbdd61eb0a3e8803c1a
MD5 8d09c1caedb43a235889033c6538d4eb
SHA1 4051702f4faf9e2ededca39686cbd30455140453
SHA512 c35ff01c594dbeb7f88174833910290f1ca80f690a7cc84004acaa814c2a26c57aaecf277fe831a9da76d94f340103d5fc06fade41d08dda65fd07dcf8bd573f
SSDEEP 192:G9DFclQ+WKWaWQedIWZqUSEoiaS4jOQ5+OJqEnq:GhFclnWKWaWQedIWy/itO7kXiq
MD5 SHA1 SHA512 SSDEEP

Submit Download

Makefile

Path C:\WCH.CN\CH35XDRV\DRV_1S\LINUX\driver\Makefile
Size 3KB
SHA256 51ca017fc0f8e82e1676b96cb49e20f9c043365b05606cb492c3e1472a327919
MD5 4000e89ad881618d5e37cafed258b160
SHA1 0ca2c559210a0a9882f245bfc0dbfaa9a4698d81
SHA512 9c5873921e49c656f7da4e21c8ba91011bac3a3c1c7b391b7d840eaae5c1756d55ab2dd3d7fd17f5ea5c475342984cfa9471c3a0c13e72797378f8a0ad0c2a6b
MD5 SHA1 SHA512

Submit Download

wch_common.h

Path C:\WCH.CN\CH35XDRV\DRV_1S\LINUX\driver\wch_common.h
Size 19KB
SHA256 eb60ecc7e88f391bc8b85ac4496621eda2d18e0ac63d623ff8fd54be912c6aed
MD5 e517de7ae80aa821aa829618134a73a4
SHA1 1e1bb3f75c3c9419eacdb17f26f58c00fe086bfe
SHA512 06fb0a7d87ff1ddf64020a93051f60f0681112e22c7d88e925b1ed7181d6d7f48eef7603980262c7052d93ab62f1a2e0f72df67693641b8d7c807a65be20c157
SSDEEP 192:tKdrXldwU1YRwKtffS6C8BnqwLDX4bqCsYM0xuOMo0cK07U7um5:IrEU1YRwKtXCdwLLY4Yjui6
MD5 SHA1 SHA512 SSDEEP

Submit Download

wch_devtable.c

Path C:\WCH.CN\CH35XDRV\DRV_1S\LINUX\driver\wch_devtable.c
Size 16KB
SHA256 4029308edef2854a22530978ff6c8d58db2486c944cb634cea3ccff13affdfee
MD5 3ab1fd41d4c4e758804a755b83c37a75
SHA1 bf426ef76a1bb7e537cbabd608f2ef2e736cdebd
SHA512 e2cfcbc0ebc355176dbaa82e3e841b0d67cd78d0d90d84b965b0293b3f6674685e20a6ea82581cb4f4577df94a5af2db20593141ff79bae9beccb4e40d574b8c
SSDEEP 384:CvJshwWhJQTJEhJ6FFJlJQwJkChJMPpJ5J6J9JSQ3XW:Cv2hwWhuTJEhcFF/nGChKPp3UjO
MD5 SHA1 SHA512 SSDEEP

Submit Download

wch_main.c

Path C:\WCH.CN\CH35XDRV\DRV_1S\LINUX\driver\wch_main.c
Size 36KB
SHA256 a8514494e7ed68a681828deb85b8c3768895fcd32a254b3862fad68e28179d76
MD5 8cf4509f8ba9771e19653cf73e1f94ef
SHA1 cae3b245c110a64e9f0a5171505794ee0659129b
SHA512 5fb25643cebf1d126eaf910ce76351513737588117a54cc76d5094cad96dfefdb2b15a346b7b64e5b3aa9dff963e1fe86d3cfb6267f9b79b69ad8a45a18d95ac
SSDEEP 768:II+KgJgBpX+ksF8vg2DaGfknyZsb78hTi2BDhoMyk:AKag7X+ksM00Y6X
MD5 SHA1 SHA512 SSDEEP

Submit Download

wch_serial.c

Path C:\WCH.CN\CH35XDRV\DRV_1S\LINUX\driver\wch_serial.c
Size 93KB
SHA256 8168d5c6dc15a7eac1feedee1e2670f4c3618fe20f19148a699f4fb280223885
MD5 f0b32332193e085f591a2ff5e59b2149
SHA1 eff36228d7dc8e93d194d0504c86e6a5afb38e98
SHA512 fdb89153211b8ba3ffa0cef0c7450a79fd6a5b0a09aec0b5ae5d8590f593db3f79e1832fa607f81877569b33ffa16fafb0fc88b6012bb8fe851644b4fb4f9bb4
SSDEEP 1536:GaRA46K/Av20KisVEvXBdRl6eZBv5z1zhkr1sqJWq2YtAa9kxTVk0Yn9:QeAvXOEZHRzTcsqJWq2YtAa9kxTVk0Y9
MD5 SHA1 SHA512 SSDEEP

Submit Download

Makefile

Path C:\WCH.CN\CH35XDRV\DRV_1S\LINUX\wchdump\Makefile
Size 301B
SHA256 82eb4b7cf01cef21acf5a5fd6ee01a9d36f7a34cfcbab160beca5e4635631edb
MD5 a70f3ae3e831640d393704f1a27c129c
SHA1 374d428408f27c8a70c239a504b4aa82bca1c099
SHA512 2663eb796fd415ea8e3724ced065fc4747f814065f440b7d4cef329cb06a5c3aaf8b4ab90db4d08f86c4f5fde61199bed93e28fc64ece270abb6b5c3148a480f
MD5 SHA1 SHA512

Submit Download

wchdump.c

Path C:\WCH.CN\CH35XDRV\DRV_1S\LINUX\wchdump\wchdump.c
Size 3KB
SHA256 98025085756932a1e3ad4e47ff5b8a263588c3e7e47789a861b6d62784eb7155
MD5 21af2f821f93eb28a1c0fab5f12c6979
SHA1 9938dae45dbf1bbf665277d8370268f732782686
SHA512 1fff951bb97a6b73fa34c92114fa2237ff9e3db1e24f36872fcd6874385658ce4c626507660d305f47748eed62fc7a87809c04440814524f5db996724a4d66de
MD5 SHA1 SHA512

Submit Download

wchmknod

Path C:\WCH.CN\CH35XDRV\DRV_1S\LINUX\wchmknod\wchmknod
Size 622B
SHA256 308a66416394124463dec29c138f24a57d7b0e2b79a59619dc4551b5ff52d0c3
MD5 475e7de188dbd64839b9b0dbcbacf450
SHA1 7642935ac508d5bbe2887bff4d98c2e6b93e2cd0
SHA512 9db8654e538286e643e7cef5786f198b2c94a158e3789cfd4063b11d448e73475d55b9c2b587721a214d2e6633baf04c626c32167c6c9ff787e8265b1b7bb886
MD5 SHA1 SHA512

Submit Download

Makefile

Path C:\WCH.CN\CH35XDRV\DRV_1S\LINUX\wchterm\Makefile
Size 349B
SHA256 80368b581e178c46c2433e2104ada5055557512c6a52d5551d5d1289fad77cdc
MD5 524540c7ce53746b7725a157fb54a07a
SHA1 2fb00d78be780a7aa7803379d2fcbf3bb261366d
SHA512 3f0d8c581c02e5616b86c559905363e41c38431972087870f51b4365a9399dd25625f648da9220378f56de9b68a560cfd979cf6631e9fad25a9e22d93a0ef333
MD5 SHA1 SHA512

Submit Download

wchterm.c

Path C:\WCH.CN\CH35XDRV\DRV_1S\LINUX\wchterm\wchterm.c
Size 26KB
SHA256 50558006d260bdd4224977019617f02f05209ed0bfa70b4652f0d683592e670a
MD5 99c11200c47af0abf9f144e0bb97d3a1
SHA1 21405cb4daa7a4fce306f2b87036527e18fda1f9
SHA512 41164dfc59eec11f2a2178553561279744ff7ef93e67b3fd11004ad0e0e47a1b1b1bbce8b630b28d928a3b3ab89eb214c68c128282761507356884335c105c9b
SSDEEP 768:IEk4fJKmYhYlw7bQu0OoqzW0CiDzWkqhqQ:fk4fJKmYhUSbQuST
MD5 SHA1 SHA512 SSDEEP

Submit Download

wchterm.h

Path C:\WCH.CN\CH35XDRV\DRV_1S\LINUX\wchterm\wchterm.h
Size 2KB
SHA256 106203829fe3a81daceda8d76df9f88aae3934e6802c672e28ba08ec176aa4fc
MD5 0b51548b16e322c0cdfb58a9b6a2d2e5
SHA1 acfdd51a3bca241ead35b00a73cda0b78edfc867
SHA512 63d24f7647c97d45c7d7edac7b8191682fd07f719271ae70796ea8b6877d9cd653e6289d898947d4bb34ef80073651569247a056967e68a8c1f5a19197266c7f
MD5 SHA1 SHA512

Submit Download

CH35XDOS.EXE

Path C:\WCH.CN\CH35XDRV\DRV_2S1P\DOS\CH35XDOS.EXE
Size 20KB
SHA256 2e4ab626d94519bb9e9560fe450aa92904134174a8398691412be1032435e8a8
MD5 f71825cca9835a562d3f13f616909725
SHA1 d3a72ef3cfec445dc1ea435e02bb6a0e8864bd82
SHA512 8d0b25a2add238c65112e2bd44925c84559643bab9b54dfc6866edcff027dc5aab99724ed133acc467f72a5dcb4d6f7bf034aebbc4b4d24893e237a3d6579f10
SSDEEP 384:euj6BykGPycP8PHvH29yRLTjlJHBr74kzlgIy/0a6OTn+e93Jp8L17:e068kWyJ/nBHzl8/0aF93T8x
MD5 SHA1 SHA512 SSDEEP

Submit Download

readme.txt

Path C:\WCH.CN\CH35XDRV\DRV_2S1P\DOS\readme.txt
Size 3KB
SHA256 f7d224d9c878cddd281fb52f0ea92d1e5fce2fe44d6f7495326d480cab798892
MD5 15f3b645f38cdd8a5765e32c995eb063
SHA1 80cf7ad58a164fbcf2ecbe0e8c2b3aabe3b7aa1a
SHA512 722f26a41538986fe1ef46b7a571da93c4c5c167d6b5b7873c6221f781752c2493d22ff8f91fc32d02f820eacef8bb7dcdcd2c1b59fdbeea044464a1ebcb4cab
MD5 SHA1 SHA512

Submit Download

CH35XDRV.INF

Path C:\WCH.CN\CH35XDRV\DRV_2S1P\WIN 8\CH35XDRV.INF
Size 22KB
SHA256 e6ce1b22607c95c16d46355318a5836427084f040b90030a1c84b995a78a4212
MD5 ac1b0e19e1131a7e6dcc76cf68160839
SHA1 15d2c8eb81a28673b7da36e28449495e3890e374
SHA512 63931191249c728ff3856102054e2f7eade5b99a43b46b1e559c3266a961e1d5d0133de1c25e30287a997a1dc7a5b6d255547112be012507c976e85bb8152c1b
SSDEEP 192:FeOe8jQK4PWnA4PWny4PWnatvUj6ZTXiWHuoJFSDZ:DF4PwA4Pwy4PwMvZJgDZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

PORTS.INF

Path C:\WCH.CN\CH35XDRV\DRV_2S1P\WIN 8\PORTS.INF
Size 5KB
SHA256 a3afe7e991ab7c7c63fb545eabfe16bd973187fc0c7c89193f16d0abd881507b
MD5 7ce9c774bf9ae1abb214f56ec26796a2
SHA1 3bf83e8a275b59a7134fe2aa76de2baaaa02256d
SHA512 d827e853a30d3366d144a0d44b5397333df48eeb17e8fa2fdd881472e35333d32827d2566400e18741fddbf3766d01f639077f1ffa0ce1cd5550327724cb41a9
SSDEEP 96:zeOe8cjk0LDTVk0LDTqyk0LDT41NU9bk4f2buFpdv:zeOe8cjk0LDTVk0LDTlk0LDTANU+4f2G
MD5 SHA1 SHA512 SSDEEP

Submit Download

ch35xdrv.cat

Path C:\WCH.CN\CH35XDRV\DRV_2S1P\WIN 8\ch35xdrv.cat
Size 13KB
SHA256 c51328a5bd51435d4f301008dcb8e6249c563742b285f67d65b3f74bb15161ed
MD5 f48ef73640945dc1746c47380fa75b76
SHA1 330a060ff200b61cc852a3976dd9d2fb4a1b21ae
SHA512 35dd7314dcc195c933ba61de20286c7ba269c37f6fb69f16bfd0eba07026452052343113e2be67ddb7f2150c8673caa43d421b9f27531c6706f3a31b89a7fba3
SSDEEP 192:nOr2Kawmq1OaZ8tISIRmDanuRwE+3Ef5KYpBjSA/Gwl:ngawDIGup+3Ef5dpBjhxl
MD5 SHA1 SHA512 SSDEEP

Submit Download

ports.cat

Path C:\WCH.CN\CH35XDRV\DRV_2S1P\WIN 8\ports.cat
Size 13KB
SHA256 075060dbbc2fef8e90ab7b672fe1fe63fdf830730120e7e5cf17c4c6a0817e7a
MD5 4877acf3848d7440270d7e4d013f45fa
SHA1 a7f83e3d5b3b62b6ab8df3de0083e2ff9b96a1be
SHA512 e842abdcc69bc5b84e6a78c3c9acbbbec608ddb50aafeedf3914cd4604788dc3ce31300c0ac7733b2239809ee3395637b034d369b933a49caae3dd18d05d7733
SSDEEP 192:xGr2Kawmq1OaZ8tISz85anuRwE+3Ef5KYpBjSAzxzde6q:xIawosGup+3Ef5dpBjh9d9q
MD5 SHA1 SHA512 SSDEEP

Submit Download

PORTS.INF

Path C:\WCH.CN\CH35XDRV\DRV_2S1P\WIN 98&NT40\PORTS.INF
Size 5KB
SHA256 af8b6b060338638048eaec5cbb0ca7f0c5f2e41da03cdb2e9fb05217f95f6e4b
MD5 ff0a808ce8768ca5f6e34b23815fb473
SHA1 47dbb9cd034ad18def073c3559fb43623a24df8b
SHA512 a7d0c060fa34095a10a434e33b9c03cc2c872560d8799645ccf9ef16efa7d09d3380f49b6c4b0243ee01c35680d0c7e389d39e12417a6d14ae845e58bfd20401
SSDEEP 96:zeOe8c4k0LDTVk0LDTqyk0LDT41NU9bk4f2buFpdv:zeOe8c4k0LDTVk0LDTlk0LDTANU+4f2G
MD5 SHA1 SHA512 SSDEEP

Submit Download

CH35XDRV2K.INF

Path C:\WCH.CN\CH35XDRV\DRV_2S1P_RA\WIN 2000\CH35XDRV2K.INF
Size 15KB
SHA256 1524ba82267ff873978902bc4d5e8611fceab2d299210eec9dbd6a94afe2b1d9
MD5 3695f2bb75858a74412237417bab86f4
SHA1 d298972743f2661d21b6a451ed93b60f456abdec
SHA512 ef61495db43398ba83e281c4fe2447a5e6ae98fd6a9fa3b4d5583ed8e4ff398d2eb52addd1db49aaf0e14f75d06db5e1222a1a201294899fa77bd78f880ad56c
SSDEEP 192:6jQS4PWnA4PWnCFvQj6ZrH6WMITOgU3a1tgFWDNmDMBaHJFSDZ:6z4PwA4Pw0vcJgDZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

CH35XDRV98.INF

Path C:\WCH.CN\CH35XDRV\DRV_2S1P_RA\WIN 98&NT40\CH35XDRV98.INF
Size 10KB
SHA256 3e95b42046ef6ca36c7bc002e998b472c8b4d5ab2757b8c9f4a4ade2005b9963
MD5 deb11bf3b326d4c5093e8b3d949dede6
SHA1 c26e331921518bb9a8914ab77a11d9234eb83994
SHA512 7a9f44c2aedf836594d3225348bb435f8d72c751b6c70ddfe3c29a8538031cb408d704791e7609ee0c43003339ca32c28668faeef10dc866c1f498416a1b3a75
SSDEEP 96:UTXQBh6ooIaWqWMN6M8Zn6IrUhksRUy4EDW+DW0hDqW4Dqjcc0am+Oc+NoOoF66+:UjQE4PWnfgq9NVNrJFSDZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

WCHPPar.sys

Path C:\WCH.CN\CH35XDRV\DRV_2SA\WINDOWS\WCHPPar.sys
Size 15KB
SHA256 412be5812440419596036573c91a4d610883296bd74dcaedc85fe8a2c513400a
MD5 c776c697323d964d05ce0f012418238d
SHA1 8362771b77e79439091abea5bf80b1ec6be984f7
SHA512 f978de5a5cd7fe0de09f44f8c3a826331552db0425f44464a60a64f2336c3ab0d6845322aae86b71640dae9ce154bb362e051d9fa159a6f4ac07172ae606e3de
SSDEEP 192:vU02C9NsFzRf5uDc+nuefhFP9IjJ1tlvpcVq97yrpRo3sXj353LcPFhl:99NsRffoh4FrGvo3sZLcJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

WCHPSER.sys

Path C:\WCH.CN\CH35XDRV\DRV_2SA\WINDOWS\WCHPSER.sys
Size 54KB
SHA256 901b654ce4daa20057d2bd736d43fcc46ccfcdd3c288f030437c0cee9effad94
MD5 66371ea97695a8791ab85dee36cf498e
SHA1 ee54c93d3abe20ca6b1321e9c96c8d1ce06d0d64
SHA512 db5cdb968c69da21300744ecf2ef27c7700282e095c5fa7e63d24a4f3f14b022a714889d3656de385a35fabe7003be43912974cce8455cb94f21445213719f21
SSDEEP 1536:CutzXWizKX8tFLRl1eGX23jB/X5+i+SO2nz:7KX87LIGX23Vh+hSO2z
MD5 SHA1 SHA512 SSDEEP

Submit Download

MPORTS.INF

Path C:\WCH.CN\CH35XDRV\DRV_4S128\WIN 8\MPORTS.INF
Size 33KB
SHA256 ecf3b81e5333a14a54b9974887e843ee773220329a947e0aa2f8ea419baa1424
MD5 f734e23c3072fbeef413aff8df5cbf91
SHA1 3f2812653e78c156c4cd5547c54623436c6a2554
SHA512 045bf247e731d14f599e66e0a671a3250ea27af73deaf3dcbb4ebbe1b381ee06d9c912a7aeb26e8cdb876b6dd4cce5b59cbcf69c27d58ca33c47395e8b5b3e39
SSDEEP 768:s4pULpW+pcZpa0psnp2qpElpsU7mlIHaWlp/cpfTpr6pbJp3YpXHpLGprNpvkpxq:sOUlWccTaysp2gE3sU7mlIHaW3/qf9r+
MD5 SHA1 SHA512 SSDEEP

Submit Download

PCISA64.sys

Path C:\WCH.CN\CH35XDRV\DRV_4S128\WIN 8\PCISA64.sys
Size 104KB
SHA256 e45db49b5bcd3793c974c3d9665f985ba5d2062161cc9969870317bf086290be
MD5 54b4b1aeea5362e2a12ef833d7bea1cb
SHA1 f329d617fd837d129935cbf5d6b64b013bd1ba9e
SHA512 049f38ff3621d1abec0a5508071ccd434b9c1b981f993f9e9463e3edbba61c42c818016e03bad870d4cafbad40126e0cda174f7dbdce36c80a8281a7b57c49d3
SSDEEP 1536:vixIceY+4kueKsHL9QiYpH9oSgFE578qldSJ8fuOC1SLUr0fHJAw4Jt:8St43A9Q/HWSgFEZ8qlkOm7a4Jt
MD5 SHA1 SHA512 SSDEEP

Submit Download

wchports64.dll

Path C:\WCH.CN\CH35XDRV\DRV_4S128\WIN 8\wchports64.dll
Size 47KB
SHA256 510556577e28896f16363d90d11b3f21decc173c8e963e6d3171ea4f21a188cd
MD5 f06c6675540498777a2bf974ade4efeb
SHA1 8e67b8f1952c2375cee66bbb109418f712504ce6
SHA512 7ef8817cbbab0160d333426439b25db2ddc4786063040360273dd63b0d94ce2d0208c8c3d97839261e6cedac1ce93c72658020872c4617a63f5fc2c066a28811
SSDEEP 768:sdGF+Yc9TsIIq/ZQir1P1//PShzAFiZdSJtH99wksste8:sdd9l1hPghmYdSbH3RDte
MD5 SHA1 SHA512 SSDEEP

Submit Download

PCISER.sys

Path C:\WCH.CN\CH35XDRV\DRV_4S1P\WIN 2003&XP&VISTA&2008&7\PCISER.sys
Size 84KB
SHA256 a9ef2e8bf93c61b627ad58c8f6386ed77eb4e9cd92013cb2d987d5fb3dbd3ebc
MD5 ecf1ffecb7943ee602febbcc2b49d2ca
SHA1 0960d5e5c23fb0047b8e623d9c3c89b6c1022c7b
SHA512 9b43411336b37e63250c8c9eae65272d01212cacd259369fb5d0961bf74b0766b8e3370554e0e6635f75e0d1efd0b1bc5ace6c62092554b67d9385d950f4431d
SSDEEP 1536:eNA4+Td3gSMnCnGxW0VZ0JjX20GmnS5tA6:ewdFMnGGk0VZ0JC0G8S5tA
MD5 SHA1 SHA512 SSDEEP

Submit Download

wchports.dll

Path C:\WCH.CN\CH35XDRV\DRV_4S1P\WIN 2003&XP&VISTA&2008&7\wchports.dll
Size 36KB
SHA256 969a3930e8626c4c0d5c5b1343c797df02b24d8a72b4d53d4def28285efd9acd
MD5 a8d0ee74e2a2006364c71e3786f679ab
SHA1 20fe9b537cf78a16459a90c48fee9bde022294ad
SHA512 60aeecc24394ffa48dfe86e1ba92ec7d04f85550f4f508779404b9d173880a53ab2ead98e1134560055c0bf5d5505048953d6e02a9aae9b4a5f506a0eb3cb56f
SSDEEP 768:WgOgwa8dJs5mDnscj18yT99wks3UbSHI:xJodK5m7b8yT3RGT
MD5 SHA1 SHA512 SSDEEP

Submit Download

MPORTS2K.INF

Path C:\WCH.CN\CH35XDRV\DRV_6S\WIN 2000\MPORTS2K.INF
Size 22KB
SHA256 390d70a64b0bc097d46407d13d2e05756337cee6563a3e4bdf263161c3c06a86
MD5 09ae8ab3264b718228ccf35d8eb28604
SHA1 880c959c2ddd0a4ddbb886b395aca43dd0564db8
SHA512 806460b889ed8ab51810995b0c10c498ac692c45988f5eca038d9bf9dd1dd9517a664ccad121874be441172257da5a3f9297b41e47e9942e67bc3755eee153ce
SSDEEP 384:p3x7UpU7npW7qpc7Fpa74ps7Lp27+pE75pxxEwPxtw0x2wpxnw2xIwbxBwAxawFe:z4pULpW+pcZpa0psnp2qpElpvlp/cpfx
MD5 SHA1 SHA512 SSDEEP

Submit Download

PCIPAR.sys

Path C:\WCH.CN\CH35XDRV\DRV_6S\WIN 2000\PCIPAR.sys
Size 26KB
SHA256 97a2391ba11678aa97464604fb10488115fdacd89c64c9c53e4b9d58ad6f154c
MD5 9deb2d3ef76ef5e6724909e5dcecee86
SHA1 8aa0faa036bfcfddd15a5932bdced924c291ea90
SHA512 ac1f7f69589a05706d40ecb41091eedc0979176284db76c910a286ea3833944499cb9038fc99fc9a429069d1f0bd9a4e33f56e4facb04a6f19dd1696080cb5ba
SSDEEP 384:X50+FJPIczHt8EJpsccYyl0cXO4/VUkbl8myNiKPeSbG3feJ2jiwJDK:Xa+FJrDt8E8ccbWcedqSNin3XD
MD5 SHA1 SHA512 SSDEEP

Submit Download

MPORTS98.INF

Path C:\WCH.CN\CH35XDRV\DRV_6S\WIN 98&NT40\MPORTS98.INF
Size 7KB
SHA256 67b9552b7352d8511f1fe299ff28c1ae3e55a3b5e79ac34ec76f944f52de377b
MD5 35f26d74089c96ca9b6c12b42043a4ab
SHA1 037e8dbc5050e1434ef8f4b5fbd4a889577fd110
SHA512 b47783a4a5f23d4ddd046f8c146b8b1e7bd088b68e7c545de90e03a747d8fe8969922400b295de82fa802458d85e83c8f586b9237017cd4c3d70b19f648abd82
SSDEEP 96:lcC0XmZ1YZ7YSYfYMYdgkf1NMiC2m6aWWi78uUGg2/YfEMt0se3zRFYR:lc/WkNMiC2m6aWWi78uUGg2JW7eDRFYR
MD5 SHA1 SHA512 SSDEEP

Submit Download

PCIMF.VXD

Path C:\WCH.CN\CH35XDRV\DRV_6S\WIN 98&NT40\PCIMF.VXD
Size 11KB
SHA256 429caeb0b92b67e8d7dda6b374ed3ee18b2c263d376756e6779ef833a3cb1fe0
MD5 33e7f2dfb324f5ded5e1b29c5248a9ea
SHA1 59283d2a37ee4f0dd51765ba1e0b2ecd20c41f28
SHA512 c2390c2fec6e5e29be429e75e8680c02e5d5bf06354ef1d8670daada7745b0a0c23e7d7b48509da7ed69a940231f2c067e608c5ac2122c0a1fcfdf408cc24db7
SSDEEP 192:SefEpCLuHFfMBzKkNzuFEz/m/JHM/8KVe1mq0SeevdldUCqNX8ApP:SeA7VSNzjzO/JMEmqMenmn8At
MD5 SHA1 SHA512 SSDEEP

Submit Download

PCIPORTS.DLL

Path C:\WCH.CN\CH35XDRV\DRV_6S\WIN 98&NT40\PCIPORTS.DLL
Size 11KB
SHA256 0474082e9274089b11abf9671cae5c806446ad785c1d8a1491faf4d98bd7ad2d
MD5 f92d1e09a5fabde503b4289091d739ff
SHA1 949c9db670ee977a971a6ad2168f675693139661
SHA512 8cf49c99d005b8fad6907f6e24678d2916bdf28150dcc70c51ed670d0aedb9a4ed3d5fdd44e0b3dd0e2c036d1e711100040ee3587a59bcda1e6ad21d578430bf
SSDEEP 192:Ve9teElohQR/IeX26uj9to/GMSNkODtjF7tkYM6PUPrx6+dciX:Veo+IeXaZt4mvJjFxHLzt
MD5 SHA1 SHA512 SSDEEP

Submit Download

PCISER.VXD

Path C:\WCH.CN\CH35XDRV\DRV_6S\WIN 98&NT40\PCISER.VXD
Size 16KB
SHA256 067dc6004bf861f84219ffd5152b7b5ace7e9efdd765954bf4c910e5203a2e52
MD5 40f7bd01cbe9e74154f68240a530ed7d
SHA1 7de548485c64ebbf2c3410baabac29de904cccb5
SHA512 8d2b9e16253f7ab0f92f4d9506ca5d76729ed56734c2f117f5ef203f8e528a8f47b0e212a45821e64f24434024b8228a38e58f4fd7039da1d517212a31c8639b
SSDEEP 192:KlyxyYlEgLxxaB68XVAyYfvXLGrW9+DZENzxojd:lRqg6B9X7UvXCC4ZEJo
MD5 SHA1 SHA512 SSDEEP

Submit Download

PCISETUP.exe

Path C:\WCH.CN\CH35XDRV\PCISETUP.exe
Size 270KB
SHA256 1ad33b6a8c4cf9f9eab5247ba6a29a57a8819cc0d5c94d3f24795db11bddf005
MD5 41e227f462e2290728951d604c50fbe3
SHA1 f833b3995083ba87bff9982029f1ab914e82caae
SHA512 f215a7b6ac911ff910779afabae48d5641c153b63610e1ae04b42ad3b7f0500267cfe56f131d63d52e97d680ce27c929a2b8fd4e9a18bf239838bed01f0200ad
SSDEEP 6144:Q41yQttgSq/Li9UkZ31mqRs64RQ1OOq2tPlo3tTTd5ceMLt:Q40QttgSQi9UkZDs64RQ1OOq2tKWZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

PCISETUP64.exe

Path C:\WCH.CN\CH35XDRV\SETUPX64\PCISETUP64.exe
Size 231KB
SHA256 abf69f1a32247db43a90bc42c1aa1adde393b07ccd136554342d038f9f895fea
MD5 c3c89a1d40d4065d9d1765aaf4cf272b
SHA1 83eec389b888ac4dca7c8209eb13cbb90978e16e
SHA512 04957ec7c50e8c026d6b46138c9883af147b25452a5f75ae497a2f90fa7622962d7d5294790b40bfbabfe57b7b016f63e5aedce4ff207c52bdaff84878337ba6
SSDEEP 1536:65tY8YZUF4SKqvqcVZ4PmTQd9kCGwb+uRMRJLYlPNoMJAlSZ1ZSnPn0LEHuZq7:mNKqvqT9kCGwbKfLwPNTAcZwMLEOZq7
MD5 SHA1 SHA512 SSDEEP

Submit Download

Logo1_.exe

Path C:\Windows\Logo1_.exe
Size 26KB
SHA256 fc1e9828ed72b98f9dfb81994b95c67ec725e805c35e5aa12f69af577196b232
MD5 1a39e02001515fa64b22fba313e07aab
SHA1 d87038505384fa555a7dded87e549d0b66805847
SHA512 12565cc03e9cc16fe77922767c37fd8168b6cb90978d47cc6ec94cbe68ed46c9d33f5a917f46c8c314b74489ae76323b0f804c387e34af2b6407709e2256dfc1
SSDEEP 768:u1ODKAaDMG8H92RwZNQSwcfymNBg+g61GoL:ofgLdQAQfcfymN
MD5 SHA1 SHA512 SSDEEP

Submit Download

_desktop.ini

Path F:\$RECYCLE.BIN\S-1-5-21-3169499791-3545231813-3156325206-1000\_desktop.ini
Size 9B
SHA256 47a22297ce31d17b0f37251ce63cf2eb146700451caab6dd0aa710d2526c8e42
MD5 4f2460b507685f7d7bfe6393f335f1c9
SHA1 378d42f114b1515872e58de6662373af31ab8c7b
SHA512 75dcca6b81ac47511b847a5c35be4bddbee425436f7bfd1347115e18b84f52a16a5c517bda0a5f5d0a1f2541aab80d764932d8018538cb112fa3b6c9977e95eb
MD5 SHA1 SHA512

Submit Download

memory/532-1163-0x0000000000400000-0x0000000000434000-memory.dmp

Download

memory/532-853-0x0000000000400000-0x0000000000434000-memory.dmp

Download

memory/532-860-0x0000000000400000-0x0000000000434000-memory.dmp

Download

memory/532-866-0x0000000000400000-0x0000000000434000-memory.dmp

Download

memory/532-870-0x0000000000400000-0x0000000000434000-memory.dmp

Download

memory/532-11-0x0000000000400000-0x0000000000434000-memory.dmp

Download

memory/532-2065-0x0000000000400000-0x0000000000434000-memory.dmp

Download

memory/532-5633-0x0000000000400000-0x0000000000434000-memory.dmp

Download

memory/532-6072-0x0000000000400000-0x0000000000434000-memory.dmp

Download

memory/2112-852-0x0000000000400000-0x0000000000422000-memory.dmp

Download

memory/2112-19-0x0000000000400000-0x0000000000422000-memory.dmp

Download

memory/2824-0-0x0000000000400000-0x0000000000434000-memory.dmp

Download

memory/2824-10-0x0000000000400000-0x0000000000434000-memory.dmp

Download