Malware Analysis Report

2024-10-10 12:08

Sample ID 240613-rcgktasajg
Target 864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed
SHA256 864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed
Tags
discovery upx
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed

Threat Level: Shows suspicious behavior

The file 864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery upx

Executes dropped EXE

UPX packed file

Checks installed software on the system

Drops file in Program Files directory

Unsigned PE

Enumerates physical storage devices

Suspicious use of FindShellTrayWindow

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-13 14:02

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-13 14:02

Reported

2024-06-13 14:04

Platform

win10-20240404-en

Max time kernel

52s

Max time network

32s

Command Line

"C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe"

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Discovery and Configuration Tool v2\DCT.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A

Checks installed software on the system

discovery

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Languages\Spanish.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\DeviceConfiguration\UnlockButton_logo.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\ConfigureButton_disabled.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\DirectIpButton_disabled.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\OnButton_disabled.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\OnButton_enabled.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Timezones\TimezonesSpanish.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Languages\English.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Languages\Portuguese.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\OffButton_enabled.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Logs\LastLog.txt C:\Program Files (x86)\Discovery and Configuration Tool v2\DCT.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Languages\Default.txt C:\Program Files (x86)\Discovery and Configuration Tool v2\DCT.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Logs\Log4.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\VI_Logo.jpg C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Initializations\ShowCompatibilityPrompt.ini C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Initializations\DCT.ini C:\Program Files (x86)\Discovery and Configuration Tool v2\DCT.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Initializations\NdeRefreshRate.ini C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Logs\LastLog.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Logs\Log4.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Languages\Default.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Languages\Default.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Initializations\DCT.ini C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Uninstall.ini C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Timezones\TimezonesChinese.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\OffButton_enabled.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Logs\Log3.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Logs\Log3.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Languages\English.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\OffButton_disabled.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Timezones\pcTimezones.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Timezones\TimezonesEnglish.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Languages\Portuguese.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\DeviceConfiguration\NewPasswordButton_logo.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\DCT.exe C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Initializations\NdeTimeoutLength.ini C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\DiscoveryConfigurationTool.ico C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\ENGAGE_Logo.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\ConfigureButton_enabled.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\ConfigureButton_enabled.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\OnButton_enabled.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\RefreshButton_disabled.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Initializations\DCT.ini C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Timezones\TimezonesSpanish.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Logs\LastLog.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Logs\Log5.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Languages\Spanish.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\DiscoveryConfigurationTool.ico C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\ConfigureButton_disabled.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\DirectIpButton_enabled.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Timezones\pcTimezones.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\OnButton_disabled.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Logs\Log2.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Logs\Log2.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\OffButton_disabled.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Logs\Log1.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\DeviceConfiguration\NewPasswordButton_logo.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\RefreshButton_enabled.png C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Logs\Log5.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Timezones\TimezonesPortuguese.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Timezones\TimezonesPortuguese.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Initializations\NdeTimeoutLength.ini C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File created C:\Program Files (x86)\Discovery and Configuration Tool v2\Timezones\TimezonesChinese.txt C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A
File opened for modification C:\Program Files (x86)\Discovery and Configuration Tool v2\Initializations\RefreshRate.ini C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe N/A

Enumerates physical storage devices

Processes

C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe

"C:\Users\Admin\AppData\Local\Temp\864e49643f02a5ef33a9b0b7861e909b8976e6667961991e4fc69968c027cbed.exe"

C:\Program Files (x86)\Discovery and Configuration Tool v2\DCT.exe

"C:\Program Files (x86)\Discovery and Configuration Tool v2\DCT.exe"

Network

Country Destination Domain Proto
N/A 239.192.20.20:8080 udp
US 8.8.8.8:53 20.20.192.239.in-addr.arpa udp

Files

memory/5032-0-0x00000000009C0000-0x00000000009C1000-memory.dmp

C:\Program Files (x86)\Discovery and Configuration Tool v2\Logs\Log3.txt

MD5 ecaa88f7fa0bf610a5a26cf545dcd3aa
SHA1 57218c316b6921e2cd61027a2387edc31a2d9471
SHA256 f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5
SHA512 37c783b80b1d458b89e712c2dfe2777050eff0aefc9f6d8beedee77807d9aeb2e27d14815cf4f0229b1d36c186bb5f2b5ef55e632b108cc41e9fb964c39b42a5

C:\Program Files (x86)\Discovery and Configuration Tool v2\DCT.exe

MD5 7379a3608a43b04d30e21a2f18fc840f
SHA1 80d9e7cc6cb18d59440978338063b75cd9265aef
SHA256 35418f60b51254b8c4875d5fe6de60a09249b509a65b1e67e331805635a77151
SHA512 c684691c28f417449374efde26f36af9512c7a9424d0244664d002c8b8e855295a0967de66d954a81c17a2ebf2972403e74259daf550f4ffe405da44bbf0383c

C:\Users\Admin\AppData\Local\Temp\AITMP158\AUninstall.exe

MD5 7076f5223743a164635c80a4c6bfceb1
SHA1 9daed2ed99d20075e1f4706aa9f3c766f791afda
SHA256 65818c4ed2d054d8fa2e689200dcb433ab7fa89c5045f6ae92845d1fe92c94f6
SHA512 2501739ce1a4e4ba577a28403a770676cffa2ebd694ce96bfa3b20644b843a5070062df814598b019759cb4ba4a70112c1d13ca16ba5afce58fba50fb5c4fbcd

memory/5032-101-0x0000000000400000-0x0000000000703000-memory.dmp

memory/5032-109-0x0000000000400000-0x0000000000703000-memory.dmp

memory/4352-112-0x000000007370E000-0x000000007370F000-memory.dmp

memory/4352-113-0x0000000000110000-0x0000000000554000-memory.dmp

memory/4352-114-0x0000000073700000-0x0000000073DEE000-memory.dmp

C:\Program Files (x86)\Discovery and Configuration Tool v2\Logs\LastLog.txt

MD5 a5ea0ad9260b1550a14cc58d2c39b03d
SHA1 f0aedf295071ed34ab8c6a7692223d22b6a19841
SHA256 f1b2f662800122bed0ff255693df89c4487fbdcf453d3524a42d4ec20c3d9c04
SHA512 7c735c613ece191801114785c1ee26a0485cbf1e8ee2c3b85ba1ad290ef75eec9fede5e1a5dc26d504701f3542e6b6457818f4c1d62448d0db40d5f35c357d74

C:\Program Files (x86)\Discovery and Configuration Tool v2\Logs\Log1.txt

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

memory/4352-118-0x0000000004EC0000-0x0000000004EC8000-memory.dmp

memory/4352-119-0x0000000005070000-0x00000000050A8000-memory.dmp

C:\Program Files (x86)\Discovery and Configuration Tool v2\Languages\Default.txt

MD5 a2684aaaaf204b666be44600514aac1c
SHA1 72493ad718ba42ce7f42a63ea3ec889c1a58d0b9
SHA256 7cfc2ba9ab368303b113eb1fbe0b67d4a1d1fb50272b4b7432668fe6a010148f
SHA512 bcc01f0ffaeeb9785543fa5c8dfc47564421b1fc495ec80a236b16494da52824972c3ae8746fb1e3b929ad5038e26a848bd98de9d33c705299ccadd30c445005

C:\Program Files (x86)\Discovery and Configuration Tool v2\Languages\English.txt

MD5 7bddd970dde7252ecb0788ec79bc3e57
SHA1 ac6a78bbd7b345b1feb24111dc4fb0b3dc08c9b5
SHA256 5c928575791517a92e29cf02986ec976054d5f251b2359d52fb3fc7623284500
SHA512 af8f6a7ac53cc21d25f34b4eea087174367735d5b75247eb82f25c3417ca8c51e2bd3096107fd487b9593bbf2b29322ffa14d4974214e8b779803e6b7f28adc4

C:\Program Files (x86)\Discovery and Configuration Tool v2\Initializations\DCT.ini

MD5 96a776bc5fa604fc37c2b6b233a5ca05
SHA1 64267f48e20574bf0f8bad7981d798881231b735
SHA256 f20eb7a29e3eac5ca4c44b6fadd057913b7024582ca594ad70b17916567d8675
SHA512 e054f5f70cfab58373703a6df36c7f524c781e2d297beb137885a8cf84f545ed6fa5414c7c636a99215430c2714fa7fd266ceabd32e7ac699f5a4656a45cd600

C:\Program Files (x86)\Discovery and Configuration Tool v2\Initializations\RefreshRate.ini

MD5 e7dba36bd441e7689821c21fb15b66a7
SHA1 f14e1d03aaba17ceb59d1c8fefe03cfdc03f9c5f
SHA256 77569778640b2e1db1b96cecc5baa074ddc65a5b46f833dfdfd171dfb5a2d08c
SHA512 6edf5844e47a66b4c3bf0d6bc21403fada56da303643f2b5fbee9023da44c8111f2c94ccf5c5a5326460bb3538bd929b1b263b76b6a346f60fd4989ca9e311b0

C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\ConfigureButton_disabled.png

MD5 ee3fecf1a3d674abc7ca95cb12f82c36
SHA1 b9a87a38c68e50f7df3a7a9eeff9c695bbbbe1f2
SHA256 ff27ac3a82882fc8e4522d9d0b07436a5f5a2c68d3a88b3c37bf9e5c75eb96d5
SHA512 aaf28d37399d681592ba629fa1c5ceaf4466be7e8d03c63e0ee6f837eb47415d8911d34a96a082c4dcef2c38d07bdb0117227426951367625b72d39fe4776a9c

C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\OffButton_disabled.png

MD5 5bf55f09601df71041d2e172f876c0e7
SHA1 f7c942b60dec6602c297eb1f0e307cd9ee40201c
SHA256 4f035732b3cecd5b829467a2aece040935d96e1f4c428328a2c4777f6d34bc0a
SHA512 983fa59b7329f2eaa838fa4b205fdfd118408f3f4faf4eac76534e166c8260b7ce24aae5859876a50a0fc91780467fb223187637ed49e3424ef09728a8546ea1

C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\OnButton_enabled.png

MD5 b88209573f785347f045d216df989060
SHA1 2e39a87c2226f9a3c6158a4e99c13511d757c5fb
SHA256 4e1212719d3c0bd63c0d3f145d562a57f1624ce4c069e600bbc33f05a9c7bb26
SHA512 73cebe2ed4f9fa20453b584bbfa1619e44ab2b0ea0c8c886a25823bb16a4b7ffb8a81878a1751c743de4c239adf9f4e6cf511326a5e5582972a75e95ca434166

C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\RefreshButton_disabled.png

MD5 9e0a8bdbeb25b85f9acd34a53a5a0e01
SHA1 26b95a454f6677eb6c56c512e5f09c850ee2a9d5
SHA256 7fb3664bbab7916d38f07c796680fbdbaf2ec94646011b5b631114a813bc6a38
SHA512 c710ca9cd9a3ee2019dd11c3ac28b29c38c6f5634eb9225f7d2234f95478d9d75496d5c96273e6d1d381e445600dee56d4bb34335e5bdbbf3b9792f7123e9571

C:\Program Files (x86)\Discovery and Configuration Tool v2\Initializations\ShowCompatibilityPrompt.ini

MD5 7469a286259799e5b37e5db9296f00b3
SHA1 8fff039853f5c2bbb8a28d056b579c7dcb7d137f
SHA256 f9171164593756e56fb197327b529a4955590566560dbe62d586bff41be9d297
SHA512 8239b1dbdb91857bbbc335efbe2c10e607ff2bd8509eccc7cae1a73c488ab26fc92f87e858c64d38850191c19f0189363567aca24a335ca223d72840364aa027

C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\DirectIpButton_disabled.png

MD5 fff953371964339ce2369c15016a6d17
SHA1 62a5cba62a5aac62275100705533fa6ed327749d
SHA256 6d4951963c38531589f103d0354e912a13c57e0403279f121a5d6f04a4798be3
SHA512 c60cb7ad8145646a82ffc0abf06ebf215b3137239246c247263b3ed699ea502bf7802aed4ce3d5eef997dd80d6fe316d1e5918e50ded5463eb74f4c07c0fcb4b

C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\VI_Logo.jpg

MD5 c75a79878c7f5899bfec8fbd410cfdc8
SHA1 a1edc5be08196be99a5449ac636c7a75818dc7ee
SHA256 43181bbc983c60f6206a8e6db7e944d81b9d6693a8150f3dfb1911bc30c38252
SHA512 7193a5a28fd949e42f2f157550524d8ecbba092fc00ad27914a43a0f3ad3500e53bf32f8fc58eef1fbfe397ffa9753f83f8bb3abcbd51ea739c4dea92957444f

memory/4352-133-0x0000000073700000-0x0000000073DEE000-memory.dmp

memory/4352-134-0x0000000073700000-0x0000000073DEE000-memory.dmp

memory/4352-141-0x0000000008610000-0x000000000861E000-memory.dmp

memory/4352-142-0x0000000008680000-0x000000000868A000-memory.dmp

memory/4352-143-0x0000000073700000-0x0000000073DEE000-memory.dmp

memory/4352-144-0x0000000073700000-0x0000000073DEE000-memory.dmp

memory/4352-145-0x000000007370E000-0x000000007370F000-memory.dmp

C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\OnButton_disabled.png

MD5 25f35cf2ffe2712373e9e4bf893c5af7
SHA1 2ea7bc11cb38d165cd3e2a4a4f2d7c8502601e49
SHA256 e7284223038f7b882f23f95485b462123d0a32d572f4dedaf4427e4ecfb9bb3e
SHA512 adba8e8c16f7a39e5c8637ded3642c890d9db3e0476359864f1a86c049980282becc71196792e98c5cd6a37848dccc5dec8e13d3fa86de51ba848a51e9966a96

C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\RefreshButton_enabled.png

MD5 7d2ce9eea42f4f9e49a6222632ea6991
SHA1 524dba253bcd6b0e46ee030d1c5f1d3b539878d2
SHA256 1bbe0bb996b570d0f3cdbb6e61408e63be536b94a2619b2c585d54e9a4e2724e
SHA512 88853ab384ca922530a445feb71e68e8ddd5bd921b31642e71676e552b8d8c029910096e7b5c122ad755f5c6748fa49977a5ad5dece50f1dcfc38adf34ac64af

C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\DirectIpButton_enabled.png

MD5 f565d830072cb3c48f4ff8d5386bd650
SHA1 ffbf60a2dc9da5896a2997dc74d5ea3085351468
SHA256 2d4b04d02cafe44fc4dee566b377e08f607647388a9790eeca0174e9dae01cea
SHA512 21b5a0d80e9216168e32bb3446f0e192fc731fdd39ac307a16c046b31f975db1e92f70c226d8b403f0fa3c9c932245ad090e342fb5412d2c892d038d3153a620

C:\Program Files (x86)\Discovery and Configuration Tool v2\Images\MainWindow\OffButton_enabled.png

MD5 ef80ea73252af80cdcef0864b5e67f30
SHA1 e0a080d73e1c64a2ed09d3f7e1e869362cfc8213
SHA256 34c993ccf337579b36644afcc2d65e9d0715186a00076546713931bbee74ed47
SHA512 3c0ad68da11e0b868f9ac3aa8b03321f32c1d26cc8f18f01819676cd2ca1ad6bf97db49fc87d294e43ee6154c06b4403db755269be00f3dba3838f0c1f72dc01

memory/4352-150-0x0000000073700000-0x0000000073DEE000-memory.dmp

memory/4352-151-0x0000000073700000-0x0000000073DEE000-memory.dmp

memory/4352-152-0x0000000073700000-0x0000000073DEE000-memory.dmp

memory/4352-153-0x0000000073700000-0x0000000073DEE000-memory.dmp