Overview

overview

10

Static

static

7

setup_2.exe

windows7-x64

10

setup_2.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    211s
  • max time network
    216s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/08/2024, 16:06

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    setup_2.exe
  • Size 149.8MB
  • Sample240807-tkh5qa1amn
  • SHA256 9cb372f91aacf03b1c8f6210d59cc76edb2b9df4d6151430720e798aa8db7bc4
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
rhadamanthysbootkitdiscoverypersistenceprivilege_escalationstealerupx

Malware Config

Signatures

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys
  • Suspicious use of NtCreateUserProcessOtherParentProcess 1 IoCs
  • Downloads MZ/PE file
  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • Checks computer location settings 2 TTPs 12 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 52 IoCs
  • Loads dropped DLL 64 IoCs
  • Modifies system executable filetype association 2 TTPs 5 IoCs
    persistence
  • UPX packed file 12 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Writes to the Master Boot Record (MBR) 1 TTPs 14 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  • Checks system information in the registry 2 TTPs 2 IoCs

    System information is often read in order to detect sandboxing environments.

  • Drops file in System32 directory 7 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 58 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 20 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Control Panel 16 IoCs
    evasion
  • Modifies Internet Explorer settings 1 TTPs 43 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 52 IoCs
  • Suspicious use of AdjustPrivilegeToken 24 IoCs
  • Suspicious use of FindShellTrayWindow 17 IoCs
  • Suspicious use of SendNotifyMessage 17 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Windows\system32\sihost.exe
    sihost.exe
    1⤵
      PID:2648
      • C:\Windows\SysWOW64\openwith.exe
        "C:\Windows\system32\openwith.exe"
        2⤵
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        PID:2492
    • C:\Users\Admin\AppData\Local\Temp\setup_2.exe
      "C:\Users\Admin\AppData\Local\Temp\setup_2.exe"
      1⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:1048
      • C:\Users\Admin\AppData\Local\Temp\sogou_pinyin.exe
        C:\Users\Admin\AppData\Local\Temp\sogou_pinyin.exe
        2⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Adds Run key to start application
        • Writes to the Master Boot Record (MBR)
        • Checks system information in the registry
        • Drops file in System32 directory
        • Drops file in Program Files directory
        • System Location Discovery: System Language Discovery
        • Checks SCSI registry key(s)
        • Enumerates system info in registry
        • Modifies Internet Explorer settings
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:4264
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe" --appid=skinreg -register "C:\Program Files (x86)\SogouInput\14.7.0.9739"
          3⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          PID:1368
        • C:\Windows\SysWOW64\regsvr32.exe
          regsvr32 /s /i "C:\Program Files (x86)\SogouInput\14.7.0.9739\SogouTSF.dll"
          3⤵
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:4896
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\install64.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\install64.exe" -i
          3⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:2892
          • C:\Windows\system32\regsvr32.exe
            "C:\Windows\system32\regsvr32.exe" /s C:\Windows\system32\SogouTSF.ime
            4⤵
            • Loads dropped DLL
            • Modifies registry class
            PID:3528
        • C:\Windows\system32\regsvr32.exe
          "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\SogouTSF.ime"
          3⤵
          • Loads dropped DLL
          • Modifies Internet Explorer settings
          PID:8
        • C:\Windows\SysWOW64\regsvr32.exe
          "C:\Windows\system32\regsvr32.exe" /s C:\Windows\system32\SogouTSF.ime
          3⤵
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          PID:4388
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe" --appid=eudc -uninstall
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of WriteProcessMemory
          PID:10024
          • C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe
            "C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe" /check
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Writes to the Master Boot Record (MBR)
            • System Location Discovery: System Language Discovery
            • Checks SCSI registry key(s)
            • Enumerates system info in registry
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:10124
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe" --appid=ucfont -yahei -extb6 "\"
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of WriteProcessMemory
          PID:4788
          • C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe
            "C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe" /check
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Writes to the Master Boot Record (MBR)
            • System Location Discovery: System Language Discovery
            • Checks SCSI registry key(s)
            • Enumerates system info in registry
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:2696
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe" --appid=pinyinrepair /k
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of WriteProcessMemory
          PID:3508
          • C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe
            "C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe" /check
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Writes to the Master Boot Record (MBR)
            • System Location Discovery: System Language Discovery
            • Checks SCSI registry key(s)
            • Enumerates system info in registry
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:4020
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGIGuideHelper.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGIGuideHelper.exe" --action=if --fp="C:\Program Files (x86)\SogouInput\14.7.0.9739\HYZhongHeiTi-197.ttf" --fn="汉仪中黑 197"
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          PID:1480
        • C:\Program Files (x86)\SogouInput\SogouExe\SogouSvc.exe
          "C:\Program Files (x86)\SogouInput\SogouExe\SogouSvc.exe" /Service
          3⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          PID:4988
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe" --appid=scdreg -ConvV1toV2InstPath "C:\Program Files (x86)\SogouInput\14.7.0.9739"
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of WriteProcessMemory
          PID:7192
          • C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe
            "C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe" /check
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Writes to the Master Boot Record (MBR)
            • System Location Discovery: System Language Discovery
            • Checks SCSI registry key(s)
            • Enumerates system info in registry
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:7232
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe" --appid=scdreg -register "C:\Program Files (x86)\SogouInput\14.7.0.9739"
          3⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of WriteProcessMemory
          PID:7268
          • C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe
            "C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe" /check
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Writes to the Master Boot Record (MBR)
            • System Location Discovery: System Language Discovery
            • Checks SCSI registry key(s)
            • Enumerates system info in registry
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:7312
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe" --appid=scdreg -CombScd "" "C:\Program Files (x86)\SogouInput\14.7.0.9739"
          3⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          PID:7344
          • C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe
            "C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe" /check
            4⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:7388
          • C:\Program Files (x86)\SogouInput\14.7.0.9739\userNetSchedule.exe
            "C:\Program Files (x86)\SogouInput\14.7.0.9739\userNetSchedule.exe" -uc 0
            4⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            PID:7456
            • C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe
              "C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe" /check
              5⤵
              • Executes dropped EXE
              • Writes to the Master Boot Record (MBR)
              • System Location Discovery: System Language Discovery
              • Checks SCSI registry key(s)
              • Enumerates system info in registry
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of AdjustPrivilegeToken
              PID:7544
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe" --appid=scdreg -cdefault
          3⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          PID:7492
          • C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe
            "C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe" /check
            4⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:7564
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe" -mutiforce -line 0 -border --appid=scdreg -delete 15097,22408,270,15183,15201,15486,5,6,15182,15153 1
          3⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          PID:7592
          • C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe
            "C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe" /check
            4⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:7644
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe" --appid=userpage -register_protocol
          3⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          PID:7676
          • C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe
            "C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe" /check
            4⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:7716
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe" --appid=check -o
          3⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Modifies Control Panel
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          PID:7740
          • C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe
            "C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe" /check
            4⤵
            • Executes dropped EXE
            • Writes to the Master Boot Record (MBR)
            • System Location Discovery: System Language Discovery
            • Checks SCSI registry key(s)
            • Enumerates system info in registry
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:7784
        • C:\Windows\SysWOW64\schtasks.exe
          schtasks /delete /tn SogouImeMgr /f
          3⤵
          • System Location Discovery: System Language Discovery
          PID:5336
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe" --appid=dictconv
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          PID:5692
        • C:\Windows\SysWOW64\IME\SogouPY\SogouImeBroker.exe
          "C:\Windows\system32\IME\SogouPY\SogouImeBroker.exe" -RegServer
          3⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          PID:5784
        • C:\Program Files (x86)\SogouInput\Components\SogouComMgr.exe
          "C:\Program Files (x86)\SogouInput\Components\SogouComMgr.exe" -installdoall "C:\Program Files (x86)\SogouInput\Components\TempComponents" -param "-setup -rdele -installplu 0 -removelist SearchSuggestionBundle#WonderfulWriteBundle#SmartInfoBundle" -silent -overwrite
          3⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • Drops file in Program Files directory
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          PID:2156
          • C:\Program Files (x86)\SogouInput\Components\biz_center\1.0.0.2387\biz_helper.exe
            "C:\Program Files (x86)\SogouInput\Components\biz_center\1.0.0.2387\biz_helper.exe" --type=bundle --subtype=inst
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Writes to the Master Boot Record (MBR)
            • System Location Discovery: System Language Discovery
            • Checks SCSI registry key(s)
            • Enumerates system info in registry
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:6244
            • C:\Program Files (x86)\SogouInput\Components\biz_center\1.0.0.2387\biz_helper.exe
              "C:\Program Files (x86)\SogouInput\Components\biz_center\1.0.0.2387\biz_helper.exe" --type=dbpdf --subtype=reg
              5⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:6308
              • C:\Windows\SysWOW64\regsvr32.exe
                "regsvr32.exe" /s "C:\Program Files (x86)\SogouInput\Components\biz_center\1.0.0.2387\biz_shellext64.dll"
                6⤵
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:8260
                • C:\Windows\system32\regsvr32.exe
                  /s "C:\Program Files (x86)\SogouInput\Components\biz_center\1.0.0.2387\biz_shellext64.dll"
                  7⤵
                  • Modifies system executable filetype association
                  • Modifies registry class
                  PID:8328
              • C:\Windows\SysWOW64\regsvr32.exe
                "regsvr32.exe" /s "C:\Program Files (x86)\SogouInput\Components\biz_center\1.0.0.2387\biz_shellext.dll"
                6⤵
                • Loads dropped DLL
                • Modifies system executable filetype association
                • System Location Discovery: System Language Discovery
                • Modifies registry class
                PID:8272
            • C:\Program Files (x86)\SogouInput\Components\biz_center\1.0.0.2387\biz_helper.exe
              "C:\Program Files (x86)\SogouInput\Components\biz_center\1.0.0.2387\biz_helper.exe" --type=systoast --subtype=reg
              5⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Modifies registry class
              PID:6316
            • C:\Program Files (x86)\SogouInput\Components\biz_center\1.0.0.2387\biz_helper.exe
              "C:\Program Files (x86)\SogouInput\Components\biz_center\1.0.0.2387\biz_helper.exe" --type=cp --subtype=reg
              5⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Modifies registry class
              PID:6328
            • C:\Program Files (x86)\SogouInput\Components\biz_center\1.0.0.2387\biz_helper.exe
              "C:\Program Files (x86)\SogouInput\Components\biz_center\1.0.0.2387\biz_helper.exe" --type=qimei --subtype=reg
              5⤵
              • Executes dropped EXE
              • Writes to the Master Boot Record (MBR)
              • System Location Discovery: System Language Discovery
              • Checks SCSI registry key(s)
              • Enumerates system info in registry
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of AdjustPrivilegeToken
              PID:6340
          • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe
            "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe" -daemon
            4⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:10076
        • C:\Program Files (x86)\SogouInput\Components\SogouComMgr.exe
          "C:\Program Files (x86)\SogouInput\Components\SogouComMgr.exe" -GetSugglist
          3⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:7432
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGBizLauncher.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGBizLauncher.exe" -lappid=configupdate
          3⤵
          • Executes dropped EXE
          • Writes to the Master Boot Record (MBR)
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          PID:8656
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGBizLauncher.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGBizLauncher.exe" -flauncher=1 -lproctype=yyb -lbiztoken=YYBTK_2_SG14.7.0.9739
          3⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:8412
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe" --appid=ShareBuffer
          3⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          PID:9100
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGWizard.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGWizard.exe" --appid=wizard -n
          3⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Writes to the Master Boot Record (MBR)
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          PID:9196
          • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGBizLauncher.exe
            "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGBizLauncher.exe" -lappid=configupdate
            4⤵
            • Executes dropped EXE
            • Writes to the Master Boot Record (MBR)
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:6612
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe" -mutiforce -line 0 -border --appid=scdreg -add "C:\Program Files (x86)\SogouInput\14.7.0.9739\scd\60393.scel" -s
          3⤵
          • Checks computer location settings
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          PID:9208
          • C:\Program Files (x86)\SogouInput\14.7.0.9739\userNetSchedule.exe
            "C:\Program Files (x86)\SogouInput\14.7.0.9739\userNetSchedule.exe" -uc 0
            4⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            PID:6608
        • C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe
          "C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe" /check
          3⤵
          • Executes dropped EXE
          • Writes to the Master Boot Record (MBR)
          • System Location Discovery: System Language Discovery
          • Modifies system certificate store
          • Suspicious behavior: EnumeratesProcesses
          PID:5044
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe" --appid=pandorabox -update
          3⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:3668
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe" --appid=fixlogin
          3⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          PID:9664
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGWangzai.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGWangzai.exe" -unzip=config
          3⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:9684
        • C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe
          "C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe" --appid=udchd
          3⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:9780
      • C:\Users\Admin\AppData\Local\Temp\WindowsRecovery.exe
        "C:\Users\Admin\AppData\Local\Temp\WindowsRecovery.exe" "C:\Users\Admin\AppData\Local\Temp\config.ini"
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious use of AdjustPrivilegeToken
        PID:3952
      • C:\Users\Admin\AppData\Local\Temp\WindowsRecovery.exe
        "C:\Users\Admin\AppData\Local\Temp\WindowsRecovery.exe" "C:\Users\Admin\AppData\Local\Temp\new_config.ini"
        2⤵
        • Suspicious use of NtCreateUserProcessOtherParentProcess
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:552
    • C:\Users\Admin\AppData\Local\Temp\WindowsRecovery.exe
      C:\Users\Admin\AppData\Local\Temp\WindowsRecovery.exe "C:\Users\Admin\AppData\Local\Temp\config.ini"
      1⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of AdjustPrivilegeToken
      PID:2596

    Network

          MITRE ATT&CK Enterprise v15

          Reconnaissance

          Resource Development

          Initial Access

          Execution

          Persistence

          Boot or Logon Autostart Execution

          1
          T1547

          Registry Run Keys / Startup Folder

          1
          T1547.001

          Event Triggered Execution

          2
          T1546

          Change Default File Association

          1
          T1546.001

          Component Object Model Hijacking

          1
          T1546.015

          Pre-OS Boot

          1
          T1542

          Bootkit

          1
          T1542.003

          Privilege Escalation

          Boot or Logon Autostart Execution

          1
          T1547

          Registry Run Keys / Startup Folder

          1
          T1547.001

          Event Triggered Execution

          2
          T1546

          Change Default File Association

          1
          T1546.001

          Component Object Model Hijacking

          1
          T1546.015

          Defense Evasion

          Modify Registry

          4
          T1112

          Pre-OS Boot

          1
          T1542

          Bootkit

          1
          T1542.003

          Subvert Trust Controls

          1
          T1553

          Install Root Certificate

          1
          T1553.004

          Credential Access

          Discovery

          Peripheral Device Discovery

          1
          T1120

          Query Registry

          6
          T1012

          System Information Discovery

          5
          T1082

          System Location Discovery

          1
          T1614

          System Language Discovery

          1
          T1614.001

          Lateral Movement

          Collection

          Command and Control

          Exfiltration

          Impact

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          BrandScdConfig.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\BrandScdConfig.ini
          • Size 256B
          • SHA256 e64f8a59bec9d0cf44405aa392926e29342226611443c012f6688ad01607974b
          • MD5 SHA1 SHA512
          Submit Download

          Config.cupf
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Config.cupf
          • Size 1.1MB
          • SHA256 750d1989b703bb2b983aa81bfcc1f5877bc2deca5ccf01e35eed222066cca8c2
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Correction.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Correction.ini
          • Size 106B
          • SHA256 39cba84fd6dde264a89f6ecff8b44145c93213265d9feddb7d175643645795f9
          • MD5 SHA1 SHA512
          Submit Download

          sgutil.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Data\Bin\sgutil.dll
          • Size 951KB
          • SHA256 355c38cb35ec0934a06034b3b934eac2e506fb04471de4ada0edffb18aa95df6
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          PersonalCenter.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Data\PersonalCenter.ini
          • Size 29KB
          • SHA256 d7d55005008d04c19cd8251c37bef947b997186573f12ba55ac613deb590a87a
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          ProtectConfig.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Data\ProtectConfig.ini
          • Size 216B
          • SHA256 6d880e2ceef0583b184db75b6b149f084e3cc3dcef8df66341ad8f12dfaeba44
          • MD5 SHA1 SHA512
          Submit Download

          integrity.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Data\integrity.ini
          • Size 15KB
          • SHA256 6231a9ce1f8c91286d1e70b30af7151ad9ceab20f54b478446baa76ee0bb6d24
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          integrity.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Data\integrity.ini
          • Size 15KB
          • SHA256 f342e2cccd254ff6c5f0cf009cd740751fd79d15af21a3c6fb21b22e55efaec4
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          integrity.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Data\integrity.ini
          • Size 15KB
          • SHA256 959780358f7376960550f26b2a6927e339db8db1b5997ebb7767c5e70710168a
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          integrity.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Data\integrity.ini
          • Size 15KB
          • SHA256 63fd19e8b7b0e120f317de3fd9037cd5b788fecf7820416dfec27a9c32fdd349
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          runtime.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Data\runtime.ini
          • Size 132KB
          • SHA256 293d0152d95d1d122d378473cb5e1e2a08492df619e33c6511070b5648782b19
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_ath_v2.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Data\sgim_ath_v2.bin
          • Size 29KB
          • SHA256 d204a1dbdd782bec804e6331e849bd73abaa659073b4fcb44e4373fc13a1af72
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gl.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Data\sgim_gl.bin
          • Size 10KB
          • SHA256 e11a93d11b290f9e8b55f5a2c6ac6bba3f9d286b73bea49ca45fcf23e32e4cf5
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sysmodel.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Data\sysmodel.bin
          • Size 4.2MB
          • SHA256 d20e01e2829fcf662a415ead924916ee10a36982c6a5a16df02b039cf25374b7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          userskinthumb.svg
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\FlashPreview\userskinthumb.svg
          • Size 1KB
          • SHA256 3ce6035accdad998b20b86cc1c2d374c1c0890951056ed2444d30afa032aeb82
          • MD5 SHA1 SHA512
          Submit Download

          仲夏梦之夜.gif
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\FlashPreview\仲夏梦之夜.gif
          • Size 13KB
          • SHA256 c53a13afb579134397c5be97024be8c7910c41e4a84eb7ea51f1570f3bcee503
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          咱们裸熊.png
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\FlashPreview\咱们裸熊.png
          • Size 7KB
          • SHA256 1516e6780b8af2d2eed008f93751a982e150030dadde2df1ab0a9bae4e56ba5d
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          机械键盘.png
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\FlashPreview\机械键盘.png
          • Size 13KB
          • SHA256 6ed7ae406ab20c51b8294775645943c9cc5bf7b0f1727b68dd19ac6b945fe810
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          简约.png
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\FlashPreview\简约.png
          • Size 7KB
          • SHA256 f1d4ad9cdf2c4c088a1807bc3286356fccef5ec8d58e97f1fb0f6e242fd06e2f
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          绿叶.png
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\FlashPreview\绿叶.png
          • Size 9KB
          • SHA256 8c388010b5ce29e70decee545613fab492a2fcdf9fe827bd17dc5a1f1220268b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          航海.png
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\FlashPreview\航海.png
          • Size 7KB
          • SHA256 34bf5968779c427631659d0cbc4cb6623a7fb67afc5784b1b0b2d63ab7a2c0d1
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          默认图片外框.png
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\FlashPreview\默认图片外框.png
          • Size 1KB
          • SHA256 c2d68f852f9769917940f7dc71968c13c496be6df34117fbf2da4f52de4c7a93
          • MD5 SHA1 SHA512
          Submit Download

          默认皮肤图.png
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\FlashPreview\默认皮肤图.png
          • Size 12KB
          • SHA256 de343407290de4abe4a939bbaf4471517188556a3e3290bfe63b3eb271e9e304
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          默认皮肤图big.svg
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\FlashPreview\默认皮肤图big.svg
          • Size 96KB
          • SHA256 5dde9cbc7ce533b77c7f090a565a9e3733b69c1e69dc0922964057c2b0c29541
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          默认皮肤图big_dark.svg
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\FlashPreview\默认皮肤图big_dark.svg
          • Size 142KB
          • SHA256 7d8e47a631bf315aee8bc2b2cbb0f2cde0ed4ed4964214c8b5c5cd49e5c03b09
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          FlashSkinPreview.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\FlashSkinPreview.ini
          • Size 306B
          • SHA256 02630f3ff2fa0bee9ecc16045a4d722fef63741a24086338b863d490647c6a99
          • MD5 SHA1 SHA512
          Submit Download

          Fuzzy.dat
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Fuzzy.dat
          • Size 172B
          • SHA256 f75a51f0135e67113e4a2fdd200f493aed108d71b5f2ebe59e02937b7620c530
          • MD5 SHA1 SHA512
          Submit Download

          HYZhongHeiTi-197.ttf
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\HYZhongHeiTi-197.ttf
          • Size 1.4MB
          • SHA256 cce4ddce6f13ab875cd7c5b15cd1bc1f42995cffe939b5877e4967cf4e04eae3
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          ImeFunc.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\ImeFunc.dll
          • Size 2.8MB
          • SHA256 cadd16c90f8facb5562a890f4e7721156228f502dca7217cb95e25ed710aa38b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Install64.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Install64.exe
          • Size 1.8MB
          • SHA256 cf7bbb70d3fce9c28d467107028ab8a9af527dd9a1a0305d47a9e749b1311505
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          MoHuYin.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\MoHuYin.ini
          • Size 104B
          • SHA256 23b8591c1c886f3fb3e692340d6fafd23e394fba3e6434942acf6c1e7abf12c6
          • MD5 SHA1 SHA512
          Submit Download

          PersonalCenter.cupf
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\PersonalCenter.cupf
          • Size 3.4MB
          • SHA256 1eae3b0079e9dd15186821e908f9f4d9256bd079539854be0c470bf2c42e2de0
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          PinyinUp.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\PinyinUp.exe
          • Size 5.4MB
          • SHA256 1e53f8827890f532dca5a85d92d80cf00168289a98f6e7f85ea84032860655fc
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Resource.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Resource.dll
          • Size 5.6MB
          • SHA256 2a4d8ad66529bac03a30b11d1cc6ac86699626fa4d8dff9dd0d06d8a2179a9a8
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          richinputconfig.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\RichInput\richinputconfig.ini
          • Size 2KB
          • SHA256 96d5172ba17b03db05363c5c9e7c39572c47101bddc01726b8941398a8f37f48
          • MD5 SHA1 SHA512
          Submit Download

          RightPopmenu.cupf
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\RightPopmenu.cupf
          • Size 2.5MB
          • SHA256 af157f1a2bd60a05c98a65e453f4f95bc54bafe57128f8e5334e11ad335fb61e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SGBizLauncher.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SGBizLauncher.exe
          • Size 3.0MB
          • SHA256 e2e217a877c0f5e1e9e154d7cbbeed5efcd20a9b219d3fd62acf7bf589ea5d14
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SGCurlHelper.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SGCurlHelper.dll
          • Size 2.4MB
          • SHA256 c3497ed22efdb81b9a7ae7d0c2dd2ef8f6abe92e274a64762bad9d7086530340
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SGDeviceModule.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SGDeviceModule.dll
          • Size 152KB
          • SHA256 4e31c93edbce76d38ffded03388b087b8d7114b0920cbddd048e64875cc4367b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SGDownload.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SGDownload.exe
          • Size 476KB
          • SHA256 b7ec13fe5ef9c99ae96ab1f4431d62e51e321459f228f5eb43920503051d3f42
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SGIGuideHelper.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SGIGuideHelper.exe
          • Size 6.0MB
          • SHA256 14f1f61b6292476b1b19fa615ac6bf26804c411aecf7ae9ffa0da19bc1cee5a2
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SGKaomoji.cupf
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SGKaomoji.cupf
          • Size 109KB
          • SHA256 8ab6fb67cd8c1cf29de87a4cdebb4ea34944fe0c087ee349a9ee61c035b3f88d
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SGKaomoji.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SGKaomoji.exe
          • Size 4.2MB
          • SHA256 88ec5c8d053d74942cd547e94f098cde20b9e621be090538af48806ab88b9e24
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SGMedalLoader.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SGMedalLoader.exe
          • Size 196KB
          • SHA256 4e239e630efdebb19846fe7ba7d6075b0eeeb3d171d7adc7bd35f4f768b8d9b2
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SGMiniBrowserHelperHost.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SGMiniBrowserHelperHost.dll
          • Size 757KB
          • SHA256 cf353cfb427250f7dc4b044d796a7b1b0c5a088cb1c4ebacd8fc4c2146ee55eb
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SGMyInput.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SGMyInput.exe
          • Size 12.1MB
          • SHA256 93c48faa9c80adaf09d83ba60574c90c9d8b4b93a535cbb473ca79949a8d1e67
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SGSmartAssistant.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SGSmartAssistant.exe
          • Size 14.0MB
          • SHA256 9dad7dc1ac5f224e8988d0480ec052ce50d4862e4459e73afd0dc5fc73fb0d30
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SGSpeechManage.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SGSpeechManage.dll
          • Size 3.4MB
          • SHA256 d77154164eaf56340a275aa6629da41c6c36107f83558a34c600c746b7e931fa
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SGTool.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SGTool.exe
          • Size 13.1MB
          • SHA256 012c58fb3d9ec2ab9339bf9c2605c2b1e64fc4cba2d7c4b71eab53f70c488f29
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SGWangzai.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SGWangzai.exe
          • Size 7.0MB
          • SHA256 de88907d935dcae7db8d1f32236855e3392ef0b9cbc40eaa4d4280232251ea8d
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SGWebRender.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SGWebRender.exe
          • Size 403KB
          • SHA256 17f31209a37e84c1afade28b94c3d4bbb3a2dde4ed65fc8e0d5838bf0c1e11ba
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SGWizard.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SGWizard.exe
          • Size 6.0MB
          • SHA256 725e35504a69546fbaf3c5260937e3cc3947a97e79a2f9cf00d559f42bc15686
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SearchCand.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SearchCand.dll
          • Size 3.7MB
          • SHA256 5202450162ef7feb49ec36ec6b80d6e393a0654189a10de05acbae1380fd6bd4
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SearchCand64.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SearchCand64.dll
          • Size 4.5MB
          • SHA256 6a1a40db2a90dfcf620af2b59e15e9e8cf504e58e84f7dfdd031bf876dacadce
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SetupUi.cupf
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SetupUi.cupf
          • Size 1.0MB
          • SHA256 eda6d0eb05cdcc1941f67f8df5c63a91adeb073cf64c80a0276385a04a4d13ec
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          ABC.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\ShuangPinSchemes\ABC.ini
          • Size 331B
          • SHA256 f183f4bbe768d9d3ef22f2da600fb26bfab1614ad0bf3015585d2c16e07decc0
          • MD5 SHA1 SHA512
          Submit Download

          GuoBiao.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\ShuangPinSchemes\GuoBiao.ini
          • Size 696B
          • SHA256 15e8a8c80c43779076c22e6a1b319592e8b320e1d64c2a0c289067a2801c6475
          • MD5 SHA1 SHA512
          Submit Download

          MS2003.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\ShuangPinSchemes\MS2003.ini
          • Size 333B
          • SHA256 b6114525737f0bb1a75946b3be62515f20d4e39387f332b7886fa6180dee6e68
          • MD5 SHA1 SHA512
          Submit Download

          PinyinJiaJia.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\ShuangPinSchemes\PinyinJiaJia.ini
          • Size 329B
          • SHA256 373a807fe638ba5809d9bed9c1f8bd862a584323a11e39241ef1d7dbacfd77f4
          • MD5 SHA1 SHA512
          Submit Download

          Sogou.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\ShuangPinSchemes\Sogou.ini
          • Size 333B
          • SHA256 58337880b8037697b3efa40d7a055093cdea28ce59f251bdba1f27543283dd82
          • MD5 SHA1 SHA512
          Submit Download

          XiaoHe.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\ShuangPinSchemes\XiaoHe.ini
          • Size 312B
          • SHA256 c7a3c1e60d7114786d680e68e8ecf391fe01fe07da57cbdf18b7a14ce803bc5e
          • MD5 SHA1 SHA512
          Submit Download

          ZiGuang.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\ShuangPinSchemes\ZiGuang.ini
          • Size 332B
          • SHA256 606cbb2968be32fc6746f15b2c053f7efdadb01f9f4020182c7439317423ec68
          • MD5 SHA1 SHA512
          Submit Download

          ZiRanMa.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\ShuangPinSchemes\ZiRanMa.ini
          • Size 329B
          • SHA256 a495d7ad20130758704f95d48aff37db1c8ba2d8103f48e1730a984a58f21806
          • MD5 SHA1 SHA512
          Submit Download

          Skin.dat
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Skin.dat
          • Size 125KB
          • SHA256 0880dcee604695487acb6c14e74cf47cfd4fb8b41ec45485823b4ffde667b2a2
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SkinDark.dat
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SkinDark.dat
          • Size 1.0MB
          • SHA256 6a5e486f52da8aa8e119bd484a4a5731cb5575780c66e65371ed4fb8057c2ebb
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          @downloading.png
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SkinPreview\@downloading.png
          • Size 894B
          • SHA256 aa264cd427b0d5ecd6409002ac76b1c4d18c60f1d8f1cdcc4b16a2b253001491
          • MD5 SHA1 SHA512
          Submit Download

          SmartInfo.cupf
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SmartInfo.cupf
          • Size 583KB
          • SHA256 b31e842aae6a6d383f45dd5a8447a562b2be3c433eb492e0070d541ae5b50366
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SoftKeyBoard.cupf
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SoftKeyBoard.cupf
          • Size 24KB
          • SHA256 5937a7e8788d2a3f0f8957d164aabc548499c71b3f2db1d86fad04168dc14bdb
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Sogou Cell Dict.url
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Sogou Cell Dict.url
          • Size 88B
          • SHA256 ec1eebb1085475d348cba8eae1d1340f9e2e0d8288eff0e51fb5ec5de61fb4a9
          • MD5 SHA1 SHA512
          Submit Download

          Sogou Feedback.url
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Sogou Feedback.url
          • Size 92B
          • SHA256 c3bfd32dae5e7f043d010facf0205e7b7830bb7a2cdff703320fce196a7e9949
          • MD5 SHA1 SHA512
          Submit Download

          Sogou Forum.url
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Sogou Forum.url
          • Size 87B
          • SHA256 154a43e936309f3e572fe5349e4fba30a01d70da31b218eb174500c0f1ccb212
          • MD5 SHA1 SHA512
          Submit Download

          Sogou Helper.url
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Sogou Helper.url
          • Size 88B
          • SHA256 935aac4eb744439e92a66d16d667876fce5964adc4a23a4d6ca5eea56d4442d3
          • MD5 SHA1 SHA512
          Submit Download

          Sogou Pinyin Ime.url
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Sogou Pinyin Ime.url
          • Size 92B
          • SHA256 cb8871ca3243955a58313d277d8667392d7424e973c3ee644c0f051cd035098e
          • MD5 SHA1 SHA512
          Submit Download

          Sogou Skin.url
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Sogou Skin.url
          • Size 88B
          • SHA256 2fa962120b0df5ca8cc9a770e4760b35330cab73557ba360142e39c97fdd8efa
          • MD5 SHA1 SHA512
          Submit Download

          Sogou Tutorial.url
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Sogou Tutorial.url
          • Size 89B
          • SHA256 8fd3d8bfaf13462f48dc16acf2eb8ac8f73b1c30d248bdc97da1967443b149eb
          • MD5 SHA1 SHA512
          Submit Download

          SogouCloud.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SogouCloud.exe
          • Size 3.9MB
          • SHA256 17887b929de3c6e8917efac67f222c72b2d5ed043d9f863df5aba9d3e832cbe5
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SogouImeRepair.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SogouImeRepair.exe
          • Size 197KB
          • SHA256 c974caad84fdd78af878844df3b71dc9c67ab57cd85eb107de5ae7e244077aa3
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SogouTSF.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SogouTSF.dll
          • Size 96KB
          • SHA256 3ff94adde3651b50a0f62e3facd6ff55923fbfe82dca7efe0ccce9d99a8d91c8
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SogouToolkits.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SogouToolkits.exe
          • Size 742KB
          • SHA256 75ee58f9466d4549e1e2608f68eb70a2dd5c77555978810f48b5488e0db771ce
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SogouToolkitsCore.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\SogouToolkitsCore.dll
          • Size 372KB
          • SHA256 536048da88580acc7ea0e76b8e0699017f6c38ec83065849754d43650e707425
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Sogoulog.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Sogoulog.dll
          • Size 592KB
          • SHA256 2242f4bb95b9c8dfc725671802a0341e6cb4d925c768d44efba188b733281584
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Sogoulog64.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Sogoulog64.dll
          • Size 785KB
          • SHA256 96db221d2abbf558d19e160eca5a9a0440bd7e6900b9a18ef76ba37e61993c83
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          ThirdPassport.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\ThirdPassport.ini
          • Size 4KB
          • SHA256 1adcfb09c56087256aebdcd9b611cda7b32000fde3a9bec3fd659eb1862c17dc
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          QQ.png
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\ThirdPassportIcon\QQ.png
          • Size 880B
          • SHA256 e2b06b13f08ac43783778551685865bef280c5db9beb22efde73b12786fccaac
          • MD5 SHA1 SHA512
          Submit Download

          renren.png
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\ThirdPassportIcon\renren.png
          • Size 691B
          • SHA256 9c2a168f8cd5b9c96bfb6a9ad142aff8e6e09eca4df1e0e76457afd1c8000d64
          • MD5 SHA1 SHA512
          Submit Download

          sina.png
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\ThirdPassportIcon\sina.png
          • Size 650B
          • SHA256 017e2493456b1adecdfb92c1a90cfa56307aa3fac626bf261813b0bc3c00a103
          • MD5 SHA1 SHA512
          Submit Download

          weixin.png
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\ThirdPassportIcon\weixin.png
          • Size 1KB
          • SHA256 d14396d0d6af33f39f464d083af604421a6ca8bd3e9eb22ee73f96925c5984ef
          • MD5 SHA1 SHA512
          Submit Download

          UIPlugin.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\UIPlugin.dll
          • Size 7.2MB
          • SHA256 a5f1e1ff5920fe0c0c88f90eb8d9f53a11df071499685d9e3fde36ee26631db7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          036C50E61F6B09BF101E96C9E368A3D9.ico
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\UrlGuideIcon\036C50E61F6B09BF101E96C9E368A3D9.ico
          • Size 1KB
          • SHA256 8c8f2de2b830fa0a1123846c9d607a405b2893c8a8818905e659fa525d91ed88
          • MD5 SHA1 SHA512
          Submit Download

          UrlIconList.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\UrlGuideIcon\UrlIconList.ini
          • Size 3KB
          • SHA256 5fc571cf1878f440d53ea7581120cfb25be9dbce729b0cde3aea4c21ca78f49c
          • MD5 SHA1 SHA512
          Submit Download

          UrlSignatureV.dat
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\UrlSignatureV.dat
          • Size 67KB
          • SHA256 31325b48d8835364dfade58f526cf8a5f5bd99a5d37d28967239f85aa87ccdaf
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          UserExportDll.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\UserExportDll.dll
          • Size 3.0MB
          • SHA256 dc1c3af84ea40c9bf9cf57e7cdecb429b8ed3869e54099b382fb5ad714f85a2e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Wizard.cupf
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\Wizard.cupf
          • Size 581KB
          • SHA256 72c7d106a91f178cda9349182adec9072b45325b2a9a7db010409d34787da3dd
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          ZipLib.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\ZipLib.dll
          • Size 216KB
          • SHA256 241456755b9e5612e20502583615b7a4e519fbd0c95aca1222e0de3dda8d4d38
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          ZipLib64.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\ZipLib64.dll
          • Size 265KB
          • SHA256 37cd667e0ca921e284900d762d52c8bd48e4def132d2437e1d4f1f6c14816e61
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          beacon_sdk.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\beacon_sdk.dll
          • Size 1.8MB
          • SHA256 651a573aa2d36658a2958e22a265546c48b8d965c74d01b73afb3bab3ec81d51
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          crashrpt.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\crashrpt.exe
          • Size 5.4MB
          • SHA256 29008b10996dddedb95764ed3ee96f29be8616a98fc1e5622e0e346f0a51cc48
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          default_repair.cupf
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\default_repair.cupf
          • Size 214KB
          • SHA256 68859a00d282138b5f5eafbada90b0a4cfe9fdb7d4a1184c862985488b16fdf4
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          kaomoji_sugg.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\kaomoji_sugg.bin
          • Size 51KB
          • SHA256 3257e7ee90bb468ba433f95aa197810078b0d65ada77362224dc3104fc655c6c
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          pandorabox.cupf
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\pandorabox.cupf
          • Size 358KB
          • SHA256 99cbc5f02add00736e10b898e147060ff3b660c5802689b40c92c23a21e0d39f
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          punctures.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\punctures.ini
          • Size 2KB
          • SHA256 47407b278fae453e4041afc5bf632c9236f85ebfc0b9445dee3a434ca8610b5d
          • MD5 SHA1 SHA512
          Submit Download

          qimei.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\qimei.dll
          • Size 894KB
          • SHA256 69bcb62b0931f90e9c029bd98dbdb188fce4725c557a9e01acdbafebcf3550f7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          richinput.cupf
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\richinput.cupf
          • Size 282KB
          • SHA256 f00d13c903e40100cbb9a9f0cd14b0dc2f518d6ac075079e93de8ed8e2f749d2
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          60393.scel
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\scd\60393.scel
          • Size 16KB
          • SHA256 6845f13f0392a2b6e6d4cd058f3400286f933174b0e3686c6cf38b6e2be473c0
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          tree.png
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\scdicon\tree.png
          • Size 1KB
          • SHA256 514cd0bf87e30d87ff42ca0a16a0ad1f62ef3978a0f5615997d1a392d6929efc
          • MD5 SHA1 SHA512
          Submit Download

          scdlist.ini
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\scdlist.ini
          • Size 46B
          • SHA256 5abc7d8e6e2f27affe1a79e7f36e52f6ccb85b5b0e29ad33f110412e804453dc
          • MD5 SHA1 SHA512
          Submit Download

          screencapture.cupf
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\screencapture.cupf
          • Size 244KB
          • SHA256 89c737b904e6f80e39640bafd03e27f7cebd1b4bfbfff2b99c2ec0bb9708b1da
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          screencapture.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\screencapture.exe
          • Size 1.6MB
          • SHA256 9d3a5d10a108067d4e675bba966756950232cd6181c3d120feb2a2bac25badde
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgfeedbackhelper.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgfeedbackhelper.exe
          • Size 2.6MB
          • SHA256 46f623610a89b978bc9fb86378a5b9ea070307c71c016fd32c888bd925667e07
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_InputStr.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_InputStr.bin
          • Size 4KB
          • SHA256 19b8d0c6529c14f51f54171ba230592b0110ae915e9c79862622c6d6bb851541
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_aid.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_aid.bin
          • Size 47KB
          • SHA256 9ff8922abf4fc0941f9ebf31e2cd79776a62d6c0fb0513b83b4c1c5c43deb552
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_bh.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_bh.bin
          • Size 228KB
          • SHA256 f4d467bc25567eb5e292bf46b27dea8e671894263d95885054cbdb3e60cb51dc
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_bigram_serdata.bin.630211129
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_bigram_serdata.bin.630211129
          • Size 428KB
          • SHA256 accf9763207d8ae4f5155538fbdc829c58a3ec10ba916bb3415c32d03bf04588
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_cor.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_cor.bin
          • Size 191KB
          • SHA256 bc5b107db00ab88f7bebf10b9493d9d2bd45e0099b1ab9c76bb937d4da2c7d65
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_em.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_em.bin
          • Size 77KB
          • SHA256 08a9e8bf5d594c9e427559ff6b987e985b46d3319e923996917ef4682900447b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_em_physical.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_em_physical.bin
          • Size 77KB
          • SHA256 9099b3378ee7cb67204d7d5948963505a1b0aa0fed76b94272eebc58bbb0ca28
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_en_sys.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_en_sys.bin
          • Size 270KB
          • SHA256 2546d329d99657621ddb1f4b1ce6cf3b5b17de4c19e313b114362883120e546a
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_fix_first.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_fix_first.bin
          • Size 635KB
          • SHA256 61a56e271bce23ecfc5a5071f431d226ac08c328ee4c5eddda30994a77423288
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_aa.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_aa.bin
          • Size 8KB
          • SHA256 19ea1f40b60330c52c040a255f1954d1328d0d7b67ef7c80704693df06bf27cc
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_abg.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_abg.bin
          • Size 72KB
          • SHA256 551aaa9786b28609cc2e46fc5c70cf5874db42a10da899ebc792bc738e7e9cf2
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_bh_ext.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_bh_ext.bin
          • Size 3KB
          • SHA256 f6bdbfeecff42304ec2eff95b0761d35b1152d458185b9add50b0d3d8475bd51
          • MD5 SHA1 SHA512
          Submit Download

          sgim_gd_bigram.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_bigram.bin
          • Size 10.3MB
          • SHA256 a5feba121e346977b8b5cc0ad4f3979ae745aa97eaaf1a2c43b258ed4a4d71e8
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_blfx.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_blfx.bin
          • Size 74KB
          • SHA256 7ffe81474f963799d33c211deb57c5e0e2272d1c7efcb37639e829de2e68c76e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_br.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_br.bin
          • Size 239KB
          • SHA256 b36bcbe51a5ecfde9a2358cde6eb312ec5797876145d20e56f00ef872891f86f
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_bsa.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_bsa.bin
          • Size 96KB
          • SHA256 a30277308a44ce498d35caf246256ed48f1d979a8526de73eac4ef8e6d109526
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_ca_common_bi.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_ca_common_bi.bin
          • Size 225KB
          • SHA256 91d1672d0c51113e3d3700f74bc0a49c6d07ceabc3c114e8322e90e8608c0819
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_cagram.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_cagram.bin
          • Size 1.3MB
          • SHA256 e442fc5814919d4bbd7c65bd4b5c75d1b5f5b37104ae3c123bc5c2f25ded2328
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_cf.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_cf.bin
          • Size 1KB
          • SHA256 267cf332b957de89310892be31394683f4062a4f62281a27188a3dfad549dea5
          • MD5 SHA1 SHA512
          Submit Download

          sgim_gd_cloud_ca_convert.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_cloud_ca_convert.bin
          • Size 68KB
          • SHA256 3366e0450080f3558016d8f7986eb0ff701b33533ecc7aa7f3fb58c4cb9155ba
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_csmile.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_csmile.bin
          • Size 26KB
          • SHA256 bd861366b5a43ca63d3d5bacbe49c41166bad14a301aafddc2f1586cb403fb96
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_em.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_em.bin
          • Size 93KB
          • SHA256 de070f393cc042cea2e1ca07e1e9478ae7aa39969da762439f7627b75a78f835
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_em_wx.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_em_wx.bin
          • Size 4KB
          • SHA256 e4d7198e114f0808628a7c7c27dd4591ada49917cf4ede7e00fcc96bed769b18
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_grey.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_grey.bin
          • Size 22KB
          • SHA256 71f792735eeeff98c58f28c58040e4e79e50ee433fea4d7886de815793ff33be
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_hmd.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_hmd.bin
          • Size 4KB
          • SHA256 6f729ccb2d48fe83368d6fddd9b0c0a826cbd63362a7cd5e09e3fa1a776b3342
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_nicheapp_black.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_nicheapp_black.bin
          • Size 240B
          • SHA256 d51fdd62610d10118042cd632a5e3786c3a8bafd008a5210044935a8914e36c2
          • MD5 SHA1 SHA512
          Submit Download

          sgim_gd_nmode.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_nmode.bin
          • Size 254KB
          • SHA256 6db20c5197cbe3a2c179bbaf27f42cb99047f62a9b77a143fde83e996404404e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_old_sys_serdata.bin.630211129
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_old_sys_serdata.bin.630211129
          • Size 5.3MB
          • SHA256 4242c97e2295f8897d1b74a81b4b3cd4848aa0ab0b5edd1784f817556359f3a9
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_py_ext.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_py_ext.bin
          • Size 404KB
          • SHA256 ef5a33ca3d2f063c877823cdda9d8613168a32864cb9fc378def7704752b3853
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_smartInfo.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_smartInfo.bin
          • Size 93KB
          • SHA256 a329c5a0cb030065810b3813b139654dd0b4d7e14fc76a46dfb75a5aba014604
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_smile.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_smile.bin
          • Size 267KB
          • SHA256 75858f13d374b5c8d57458faaa815b6d8252d554d9f816f25aa87bdb0fa3458d
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_splt.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_splt.bin
          • Size 2KB
          • SHA256 bbf6ada3906f1955b4dadca2d4aa13cb8a8b525df8f77436eb731cbbdd187823
          • MD5 SHA1 SHA512
          Submit Download

          sgim_gd_sw_sys.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_sw_sys.bin
          • Size 142KB
          • SHA256 32361cc9032022362940ddf1e4b09967382b2ca3c4d48399ae4828faa9944dd6
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_sw_ts.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_sw_ts.bin
          • Size 122KB
          • SHA256 b14b65a1f2d0a3808ab7c73e1f84e30e2c5c43139b988be733ba0641e2c5506a
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_timeaware.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_timeaware.bin
          • Size 19KB
          • SHA256 662cdc880430e64337943e46db784603434d21d00b3a0630b71d79dfdef650aa
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_trad_conv.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_trad_conv.bin
          • Size 162KB
          • SHA256 a6678d3f211b065e2fd9620c034879de58f451c1b0a64cc722426b125cc95ccb
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_ucd.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_ucd.bin
          • Size 307KB
          • SHA256 b39b790b2c0f44dc2d924313a6a8f935eb1b2864164919544a7e3606744556e0
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_um.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_um.bin
          • Size 42KB
          • SHA256 220792ff0a250aaa08316abbf966e9bcb119ade0c2dd0f34b941789d13fc9fbd
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_umodel.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_umodel.bin
          • Size 2.5MB
          • SHA256 615a0a600a6d6043883398e043fd6f0d9897bdece11566ba9b0e7e5336c4fb20
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_gd_zly.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_gd_zly.bin
          • Size 35KB
          • SHA256 9926e35ad98bc1fc7ae28ec9d3c15ffd53516278f1f849c55e81c56595932a96
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_keymap.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_keymap.bin
          • Size 304KB
          • SHA256 2cbe60eeaaec6cde4d9a63cce3a88775fdcc969de1f8e401b7087fbcf6ad0946
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_lm.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_lm.bin
          • Size 520KB
          • SHA256 618a18bca043b5556eacc17ab338d52c2b495032f5dbdba4c2cbe1f6e266a6aa
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_lm_physical.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_lm_physical.bin
          • Size 520KB
          • SHA256 938f7dddf89498fce20039e2bd8604f2ecc30baa6bb22d5505bc7a25311bf0ae
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_phrases.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_phrases.bin
          • Size 4KB
          • SHA256 490e3fec89812371b32852be72fa926392bc9b950e3301ccadd6eb2fa1c085a9
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_prefix_table.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_prefix_table.bin
          • Size 6KB
          • SHA256 ff82baf93040b154b601a30a1f6c84aa37b07afb5cc873d8ef5b7c2d31d676cd
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_py.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_py.bin
          • Size 15KB
          • SHA256 6119128d41ece84fda2f71b323fc041e1575c6619fb1db1afce2a10bde5005a7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_pyslm.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_pyslm.bin
          • Size 168KB
          • SHA256 3f0ed3c1111441ac9da4246a5751d39a0c81c27adbc64df091eae2715169c805
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_qr.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_qr.bin
          • Size 7KB
          • SHA256 397ee75c376798754235a8a911e883386c97f763f3c81f8d6c128abd740ecd7f
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_quick.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_quick.bin
          • Size 416KB
          • SHA256 5b3e49ca88b835c3f2475c89d5365bf3870a9b6b31fba332bcc84e18a0bc0a2f
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_sp.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_sp.bin
          • Size 1KB
          • SHA256 a316165f5c9ae1b33a4738057897d230dd7aaa10b4a896ed3698779b8f4b09f6
          • MD5 SHA1 SHA512
          Submit Download

          sgim_sys.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_sys.bin
          • Size 4.2MB
          • SHA256 e7f05975eb92815ce540d8f7601c2331a079967fa53d3b21e2213de1802a6605
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_url.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_url.bin
          • Size 72KB
          • SHA256 3b030596efb58c4aa8786a19f4f195aab47db69bde95f4bd89337d5d1f95b3ac
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_urlGuide.bin
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sgim_urlGuide.bin
          • Size 167KB
          • SHA256 d16bcd6c186c87c5ec555bc32ab94d379470232bd1c8d74d313381d79497f5fb
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          shiply.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\shiply.dll
          • Size 7.2MB
          • SHA256 2eb5e1a5955be683a855d06ee21fefe956f9df1417fda77b466b7705ebcc1a50
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          skin_btn_tips.cupf
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\skin_btn_tips.cupf
          • Size 23KB
          • SHA256 10449d5f0a3951b72eed34ce1d70b4b9f343646df6ebc46bfdfaf3cedf60a1ae
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          skin_recommend.cupf
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\skin_recommend.cupf
          • Size 261KB
          • SHA256 9d6cfb94289c44098df78ce9a89597783493726427c8aef94861bfe6fa478f7b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sogou_torrent.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\sogou_torrent.dll
          • Size 1.9MB
          • SHA256 6610ea4dec164d4bd28b3ca648aa472f7fe72974a31fe7f59f4163adbfdf6e79
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          ssasr.dll
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\ssasr.dll
          • Size 997KB
          • SHA256 9d3f1854c671eaaccc413b43e7a208ee7dcc5ecf40151164836a7a1cad8abf93
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          userNetSchedule.exe
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\userNetSchedule.exe
          • Size 4.9MB
          • SHA256 75fe637450c823c779d4572669e2ce4c731d2835be215a105b761dbcfc35d4f0
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          wangzai_guide.cupf
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\wangzai_guide.cupf
          • Size 17KB
          • SHA256 3b5fb12610c86d07d16e3672eaa2b27c3f481ccc8c9a565fb1c22a90f360ae7d
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          旗黑55扩B6字.ttf
          • Path C:\Program Files (x86)\SogouInput\14.7.0.9739\旗黑55扩B6字.ttf
          • Size 10KB
          • SHA256 a13d350cc085a6b24f35089cf323a0960134b0f92deeaa029f86850d22336940
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          MobileInputBundle.ico
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\MobileInputBundle.ico
          • Size 34KB
          • SHA256 68f9bdc4acb3749a2f8f08846c33a85a0007a0f3444c35e8314a47c9b974da8e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          MobileInputBundle.svg
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\MobileInputBundle.svg
          • Size 1KB
          • SHA256 7ae6f6753e6efb61090c38ec6ee38c47934f56d1b7241acd7b39a1befa759261
          • MD5 SHA1 SHA512
          Submit Download

          SGMouseInputBundle.ico
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\SGMouseInputBundle.ico
          • Size 42KB
          • SHA256 4ef106040e46d267967fe4fa85b48088e7d4ed76213828531a3c5d4bb9c9284c
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SGMouseInputBundle.svg
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\SGMouseInputBundle.svg
          • Size 1KB
          • SHA256 d1976ddb7c91eeee1d194b966d2736ec449a509506d038b57d1df95666bd0c0f
          • MD5 SHA1 SHA512
          Submit Download

          SGSmartAssistantOCRBundle.ico
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\SGSmartAssistantOCRBundle.ico
          • Size 40KB
          • SHA256 7b7f29b04e2cae4eebe2d0659231b5e6e2ddf2d78573b3fef5987e12d742fedc
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SGSmartAssistantOCRBundle.svg
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\SGSmartAssistantOCRBundle.svg
          • Size 1KB
          • SHA256 9dfdb8073e4c6e3735005d76332acf7badc94adf956f9876c8754b54fb3e0865
          • MD5 SHA1 SHA512
          Submit Download

          SGSmartAssistantVoiceBundle.ico
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\SGSmartAssistantVoiceBundle.ico
          • Size 39KB
          • SHA256 c00bfeae536f21cd0e3026fe8598834fece6c56396c13b89606d43b5b072406d
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SGSmartAssistantVoiceBundle.svg
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\SGSmartAssistantVoiceBundle.svg
          • Size 1KB
          • SHA256 b5701d0cb7b6e12adcd9878ff1f17b02be12b7acb9a18c6b026e978b3be3fcc3
          • MD5 SHA1 SHA512
          Submit Download

          WriteSpiritComBundle.ico
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\WriteSpiritComBundle.ico
          • Size 33KB
          • SHA256 f4336bae7b700104d6678a519aec0053d416b2db4edf703c95eac5e76cde0e01
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          WriteSpiritComBundle.svg
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\WriteSpiritComBundle.svg
          • Size 3KB
          • SHA256 4a1de3031187a6f75c412d5e04b10a9e06d2d8085dc7f8ac16cc889bd87201ae
          • MD5 SHA1 SHA512
          Submit Download

          default.ico
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\default.ico
          • Size 11KB
          • SHA256 ee4af75ca4212415c67e6792ce8d9c89a92eeb7a5179be2fd78a3a272bcf7a1b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          exinputBundle.emotionCom.ico
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\exinputBundle.emotionCom.ico
          • Size 38KB
          • SHA256 473d9db0f92c710f472369714bd59c2266fdce36379420e88c37f11b163be25a
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          exinputBundle.emotionCom.svg
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\exinputBundle.emotionCom.svg
          • Size 2KB
          • SHA256 554e562d14d051435f299cd7ff8a4bd9a32052518c8eafde4ce9b5be2ebc279a
          • MD5 SHA1 SHA512
          Submit Download

          exinputBundle.picfaceCom.ico
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\exinputBundle.picfaceCom.ico
          • Size 41KB
          • SHA256 d5c797053a358e5e11ba622bc2254b345663daa0f0864ce8dd8cd0e9ae94f173
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          exinputBundle.picfaceCom.svg
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\exinputBundle.picfaceCom.svg
          • Size 1KB
          • SHA256 beb9bf64a4b4cb984708cf48238b20f91431f3612622ba6a025a6ffe6fdfb6d9
          • MD5 SHA1 SHA512
          Submit Download

          exinputBundle.symbolCom.ico
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\exinputBundle.symbolCom.ico
          • Size 12KB
          • SHA256 1eccdf66c3eac35b76a06ab3ebe88fc353fc31128565ed12e9a5c35b301181bd
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          exinputBundle.symbolCom.svg
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\exinputBundle.symbolCom.svg
          • Size 1KB
          • SHA256 d8ef66d53b04383b9972127cc3fce4c5dc60b548733dad2ec7b79becabaa4dee
          • MD5 SHA1 SHA512
          Submit Download

          exinputBundle.translateCom.ico
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\exinputBundle.translateCom.ico
          • Size 41KB
          • SHA256 7b34769c845d978f0ea085c5f6d891ecbc3d777ec3f2ff3f0de454a7d9d87e18
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          exinputBundle.translateCom.svg
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\exinputBundle.translateCom.svg
          • Size 2KB
          • SHA256 216e7a91f3d15d1bef9c9acd243fa2c8ebd9ef3534d4b53e5f4231ef07a6baf7
          • MD5 SHA1 SHA512
          Submit Download

          gc.home.ico
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\gc.home.ico
          • Size 453KB
          • SHA256 1e29706d13f624b70e0414aeddc6e71a12b96e61966820277d117e21527c096b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          gc.home.svg
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\gc.home.svg
          • Size 3KB
          • SHA256 0c3b76c7875dc3177c872af7f40fba253d0e15b495f0725e161d42b68b57571a
          • MD5 SHA1 SHA512
          Submit Download

          handinputBundle.ico
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\handinputBundle.ico
          • Size 37KB
          • SHA256 44f59234213a071aab7bc3544d334d0bf8db0a64bf065a679a5b99857656eba1
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          handinputBundle.svg
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\handinputBundle.svg
          • Size 1KB
          • SHA256 29422cd7803c2db44c61fe4945f79cc0f4ed59969bfe7a200ebcc2884ba6ae0b
          • MD5 SHA1 SHA512
          Submit Download

          screencaptureBundle.ico
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\screencaptureBundle.ico
          • Size 27KB
          • SHA256 ad0428b0d5a3ce4362f3e96323eaefb738652ce31b349df4368502a9883dae99
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          screencaptureBundle.svg
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\screencaptureBundle.svg
          • Size 1KB
          • SHA256 f2e4fdfa9378abb02c6ba3ce99ed55ad68e3249e34f3f9f51c049d75fdeec1ba
          • MD5 SHA1 SHA512
          Submit Download

          sogoupdf.convert.ico
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\sogoupdf.convert.ico
          • Size 11KB
          • SHA256 154607de267953183baf9543a7f637bd99834532aa87c91f90572d4451c1293a
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sogoupdf.convert.svg
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\sogoupdf.convert.svg
          • Size 6KB
          • SHA256 877919659494e3b6fd8f40e290370d5e2ad33ff599f2bd6ae15ef29674236a0e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          yyb.douyin.ico
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\yyb.douyin.ico
          • Size 2KB
          • SHA256 6e4724dc66203bce40797ceb8c92a69f99237241f05c58245c090b763752ad37
          • MD5 SHA1 SHA512
          Submit Download

          yyb.douyin.svg
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\yyb.douyin.svg
          • Size 2KB
          • SHA256 bb06d416c83b29c676e0513e00277299f81213ba2ff17a223c2dcdcd42ce57c0
          • MD5 SHA1 SHA512
          Submit Download

          yyb.fanqiexiaoshuo.ico
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\yyb.fanqiexiaoshuo.ico
          • Size 3KB
          • SHA256 d13b45f6d42ce015cfb3bd954a3e69167b486a36d9be486db44916d45fb3be2f
          • MD5 SHA1 SHA512
          Submit Download

          yyb.fanqiexiaoshuo.svg
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\yyb.fanqiexiaoshuo.svg
          • Size 3KB
          • SHA256 e1290a726d815b3f8be3e30bb81a076563585c7d8ea1546cb95be2ef184c2bdb
          • MD5 SHA1 SHA512
          Submit Download

          yyb.kuaishou.ico
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\yyb.kuaishou.ico
          • Size 3KB
          • SHA256 9ecc4f979a3ceabe39e48e816a103eebfbf0d3142f8ca1e22f8b9e3aed4b712c
          • MD5 SHA1 SHA512
          Submit Download

          yyb.kuaishou.svg
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\yyb.kuaishou.svg
          • Size 3KB
          • SHA256 0753de6d4a56cd34059b51862ea21c0c7cecf2e3b63a566d63e8b92fe86566ca
          • MD5 SHA1 SHA512
          Submit Download

          yyb.qishuiyinyue.ico
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\yyb.qishuiyinyue.ico
          • Size 2KB
          • SHA256 e833c1b8ca2886185138d19773937708b9fb0c5b6fb93c368e5808e41f03b8a5
          • MD5 SHA1 SHA512
          Submit Download

          yyb.qishuiyinyue.svg
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\yyb.qishuiyinyue.svg
          • Size 2KB
          • SHA256 1482e7604ae0fd138848ea2ead1f14a9313b56886fbe6354c64ff093e66314de
          • MD5 SHA1 SHA512
          Submit Download

          yyb.xiaohongshu.ico
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\yyb.xiaohongshu.ico
          • Size 2KB
          • SHA256 9d3fa13d02815e73af172dfbb2ac0d51b1844a8b961d0ba5da47dac85251a357
          • MD5 SHA1 SHA512
          Submit Download

          yyb.xiaohongshu.svg
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_icon\yyb.xiaohongshu.svg
          • Size 2KB
          • SHA256 e00eb81ce61c1e6f8a7efee219bd9545adfddd60e54ae61e1b68f1c10cd16ac6
          • MD5 SHA1 SHA512
          Submit Download

          sa_pandora_list.ini
          • Path C:\Program Files (x86)\SogouInput\Components\AppBox\sa_pandora_list.ini
          • Size 12KB
          • SHA256 33c49d0d54fccd816eca7f9ddb1bf8cafdb8408a20b8b2ee20871785406d9937
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          ComponentConfig.ini
          • Path C:\Program Files (x86)\SogouInput\Components\ComponentConfig.ini
          • Size 4KB
          • SHA256 c0df0bb30f647c983f101dbff2c815e111a5f58caadbdedb9f72d581e1373122
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          PicFace.dll
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\PicFace.dll
          • Size 2.5MB
          • SHA256 5929ae0a0d4c9536d4810a0dba64b7e18670bc8c5e7c08ab540ab7913ee80420
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_pf_ckey.bin
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\PicfaceData\sgim_pf_ckey.bin
          • Size 78KB
          • SHA256 1e19568f58fc57ac05d56a2b3ad89162edd07931faec1a0efbdbc3544c6a75c7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          10.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\10.png
          • Size 5KB
          • SHA256 b44146fae996a98e70f27e2a8ad871bf24cae5da29816ab630d10069f1a8f3ef
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          11.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\11.png
          • Size 9KB
          • SHA256 b8e5d2fb55c038fe7cb64ea6e326d7dbe570cb1a1a5e17ab834dfc2f5450a8cf
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          12.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\12.png
          • Size 9KB
          • SHA256 1c85093c6a811f8aa0ff86eaebd8f5d4544a5b1d4e3a83e732b3a50a947ba563
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          13.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\13.png
          • Size 9KB
          • SHA256 0bf82dae895545a0b5ec54fbfb18f1d0ee67458f74c8084af2e01e62d7f942cd
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          15.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\15.png
          • Size 4KB
          • SHA256 f4aa75951431aa336bfdf2cf1e8473eefdaef7af0114eba5acafa0042121ac4b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          16.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\16.png
          • Size 2KB
          • SHA256 06ec711a729a569cdea95e890b29e0fa7b9736b1360f7339546eef0852bccdba
          • MD5 SHA1 SHA512
          Submit Download

          17.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\17.png
          • Size 3KB
          • SHA256 ca9ef12a8e66afc34671004fcfdf4aa21b2a6421dab1f4c9625754a4c5b064c7
          • MD5 SHA1 SHA512
          Submit Download

          18.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\18.png
          • Size 6KB
          • SHA256 13f696b70ef7c3d84243dd3397ba9f951b2d7f0377d22275fe5179dd410d2829
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          19.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\19.png
          • Size 5KB
          • SHA256 573702b85b3b69b74646bf91eee6de0ef31426dbce5d9a7335dd148f7a163e27
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          2.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\2.png
          • Size 9KB
          • SHA256 72227b98116ab125b2551ca0801a2cfc75a05a4453dc11c618aa520031943cd6
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          21.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\21.png
          • Size 6KB
          • SHA256 6a46a2bdbaec64474e92ae6afaa1a6d87c25fb53fca9b3a80fe9c45481aba0ab
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          22.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\22.png
          • Size 1KB
          • SHA256 51ed0f2bd89130ac55284de3af284fd1f58abe465e3438b02e8ac2a3d89e52cb
          • MD5 SHA1 SHA512
          Submit Download

          23.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\23.png
          • Size 5KB
          • SHA256 c4fb6facf68504875fca70368315dc371e2d82e1ff40730b52c36594d16218bd
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          3.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\3.png
          • Size 9KB
          • SHA256 a917c5eb2f2e70b654e84c765479cf1b2d6fcab763d862953e17d2344fe7a0ab
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          4.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\4.png
          • Size 9KB
          • SHA256 e5c288eac613b83be7b726c36eb79dc1aebb9af41e7f28ed50792073ce4ef5c6
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          5.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\5.png
          • Size 9KB
          • SHA256 5413e11f8d3deba4ec323def218afba13f14a44142f68450b747928247c06cd3
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          6.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\6.png
          • Size 9KB
          • SHA256 7b5af26b7da333d576d398508f6d5090ccd879c952bad1c39800e86304e2545d
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          7.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\7.png
          • Size 5KB
          • SHA256 2b408dbe874c9ea07cf33fe0905f0a0302a46cb8ba52bbb518f2e5e1f54dfe8d
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          8.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\8.png
          • Size 9KB
          • SHA256 2c9e4e335e764a9c27d254b4bb204fff479b2b752a8c7b116b1bbdc0c9c5f355
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          9.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\9.png
          • Size 5KB
          • SHA256 7887823312cf069ad2b2896518ef16b3553352365cb967f0b688e45c96fc1978
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Cand.png
          • Path C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2326\Preview\Cand.png
          • Size 3KB
          • SHA256 003afd55657fd3025d913ac258073252d1afbd676f7dbd120cc60a38c2821ede
          • MD5 SHA1 SHA512
          Submit Download

          SGDeskControl.dll
          • Path C:\Program Files (x86)\SogouInput\Components\SGDeskControl\1.0.0.2340\SGDeskControl.dll
          • Size 611KB
          • SHA256 c983070fe1fc8c5a7331deb1b3b2f12a554d1477c57e3572ecc6528b0dab6642
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SogouFlash.dll
          • Path C:\Program Files (x86)\SogouInput\Components\SogouFlash\2.2.0.278\SogouFlash.dll
          • Size 61KB
          • SHA256 34a3f2ccd8c3f03bb13517c1ae218d7d4f36596f7d4b5096502a284d24f7a5b0
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Default.cupf
          • Path C:\Program Files (x86)\SogouInput\Components\Theme\Default.cupf
          • Size 201KB
          • SHA256 6b47808a7b643393f0268d4eb7476e43155906ea579c57de08f63e3520ba0732
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          spirit_bundle.dll
          • Path C:\Program Files (x86)\SogouInput\Components\WriteSpirit\1.0.1.640\spirit_bundle.dll
          • Size 411KB
          • SHA256 6445dc232f3ee6408666d160de28d0a7f1e3e316fdde57443979428d6383c8ae
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          biz_bundle.dll
          • Path C:\Program Files (x86)\SogouInput\Components\biz_center\1.0.0.2387\biz_bundle.dll
          • Size 691KB
          • SHA256 86a4041084428c66aa02e05ff117685193d0e14f204e5798d6a64802e618a954
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          biz_pdf.dll
          • Path C:\Program Files (x86)\SogouInput\Components\biz_pdf\1.0.0.2266\biz_pdf.dll
          • Size 475KB
          • SHA256 b112808d47c8a8fafede85195e19e6087a56903d486b690111849918be7365e1
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          game_center.dll
          • Path C:\Program Files (x86)\SogouInput\Components\game_center\1.0.0.2353\game_center.dll
          • Size 544KB
          • SHA256 f4c946cd5f08dbcb066f456ef369bfdfd35efcc505c4f1b3aaf029c077896202
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SogouExe.exe
          • Path C:\Program Files (x86)\SogouInput\SogouExe\SogouExe.exe
          • Size 2.0MB
          • SHA256 cde4065baeb5c56f3231a5d48870486f55671497019b1ecb0ba64a8c947cef78
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_picface_cloud_bak.bin
          • Path C:\ProgramData\SogouInput\Components\Picface\Cloud\sgim_picface_cloud_bak.bin
          • Size 168KB
          • SHA256 135fc2924b2b15d9114f0b4263ca6f7fdda750398e11a778941631faf46cf44e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          23FAC07AD9E66E399453B15CE44C4AC0.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\23FAC07AD9E66E399453B15CE44C4AC0.ico
          • Size 1KB
          • SHA256 d1704ee7d17c9167b2ad9a360225b583cd2c3f44d2548675a8e518ff080d21e4
          • MD5 SHA1 SHA512
          Submit Download

          51F2EF720BBEDA797D28857D3C3508E8.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\51F2EF720BBEDA797D28857D3C3508E8.ico
          • Size 1KB
          • SHA256 c8ccb263725826c7dd4112c8cd9f29547ac83015485c027b029fcfb2df09b671
          • MD5 SHA1 SHA512
          Submit Download

          56F8894BA2ABD722550279E44AD2B03D.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\56F8894BA2ABD722550279E44AD2B03D.ico
          • Size 1KB
          • SHA256 ce32c156b289b32f22c16c4534b35b0e882ff0a00830815f65860a624909c6dd
          • MD5 SHA1 SHA512
          Submit Download

          6212E6DF668DEF083112DB7EC2A4461B.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\6212E6DF668DEF083112DB7EC2A4461B.ico
          • Size 1KB
          • SHA256 30619ba967a07933202ca3cb14aee02d82a7309f099109fb17973cd80201dc83
          • MD5 SHA1 SHA512
          Submit Download

          63DCE84384C553FC1E1A81CE1694CA5B.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\63DCE84384C553FC1E1A81CE1694CA5B.ico
          • Size 1KB
          • SHA256 32c2a6dd54f0ceea75926ccf43c517251594433202e18b6f361967ff8ff69523
          • MD5 SHA1 SHA512
          Submit Download

          643C6595C05CF185F82807B5CE86EA31.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\643C6595C05CF185F82807B5CE86EA31.ico
          • Size 1KB
          • SHA256 2e706428186cc7f3feb97105495316fb7053903d56a3135164c30f5391b23ac0
          • MD5 SHA1 SHA512
          Submit Download

          6540D25568E1BC2FBA4F7A10CF006FEE.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\6540D25568E1BC2FBA4F7A10CF006FEE.ico
          • Size 1KB
          • SHA256 757254a1bbc3e7499ded4278983b10b7d34dffaa5db8d7c799069de87df631be
          • MD5 SHA1 SHA512
          Submit Download

          679B722157BDBF974EAFA4A5134D1694.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\679B722157BDBF974EAFA4A5134D1694.ico
          • Size 1KB
          • SHA256 49922fc40aa18d2b96383fe1535914b433c6443c9c5d520927712c507ac787cb
          • MD5 SHA1 SHA512
          Submit Download

          6BD4FAFDF2149B18E58F75E56CD7748B.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\6BD4FAFDF2149B18E58F75E56CD7748B.ico
          • Size 1KB
          • SHA256 c96f9082f5af456223dab965e3c85713ffaf7373bbb08c21c7febe73699059ef
          • MD5 SHA1 SHA512
          Submit Download

          6E482EB510B7A05E384103F225636EBC.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\6E482EB510B7A05E384103F225636EBC.ico
          • Size 1KB
          • SHA256 9fed3fb9a31cc6811c9464286dc5e8fd3d543ba8cc75c3074f5c3637d676f226
          • MD5 SHA1 SHA512
          Submit Download

          6F5F9C0AB6E3CF183AFFBDDA505746DF.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\6F5F9C0AB6E3CF183AFFBDDA505746DF.ico
          • Size 1KB
          • SHA256 8f4bd6f3b6609e94213bbdb808dea5f7e5f3a5c3d529692af45d0d433cf52465
          • MD5 SHA1 SHA512
          Submit Download

          73B8E5733D8B09852C2ECF5B564EA575.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\73B8E5733D8B09852C2ECF5B564EA575.ico
          • Size 1KB
          • SHA256 f69f37c56d56e7aeb1dbfd575cc374365502f7bb911ee8ecb82968fae0ee3a30
          • MD5 SHA1 SHA512
          Submit Download

          7607F452B2D2FB3F481A82C6A85448DB.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\7607F452B2D2FB3F481A82C6A85448DB.ico
          • Size 1KB
          • SHA256 70e91e1b6c84a85b1752915575d2cfeadd37beeed8eada107d37955b954ccbbf
          • MD5 SHA1 SHA512
          Submit Download

          7C250FC6BF41A21EE0167E04A22D3DC1.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\7C250FC6BF41A21EE0167E04A22D3DC1.ico
          • Size 1KB
          • SHA256 8983f2d783344b10fff0f12f8eeb6bc20e71f7eee745b463c663a0b08e90197c
          • MD5 SHA1 SHA512
          Submit Download

          8CB9E5E1506E893CE4178F78ADF75D12.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\8CB9E5E1506E893CE4178F78ADF75D12.ico
          • Size 1KB
          • SHA256 22a4e818bbaec498122d846eb3b8ccff3895ecc13a55e0e7379d13a6655a6f2b
          • MD5 SHA1 SHA512
          Submit Download

          954FB158F9E5320F0B014EF4B5EB0492.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\954FB158F9E5320F0B014EF4B5EB0492.ico
          • Size 1KB
          • SHA256 274fb1efaf0af3a9f0833c5f1fb018dd23291d0fc21f3f74b86ed4e7b90bcd2b
          • MD5 SHA1 SHA512
          Submit Download

          98AF1337D4C84A86786887475E43F1AC.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\98AF1337D4C84A86786887475E43F1AC.ico
          • Size 1KB
          • SHA256 47cc96a05d5c0e0ab6808de5f4279b41a27f84185e654468de3170c1c279b313
          • MD5 SHA1 SHA512
          Submit Download

          9D35DD78A4EE15F41FF062650D54A2CE.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\9D35DD78A4EE15F41FF062650D54A2CE.ico
          • Size 1KB
          • SHA256 17ccecaa213b35bd912f10e09ba29fe2431632f23dfe2a727545764472641594
          • MD5 SHA1 SHA512
          Submit Download

          A6FCEBB301A1BEDBC23AE03ABCA4C040.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\A6FCEBB301A1BEDBC23AE03ABCA4C040.ico
          • Size 1KB
          • SHA256 1aff5c3565cd6d12c505dfe41cd205625032934adeef61096d951b9e71e07789
          • MD5 SHA1 SHA512
          Submit Download

          C0C1606C329C237A7B7AF09DCB5FE811.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\C0C1606C329C237A7B7AF09DCB5FE811.ico
          • Size 1KB
          • SHA256 f60b38e3033deeb94a8d09443c451ec4e44ad3f830910066d3a52e900d247434
          • MD5 SHA1 SHA512
          Submit Download

          CA4BA5B90002A6E668A6BF6380D61867.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\CA4BA5B90002A6E668A6BF6380D61867.ico
          • Size 1KB
          • SHA256 fbf7455321c1f9e1e03c378b88ac214a3286511393feffc278d560442d235e3f
          • MD5 SHA1 SHA512
          Submit Download

          D078FD04C5F94033698D812F802FC1DD.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\D078FD04C5F94033698D812F802FC1DD.ico
          • Size 1KB
          • SHA256 2c9ef697775696f18a35688c8ed6f09700a3f0a167b72ce8587fc8fbc2dd2b51
          • MD5 SHA1 SHA512
          Submit Download

          DB20820A948116386354E4EDFC18B577.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\DB20820A948116386354E4EDFC18B577.ico
          • Size 1KB
          • SHA256 7a1f53b89b021b9fc0718aad40c203d8d93702b985ebf4ebf6263c03779db6b3
          • MD5 SHA1 SHA512
          Submit Download

          E41DE464A9D2DD9599A8DDDBB3205A42.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\E41DE464A9D2DD9599A8DDDBB3205A42.ico
          • Size 1KB
          • SHA256 77c041422eac0aeeb1f7506cfc67cccfb9afd062ebabd6790e79117ebeeb6d47
          • MD5 SHA1 SHA512
          Submit Download

          F13042B90E54A302C795ABC4B6F9060B.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\F13042B90E54A302C795ABC4B6F9060B.ico
          • Size 1KB
          • SHA256 c2dc527146766143b503bbd678254b5e65a1a4974061e836a5a322d15632ac06
          • MD5 SHA1 SHA512
          Submit Download

          F5314B4C237F4253BFAC53F9F3222B87.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\F5314B4C237F4253BFAC53F9F3222B87.ico
          • Size 1KB
          • SHA256 dba9a8b9e129c04dcb8f202a05671f1ccce1f1dd07bd25fedbafde4be479b1e6
          • MD5 SHA1 SHA512
          Submit Download

          FA8833AC684D6949F480AE3BC9A51B4A.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\FA8833AC684D6949F480AE3BC9A51B4A.ico
          • Size 1KB
          • SHA256 a2bf6e2029c55abb5398e8289e1de6a585fc019f3b6982e18a6e64889655f85f
          • MD5 SHA1 SHA512
          Submit Download

          FB44DC89394B9C62BF847EE420EAF4B3.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\FB44DC89394B9C62BF847EE420EAF4B3.ico
          • Size 1KB
          • SHA256 f238445369d41b33020f76c8adaa5774cebeab5045d6ef90c459b68ad1304143
          • MD5 SHA1 SHA512
          Submit Download

          FC692CAB5389E5E743D0CF69FF130A6D.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\FC692CAB5389E5E743D0CF69FF130A6D.ico
          • Size 1KB
          • SHA256 180c6155b520857928881c663f0e552dc36475961e32873239ed431ce956b5e7
          • MD5 SHA1 SHA512
          Submit Download

          default.ico
          • Path C:\ProgramData\SogouInput\UrlGuideIcon\default.ico
          • Size 1KB
          • SHA256 fe3446f27ab41a731def5b45a7873644edcb4698ce99001126d400fbc5cec0b5
          • MD5 SHA1 SHA512
          Submit Download

          Data_SGWizardDict.json.1.tmp
          • Path C:\ProgramData\SogouInput\skinrootdir\configjson\Data_SGWizardDict.json.1.tmp
          • Size 6KB
          • SHA256 884d35da0c51bf9db58a9ece9254dba458746d93810840548f0cf76ddca5e5cb
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Data_SGWizardSkin.json.1.tmp
          • Path C:\ProgramData\SogouInput\skinrootdir\configjson\Data_SGWizardSkin.json.1.tmp
          • Size 2KB
          • SHA256 2b43101443248b2a76f6e1c513804eb2c4e20b8424f395d4dfdb7b5cceffc316
          • MD5 SHA1 SHA512
          Submit Download

          20F67CB3FEE86E3FE051562EC3DEDB34
          • Path C:\ProgramData\Tencent\qimei\20F67CB3FEE86E3FE051562EC3DEDB34
          • Size 128B
          • SHA256 e7cd840b36c00bd57ab2182789cb1de01ba3984f477a9880b5424e7160133820
          • MD5 SHA1 SHA512
          Submit Download

          acc.dat
          • Path C:\Users\Admin\AppData\LocalLow\SogouPY.users\acc.dat
          • Size 80B
          • SHA256 fe99bdece798d10b7384e6b77c943ba05ef02b27060054be0248f9c19032ac48
          • MD5 SHA1 SHA512
          Submit Download

          sgim_piccell.v2.bin
          • Path C:\Users\Admin\AppData\LocalLow\SogouPY\Components\Picface\PicfaceData\sgim_piccell.v2.bin
          • Size 2.7MB
          • SHA256 e47c0fa75204ab3f13f33b7d5363ad91333d231035cc21f5f649a7b30684de3f
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_picface_sugg.bin
          • Path C:\Users\Admin\AppData\LocalLow\SogouPY\Components\Picface\PicfaceData\sgim_picface_sugg.bin
          • Size 160KB
          • SHA256 b444cf63867316a85f740d8edce4613e0b5b343c9350b6b729a62f6e3523b7b5
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgim_picidx.v2.bin
          • Path C:\Users\Admin\AppData\LocalLow\SogouPY\Components\Picface\PicfaceData\sgim_picidx.v2.bin
          • Size 40KB
          • SHA256 6eede54ec2ebd06bffc39587a431fbb721e628b8514f578712a67e39e92659f4
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          1.png
          • Path C:\Users\Admin\AppData\LocalLow\SogouPY\Components\Picface\Preview\1.png
          • Size 6KB
          • SHA256 258af4105a5ab991c02b2058d30b5d828dee9fc3bfb85254a0f86dd4831d03d6
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          14.png
          • Path C:\Users\Admin\AppData\LocalLow\SogouPY\Components\Picface\Preview\14.png
          • Size 3KB
          • SHA256 f4a17564a1c7b79c80bfc9b0515088fa1fd231a4108bc70b5a76afe256a5a89d
          • MD5 SHA1 SHA512
          Submit Download

          GeneralData.ini
          • Path C:\Users\Admin\AppData\LocalLow\SogouPY\Indv\GeneralData.ini
          • Size 108B
          • SHA256 67d096ff802a3100b979f6c7e97c3fbd819e23c65f57895f0d2032126239d8de
          • MD5 SHA1 SHA512
          Submit Download

          env.ini
          • Path C:\Users\Admin\AppData\LocalLow\SogouPY\env.ini
          • Size 632B
          • SHA256 9fdde74c863934cf3b8154ef7c67db2009193dc6e812fb566645c913a5be26fb
          • MD5 SHA1 SHA512
          Submit Download

          scdlist.ini
          • Path C:\Users\Admin\AppData\LocalLow\SogouPY\scdlist.ini
          • Size 134B
          • SHA256 b278f12fb6c72877adf407b7cb846bd1edfbaeee26142a99d733b87d3e496512
          • MD5 SHA1 SHA512
          Submit Download

          sign.ini
          • Path C:\Users\Admin\AppData\LocalLow\SogouPY\sign.ini
          • Size 6KB
          • SHA256 bffba397f84eb375b6c2b8b1e9d929f4c731e59396363fe8a4c1bae2c614ca20
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sign.ini
          • Path C:\Users\Admin\AppData\LocalLow\SogouPY\sign.ini
          • Size 6KB
          • SHA256 8528ff77eaae4770e1a94526c596d83796a33c9f1d1c1eaec21fe91c6d65633b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sign.ini
          • Path C:\Users\Admin\AppData\LocalLow\SogouPY\sign.ini
          • Size 6KB
          • SHA256 3bce0106b100e2f9228068c44578442aa703f0b48f0b2e1618c96ea210fc3010
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sign.ini
          • Path C:\Users\Admin\AppData\LocalLow\SogouPY\sign.ini
          • Size 8KB
          • SHA256 7c54d80cf31d6acb095d5991d5c0d5885f229f1bf462e8bef1181c0e2959e497
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sign.ini
          • Path C:\Users\Admin\AppData\LocalLow\SogouPY\sign.ini
          • Size 11KB
          • SHA256 9aaf62060d2ab0546ede1959de15c5f34e7b2566408ed0cc082340157cea2bff
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          temp.dll
          • Path C:\Users\Admin\AppData\LocalLow\SogouPY\temp.dll
          • Size 15KB
          • SHA256 68cd7605a7085950c2effd8ca9cd492082844c2576bbdf0944e93697ab79bd00
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          verify.ini
          • Path C:\Users\Admin\AppData\LocalLow\SogouPY\verify.ini
          • Size 4KB
          • SHA256 b78414b272dbd71b42af1a5ecfc5661e98188cadf4f41f5f405fbf8c420626f5
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          verify.ini
          • Path C:\Users\Admin\AppData\LocalLow\SogouPY\verify.ini
          • Size 4KB
          • SHA256 47b1a772425002f4e3887aa20837f692beee7780d11551073e414c8f0ef88d12
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          verify.ini
          • Path C:\Users\Admin\AppData\LocalLow\SogouPY\verify.ini
          • Size 4KB
          • SHA256 004edc63fd2f283382adcd8dd8cb9e84b55e5539189a71474e67a221498f6e94
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          verify.ini
          • Path C:\Users\Admin\AppData\LocalLow\SogouPY\verify.ini
          • Size 6KB
          • SHA256 595568b98ceaea8e19a6e36d190c3802e509752d6b0cc10235b6ad3d1b0f30df
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          WindowsRecovery.exe.log
          • Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\WindowsRecovery.exe.log
          • Size 613B
          • SHA256 d7c5ebc2557720a4be104a13bae48fe3778126cf745fe0e9a64ad8d87b4483e6
          • MD5 SHA1 SHA512
          Submit Download

          WindowsRecovery.exe
          • Path C:\Users\Admin\AppData\Local\Temp\WindowsRecovery.exe
          • Size 11KB
          • SHA256 fc645de645cfdb824e1ca9d1ed204a7eefaa326e40ff6402596cb9f546d9f5b9
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          core.dll
          • Path C:\Users\Admin\AppData\Local\Temp\alien\core.dll
          • Size 25KB
          • SHA256 9aa3ca96a84eb5606694adb58776c9e926020ef184828b6f7e6f9b50498f7071
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          config.ini
          • Path C:\Users\Admin\AppData\Local\Temp\config.ini
          • Size 908KB
          • SHA256 83dbcfde960f8e94117fb3547f79e8a88ab0f1be29438412867dcf3b60db8aa2
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          lua5.1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\lua5.1.dll
          • Size 164KB
          • SHA256 fbbe7ee073d0290ac13c98b92a8405ea04dcc6837b4144889885dd70679e933f
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          new_config.ini
          • Path C:\Users\Admin\AppData\Local\Temp\new_config.ini
          • Size 636KB
          • SHA256 8dee6d514d1f479dd156c31100910e22b6cd7359527f777dbc3986b6218fb90a
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          HWSignature.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nsbD5B1.tmp\HWSignature.dll
          • Size 138KB
          • SHA256 8030f81ec2f19722b6b7a67d5f7bb668de3b8ac09f66de6a8a8bbc7ab5ca1390
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          ImageMagik.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nsbD5B1.tmp\ImageMagik.dll
          • Size 5.9MB
          • SHA256 1cc49c7e63a141a2639082e95e313ced13975208d1e426dd1dfd205da52eeabd
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          InstallOptions.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nsbD5B1.tmp\InstallOptions.dll
          • Size 15KB
          • SHA256 734d6299964cab87eeeb5f8c7e5bdf6aa8c3e29d938fdd1ada6addcd5006de28
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SetupLib.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nsbD5B1.tmp\SetupLib.dll
          • Size 6.0MB
          • SHA256 fa0ff19eb36efad5bdb4d63118a7e6ed4a42f69b60f89675520c394e32b69ea7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SetupLibNew.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nsbD5B1.tmp\SetupLibNew.dll
          • Size 3.7MB
          • SHA256 0f116090d6466bdf79081eb1327f6201af093e0ad3fedfac001720699f4f5153
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          System.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nsbD5B1.tmp\System.dll
          • Size 11KB
          • SHA256 93a8e95708882e56250ae55aef93417333b2dbe7ea99590abed34cdca2227e61
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          install.ini
          • Path C:\Users\Admin\AppData\Local\Temp\nsbD5B1.tmp\install.ini
          • Size 65B
          • SHA256 7637a2fe21c907208feb0c53a10a5bb423a982d8d973c1535ddb811f824a4ed4
          • MD5 SHA1 SHA512
          Submit Download

          ioSpecial.ini
          • Path C:\Users\Admin\AppData\Local\Temp\nsbD5B1.tmp\ioSpecial.ini
          • Size 958B
          • SHA256 17e6428309eb6661f6a68234493a13c14853134f6bed87a8ba5cd5058f73d990
          • MD5 SHA1 SHA512
          Submit Download

          ioSpecial.ini
          • Path C:\Users\Admin\AppData\Local\Temp\nsbD5B1.tmp\ioSpecial.ini
          • Size 988B
          • SHA256 fb820c8328d2979e43b4267b523c60176bcc1d09f4b50f416f6d8bff52644225
          • MD5 SHA1 SHA512
          Submit Download

          validate.ini
          • Path C:\Users\Admin\AppData\Local\Temp\nsbD5B1.tmp\validate.ini
          • Size 87B
          • SHA256 5f60c14e1d82e49f4dd48c648c31bd572adf7a6e236aa7b2a8854bbc90d21c4a
          • MD5 SHA1 SHA512
          Submit Download

          INetC.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nscBE21.tmp\INetC.dll
          • Size 25KB
          • SHA256 85e03805f90f72257dd41bfdaa186237218bbb0ec410ad3b6576a88ea11dccb9
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sgb840B.tmp
          • Path C:\Users\Admin\AppData\Local\Temp\sgb840B.tmp
          • Size 4KB
          • SHA256 da7c1e40f8426e2285de6fcb2220cbca243f9c17b9d9761d70b8a44c99794176
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          58b509c3f65696668c836e38a17ee52b_a53bb4ca-6113-48bb-9609-441860fdd0d7
          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-1194130065-3471212556-1656947724-1000\58b509c3f65696668c836e38a17ee52b_a53bb4ca-6113-48bb-9609-441860fdd0d7
          • Size 52B
          • SHA256 5c4647f65619cae1cf6a0ee07865199b68bdd3a825501f403866e11201ccd388
          • MD5 SHA1 SHA512
          Submit Download

          bc_0WIN0LHI9P4JUO73_09.db-wal
          • Path C:\Users\Admin\AppData\Roaming\Tencent\beacon\bc_0WIN0LHI9P4JUO73_09.db-wal
          • Size 72KB
          • SHA256 b2a008090bf93ad01639fc81a11920a0e015ce8383eed0b2b5843c6744f5d24c
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SogouTSF.ime
          • Path C:\Windows\SysWOW64\SogouTSF.ime
          • Size 3.7MB
          • SHA256 add48ac8a32ac7f740c83b37010e45e2779d7614db89e2d0f7bced76e9184d08
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SogouTSF.ime
          • Path C:\Windows\system32\SogouTSF.ime
          • Size 4.4MB
          • SHA256 f56194683ac56e040baf539a82c2108fc21df240d87f646fd22f3b15475c4404
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          memory/552-65-0x0000000002280000-0x0000000002680000-memory.dmp
          Download

          memory/552-58-0x00000000006F0000-0x0000000000718000-memory.dmp
          Download

          memory/552-62-0x00007FFE9CCF0000-0x00007FFE9CEE5000-memory.dmp
          Download

          memory/552-66-0x0000000076620000-0x0000000076835000-memory.dmp
          Download

          memory/552-59-0x00000000005C0000-0x00000000005C9000-memory.dmp
          Download

          memory/552-68-0x0000000002280000-0x0000000002680000-memory.dmp
          Download

          memory/552-56-0x0000000002280000-0x0000000002680000-memory.dmp
          Download

          memory/552-60-0x0000000002280000-0x0000000002680000-memory.dmp
          Download

          memory/552-55-0x00000000005C0000-0x00000000005C9000-memory.dmp
          Download

          memory/2492-71-0x00007FFE9CCF0000-0x00007FFE9CEE5000-memory.dmp
          Download

          memory/2492-67-0x00000000012D0000-0x00000000012D9000-memory.dmp
          Download

          memory/2492-73-0x0000000076620000-0x0000000076835000-memory.dmp
          Download

          memory/2492-70-0x0000000002E20000-0x0000000003220000-memory.dmp
          Download

          memory/2596-84-0x0000000005080000-0x000000000511C000-memory.dmp
          Download

          memory/3952-54-0x00000000005D0000-0x0000000000609000-memory.dmp
          Download

          memory/3952-64-0x00000000023F0000-0x0000000002412000-memory.dmp
          Download

          memory/3952-74-0x0000000004B60000-0x0000000004B67000-memory.dmp
          Download

          memory/3952-61-0x0000000004A20000-0x0000000004A88000-memory.dmp
          Download

          memory/3952-77-0x0000000005090000-0x00000000050F6000-memory.dmp
          Download

          memory/4264-5165-0x0000000000400000-0x00000000006DD000-memory.dmp
          Download

          memory/4264-123-0x0000000005E90000-0x0000000005EB5000-memory.dmp
          Download

          memory/4264-5089-0x0000000000400000-0x00000000006DD000-memory.dmp
          Download

          memory/4264-103-0x0000000005610000-0x00000000059D5000-memory.dmp
          Download

          memory/4264-48-0x0000000000400000-0x00000000006DD000-memory.dmp
          Download

          memory/4264-5073-0x0000000008E80000-0x0000000008EA5000-memory.dmp
          Download

          memory/4264-112-0x000000006F2A0000-0x000000006F2B0000-memory.dmp
          Download

          memory/4264-96-0x000000006F2B0000-0x000000006F2C0000-memory.dmp
          Download

          memory/4264-222-0x0000000000400000-0x00000000006DD000-memory.dmp
          Download

          memory/4264-302-0x0000000000400000-0x00000000006DD000-memory.dmp
          Download

          memory/4264-3827-0x0000000000400000-0x00000000006DD000-memory.dmp
          Download

          memory/4264-5400-0x0000000000400000-0x00000000006DD000-memory.dmp
          Download

          memory/4264-3656-0x0000000006FE0000-0x0000000007029000-memory.dmp
          Download

          memory/4264-3655-0x0000000000400000-0x00000000006DD000-memory.dmp
          Download

          memory/4264-5474-0x0000000000400000-0x00000000006DD000-memory.dmp
          Download