Alltweakssolar[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

Alltweakssolar.rar
Size

4.8MB
MD5

f19be2b91c7e829ac400017c80649d65
SHA1

d723a676bce49c7782bebccc458424a54fd89abf
SHA256

275a36f9ca2fdf24604902d46c5b106bee5799811bcb2414820a3d3f8b662862
SHA512

8a6eb35c97307a52a4f246106fd1937f630d9d871860a2b77c56ad3299b5f1e5d41cb139506e63e00191b937a82802921ee2689578576e1b7997132301b2034a
SSDEEP

98304:GmUWAc48e2dl6UHhgIQmdSaSZEoPY6gVK/eldni+LkjvyfE6p+a4T02iV:rLje2dkagZm6ZFY6gHdiZME6pEU

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Fps boost/10 .Overclock Controller_KBM/98ME/hidusbf.sys
unpack002/Fps boost/9. GPU/MSI Mode Tool.exe
unpack002/Fps boost/9. GPU/nvidiaProfileInspector.exe
unpack002/Fps boost/Internet/tcp/TCPOptimizer.exe

Files

Alltweakssolar.rar
.rar

Password: 123
Alltweakssolar/SolarFreeFPSBOOSTS.rar
.rar

Password: 123
Fps boost/1.DO FIRST/!!!!READTHISBEFOREDOINGANYTWEAKS.txt
Fps boost/1.DO FIRST/1 Create A Restore Point.lnk
.lnk
Fps boost/1.DO FIRST/2 Uninstall Apps You Don_t Need.lnk
.lnk
Fps boost/1.DO FIRST/3 Startup Apps.lnk
.lnk
Fps boost/1.DO FIRST/Change Sound Settings.lnk
.lnk
Fps boost/1.DO FIRST/M1 Mouse Acceleration.lnk
.lnk
Fps boost/1.DO FIRST/Performance Options.lnk
.lnk
Fps boost/10 .Overclock Controller_KBM/1kHz.cmd
Fps boost/10 .Overclock Controller_KBM/2kHz-4kHz.cmd
Fps boost/10 .Overclock Controller_KBM/4kHz-8kHz.cmd
Fps boost/10 .Overclock Controller_KBM/98ME/hidusbf.sys
.sys windows:4 windows x86 arch:x86

a4854a4d8aeca1a6f1a6ecad1dafa6de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
ZwClose
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoCreateDevice
_except_handler3
IoDeleteDevice
IoDetachDevice
ZwQueryValueKey
PoCallDriver
PoStartNextPowerIrp
IofCompleteRequest
KeInitializeEvent
KeSetEvent
InterlockedDecrement
InterlockedIncrement
KeWaitForSingleObject
IofCallDriver
ExFreePool

usbd.sys

_USBD_ParseDescriptors@16

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 672B - Virtual size: 642B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fps boost/10 .Overclock Controller_KBM/AMD64/1khz/hidusbf.sys
.sys windows:5 windows x64 arch:x64

2381c1ee5c1461ef217df28364930cee

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24/12/2015, 00:00

Not After

07/01/2025, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

78:d5:57:74:02:76:a2:28:c3:ba:37:bb:de:b1:2d:7e:64:c7:eb:3d:39:a7:bd:3a:06:7b:56:2a:61:7d:51:d6
Signer

Actual PE Digest

78:d5:57:74:02:76:a2:28:c3:ba:37:bb:de:b1:2d:7e:64:c7:eb:3d:39:a7:bd:3a:06:7b:56:2a:61:7d:51:d6

Digest Algorithm

sha256

PE Digest Matches

true

d7:17:48:ed:5d:88:d5:41:5c:37:22:a4:77:8c:82:43:0d:6c:84:67
Signer

Actual PE Digest

d7:17:48:ed:5d:88:d5:41:5c:37:22:a4:77:8c:82:43:0d:6c:84:67

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
IoDeleteDevice
IoDetachDevice
IofCompleteRequest
ZwQuerySystemInformation
_stricmp
RtlImageNtHeader
__C_specific_handler
MmUnmapIoSpace
MmMapIoSpace
MmGetPhysicalAddress
ZwQueryValueKey
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoInitializeRemoveLockEx
IoCreateDevice
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
ZwClose
ExFreePoolWithTag

usbd.sys

USBD_ParseDescriptors

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 256B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fps boost/10 .Overclock Controller_KBM/AMD64/2khz-4khz/hidusbf.sys
.sys windows:5 windows x64 arch:x64

84541687f18e3ffb4f8fe04db5f18fde

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24/12/2015, 00:00

Not After

07/01/2025, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:da:71:3b:27:da:28:a7:37:18:c6:b0:9d:c2:61:7e:8e:23:54:50:ef:11:ca:64:0d:d7:f4:89:1b:10:22:2a
Signer

Actual PE Digest

07:da:71:3b:27:da:28:a7:37:18:c6:b0:9d:c2:61:7e:8e:23:54:50:ef:11:ca:64:0d:d7:f4:89:1b:10:22:2a

Digest Algorithm

sha256

PE Digest Matches

true

be:5e:bd:40:f8:54:5d:71:98:6e:fd:32:80:63:7a:a8:51:0a:4d:3a
Signer

Actual PE Digest

be:5e:bd:40:f8:54:5d:71:98:6e:fd:32:80:63:7a:a8:51:0a:4d:3a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IoDeleteDevice
IoDetachDevice
IofCompleteRequest
ZwQuerySystemInformation
_stricmp
RtlImageNtHeader
__C_specific_handler
MmUnmapIoSpace
MmMapIoSpace
MmGetPhysicalAddress
ExAllocatePoolWithTag
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoInitializeRemoveLockEx
IoCreateDevice
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
ZwQueryValueKey
ZwClose
ExFreePoolWithTag

usbd.sys

USBD_ParseDescriptors
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 256B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fps boost/10 .Overclock Controller_KBM/AMD64/4khz-8khz/hidusbf.sys
.sys windows:5 windows x64 arch:x64

84541687f18e3ffb4f8fe04db5f18fde

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24/12/2015, 00:00

Not After

07/01/2025, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3e:58:48:66:65:a4:56:dc:bb:06:68:49:39:fe:bb:c9:5a:9b:f5:47:0a:55:84:d1:23:5b:ef:7b:06:6f:06:cc
Signer

Actual PE Digest

3e:58:48:66:65:a4:56:dc:bb:06:68:49:39:fe:bb:c9:5a:9b:f5:47:0a:55:84:d1:23:5b:ef:7b:06:6f:06:cc

Digest Algorithm

sha256

PE Digest Matches

true

df:02:03:ec:56:95:cd:8b:04:52:4b:0e:df:ca:49:54:03:52:e4:a4
Signer

Actual PE Digest

df:02:03:ec:56:95:cd:8b:04:52:4b:0e:df:ca:49:54:03:52:e4:a4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IoDeleteDevice
IoDetachDevice
IofCompleteRequest
ZwQuerySystemInformation
_stricmp
RtlImageNtHeader
__C_specific_handler
MmUnmapIoSpace
MmMapIoSpace
MmGetPhysicalAddress
ExAllocatePoolWithTag
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoInitializeRemoveLockEx
IoCreateDevice
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
ZwQueryValueKey
ZwClose
ExFreePoolWithTag

usbd.sys

USBD_ParseDescriptors
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 256B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fps boost/10 .Overclock Controller_KBM/AMD64/hidusbf.sys
.sys windows:5 windows x64 arch:x64

84541687f18e3ffb4f8fe04db5f18fde

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24/12/2015, 00:00

Not After

07/01/2025, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3e:58:48:66:65:a4:56:dc:bb:06:68:49:39:fe:bb:c9:5a:9b:f5:47:0a:55:84:d1:23:5b:ef:7b:06:6f:06:cc
Signer

Actual PE Digest

3e:58:48:66:65:a4:56:dc:bb:06:68:49:39:fe:bb:c9:5a:9b:f5:47:0a:55:84:d1:23:5b:ef:7b:06:6f:06:cc

Digest Algorithm

sha256

PE Digest Matches

true

df:02:03:ec:56:95:cd:8b:04:52:4b:0e:df:ca:49:54:03:52:e4:a4
Signer

Actual PE Digest

df:02:03:ec:56:95:cd:8b:04:52:4b:0e:df:ca:49:54:03:52:e4:a4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IoDeleteDevice
IoDetachDevice
IofCompleteRequest
ZwQuerySystemInformation
_stricmp
RtlImageNtHeader
__C_specific_handler
MmUnmapIoSpace
MmMapIoSpace
MmGetPhysicalAddress
ExAllocatePoolWithTag
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoInitializeRemoveLockEx
IoCreateDevice
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
ZwQueryValueKey
ZwClose
ExFreePoolWithTag

usbd.sys

USBD_ParseDescriptors
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 256B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fps boost/10 .Overclock Controller_KBM/AMD64/nopatch/hidusbf.sys
.sys windows:5 windows x64 arch:x64

cfedb7338b9798a1a4e6640e5a6e1937

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24/12/2015, 00:00

Not After

07/01/2025, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

23:91:56:f9:e4:3e:76:de:06:f3:d1:b9:7e:d3:42:09:fc:e6:9e:11:70:68:61:bb:8a:0e:00:46:d1:d8:d4:3d
Signer

Actual PE Digest

23:91:56:f9:e4:3e:76:de:06:f3:d1:b9:7e:d3:42:09:fc:e6:9e:11:70:68:61:bb:8a:0e:00:46:d1:d8:d4:3d

Digest Algorithm

sha256

PE Digest Matches

true

89:57:b6:c1:c1:df:36:b3:45:a2:75:ea:41:43:2a:5b:d5:3c:3a:20
Signer

Actual PE Digest

89:57:b6:c1:c1:df:36:b3:45:a2:75:ea:41:43:2a:5b:d5:3c:3a:20

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
IoDeleteDevice
IoDetachDevice
IofCompleteRequest
__C_specific_handler
ZwClose
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
ZwQueryValueKey
IoCreateDevice
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
IoInitializeRemoveLockEx
ExFreePool

usbd.sys

USBD_ParseDescriptors

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 128B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 896B - Virtual size: 816B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fps boost/10 .Overclock Controller_KBM/HIDUSBF.INF
Fps boost/10 .Overclock Controller_KBM/HIDUSBFU.INF
Fps boost/10 .Overclock Controller_KBM/List.txt
Fps boost/10 .Overclock Controller_KBM/NTX86/1khz/hidusbf.sys
.sys windows:5 windows x86 arch:x86

b61c22861a2bc08dffd66e3957b1bb4d

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24/12/2015, 00:00

Not After

07/01/2025, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:49:06:31:53:85:82:af:5b:53:33:e9:0d:dc:8c:0f:02:92:a0:28:51:b1:45:9f:f6:29:87:22:7e:ba:be:be
Signer

Actual PE Digest

77:49:06:31:53:85:82:af:5b:53:33:e9:0d:dc:8c:0f:02:92:a0:28:51:b1:45:9f:f6:29:87:22:7e:ba:be:be

Digest Algorithm

sha256

PE Digest Matches

true

61:19:64:6e:39:62:3f:a4:57:d8:59:5f:85:9d:9a:a6:75:7b:3c:2c
Signer

Actual PE Digest

61:19:64:6e:39:62:3f:a4:57:d8:59:5f:85:9d:9a:a6:75:7b:3c:2c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
IoDeleteDevice
IoDetachDevice
IofCompleteRequest
ZwQuerySystemInformation
_stricmp
RtlImageNtHeader
MmUnmapIoSpace
MmMapIoSpace
MmGetPhysicalAddress
_except_handler3
ZwQueryValueKey
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoInitializeRemoveLockEx
IoCreateDevice
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
ZwClose
ExFreePoolWithTag

usbd.sys

USBD_ParseDescriptors

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fps boost/10 .Overclock Controller_KBM/NTX86/2khz-4khz/hidusbf.sys
.sys windows:5 windows x86 arch:x86

34af1360f83df6c59c2f28d9cb2cba57

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24/12/2015, 00:00

Not After

07/01/2025, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

31:91:95:b2:39:09:aa:bd:d6:85:41:3e:bb:1d:16:b5:05:1a:87:82:f2:7e:c2:e5:d7:ee:d3:8c:e8:48:0e:91
Signer

Actual PE Digest

31:91:95:b2:39:09:aa:bd:d6:85:41:3e:bb:1d:16:b5:05:1a:87:82:f2:7e:c2:e5:d7:ee:d3:8c:e8:48:0e:91

Digest Algorithm

sha256

PE Digest Matches

true

58:a6:c0:67:dd:db:c1:79:5c:c6:1d:e5:5e:49:95:2e:3e:4c:6b:54
Signer

Actual PE Digest

58:a6:c0:67:dd:db:c1:79:5c:c6:1d:e5:5e:49:95:2e:3e:4c:6b:54

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoDeleteDevice
IoDetachDevice
IofCompleteRequest
ZwQuerySystemInformation
_stricmp
RtlImageNtHeader
MmUnmapIoSpace
MmMapIoSpace
MmGetPhysicalAddress
_except_handler3
ExAllocatePoolWithTag
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoInitializeRemoveLockEx
IoCreateDevice
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
ZwQueryValueKey
ZwClose
ExFreePoolWithTag

usbd.sys

USBD_ParseDescriptors
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fps boost/10 .Overclock Controller_KBM/NTX86/4khz-8khz/hidusbf.sys
.sys windows:5 windows x86 arch:x86

34af1360f83df6c59c2f28d9cb2cba57

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24/12/2015, 00:00

Not After

07/01/2025, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

19:69:94:92:98:b0:ce:ce:d5:00:b9:b1:67:06:8f:77:cd:09:60:70:11:fa:a9:ba:d9:2b:d4:e1:b9:24:c7:60
Signer

Actual PE Digest

19:69:94:92:98:b0:ce:ce:d5:00:b9:b1:67:06:8f:77:cd:09:60:70:11:fa:a9:ba:d9:2b:d4:e1:b9:24:c7:60

Digest Algorithm

sha256

PE Digest Matches

true

15:7e:fc:5b:fd:5e:e9:d7:bb:86:a9:e8:49:f4:a3:5b:10:ba:1e:8c
Signer

Actual PE Digest

15:7e:fc:5b:fd:5e:e9:d7:bb:86:a9:e8:49:f4:a3:5b:10:ba:1e:8c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoDeleteDevice
IoDetachDevice
IofCompleteRequest
ZwQuerySystemInformation
_stricmp
RtlImageNtHeader
MmUnmapIoSpace
MmMapIoSpace
MmGetPhysicalAddress
_except_handler3
ExAllocatePoolWithTag
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoInitializeRemoveLockEx
IoCreateDevice
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
ZwQueryValueKey
ZwClose
ExFreePoolWithTag

usbd.sys

USBD_ParseDescriptors
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fps boost/10 .Overclock Controller_KBM/NTX86/hidusbf.sys
.sys windows:5 windows x86 arch:x86

34af1360f83df6c59c2f28d9cb2cba57

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24/12/2015, 00:00

Not After

07/01/2025, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

19:69:94:92:98:b0:ce:ce:d5:00:b9:b1:67:06:8f:77:cd:09:60:70:11:fa:a9:ba:d9:2b:d4:e1:b9:24:c7:60
Signer

Actual PE Digest

19:69:94:92:98:b0:ce:ce:d5:00:b9:b1:67:06:8f:77:cd:09:60:70:11:fa:a9:ba:d9:2b:d4:e1:b9:24:c7:60

Digest Algorithm

sha256

PE Digest Matches

true

15:7e:fc:5b:fd:5e:e9:d7:bb:86:a9:e8:49:f4:a3:5b:10:ba:1e:8c
Signer

Actual PE Digest

15:7e:fc:5b:fd:5e:e9:d7:bb:86:a9:e8:49:f4:a3:5b:10:ba:1e:8c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoDeleteDevice
IoDetachDevice
IofCompleteRequest
ZwQuerySystemInformation
_stricmp
RtlImageNtHeader
MmUnmapIoSpace
MmMapIoSpace
MmGetPhysicalAddress
_except_handler3
ExAllocatePoolWithTag
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoInitializeRemoveLockEx
IoCreateDevice
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
ZwQueryValueKey
ZwClose
ExFreePoolWithTag

usbd.sys

USBD_ParseDescriptors
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fps boost/10 .Overclock Controller_KBM/NTX86/nopatch/hidusbf.sys
.sys windows:5 windows x86 arch:x86

ff806606d50632c55cde2947b6f8af7e

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/04/2016, 00:00

Not After

18/04/2017, 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24/12/2015, 00:00

Not After

07/01/2025, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

35:93:f6:ee:76:37:09:92:ea:44:03:2a:9a:af:16:00:6d:2d:af:f0:90:02:8a:e7:98:a2:76:a9:ab:77:ea:69
Signer

Actual PE Digest

35:93:f6:ee:76:37:09:92:ea:44:03:2a:9a:af:16:00:6d:2d:af:f0:90:02:8a:e7:98:a2:76:a9:ab:77:ea:69

Digest Algorithm

sha256

PE Digest Matches

true

f3:a0:e3:0c:83:05:05:a7:54:b5:6c:67:00:4c:de:5a:51:2a:10:4c
Signer

Actual PE Digest

f3:a0:e3:0c:83:05:05:a7:54:b5:6c:67:00:4c:de:5a:51:2a:10:4c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
ZwClose
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoInitializeRemoveLockEx
IoCreateDevice
_except_handler3
IoDeleteDevice
ZwQueryValueKey
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
IofCompleteRequest
IoDetachDevice
ExFreePool

usbd.sys

_USBD_ParseDescriptors@16

Sections

.text
Size: 992B - Virtual size: 978B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 640B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fps boost/10 .Overclock Controller_KBM/README.2kHz-8kHz.ENG.TXT
Fps boost/10 .Overclock Controller_KBM/README.ENG.TXT
Fps boost/10 .Overclock Controller_KBM/README.RUS.TXT
Fps boost/10 .Overclock Controller_KBM/Setup.exe
.exe windows:1 windows x86 arch:x86

Password: 123

Code Sign

3e:ea:bd:93:c8:a2:b0:9b:4d:e3:c9:0e:3d:28:d8:2e
Certificate

Issuer

CN=SweetLow,1.2.840.113549.1.9.1=#0c0f73776565746c6f77407475742e6279

Not Before

05/06/1973, 21:00

Not After

30/12/2999, 21:00

Subject

CN=SweetLow,1.2.840.113549.1.9.1=#0c0f73776565746c6f77407475742e6279

Extended Key Usages

ExtKeyUsageCodeSigning

9c:08:8f:eb:76:25:dd:84:7a:3e:7b:66:b5:50:d0:66:4a:6a:41:3c
Signer

Actual PE Digest

9c:08:8f:eb:76:25:dd:84:7a:3e:7b:66:b5:50:d0:66:4a:6a:41:3c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Fps boost/10 .Overclock Controller_KBM/SweetLow.CER
Fps boost/10 .Overclock Controller_KBM/nopatch.cmd
Fps boost/10 .Overclock Controller_KBM/sx64.exe
.exe windows:5 windows x64 arch:x64

Password: 123

d4fa6722ea3a7bcd5e00f6b8c635b3ca

Code Sign

3e:ea:bd:93:c8:a2:b0:9b:4d:e3:c9:0e:3d:28:d8:2e
Certificate

Issuer

CN=SweetLow,1.2.840.113549.1.9.1=#0c0f73776565746c6f77407475742e6279

Not Before

05/06/1973, 21:00

Not After

30/12/2999, 21:00

Subject

CN=SweetLow,1.2.840.113549.1.9.1=#0c0f73776565746c6f77407475742e6279

Extended Key Usages

ExtKeyUsageCodeSigning

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

99:87:86:e5:9f:14:71:c6:b6:ab:b7:87:0c:0f:d7:29:30:e7:0a:e4
Signer

Actual PE Digest

99:87:86:e5:9f:14:71:c6:b6:ab:b7:87:0c:0f:d7:29:30:e7:0a:e4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

OutputDebugStringA
GetLastError
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
RtlUnwindEx
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapSetInformation
HeapCreate
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
Sleep
SetFilePointer
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
GetLocaleInfoA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
ReadFile
FlushFileBuffers
CloseHandle

setupapi

SetupDiCallClassInstaller
SetupDiSetClassInstallParamsA
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
SetupDiOpenDeviceInfoA
SetupDiCreateDeviceInfoList

shell32

ShellExecuteA

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Fps boost/11. Ram Tweaks/1. Memory Management Optimizations (Credit EverythingTech).reg
Fps boost/11. Ram Tweaks/12GB Ram.reg
Fps boost/11. Ram Tweaks/16GB Ram.reg
Fps boost/11. Ram Tweaks/2. Disable LargeSystemCache.reg
Fps boost/11. Ram Tweaks/32GB Ram.reg
Fps boost/11. Ram Tweaks/4GB Ram.reg
Fps boost/11. Ram Tweaks/6GB Ram.reg
Fps boost/11. Ram Tweaks/8GB Ram.reg
Fps boost/12 .Keyboard_Mouse/10decimal/KBDQS 10.reg
Fps boost/12 .Keyboard_Mouse/10decimal/MDQS 10 .reg
Fps boost/12 .Keyboard_Mouse/16decimal/KBDQS 16.reg
Fps boost/12 .Keyboard_Mouse/16decimal/MDQS 16.reg
Fps boost/2. Cleanup/1 Delete Temporary Files.cmd
Fps boost/2. Cleanup/2 Delete Log Files.cmd
Fps boost/2. Cleanup/3 Delete Windows Update Cache.cmd
Fps boost/2. Cleanup/4 Disk Clean-Up.lnk
.lnk
Fps boost/2. Cleanup/dfrgui.lnk
.lnk
Fps boost/3. Windows10Debloater-master/Individual Scripts/Clear Last Used Files and Folders.ps1
Fps boost/3. Windows10Debloater-master/Individual Scripts/Debloat Windows
.ps1
Fps boost/3. Windows10Debloater-master/Individual Scripts/Disable Cortana
.ps1
Fps boost/3. Windows10Debloater-master/Individual Scripts/Disable Last Used Files and Folders View.ps1
Fps boost/3. Windows10Debloater-master/Individual Scripts/Enable Cortana
.ps1
Fps boost/3. Windows10Debloater-master/Individual Scripts/Enable Edge PDF
Fps boost/3. Windows10Debloater-master/Individual Scripts/Fix Whitelisted Apps
Fps boost/3. Windows10Debloater-master/Individual Scripts/Protect Privacy
.ps1
Fps boost/3. Windows10Debloater-master/Individual Scripts/Remove Bloatware RegKeys
Fps boost/3. Windows10Debloater-master/Individual Scripts/Revert Changes
.ps1
Fps boost/3. Windows10Debloater-master/Individual Scripts/Set Explorers LaunchTo Computer.ps1
Fps boost/3. Windows10Debloater-master/Individual Scripts/Stop Edge PDF
Fps boost/3. Windows10Debloater-master/Individual Scripts/Uninstall OneDrive
.ps1
Fps boost/3. Windows10Debloater-master/Individual Scripts/Unpin Start
.ps1
Fps boost/3. Windows10Debloater-master/LICENSE
Fps boost/3. Windows10Debloater-master/README.md
Fps boost/3. Windows10Debloater-master/Windows10Debloater.ps1
.ps1
Fps boost/3. Windows10Debloater-master/Windows10DebloaterGUI.ps1
.ps1
Fps boost/3. Windows10Debloater-master/Windows10SysPrepDebloater.ps1
.ps1
Fps boost/4. CMD Tweaks/3. Remove Power Saving Features On USB Devices.bat
Fps boost/4. CMD Tweaks/4 Disable Memory Compression.cmd
Fps boost/4. CMD Tweaks/6 Turn Off Auto Windows Updates.cmd
Fps boost/4. CMD Tweaks/Disable HIPM _ DIPM, HDD Parking.bat
Fps boost/4. CMD Tweaks/Disable IoLatencyCap.bat
Fps boost/4. CMD Tweaks/Disable StorPort Idle.bat
Fps boost/4. CMD Tweaks/Disable USB Idle.bat
Fps boost/4. CMD Tweaks/FSE and Game Bar off.bat
Fps boost/4. CMD Tweaks/Latency Tweaks.cmd
Fps boost/5. Registry Tweaks/1. Registry Tweaks.reg
Fps boost/5. Registry Tweaks/2. Extra Registry Tweaks.reg
Fps boost/5. Registry Tweaks/3 Disable Spectre _ Meltdown Windows Patches.reg
Fps boost/5. Registry Tweaks/5 Disable UAC.reg
Fps boost/5. Registry Tweaks/8. Disable File History Service.reg
Fps boost/5. Registry Tweaks/9. Large system cache.reg
Fps boost/5. Registry Tweaks/CSRSS/Default CSRSS Priority.reg
Fps boost/5. Registry Tweaks/CSRSS/Tweaked CSRSS Priority.reg
Fps boost/5. Registry Tweaks/Decrease Delay.reg
Fps boost/5. Registry Tweaks/DisablePageCombining.REG
Fps boost/5. Registry Tweaks/DmaRemapping.reg
Fps boost/5. Registry Tweaks/Exclusive_Fullscreen.reg
Fps boost/5. Registry Tweaks/High Priority Fortnite.reg
Fps boost/5. Registry Tweaks/LowLatencyScaling.reg
Fps boost/5. Registry Tweaks/Might be good/Default lsass Priority.reg
Fps boost/5. Registry Tweaks/Might be good/Default winlogon Priority.reg
Fps boost/5. Registry Tweaks/Might be good/Tweaked lsass Priority.reg
Fps boost/5. Registry Tweaks/Might be good/Tweaked winlogon Priority.reg
Fps boost/5. Registry Tweaks/Optimize ALL Windows Settings.reg
Fps boost/5. Registry Tweaks/Paging Drivers To SSD (Disable).REG
Fps boost/5. Registry Tweaks/Prioritys.reg
Fps boost/5. Registry Tweaks/Transactional Synchronization Extensions.reg
Fps boost/5. Registry Tweaks/USB Suspend Disable.reg
Fps boost/5. Registry Tweaks/Win32/26HEXWindows32PrioritySeperation.reg
Fps boost/5. Registry Tweaks/Win32/36HEXWindows32priorityseperation.reg
Fps boost/6. Unwanted Services/# If the files aren_t working READ THIS.txt
Fps boost/6. Unwanted Services/# Revert Folder/Enable Bluetooth Services.reg
Fps boost/6. Unwanted Services/# Revert Folder/Enable Diagnostics _ Telemtry Services.reg
Fps boost/6. Unwanted Services/# Revert Folder/Enable Download Maps Manager.reg
Fps boost/6. Unwanted Services/# Revert Folder/Enable Extra Unnecessary Services.reg
Fps boost/6. Unwanted Services/# Revert Folder/Enable Printer Services.reg
Fps boost/6. Unwanted Services/# Revert Folder/Enable Windows Defender.reg
Fps boost/6. Unwanted Services/# Revert Folder/Enable Xbox Services.reg
Fps boost/6. Unwanted Services/Disable Diagnostics _ Telemetry Services.reg
Fps boost/6. Unwanted Services/Disable Extra Unnecessary Services.reg
Fps boost/6. Unwanted Services/OPTIONAL Disable Anti Malware Service Executable/# If the files aren_t working READ THIS.txt
Fps boost/6. Unwanted Services/OPTIONAL Disable Anti Malware Service Executable/Disable Anti Malware Service Executable.reg
Fps boost/6. Unwanted Services/OPTIONAL Disable Anti Malware Service Executable/Download Malware Bytes.url
.url
Fps boost/6. Unwanted Services/OPTIONAL Disable Bluetooth Services.reg
Fps boost/6. Unwanted Services/OPTIONAL Disable Download Maps Manager.reg
Fps boost/6. Unwanted Services/OPTIONAL Disable Printer Services.reg
Fps boost/6. Unwanted Services/OPTIONAL Disable Xbox Services.reg
Fps boost/6. Unwanted Services/PowerRun.ini
Fps boost/7. CPU/! DIRECTIONS.txt
Fps boost/7. CPU/1. DisableEnergyEstimation.reg
Fps boost/7. CPU/2. DisableEnergyLogging.reg
Fps boost/7. CPU/3. DisableCpuPwrThrottling.reg
Fps boost/7. CPU/4. FixCpuStockSpeed.bat
Fps boost/7. CPU/5. UnparkCpu.exe
.exe windows:4 windows x86 arch:x86

Password: 123

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:71:0d:c4:23:c7:d0:00:e3:0b:ae:9f:11:ae:11:51
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15/10/2019, 00:00

Not After

04/01/2023, 12:00

Subject

SERIALNUMBER=201927010957,CN=CoderBag\, LLC,O=CoderBag\, LLC,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

50:d5:a1:b8:89:e3:b6:6b:bb:6a:5f:03:a2:47:88:4d:55:dc:06:c7:8f:61:0a:3c:32:e4:c7:33:3a:09:7c:84
Signer

Actual PE Digest

50:d5:a1:b8:89:e3:b6:6b:bb:6a:5f:03:a2:47:88:4d:55:dc:06:c7:8f:61:0a:3c:32:e4:c7:33:3a:09:7c:84

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 627KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fps boost/7. CPU/Minimal Power Management.reg
Fps boost/7. CPU/ParkControl.exe
.exe windows:6 windows x64 arch:x64

Password: 123

199320258aed12e4463a57b6047eb1aa

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:61:74:bc:28:05:22:34:da:b3:72:85:2b:3d:3f:bb
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

20/01/2022, 00:00

Not After

04/03/2023, 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a5:27:57:7c:8d:1b:1d:3d:d0:c5:eb:00:d1:b5:aa:b9:3a:9d:d9:46:5e:c4:1b:75:26:08:13:b0:08:8f:aa:21
Signer

Actual PE Digest

a5:27:57:7c:8d:1b:1d:3d:d0:c5:eb:00:d1:b5:aa:b9:3a:9d:d9:46:5e:c4:1b:75:26:08:13:b0:08:8f:aa:21

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\dev\projs\ProcessSupervisor\output\ParkControl.pdb

Imports

kernel32

GetCommandLineW
IsBadReadPtr
Sleep
DeleteFileW
CreateDirectoryW
GetSystemDirectoryW
InitializeCriticalSection
DeleteCriticalSection
GetTickCount
WaitForMultipleObjects
CreateEventW
CreateThread
SetEvent
GetLastError
MultiByteToWideChar
GetSystemTimeAsFileTime
GetFileTime
CreateFileW
GetSystemInfo
ReleaseMutex
CloseHandle
GetExitCodeProcess
GetFileAttributesW
WaitForSingleObject
ExitProcess
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
LoadLibraryW
GetModuleHandleW
GetProcessHeap
HeapAlloc
GetCurrentDirectoryW
CreateProcessW
WriteFile
GetTempPathW
TerminateThread
LeaveCriticalSection
TryEnterCriticalSection
GetSystemTime
GetNumaHighestNodeNumber
InitializeCriticalSectionEx
CreateMutexW
WriteConsoleW
GetConsoleOutputCP
GetStringTypeW
SetStdHandle
GetCurrentProcessId
IsBadWritePtr
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
FindNextFileW
FindFirstFileExW
FindClose
GetConsoleMode
SetFilePointerEx
LCMapStringW
GetFileType
GetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ResetEvent
LoadLibraryExW
GetProcAddress
LocalFree
VerifyVersionInfoW
VerSetConditionMask
GetCurrentProcess
OpenProcess
CreateToolhelp32Snapshot
Thread32First
OpenThread
Thread32Next
GetActiveProcessorGroupCount
TerminateProcess
GetModuleFileNameW
GetFileSize
GetStartupInfoW
SetLastError
WinExec
GetSystemWow64DirectoryW
WideCharToMultiByte
GetUserDefaultUILanguage
FreeLibrary
ReadFile
GetLogicalProcessorInformationEx
GetActiveProcessorCount
EnterCriticalSection
LocalAlloc
FlushFileBuffers
GetCurrentThreadId
SuspendThread
ResumeThread
GetExitCodeThread
GetVersionExW
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
LocalLock
LocalUnlock
InitializeCriticalSectionAndSpinCount
GetProcessTimes
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WaitForSingleObjectEx
QueryPerformanceCounter
IsDebuggerPresent
OutputDebugStringW
RaiseException

user32

CreateWindowExW
SetWindowPos
RedrawWindow
SendMessageW
ShowWindow
FillRect
PostMessageW
GetClientRect
LoadStringW
GetDlgItem
GetLastInputInfo
LoadCursorW
RegisterClassExW
DialogBoxParamW
IsWindowVisible
CheckDlgButton
SetDlgItemInt
MessageBoxW
DestroyWindow
GetWindowRect
WinHelpW
SetDlgItemTextW
DefWindowProcW
RegisterWindowMessageW
DestroyMenu
TrackPopupMenu
BeginPaint
FrameRect
EndPaint
DrawTextW
GetSystemMetrics
GetWindow
EnableWindow
SetWindowLongPtrW
GetClassLongPtrW
GetWindowLongPtrW
SetClassLongPtrW
SetRect
GetActiveWindow
GetLastActivePopup
MessageBeep
DrawIcon
GetDialogBaseUnits
PostQuitMessage
IsWindow
GetClassNameW
EnableMenuItem
GetSystemMenu
SetFocus
MoveWindow
GetParent
DestroyIcon
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetAsyncKeyState
CreateDialogIndirectParamW
PeekMessageW
IsDialogMessageW
WaitMessage
GetCursorPos
LoadMenuW
KillTimer
CheckMenuItem
AppendMenuW
DeleteMenu
GetSubMenu
DispatchMessageW
TranslateMessage
GetMessageW
LoadIconW
FindWindowW
GetDlgItemTextW
IsDlgButtonChecked
SetForegroundWindow
SetWindowTextW
SystemParametersInfoW
SetTimer
GetSysColor
ScreenToClient
LoadImageW
EndDialog
GetWindowTextW
GetDlgItemInt

gdi32

CreateFontIndirectW
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
SetBkMode
SetTextColor
GetTextExtentPoint32W
CreateSolidBrush
GetStockObject
CreateDCW
SetBkColor

shell32

SHGetSpecialFolderPathW
SHChangeNotify
Shell_NotifyIconW
ShellExecuteW

ole32

CoInitializeEx
CoCreateInstance
StringFromGUID2
CoUninitialize

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

comctl32

ord410
InitCommonControlsEx
ord413

pdh

PdhCloseQuery
PdhRemoveCounter
PdhAddEnglishCounterW
PdhOpenQueryW
PdhGetFormattedCounterValue
PdhCollectQueryData

wininet

InternetCloseHandle
InternetCanonicalizeUrlW
InternetOpenW
InternetOpenUrlW
InternetReadFile

shlwapi

SHDeleteKeyW

dbghelp

MiniDumpWriteDump

uxtheme

SetWindowTheme

wevtapi

EvtClose
EvtNext
EvtQuery
EvtRender

powrprof

PowerRestoreIndividualDefaultPowerScheme

rpcrt4

UuidFromStringW

advapi32

ChangeServiceConfigW
ControlService
QueryServiceStatus
RegCreateKeyExW
RegDeleteValueW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
GetUserNameW
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
OpenSCManagerW
OpenServiceW
CloseServiceHandle
StartServiceW
NotifyBootConfigStatus
QueryServiceConfigW

Sections

.text
Size: 384KB - Virtual size: 383KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fps boost/7. CPU/QuickCPU.lnk
.lnk
Fps boost/8. Powerplan/1 Import Adamx_s Power Plan.cmd
Fps boost/8. Powerplan/2 Power Plans.lnk
.lnk
Fps boost/8. Powerplan/3 Disable Power Throttling.reg
Fps boost/8. Powerplan/Amit v3 Idle Enabled.pow
Fps boost/8. Powerplan/Amit v3.pow
Fps boost/9. GPU/Cat 391.35.nip
Fps boost/9. GPU/Cat 425.31.nip
Fps boost/9. GPU/Dato.nip
Fps boost/9. GPU/DisableWriteCombining.reg
Fps boost/9. GPU/Disable_Preemption.reg
Fps boost/9. GPU/GpuEnergyDriver.reg
Fps boost/9. GPU/MSI Mode Tool.exe
.exe windows:4 windows x86 arch:x86

Password: 123

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Z:\Software\mediafire\MSI_util\MSI_util\obj\Release\MSI_util_v2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fps boost/9. GPU/New Cat Tweaked (457.30 and below).nip
Fps boost/9. GPU/New Cat Tweaked (457.51 and above).nip
Fps boost/9. GPU/Old Cat Tweaked (441.41).nip
Fps boost/9. GPU/Old Cat Tweaked (457.30 and below).nip
Fps boost/9. GPU/Old Cat Tweaked (457.51 and above).nip
Fps boost/9. GPU/Unhide Silksmoothness.reg
Fps boost/9. GPU/nvidiaProfileInspector.exe
.exe windows:4 windows x86 arch:x86

Password: 123

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 560KB - Virtual size: 560KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fps boost/DDU v18.0.5.5/DDU Logs/2022-10-21__17-25-09_DDULog.xml
Fps boost/DDU v18.0.5.5/DDU Logs/2023-11-07__20-01-33_DDULog.xml
Fps boost/DDU v18.0.5.5/DDU Logs/2023-11-07__20-01-37_DDULog.xml
Fps boost/DDU v18.0.5.5/DDU Logs/2023-11-07__20-01-45_DDULog.xml
Fps boost/DDU v18.0.5.5/Display Driver Uninstaller.exe
.exe windows:4 windows x86 arch:x86

Password: 123

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

a2:43:2c:58:81:d6:5f:6a:71:46:96:3b:2c:43:f5:a4
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/03/2021, 00:00

Not After

25/03/2023, 23:59

Subject

CN=Wagnardsoft,O=Wagnardsoft,POSTALCODE=J7N 0W5,STREET=16915 Rue de la Perle,L=Mirabel,ST=Quebec,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/03/2019, 00:00

Not After

31/12/2028, 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:cb:34:fd:3d:ff:12:11:33:9f:f0:7c:4b:21:57:c7
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

30/08/2022, 00:00

Not After

29/08/2023, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c3:83:68:84:a0:c0:80:61:e8:0e:7f:18:ca:b7:1a:6b:75:62:f3:05:1e:5b:f6:34:a2:11:5f:a7:b6:0a:32:7a
Signer

Actual PE Digest

c3:83:68:84:a0:c0:80:61:e8:0e:7f:18:ca:b7:1a:6b:75:62:f3:05:1e:5b:f6:34:a2:11:5f:a7:b6:0a:32:7a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\ghisl\OneDrive\Documents\Programmation\wpf\display-drivers-uninstaller\display-driver-uninstaller\Display Driver Uninstaller\obj\Release\Display Driver Uninstaller.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fps boost/DDU v18.0.5.5/Display Driver Uninstaller.pdb
Fps boost/DDU v18.0.5.5/Issues and solutions.txt
Fps boost/DDU v18.0.5.5/Licence.txt
Fps boost/DDU v18.0.5.5/Readme.txt
Fps boost/DDU v18.0.5.5/settings/AMD/classroot.cfg
Fps boost/DDU v18.0.5.5/settings/AMD/clsidleftover.cfg
Fps boost/DDU v18.0.5.5/settings/AMD/driverfiles.cfg
Fps boost/DDU v18.0.5.5/settings/AMD/driverfilesKMAFD.cfg
Fps boost/DDU v18.0.5.5/settings/AMD/driverfilesKMPFD.cfg
Fps boost/DDU v18.0.5.5/settings/AMD/interface.cfg
Fps boost/DDU v18.0.5.5/settings/AMD/packages.cfg
Fps boost/DDU v18.0.5.5/settings/AMD/services.cfg
Fps boost/DDU v18.0.5.5/settings/INTEL/classroot.cfg
Fps boost/DDU v18.0.5.5/settings/INTEL/clsidleftover.cfg
Fps boost/DDU v18.0.5.5/settings/INTEL/driverfiles.cfg
Fps boost/DDU v18.0.5.5/settings/INTEL/interface.cfg
Fps boost/DDU v18.0.5.5/settings/INTEL/packages.cfg
Fps boost/DDU v18.0.5.5/settings/INTEL/services.cfg
Fps boost/DDU v18.0.5.5/settings/Languages/Arabic.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Bulgarian.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Chinese (Simplified).xml
.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Chinese (Traditional).xml
.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Czech.xml
.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Danish.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Dutch.xml
.xml
Fps boost/DDU v18.0.5.5/settings/Languages/English.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Finnish.xml
Fps boost/DDU v18.0.5.5/settings/Languages/French.xml
Fps boost/DDU v18.0.5.5/settings/Languages/German.xml
.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Greek.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Hebrew.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Hungarian.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Italian.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Japanese.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Korean.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Macedonian (Latin).xml
Fps boost/DDU v18.0.5.5/settings/Languages/Persian.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Polish.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Portuguese.xml
Fps boost/DDU v18.0.5.5/settings/Languages/PortugueseBrazil.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Russian.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Serbian (Cyrilic).xml
Fps boost/DDU v18.0.5.5/settings/Languages/Serbian (Latin).xml
Fps boost/DDU v18.0.5.5/settings/Languages/Slovak.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Slovenian.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Spanish (Spain).xml
Fps boost/DDU v18.0.5.5/settings/Languages/Spanish.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Swedish.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Thai.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Turkish.xml
Fps boost/DDU v18.0.5.5/settings/Languages/Ukrainian.xml
Fps boost/DDU v18.0.5.5/settings/Languages/_For translators - ReadMe.txt
Fps boost/DDU v18.0.5.5/settings/NVIDIA/classroot.cfg
Fps boost/DDU v18.0.5.5/settings/NVIDIA/clsidleftover.cfg
Fps boost/DDU v18.0.5.5/settings/NVIDIA/clsidleftoverGFE.cfg
Fps boost/DDU v18.0.5.5/settings/NVIDIA/driverfiles.cfg
Fps boost/DDU v18.0.5.5/settings/NVIDIA/gfedriverfiles.cfg
Fps boost/DDU v18.0.5.5/settings/NVIDIA/gfeservice.cfg
Fps boost/DDU v18.0.5.5/settings/NVIDIA/interface.cfg
Fps boost/DDU v18.0.5.5/settings/NVIDIA/interfaceGFE.cfg
Fps boost/DDU v18.0.5.5/settings/NVIDIA/nvbservice.cfg
Fps boost/DDU v18.0.5.5/settings/NVIDIA/packages.cfg
Fps boost/DDU v18.0.5.5/settings/NVIDIA/services.cfg
Fps boost/DDU v18.0.5.5/settings/REALTEK/classroot.cfg
Fps boost/DDU v18.0.5.5/settings/REALTEK/clsidleftover.cfg
Fps boost/DDU v18.0.5.5/settings/REALTEK/driverfiles.cfg
Fps boost/DDU v18.0.5.5/settings/REALTEK/packages.cfg
Fps boost/DDU v18.0.5.5/settings/REALTEK/services.cfg
Fps boost/DDU v18.0.5.5/settings/Settings.xml
Fps boost/Internet/tcp/FirstBackup.spg
Fps boost/Internet/tcp/TCPOptimizer.exe
.exe windows:4 windows x86 arch:x86

6cce23cb7f6c7d69f3ef22e1fb2d232f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
FreeEnvironmentStringsA
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetUnhandledExceptionFilter
GetProfileStringA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
HeapSize
HeapReAlloc
TerminateProcess
GetACP
GetLocalTime
GetSystemTime
GetTimeZoneInformation
ExitProcess
GetStartupInfoA
RaiseException
ExitThread
RtlUnwind
CopyFileA
lstrlenW
GlobalSize
SetErrorMode
GetOEMCP
GetCPInfo
GlobalFlags
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetCurrentThread
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
GetFileSize
GetFileAttributesA
SuspendThread
SetThreadPriority
GetTickCount
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
VirtualProtect
lstrcmpA
SetLastError
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
MultiByteToWideChar
InterlockedIncrement
FormatMessageA
LocalFree
WideCharToMultiByte
InterlockedDecrement
GetModuleFileNameA
ReadFile
SetFilePointer
CreatePipe
DuplicateHandle
GetStdHandle
CreateProcessA
GetCommandLineA
SetThreadLocale
CreateThread
TerminateThread
InterlockedExchange
GetProcessHeap
HeapAlloc
HeapFree
SleepEx
Sleep
LoadLibraryA
FreeLibrary
lstrcmpiA
GetVersionExA
GetModuleHandleA
GetProcAddress
GetSystemInfo
VerSetConditionMask
VerifyVersionInfoA
SetEvent
ResetEvent
WaitForSingleObject
FindResourceA
LoadResource
SizeofResource
LockResource
ResumeThread
MulDiv
GlobalFree
CreateEventA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetCurrentProcess
WriteFile
GlobalAlloc
GlobalLock
GlobalUnlock
CreateFileA
CloseHandle
WritePrivateProfileStringA
lstrlenA
WinExec
lstrcpynA
GetLastError
lstrcpyA
IsBadCodePtr
lstrcatA

user32

MessageBeep
CharNextA
CopyAcceleratorTableA
DispatchMessageA
SetFocus
AdjustWindowRectEx
IsWindowVisible
GetScrollInfo
SetScrollInfo
GetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
wsprintfA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
UnhookWindowsHookEx
GetLastActivePopup
IsWindowEnabled
ExitWindowsEx
IsIconic
DrawIcon
GetSystemMenu
LoadIconA
PostThreadMessageA
SetMenuDefaultItem
SetMenuItemInfoA
LoadMenuA
GetSubMenu
SetForegroundWindow
TrackPopupMenuEx
CreatePopupMenu
AppendMenuA
GetNextDlgTabItem
GetKeyState
KillTimer
SetTimer
DestroyCaret
CreateCaret
SetCaretPos
ShowCaret
EnableScrollBar
ShowScrollBar
GetFocus
GetClassInfoA
DefWindowProcA
IsWindow
RegisterClipboardFormatA
GetNextDlgGroupItem
GetCapture
SetCapture
ReleaseCapture
InflateRect
DrawStateA
ClientToScreen
GetSysColorBrush
FrameRect
LoadStringA
UnregisterClassA
HideCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
MessageBoxA
PostQuitMessage
GetMessageA
TranslateMessage
ValidateRect
wvsprintfA
DrawFocusRect
DrawTextA
OffsetRect
LoadBitmapA
SetCursor
LoadCursorA
CopyRect
GetSysColor
FillRect
GetDC
ReleaseDC
SetRect
GetParent
PostMessageA
EnableWindow
GetClassNameA
GetWindowLongA
SetWindowLongA
ScreenToClient
PtInRect
IsZoomed
SetWindowContextHelpId
GetDlgItem
DrawFrameControl
BeginDeferWindowPos
DeferWindowPos
InvalidateRect
EndDeferWindowPos
EqualRect
UpdateWindow
GetClientRect
GetWindowRect
GetSystemMetrics
SendMessageA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsClipboardFormatAvailable
DestroyMenu
GetDesktopWindow
CharUpperA
WindowFromPoint
MapDialogRect
GetAsyncKeyState
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
PeekMessageA
SendDlgItemMessageA
GetCursorPos
MapWindowPoints

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
IntersectClipRect
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
GetMapMode
DPtoLP
CopyMetaFileA
GetTextColor
GetBkColor
LPtoDP
SetBkMode
RestoreDC
SaveDC
SetBkColor
GetClipBox
CreateFontA
CreateRectRgnIndirect
Polygon
Polyline
GetCharWidthA
GetStockObject
RoundRect
SetPixel
MoveToEx
LineTo
CreateBitmap
CreatePen
CreateFontIndirectA
SetTextColor
GetObjectA
CreateSolidBrush
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
GetDeviceCaps
SetMapMode
GetTextExtentPoint32A
StartDocA
StartPage
EndPage
EndDoc
CreateDIBitmap
GetTextExtentPointA
DeleteDC

comdlg32

GetFileTitleA
GetOpenFileNameA
PrintDlgA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueA
RegQueryValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegEnumValueA
RegOpenKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
InitiateSystemShutdownA
RegDeleteKeyA
RegEnumKeyExA

shell32

ShellExecuteA

comctl32

_TrackMouseEvent
ImageList_AddMasked
ord17
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA

oledlg

ord8

ole32

CreateStreamOnHGlobal
CoTaskMemFree
ReleaseStgMedium
OleGetClipboard
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CLSIDFromProgID
CLSIDFromString
OleDuplicateData
CoTaskMemAlloc
CoRegisterMessageFilter
CoGetClassObject
CoRevokeClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal

olepro32

ord251
ord253

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
SysStringLen
SysAllocStringByteLen
VariantChangeType
SysAllocString
VariantCopy

wsock32

ioctlsocket
WSACleanup
WSAStartup
inet_addr
htonl
gethostbyname

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 340KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 414KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Fps boost/Process Lasso.exe
.exe windows:4 windows x86 arch:x86

1f23f452093b5c1ff091a2f9fb4fa3e9

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/12/2020, 00:00

Not After

02/03/2022, 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:a4:34:2e:72:00:b6:ea:11:2e:58:bc:35:e6:54:93:59:bc:ea:29:33:4b:19:04:68:83:8b:88:33:ba:48:98
Signer

Actual PE Digest

a0:a4:34:2e:72:00:b6:ea:11:2e:58:bc:35:e6:54:93:59:bc:ea:29:33:4b:19:04:68:83:8b:88:33:ba:48:98

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
SetCurrentDirectoryW
GetFileAttributesW
SetEnvironmentVariableW
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
GetVersion
SetErrorMode
lstrlenW
lstrcpynW
CopyFileW
GetShortPathNameW
GlobalLock
CreateThread
GetLastError
CreateDirectoryW
CreateProcessW
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
WriteFile
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
lstrcmpiW
MoveFileW
GetFullPathNameW
SetFileTime
SearchPathW
CompareFileTime
lstrcmpW
CloseHandle
ExpandEnvironmentStringsW
GlobalFree
GlobalUnlock
GetDiskFreeSpaceW
GlobalAlloc
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
lstrlenA
MulDiv
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
FreeLibrary
LoadLibraryExW
GetModuleHandleW

user32

GetSystemMenu
SetClassLongW
EnableMenuItem
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
ScreenToClient
GetWindowRect
GetDlgItem
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
GetDC
SetTimer
SetWindowTextW
LoadImageW
SetForegroundWindow
ShowWindow
IsWindow
SetWindowLongW
FindWindowExW
TrackPopupMenu
AppendMenuW
CreatePopupMenu
EndPaint
CreateDialogParamW
SendMessageTimeoutW
wsprintfW
PostQuitMessage

gdi32

SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor

shell32

SHGetSpecialFolderLocation
ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW

advapi32

AdjustTokenPrivileges
RegCreateKeyExW
RegOpenKeyExW
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
RegEnumValueW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegEnumKeyW

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17

ole32

OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 238KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Alltweakssolar/SolarTweak4.bat
Alltweakssolar/SolarTweaks2.bat
.bat .vbs
Alltweakssolar/SolarTweaks3.bat
.bat .vbs
Alltweakssolar/SolarTweakzFREEMAIN.bat
.bat .vbs

Sharing

General

Malware Config

Signatures

Files

Password: 123

Password: 123

a4854a4d8aeca1a6f1a6ecad1dafa6de

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

usbd.sys

Sections

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 128B - Virtual size: 100B

INIT Size: 672B - Virtual size: 642B

.rsrc Size: 960B - Virtual size: 952B

.reloc Size: 128B - Virtual size: 118B

2381c1ee5c1461ef217df28364930cee

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57Certificate

Extended Key Usages

Key Usages

61:20:4d:b4:00:00:00:00:00:27Certificate

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5fCertificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73Certificate

Extended Key Usages

Key Usages

61:20:4d:b4:00:00:00:00:00:27Certificate

Key Usages

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9Certificate

Extended Key Usages

Key Usages

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4fCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

78:d5:57:74:02:76:a2:28:c3:ba:37:bb:de:b1:2d:7e:64:c7:eb:3d:39:a7:bd:3a:06:7b:56:2a:61:7d:51:d6Signer

d7:17:48:ed:5d:88:d5:41:5c:37:22:a4:77:8c:82:43:0d:6c:84:67Signer

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

usbd.sys

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 768B - Virtual size: 676B

.pdata Size: 256B - Virtual size: 240B

INIT Size: 2KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 952B

84541687f18e3ffb4f8fe04db5f18fde

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57Certificate

Extended Key Usages

Key Usages

61:20:4d:b4:00:00:00:00:00:27Certificate

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5fCertificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 128B - Virtual size: 100B

INIT
Size: 672B - Virtual size: 642B

.rsrc
Size: 960B - Virtual size: 952B

.reloc
Size: 128B - Virtual size: 118B

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

78:d5:57:74:02:76:a2:28:c3:ba:37:bb:de:b1:2d:7e:64:c7:eb:3d:39:a7:bd:3a:06:7b:56:2a:61:7d:51:d6
Signer

d7:17:48:ed:5d:88:d5:41:5c:37:22:a4:77:8c:82:43:0d:6c:84:67
Signer

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 768B - Virtual size: 676B

.pdata
Size: 256B - Virtual size: 240B

INIT
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 952B

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

07:da:71:3b:27:da:28:a7:37:18:c6:b0:9d:c2:61:7e:8e:23:54:50:ef:11:ca:64:0d:d7:f4:89:1b:10:22:2a
Signer

be:5e:bd:40:f8:54:5d:71:98:6e:fd:32:80:63:7a:a8:51:0a:4d:3a
Signer

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 768B - Virtual size: 688B

.pdata
Size: 256B - Virtual size: 240B

INIT
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 952B

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

3e:58:48:66:65:a4:56:dc:bb:06:68:49:39:fe:bb:c9:5a:9b:f5:47:0a:55:84:d1:23:5b:ef:7b:06:6f:06:cc
Signer

df:02:03:ec:56:95:cd:8b:04:52:4b:0e:df:ca:49:54:03:52:e4:a4
Signer

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 768B - Virtual size: 688B

.pdata
Size: 256B - Virtual size: 240B