General

  • Target

    cb7820a243e6d944c6a97d267397d6d1060ae05b439ee0a97af14edc7033e398.zip

  • Size

    17.8MB

  • MD5

    695c13c40f32b2ce7e1510568bf5f12d

  • SHA1

    27f01df2955167f13788eba91a9a463e411934e5

  • SHA256

    cb7820a243e6d944c6a97d267397d6d1060ae05b439ee0a97af14edc7033e398

  • SHA512

    f811d73857b38def636def1d66347f0b9380b1c45a3d63b36aeddfcce652d2c45109e4b05896dc3a98dc2ef9a7d623fc1d68ce67fd7666b198db55c38c29f0b7

  • SSDEEP

    393216:649ON9Vu2cWPAP8t4gK2JOfqSkg52aKLAJaTjV3IMyNn4iUkgqK:6CQAUtO2ZXggkJCV4fNUkxK

Score
8/10

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with 4.0 macros.

  • Unsigned PE 65 IoCs

    Checks for missing Authenticode signature.

Files

  • cb7820a243e6d944c6a97d267397d6d1060ae05b439ee0a97af14edc7033e398.zip
    .rar

    Password: infected

  • 0409/scregedit.ini
  • 1028/VisualStudioSetup.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    01b29b0304f316768e6c21448e7b24b7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 1028/VsGraphicsResources.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected


    Code Sign

    Headers

    Sections

  • 1028/vsjitdebuggerui.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected


    Code Sign

    Headers

    Sections

  • 1028/winrar-x64-701.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    39da3cace27ab9503fa46001ce968ea6


    Code Sign

    Headers

    Imports

    Sections

  • 1029/VsGraphicsResources.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected


    Code Sign

    Headers

    Sections

  • 1029/vsjitdebuggerui.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected


    Code Sign

    Headers

    Sections

  • 1031/VsGraphicsResources.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected


    Code Sign

    Headers

    Sections

  • 1031/vsjitdebuggerui.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected


    Code Sign

    Headers

    Sections

  • 1033/VsGraphicsResources.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 1033/vsjitdebuggerui.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 1036/VsGraphicsResources.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 1036/vsjitdebuggerui.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 1040/VsGraphicsResources.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 1040/vsjitdebuggerui.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 1041/VsGraphicsResources.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 1041/vsjitdebuggerui.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 1042/VsGraphicsResources.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 1042/vsjitdebuggerui.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 1045/VsGraphicsResources.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 1045/vsjitdebuggerui.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 1046/VsGraphicsResources.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 1046/vsjitdebuggerui.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 1049/VsGraphicsResources.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 1049/vsjitdebuggerui.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 1055/VsGraphicsResources.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 1055/vsjitdebuggerui.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 2052/VsGraphicsResources.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 2052/vsjitdebuggerui.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 3082/VsGraphicsResources.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • 3082/vsjitdebuggerui.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • AdvancedInstallers/cmiv2.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    539c0aed83d76f4f3e4ac47f24d5d7a8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bthprops/@BthpropsNotificationLogo.png
    .png
  • Com/MigRegDB.exe
    .exe windows:10 windows x86 arch:x86

    d09a6e719e5e2339b3631f455943742b


    Headers

    Imports

    Sections

  • Com/comadmin.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    7cd3952e70950d0ac417c30bcd79d5f7


    Headers

    Imports

    Exports

    Sections

  • Com/comempty.dat
    .msi
  • Com/comrepl.exe
    .exe windows:10 windows x86 arch:x86

    a1c21d02b295775ca1385e51d5db789d


    Headers

    Imports

    Sections

  • Com/en-US/MigRegDB.exe.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Com/en-US/comrepl.exe.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Com/mtsadmin.tlb
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Configuration/BaseRegistration/BaseResource.Schema.mof
  • Configuration/BaseRegistration/MSFT_DSCMetaConfiguration.mof
  • Configuration/BaseRegistration/MSFT_MetaConfigurationExtensionClasses.Schema.mof
  • Configuration/BaseRegistration/en-US/BaseResource.Schema.mfl
  • Configuration/BaseRegistration/en-US/MSFT_DSCMetaConfiguration.mfl
  • Configuration/BaseRegistration/en-US/MSFT_MetaConfigurationExtensionClasses.Schema.mfl
  • Configuration/MSWB7.dll
    .dll windows:10 windows x86 arch:x86

    067b2ac87aad30b9a2a1b2ee9e102e29


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Configuration/Registration/MSFT_FileDirectoryConfiguration/MSFT_FileDirectoryConfiguration.Registration.mof
  • Configuration/Registration/MSFT_FileDirectoryConfiguration/en-US/MSFT_FileDirectoryConfiguration.Registration.mfl
  • Configuration/Schema/MSFT_FileDirectoryConfiguration/MSFT_FileDirectoryConfiguration.Schema.mof
  • Configuration/Schema/MSFT_FileDirectoryConfiguration/en-US/MSFT_FileDirectoryConfiguration.Schema.mfl
  • Configuration/msvcp140_atomic_wait.dll
    .dll windows:6 windows x86 arch:x86

    6350dd29fc58972b1a1864c799f0e95e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Configuration/msvcp140_clr0400.dll
    .dll windows:6 windows x86 arch:x86

    fef22ca1654230f749274aebd0c3ad10


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Configuration/msvcp140_codecvt_ids.dll
    .dll windows:6 windows x86 arch:x86

    72e793c2d219d77e6e25707a25ef03fb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Configuration/msvcp140d.dll
    .dll windows:6 windows x86 arch:x86

    57bb9397035d58e0bce5ee3773a9c109


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Configuration/msvcp140d_atomic_wait.dll
    .dll windows:6 windows x86 arch:x86

    31b35b4fb0ba1bb26f061f0ba7d6ddd6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Configuration/msvcp140d_codecvt_ids.dll
    .dll windows:6 windows x86 arch:x86

    aa1656410a3eed584c7df661657cc761


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Configuration/msvcr100_clr0400.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Configuration/msvcr120_clr0400.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Configuration/msvcrt.dll
    .dll windows:10 windows x86 arch:x86

    bd9e3db73f74ed29b911885187aa4b72


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Configuration/msvcrt20.dll
    .dll windows:1 windows x86 arch:x86

    83ebc2b0dfaf2340453e8daa3551a18b


    Headers

    Imports

    Exports

    Sections

  • Configuration/msvcrt40.dll
    .dll windows:10 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Configuration/msvfw32.dll
    .dll windows:10 windows x86 arch:x86

    b7a1be0e007710e2154a3fc20aac4933


    Headers

    Imports

    Exports

    Sections

  • Configuration/msvidc32.dll
    .dll windows:10 windows x86 arch:x86

    6f64f61bc256216f37954c810127296d


    Headers

    Imports

    Exports

    Sections

  • Configuration/msvproc.dll
    .dll windows:10 windows x86 arch:x86

    392ce038af631772b3bd4d23d88dda3f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DiagSvcs/DiagnosticsHub.StandardCollector.Proxy.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    9bf8010b5d573615ba201f40b0fe8445


    Headers

    Imports

    Exports

    Sections

  • DiagSvcs/KernelTraceControl.dll
    .dll windows:10 windows x86 arch:x86

    5c7ab50abd674ab27655b1c850c405ec


    Headers

    Imports

    Exports

    Sections

  • Dism/AppxProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    0ee69aa25001f968cf0058b9ea32f4ca


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/AssocProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    d91cefea2edeaaad1399ef5fccfde766


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/CbsProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    3e9f0a85ea8e4ab0e43af3a5dda0d146


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/DismCore.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    85595adaab2aeab464d622f8bab3a754


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/DismCorePS.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    9008fbb4297eda8bc58ac66d1b3b5368


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/DismHost.exe
    .exe windows:10 windows x86 arch:x86

    37a3f28b285cf0f7d89f213359712cdf


    Code Sign

    Headers

    Imports

    Sections

  • Dism/DismProv.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    3d731d8426e3d62ad94007b07e200c42


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/DmiProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    d782f58bf7e8d84ce75be3fac1988de2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/EdgeProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    0643d8b352f7bb0753f60bca50dedd9c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/FfuProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    cf282076fe64db6d52b034b188448cbc


    Headers

    Imports

    Exports

    Sections

  • Dism/FolderProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    34d95f1e4c9b392a27ad7dfcdee2f424


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/GenericProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    f618510222295d05d07f1e7850c7536f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/IBSProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    62c01b9d096f7892b8a6c26ea35e8871


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/ImagingProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    850cc066fd163c55528ea08ea479d7d3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/IntlProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    ad57839ca8bbcdb44accfe96d2a6843b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/LogProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    3c90e67dc39267333580a15d4079c4c2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/MsiProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    339195ad99dc67de315a71b8e20f7bdb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/OSProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    2ec1031180de77c5e9aeed433398aa03


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/OfflineSetupProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    a09a287a5bd431bea0d73eca70c99e09


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/ProvProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    add0ce0a60d298b69dd03d5f06556fdf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/ServicingCommon.dll
    .dll windows:10 windows x86 arch:x86

    89a8cc238e409138b6fca5bfffd3d955


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/SetupPlatformProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    d3ef011d0b470576030388fa408ab020


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/SmiProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    7ef977de5b56d7c3f94ef8676c320b29


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/SysprepProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    a32639c6f18878200725ff826b738b48


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/TransmogProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    e36a5d7ed7ccad0bc855d295230ab207


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/UnattendProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    f36b69efd242b3dd5fce009a2348c572


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/VhdProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    f8262741b54b89a54b9f11f0106c6e94


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/WimProvider.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    b14be15fae4dd1b98a194fa471e6eb60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/en-US/AppxProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/AssocProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/CbsProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/DismCore.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/DismProv.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/DmiProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/EdgeProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/FfuProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/FolderProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/GenericProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/IBSProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/ImagingProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/IntlProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/LogProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/MsiProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/OSProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/OfflineSetupProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/ProvProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/SetupPlatformProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/SmiProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/SysprepProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/TransmogProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/UnattendProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/VhdProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • Dism/en-US/WimProvider.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • UpdaterRelease.exe
    .exe windows:6 windows x86 arch:x86

    7f790b0f5344932f487c4eac7dd4daa1


    Code Sign

    Headers

    Imports

    Sections

  • ar-SA/cdosys.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • ar-SA/comctl32.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • ar-SA/windows.ui.xaml.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • ar-SA/xpsrchvw.exe.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • bg-BG/comctl32.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • bg-BG/windows.ui.xaml.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • bg-BG/xpsrchvw.exe.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • cs-CZ/cdosys.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • cs-CZ/comctl32.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • cs-CZ/windows.ui.xaml.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • cs-CZ/xpsfilt.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • cs-CZ/xpsrchvw.exe.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • da-DK/cdosys.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • da-DK/comctl32.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • da-DK/windows.ui.xaml.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • da-DK/xpsfilt.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • da-DK/xpsrchvw.exe.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • de-DE/cdosys.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • de-DE/comctl32.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • de-DE/windows.ui.xaml.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • de-DE/xpsfilt.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • de-DE/xpsrchvw.exe.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • downlevel/API-MS-Win-Core-Heap-Obsolete-L1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-Core-Kernel32-Private-L1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-Core-Kernel32-Private-L1-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-EventLog-Legacy-L1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-Eventing-ClassicProvider-L1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-Eventing-Controller-L1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-Eventing-Legacy-L1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-Eventing-Provider-L1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-Security-Lsalookup-L2-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-Security-Lsalookup-L2-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-core-file-l2-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-core-file-l2-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-core-localization-obsolete-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-core-string-l2-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-core-string-obsolete-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-core-xstate-l2-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-devices-config-L1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-devices-config-L1-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-security-lsapolicy-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-security-provider-L1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-base-util-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-com-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-comm-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-console-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-datetime-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-datetime-l1-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-debug-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-debug-l1-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-delayload-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-errorhandling-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-errorhandling-l1-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-fibers-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-fibers-l1-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-file-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-file-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-file-l1-2-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-handle-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-heap-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-interlocked-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-io-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-io-l1-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-kernel32-legacy-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-kernel32-legacy-l1-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-libraryloader-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-libraryloader-l1-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-localization-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-localization-l1-2-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-memory-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-memory-l1-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-memory-l1-1-2.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-namedpipe-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-privateprofile-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-privateprofile-l1-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-processenvironment-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-processenvironment-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-processthreads-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-processthreads-l1-1-2.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-processtopology-obsolete-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-profile-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-realtime-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-registry-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-registry-l2-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-shlwapi-legacy-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-shutdown-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-string-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-stringansi-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-stringloader-l1-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-synch-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-synch-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-sysinfo-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-sysinfo-l1-2-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-threadpool-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-threadpool-legacy-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-threadpool-private-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-timezone-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-url-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-util-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-version-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-wow64-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-core-xstate-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-crt-multibyte-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-crt-private-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-crt-process-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-crt-runtime-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-crt-time-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-crt-utility-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-eventing-consumer-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-security-base-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-security-cryptoapi-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-security-sddl-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-service-core-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-service-core-l1-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-service-management-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-service-management-l2-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-service-private-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-service-private-l1-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-service-winsvc-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-shcore-stream-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/ucrtbase.dll
    .dll windows:10 windows x86 arch:x86

    8a6120401f74c9f2e7c910ebb127a61f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • drivers/afunix.sys
    .sys windows:10 windows x86 arch:x86

    d90e5e4310edb23ea425c5b5a107357d


    Headers

    Imports

    Sections

  • drivers/en-US/NdisImPlatform.sys.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • drivers/en-US/ndiscap.sys.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • drivers/en-US/wfplwfs.sys.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • drivers/gm.dls
  • drivers/gmreadme.txt
  • python3.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • python312.dll
    .dll windows:6 windows x86 arch:x86

    79ba0c16b2a2904dd15979aabf06aa90


    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    4cbe94576279d6d8408886f6ac74d611


    Code Sign

    Headers

    Imports

    Exports

    Sections