Overview

overview

7

Static

static

5

2026-07-19...ar.exe

windows10-2004-x64

7

2026-07-19...ar.exe

windows11-ltsc_2024-x64

6

Analysis

  • max time kernel
    150s
  • max time network
    148s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    19/07/2026, 18:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-19_e510ea480e7b05eb2d9160db48662956_agent-tesla_amadey_icedid_njrat_vidar.exe
  • Size 1.4MB
  • Sample260719-w4mclagy6n
  • SHA256 ad7fa7a872d58b77ed9a741a599f4d512e6cc24794b841638bb7d4d619b641cc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
executionpersistence

Malware Config

Signatures

  • Power Settings 1 TTPs 12 IoCs

    powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.

    persistence
  • Drops file in System32 directory 5 IoCs
  • Drops file in Windows directory 61 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 4 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies registry class 1 IoCs
  • NTFS ADS 2 IoCs
  • Runs net.exe
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 6 IoCs
  • Suspicious behavior: SetClipboardViewer 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 39 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 10 IoCs
  • Suspicious use of WriteProcessMemory 26 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-19_e510ea480e7b05eb2d9160db48662956_agent-tesla_amadey_icedid_njrat_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-19_e510ea480e7b05eb2d9160db48662956_agent-tesla_amadey_icedid_njrat_vidar.exe"
    1⤵
    • Modifies registry class
    • NTFS ADS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:6044
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c tzutil /s "Mountain Standard Time"
      2⤵
      • Executes a command shell one-liner
      • Suspicious use of WriteProcessMemory
      PID:4916
      • C:\Windows\system32\tzutil.exe
        tzutil /s "Mountain Standard Time"
        3⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:4144
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c net start w32tm
      2⤵
      • Executes a command shell one-liner
      • Suspicious use of WriteProcessMemory
      PID:3136
      • C:\Windows\system32\net.exe
        net start w32tm
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:5036
        • C:\Windows\system32\net1.exe
          C:\Windows\system32\net1 start w32tm
          4⤵
            PID:3236
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c w32tm /config /manualpeerlist:time.windows.com /syncfromflags:manual /reliable:YES /update
        2⤵
        • Executes a command shell one-liner
        • Suspicious use of WriteProcessMemory
        PID:5584
        • C:\Windows\system32\w32tm.exe
          w32tm /config /manualpeerlist:time.windows.com /syncfromflags:manual /reliable:YES /update
          3⤵
            PID:1468
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /c w32tm /resync /force
          2⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:4376
          • C:\Windows\system32\w32tm.exe
            w32tm /resync /force
            3⤵
              PID:5044
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /c powercfg /change monitor-timeout-ac 60
            2⤵
            • Power Settings
            • Suspicious use of WriteProcessMemory
            PID:2448
            • C:\Windows\system32\powercfg.exe
              powercfg /change monitor-timeout-ac 60
              3⤵
              • Power Settings
              • Suspicious use of AdjustPrivilegeToken
              PID:1856
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /c powercfg /change monitor-timeout-dc 60
            2⤵
            • Power Settings
            • Suspicious use of WriteProcessMemory
            PID:2536
            • C:\Windows\system32\powercfg.exe
              powercfg /change monitor-timeout-dc 60
              3⤵
              • Power Settings
              • Suspicious use of AdjustPrivilegeToken
              PID:748
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /c powercfg /change standby-timeout-ac 60
            2⤵
            • Power Settings
            • Suspicious use of WriteProcessMemory
            PID:704
            • C:\Windows\system32\powercfg.exe
              powercfg /change standby-timeout-ac 60
              3⤵
              • Power Settings
              • Suspicious use of AdjustPrivilegeToken
              PID:1464
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /c powercfg /change standby-timeout-dc 60
            2⤵
            • Power Settings
            • Suspicious use of WriteProcessMemory
            PID:3056
            • C:\Windows\system32\powercfg.exe
              powercfg /change standby-timeout-dc 60
              3⤵
              • Power Settings
              • Suspicious use of AdjustPrivilegeToken
              PID:6120
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /c powercfg /a
            2⤵
            • Power Settings
            • Suspicious use of WriteProcessMemory
            PID:5460
            • C:\Windows\system32\powercfg.exe
              powercfg /a
              3⤵
              • Power Settings
              • Suspicious use of AdjustPrivilegeToken
              PID:364
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /c powercfg /h off
            2⤵
            • Power Settings
            • Suspicious use of WriteProcessMemory
            PID:252
            • C:\Windows\system32\powercfg.exe
              powercfg /h off
              3⤵
              • Power Settings
              • Suspicious use of AdjustPrivilegeToken
              PID:6032
          • C:\Windows\system32\mmc.exe
            "C:\Windows\system32\mmc.exe" "C:\Windows\System32\devmgmt.msc"
            2⤵
            • Drops file in System32 directory
            • Drops file in Windows directory
            • Checks SCSI registry key(s)
            • Suspicious behavior: GetForegroundWindowSpam
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of SetWindowsHookEx
            PID:3908
          • C:\Windows\system32\mmc.exe
            "C:\Windows\system32\mmc.exe" "C:\Windows\System32\devmgmt.msc"
            2⤵
            • Drops file in System32 directory
            • Checks SCSI registry key(s)
            • Suspicious behavior: GetForegroundWindowSpam
            • Suspicious behavior: SetClipboardViewer
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of SetWindowsHookEx
            PID:2940
          • C:\Windows\system32\mmc.exe
            "C:\Windows\system32\mmc.exe" "C:\Windows\System32\devmgmt.msc"
            2⤵
            • Drops file in System32 directory
            • Checks SCSI registry key(s)
            • Suspicious behavior: GetForegroundWindowSpam
            • Suspicious behavior: SetClipboardViewer
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of SetWindowsHookEx
            PID:5800
          • C:\Windows\system32\mmc.exe
            "C:\Windows\system32\mmc.exe" "C:\Windows\System32\devmgmt.msc"
            2⤵
            • Drops file in System32 directory
            • Checks SCSI registry key(s)
            • Suspicious behavior: GetForegroundWindowSpam
            • Suspicious behavior: SetClipboardViewer
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of SetWindowsHookEx
            PID:1604
          • C:\Windows\system32\mmc.exe
            "C:\Windows\system32\mmc.exe" "C:\Windows\System32\devmgmt.msc"
            2⤵
            • Drops file in System32 directory
            • Checks SCSI registry key(s)
            • Suspicious behavior: GetForegroundWindowSpam
            • Suspicious behavior: SetClipboardViewer
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of SetWindowsHookEx
            PID:1116

        Network

              MITRE ATT&CK Enterprise v16

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              c_apo.PNF
              • Path C:\Windows\INF\c_apo.PNF
              • Size 6KB
              • SHA256 e9e55a4346104864d9832e23ac4770061b8b264b7f5155e861d4b187a08b22a6
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_barcodescanner.PNF
              • Path C:\Windows\INF\c_barcodescanner.PNF
              • Size 3KB
              • SHA256 989d247b13c8a69d3d461d54b3cd6d51ddead14c7fa9c1759cc8d5e6ab212c86
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              c_camera.PNF
              • Path C:\Windows\INF\c_camera.PNF
              • Size 8KB
              • SHA256 0ceba840e0eb99fd58028bb9fbbb71200a0562ca105bc08fc54a8941f6eb89b3
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_cashdrawer.PNF
              • Path C:\Windows\INF\c_cashdrawer.PNF
              • Size 3KB
              • SHA256 b3b2b5c11bd3a87f1282784a89b4690e9ac6ab61610b0e8b08393a84e4c0718b
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              c_computeaccelerator.PNF
              • Path C:\Windows\INF\c_computeaccelerator.PNF
              • Size 4KB
              • SHA256 dea3ce616f147b3f751fcdf45d6c10c785b48c5b4d7e988ae1253921a645fac4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_diskdrive.PNF
              • Path C:\Windows\INF\c_diskdrive.PNF
              • Size 6KB
              • SHA256 9cbc84b8e872d90b5fde0693806e567ae993ce21bbe73d25b9380fd851a9407f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_display.PNF
              • Path C:\Windows\INF\c_display.PNF
              • Size 8KB
              • SHA256 7f999a6e81d43ad6d40567db382c789e26033cce4cbc47d0b3884aea56f824e4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_extension.PNF
              • Path C:\Windows\INF\c_extension.PNF
              • Size 4KB
              • SHA256 9a7641643dd6d8deea2194033c69e0e10ba51108f36b9f13e633a208e2b7b4e3
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_firmware.PNF
              • Path C:\Windows\INF\c_firmware.PNF
              • Size 8KB
              • SHA256 d29cb4d592315646bfd6bd92ca238d59bfd59c12a8ff6009a7fe6c12666e132a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_fsactivitymonitor.PNF
              • Path C:\Windows\INF\c_fsactivitymonitor.PNF
              • Size 4KB
              • SHA256 1db9dc18f06d7ece2848576fd3d5d508a72aa1b69cd441d76fce75592d43acaa
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_fsantivirus.PNF
              • Path C:\Windows\INF\c_fsantivirus.PNF
              • Size 4KB
              • SHA256 63baba7b69fcc60dd2ce6817fa29aa1cb56d361bbcb53593a000c72de2040e9c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_fscfsmetadataserver.PNF
              • Path C:\Windows\INF\c_fscfsmetadataserver.PNF
              • Size 4KB
              • SHA256 b4772ee18f01f4616c301e9b58f356964250b259f4f2dced901fcc4bb0d462b4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_fscompression.PNF
              • Path C:\Windows\INF\c_fscompression.PNF
              • Size 4KB
              • SHA256 556fbbf5a1d309b0cc8f0cbe12c5245b31e75326a4f4f76f294497dee7c400a6
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_fscontentscreener.PNF
              • Path C:\Windows\INF\c_fscontentscreener.PNF
              • Size 4KB
              • SHA256 8d54733b2698fb1361be2ab67416ffb91dfacce0b7322f77594c252541f04ec6
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_fscontinuousbackup.PNF
              • Path C:\Windows\INF\c_fscontinuousbackup.PNF
              • Size 4KB
              • SHA256 6a45f897921e6698bd82a9cc5ec9a33595dbc066c15867b51427590b1961e835
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_fscopyprotection.PNF
              • Path C:\Windows\INF\c_fscopyprotection.PNF
              • Size 4KB
              • SHA256 838a5407a741cad27c4b6dda92105e22f4aeef874f106e01bc70cfaa88b6c533
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_fsencryption.PNF
              • Path C:\Windows\INF\c_fsencryption.PNF
              • Size 4KB
              • SHA256 92d0fd132a4cde1d9a12386088bb8c6c3e116f246caf17a7d932fbba39ab6162
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_fshsm.PNF
              • Path C:\Windows\INF\c_fshsm.PNF
              • Size 4KB
              • SHA256 809fa87b35ffd847250ba4580dbf4156cf5db3dd033a7506618c3bb6ba8af7f1
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_fsinfrastructure.PNF
              • Path C:\Windows\INF\c_fsinfrastructure.PNF
              • Size 4KB
              • SHA256 680eaf2a634fc405bbb44fbd45128e4bf764a0a594ef7b3148dee7efe949b460
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_fsopenfilebackup.PNF
              • Path C:\Windows\INF\c_fsopenfilebackup.PNF
              • Size 4KB
              • SHA256 ee69371e7b057a120050be647cf8510b0fe5f4c39307d1728d14192cccbf7ed7
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_fsphysicalquotamgmt.PNF
              • Path C:\Windows\INF\c_fsphysicalquotamgmt.PNF
              • Size 4KB
              • SHA256 3841faea1989280a3a7f54e01cfa99102ff8f2cb3e65743312ba6f49306d87b8
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_fsquotamgmt.PNF
              • Path C:\Windows\INF\c_fsquotamgmt.PNF
              • Size 4KB
              • SHA256 c1aedbe436d37a6bd8311c86ffe3e8d6a19f782028c5b9deb6f541fd41fefa71
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_fsreplication.PNF
              • Path C:\Windows\INF\c_fsreplication.PNF
              • Size 4KB
              • SHA256 4ad5476e020d4e8191fe8830bdc25419fb87558cd5f26ecba1aa31eebc43b723
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_fssecurityenhancer.PNF
              • Path C:\Windows\INF\c_fssecurityenhancer.PNF
              • Size 4KB
              • SHA256 66386735a80a607192cf6484a2d4ec9ac7fb86d2403955b592ff1d849f809c12
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_fssystem.PNF
              • Path C:\Windows\INF\c_fssystem.PNF
              • Size 4KB
              • SHA256 b13d47ab599d77454fc9f7896da384c32b44202d8dd3eae5c7481ae36345f034
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_fssystemrecovery.PNF
              • Path C:\Windows\INF\c_fssystemrecovery.PNF
              • Size 4KB
              • SHA256 5bcda68bfe9d0609cc827ead97a8d0a936e475b22bbb1dce278a3a90128ad9d2
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_fsundelete.PNF
              • Path C:\Windows\INF\c_fsundelete.PNF
              • Size 4KB
              • SHA256 53433ffeb4343c11b4d307cf3ccac18205e3cce069a15893b9b404b54bef5276
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_fsvirtualization.PNF
              • Path C:\Windows\INF\c_fsvirtualization.PNF
              • Size 4KB
              • SHA256 eeaed51e810fc8974faa5325cdbbc1f294d2a00041a6a473aae9c9d9f3542882
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_generic.PNF
              • Path C:\Windows\INF\c_generic.PNF
              • Size 4KB
              • SHA256 75e60f8e73ebceeca6b63074d61ca01935603b8b0996eca81e7b6cdad53bc175
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_i3c.PNF
              • Path C:\Windows\INF\c_i3c.PNF
              • Size 4KB
              • SHA256 e0ef85914937233b15c3b3b3659915af32b312084a8bdb45d93f52ee41630444
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_linedisplay.PNF
              • Path C:\Windows\INF\c_linedisplay.PNF
              • Size 4KB
              • SHA256 1f700b6dc0006a1d48a84d056c696f5b419f23c8c569cb79caa16d71033b3fd6
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_magneticstripereader.PNF
              • Path C:\Windows\INF\c_magneticstripereader.PNF
              • Size 3KB
              • SHA256 a8c75ddc119ded1e0b4f786b985addd1ca9571e7348b72b2a379c5834f29f81b
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              c_mcx.PNF
              • Path C:\Windows\INF\c_mcx.PNF
              • Size 4KB
              • SHA256 931cec3e5afe51888740ddceeb5413055ad0dd5e9ec50e59b0ba86e88576aa7c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_media.PNF
              • Path C:\Windows\INF\c_media.PNF
              • Size 12KB
              • SHA256 d94986abc7191af9b3e00e7481199136c7479a1735a91def82b4e5384fa9d0a8
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_monitor.PNF
              • Path C:\Windows\INF\c_monitor.PNF
              • Size 9KB
              • SHA256 1a1bddf9a16b4c77b480ff03a3c43a7035d43455d350ca79bf83b314bf6139ae
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_netdriver.PNF
              • Path C:\Windows\INF\c_netdriver.PNF
              • Size 4KB
              • SHA256 c5b1c0389af436cdf8c01c8bd728b8513eb21ba8172ca2ec0c758c22eae417c0
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_nvmedisk.PNF
              • Path C:\Windows\INF\c_nvmedisk.PNF
              • Size 6KB
              • SHA256 2ca65a8711e9cdc8c022c768a66a8377c149a1a9a811764956d0c373d3a69c87
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_primitive.PNF
              • Path C:\Windows\INF\c_primitive.PNF
              • Size 4KB
              • SHA256 bc8962144606061c2eb076925266fdbfd5caa8373349920bb8db150d24378a02
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_processor.PNF
              • Path C:\Windows\INF\c_processor.PNF
              • Size 5KB
              • SHA256 dc4ed4bdca148b0889dc589b6100d7bf7fe4cc86e2fd74f430a3ea253eed148e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_proximity.PNF
              • Path C:\Windows\INF\c_proximity.PNF
              • Size 5KB
              • SHA256 64a3bb1b8f01db55564fa7800f139d7866096735a081993c47ffa59cc5f924e6
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_ramdisk.PNF
              • Path C:\Windows\INF\c_ramdisk.PNF
              • Size 5KB
              • SHA256 33533db3e6d6ef45db5af81a31112ba7035a07d6c12dfb7591828a2554739f5d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_receiptprinter.PNF
              • Path C:\Windows\INF\c_receiptprinter.PNF
              • Size 3KB
              • SHA256 9c38fd8c9ca08e0a3365f49b8490ae79916d96ed4a07ba449986fa51bc9f9f36
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              c_scmdisk.PNF
              • Path C:\Windows\INF\c_scmdisk.PNF
              • Size 6KB
              • SHA256 54b14fba2a592d79a6bf7013820d4c72f40e5508a34d299d70bf1af4566993be
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_scmvolume.PNF
              • Path C:\Windows\INF\c_scmvolume.PNF
              • Size 4KB
              • SHA256 af8957c0c0528aa5629d69b1e8faa7059ec6a5fac0a7477c0fda0fe922201be0
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_smrdisk.PNF
              • Path C:\Windows\INF\c_smrdisk.PNF
              • Size 6KB
              • SHA256 8ec4173a87828d8ef2139b2909d792ae2308e8c067eee982b0e6cb7474aa91fc
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_smrvolume.PNF
              • Path C:\Windows\INF\c_smrvolume.PNF
              • Size 4KB
              • SHA256 fabd433fc123e42403d4e3211e259c4fceaf9b46fb595f79b74f80a5ad922835
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_sslaccel.PNF
              • Path C:\Windows\INF\c_sslaccel.PNF
              • Size 4KB
              • SHA256 3d5ce57cc691eb6f0bc79700f6ca483e11ddb3feb87f76697d6167dc71d25055
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_swcomponent.PNF
              • Path C:\Windows\INF\c_swcomponent.PNF
              • Size 7KB
              • SHA256 ac79ed30eb91bc5e9ac079f07c47f955b324056827eed0b76fab835c88c32f8f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_ucm.PNF
              • Path C:\Windows\INF\c_ucm.PNF
              • Size 4KB
              • SHA256 4cb5a13fa99f7d8dcf209d34c50c888d60760918d275b6ed2f3c4afc5003878e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_volume.PNF
              • Path C:\Windows\INF\c_volume.PNF
              • Size 4KB
              • SHA256 d7321989b09c47c46a2e5906a12397abe848e6436532d4dfcb46d54357db2f2b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              dc1-controller.PNF
              • Path C:\Windows\INF\dc1-controller.PNF
              • Size 14KB
              • SHA256 f53ad78889b831af5cec65c08cf88b3b2a837a06c3ae3231d2d63ec60fa8fb6f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              digitalmediadevice.PNF
              • Path C:\Windows\INF\digitalmediadevice.PNF
              • Size 7KB
              • SHA256 bb069f584bd951268ac267c82f5cee62d7d31637bf4132b313f98d4bce4f9f2b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              eyegazeioctl.PNF
              • Path C:\Windows\INF\eyegazeioctl.PNF
              • Size 9KB
              • SHA256 ede81a6b52e7cc6094f53d21a9f9dc421480f74bf1cdc6953b5f9bb9e4b11819
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              miradisp.PNF
              • Path C:\Windows\INF\miradisp.PNF
              • Size 11KB
              • SHA256 a7bbd2adab743777028ad8baed0f4229f7baf61fa828ee062e7e7134b903050f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              oposdrv.PNF
              • Path C:\Windows\INF\oposdrv.PNF
              • Size 7KB
              • SHA256 2e1b5e2a9171b465940e76f3ebfc3a1d574ea4f554ee76931aa8375a75655285
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              rawsilo.PNF
              • Path C:\Windows\INF\rawsilo.PNF
              • Size 7KB
              • SHA256 24385c5a330bb1b472a5a24d853b7c4cbb1f03c42ce5ec40ab8b0a9a9428a669
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              rdcameradriver.PNF
              • Path C:\Windows\INF\rdcameradriver.PNF
              • Size 12KB
              • SHA256 51d3e5f950a1da12662a1852b522972d00cb5aa35417770b777a3ed83b6757db
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              remoteposdrv.PNF
              • Path C:\Windows\INF\remoteposdrv.PNF
              • Size 7KB
              • SHA256 c5a91616af1d5e9bba4df6d379adf22e4388168203624abe04674dc47fb3a885
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ts_generic.PNF
              • Path C:\Windows\INF\ts_generic.PNF
              • Size 8KB
              • SHA256 c605b72f722659f1c688e045dd30d7fb78d97508ee054a35c764b0e813fd147b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              wsdprint.PNF
              • Path C:\Windows\INF\wsdprint.PNF
              • Size 7KB
              • SHA256 17343a3fd3c778fdbb39f686558dd46b048d011765ab2e3a1b02a5232ce4f8cb
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              xusb22.PNF
              • Path C:\Windows\INF\xusb22.PNF
              • Size 9KB
              • SHA256 c434c1f04831de13b37dbc26489b33c61716db01058638d1c91793901df46a2e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download