9437483dd513277824d7cf475b04ffd6bcd1c22c431718f7314e1425ac6662b8.bin
- SHA256 9437483dd513277824d7cf475b04ffd6bcd1c22c431718f7314e1425ac6662b8
Overview
overview
3Static
static
3KBDLT.dll
windows10-2004-x64
1KBDLT1.dll
windows10-2004-x64
1KBDLT2.dll
windows10-2004-x64
1KBDLV.dll
windows10-2004-x64
1KBDLV1.dll
windows10-2004-x64
1KBDLVST.dll
windows10-2004-x64
1KBDMAC.dll
windows10-2004-x64
1KBDMACST.dll
windows10-2004-x64
1KBDMAORI.dll
windows10-2004-x64
1KBDMLT47.dll
windows10-2004-x64
1KBDMLT48.dll
windows10-2004-x64
1KBDMON.dll
windows10-2004-x64
1KBDMONMO.dll
windows10-2004-x64
1KBDMONS2.dll
windows10-2004-x64
1KBDMONST.dll
windows10-2004-x64
1KBDMYAN.dll
windows10-2004-x64
1KBDNE.dll
windows10-2004-x64
1KBDNEPR.dll
windows10-2004-x64
1KBDNO.dll
windows10-2004-x64
1KBDNO1.dll
windows10-2004-x64
1KBDNSO.dll
windows10-2004-x64
1KBDNTL.dll
windows10-2004-x64
1KBDOGHAM.dll
windows10-2004-x64
1KBDOLCH.dll
windows10-2004-x64
1KBDOLDIT.dll
windows10-2004-x64
1KBDOSA.dll
windows10-2004-x64
1KBDOSM.dll
windows10-2004-x64
1KBDPASH.dll
windows10-2004-x64
1KBDPL.dll
windows10-2004-x64
1KBDPL1.dll
windows10-2004-x64
1KBDPO.dll
windows10-2004-x64
1KBDRO.dll
windows10-2004-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KBDLT.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
KBDLT1.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
KBDLT2.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
KBDLV.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
KBDLV1.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
KBDLVST.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
KBDMAC.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
KBDMACST.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
KBDMAORI.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
KBDMLT47.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
KBDMLT48.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
KBDMON.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
KBDMONMO.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
KBDMONS2.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
KBDMONST.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
KBDMYAN.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
KBDNE.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
KBDNEPR.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
KBDNO.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
KBDNO1.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
KBDNSO.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
KBDNTL.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
KBDOGHAM.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
KBDOLCH.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
KBDOLDIT.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
KBDOSA.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
KBDOSM.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
KBDPASH.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
KBDPL.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
KBDPL1.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
KBDPO.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
KBDRO.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target 9437483dd513277824d7cf475b04ffd6bcd1c22c431718f7314e1425ac6662b8.bin
- Size 380KB
- Sample260812-a498rsswc1
- SHA256 9437483dd513277824d7cf475b04ffd6bcd1c22c431718f7314e1425ac6662b8
- MD5 7b6ea636d4c93e8bb5c23d1f825b14ab
- SHA1 541d2fa32e74cef1e3e12633ddbd30e20f192d3e
- SHA512 1b717804ddb5310a67d1f7ab14fd770ddcda2205ed8580f847e24f228b63db18b848e33a2e9f34f2ed141eedd116dcbae847b3b6da450a2142c4e6cfa6eb94f4
- SSDEEP 6144:cYCorScgdjUA/ezOJnSItsxJCRul/4Kp1DEXkyXjQdyshYFGS9teO0zYbxomv:rAL/rJSItssul/4Kp1DisdteN0zYOmv
- TLSH T1068412F5E56455A8E93FB438C1C38FA4EADC364D5D005E28D7A01390347FAD8C9B8A9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 95 IoCs
Checks for missing Authenticode signature.
resource unpack001/KBDLT.DLL unpack001/KBDLT1.DLL unpack001/KBDLT2.DLL unpack001/KBDLV.DLL unpack001/KBDLV1.DLL unpack001/KBDLVST.DLL unpack001/KBDMAC.DLL unpack001/KBDMACST.DLL unpack001/KBDMAORI.DLL unpack001/KBDMLT47.DLL unpack001/KBDMLT48.DLL unpack001/KBDMON.DLL unpack001/KBDMONMO.DLL unpack001/KBDMONS2.DLL unpack001/KBDMONST.DLL unpack001/KBDMYAN.DLL unpack001/KBDNE.DLL unpack001/KBDNEPR.DLL unpack001/KBDNO.DLL unpack001/KBDNO1.DLL unpack001/KBDNSO.DLL unpack001/KBDNTL.DLL unpack001/KBDOGHAM.DLL unpack001/KBDOLCH.DLL unpack001/KBDOLDIT.DLL unpack001/KBDOSA.DLL unpack001/KBDOSM.DLL unpack001/KBDPASH.DLL unpack001/KBDPL.DLL unpack001/KBDPL1.DLL unpack001/KBDPO.DLL unpack001/KBDRO.DLL unpack001/KBDROPR.DLL unpack001/KBDROST.DLL unpack001/KBDRU.DLL unpack001/KBDRU1.DLL unpack001/KBDRUM.DLL unpack001/KBDSF.DLL unpack001/KBDSG.DLL unpack001/KBDSL.DLL unpack001/KBDSL1.DLL unpack001/KBDSMSFI.DLL unpack001/KBDSMSNO.DLL unpack001/KBDSN1.DLL unpack001/KBDSORA.DLL unpack001/KBDSOREX.DLL unpack001/KBDSORS1.DLL unpack001/KBDSORST.DLL unpack001/KBDSP.DLL unpack001/KBDSW.DLL unpack001/KBDSW09.DLL unpack001/KBDSYR1.DLL unpack001/KBDSYR2.DLL unpack001/KBDTAILE.DLL unpack001/KBDTAJIK.DLL unpack001/KBDTAM99.DLL unpack001/KBDTAT.DLL unpack001/KBDTH0.DLL unpack001/KBDTH1.DLL unpack001/KBDTH2.DLL unpack001/KBDTH3.DLL unpack001/KBDTIFI.DLL unpack001/KBDTIFI2.DLL unpack001/KBDTIPRC.DLL unpack001/KBDTIPRD.DLL unpack001/KBDTT102.DLL unpack001/KBDTUF.DLL unpack001/KBDTUQ.DLL unpack001/KBDTURME.DLL unpack001/KBDTZM.DLL unpack001/KBDUGHR.DLL unpack001/KBDUGHR1.DLL unpack001/KBDUK.DLL unpack001/KBDUKX.DLL unpack001/KBDUR.DLL unpack001/KBDUR1.DLL unpack001/KBDURDU.DLL unpack001/KBDUS.DLL unpack001/KBDUSA.DLL unpack001/KBDUSL.DLL unpack001/KBDUSR.DLL unpack001/KBDUSX.DLL unpack001/KBDUZB.DLL unpack001/KBDVNTC.DLL unpack001/KBDWOL.DLL unpack001/KBDYAK.DLL unpack001/KBDYBA.DLL unpack001/KBDYCC.DLL unpack001/KBDYCL.DLL unpack001/kbdnec.dll unpack001/kbdnec95.dll unpack001/kbdnecat.dll unpack001/kbdnecnt.dll unpack001/kbdnko.dll unpack001/kbdphags.dll
File Explorer
-
9437483dd513277824d7cf475b04ffd6bcd1c22c431718f7314e1425ac6662b8.bin.zip 380KB
-
KBDLT.DLL.dll 20KB
-
KBDLT1.DLL.dll 24KB
-
KBDLT2.DLL.dll 24KB
-
KBDLV.DLL.dll 24KB
-
KBDLV1.DLL.dll 24KB
-
KBDLVST.DLL.dll 24KB
-
KBDMAC.DLL.dll 20KB
-
KBDMACST.DLL.dll 24KB
-
KBDMAORI.DLL.dll 24KB
-
KBDMLT47.DLL.dll 24KB
-
KBDMLT48.DLL.dll 24KB
-
KBDMON.DLL.dll 20KB
-
KBDMONMO.DLL.dll 20KB
-
KBDMONS2.DLL.dll 20KB
-
KBDMONST.DLL.dll 20KB
-
KBDMYAN.DLL.dll 24KB
-
KBDNE.DLL.dll 24KB
-
KBDNEPR.DLL.dll 24KB
-
KBDNO.DLL.dll 24KB
-
KBDNO1.DLL.dll 24KB
-
KBDNSO.DLL.dll 24KB
-
KBDNTL.DLL.dll 24KB
-
KBDOGHAM.DLL.dll 20KB
-
KBDOLCH.DLL.dll 24KB
-
KBDOLDIT.DLL.dll 24KB
-
KBDOSA.DLL.dll 24KB
-
KBDOSM.DLL.dll 24KB
-
KBDPASH.DLL.dll 24KB
-
KBDPL.DLL.dll 24KB
-
KBDPL1.DLL.dll 24KB
-
KBDPO.DLL.dll 24KB
-
KBDRO.DLL.dll 24KB
-
KBDROPR.DLL.dll 24KB
-
KBDROST.DLL.dll 24KB
-
KBDRU.DLL.dll 24KB
-
KBDRU1.DLL.dll 24KB
-
KBDRUM.DLL.dll 24KB
-
KBDSF.DLL.dll 24KB
-
KBDSG.DLL.dll 24KB
-
KBDSL.DLL.dll 24KB
-
KBDSL1.DLL.dll 24KB
-
KBDSMSFI.DLL.dll 24KB
-
KBDSMSNO.DLL.dll 24KB
-
KBDSN1.DLL.dll 24KB
-
KBDSORA.DLL.dll 24KB
-
KBDSOREX.DLL.dll 24KB
-
KBDSORS1.DLL.dll 24KB
-
KBDSORST.DLL.dll 24KB
-
KBDSP.DLL.dll 24KB
-
KBDSW.DLL.dll 24KB
-
KBDSW09.DLL.dll 24KB
-
KBDSYR1.DLL.dll 24KB
-
KBDSYR2.DLL.dll 24KB
-
KBDTAILE.DLL.dll 24KB
-
KBDTAJIK.DLL.dll 20KB
-
KBDTAM99.DLL.dll 20KB
-
KBDTAT.DLL.dll 24KB
-
KBDTH0.DLL.dll 20KB
-
KBDTH1.DLL.dll 20KB
-
KBDTH2.DLL.dll 20KB
-
KBDTH3.DLL.dll 20KB
-
KBDTIFI.DLL.dll 24KB
-
KBDTIFI2.DLL.dll 24KB
-
KBDTIPRC.DLL.dll 24KB
-
KBDTIPRD.DLL.dll 24KB
-
KBDTT102.DLL.dll 24KB
-
KBDTUF.DLL.dll 24KB
-
KBDTUQ.DLL.dll 24KB
-
KBDTURME.DLL.dll 24KB
-
KBDTZM.DLL.dll 24KB
-
KBDUGHR.DLL.dll 20KB
-
KBDUGHR1.DLL.dll 20KB
-
KBDUK.DLL.dll 20KB
-
KBDUKX.DLL.dll 24KB
-
KBDUR.DLL.dll 20KB
-
KBDUR1.DLL.dll 24KB
-
KBDURDU.DLL.dll 20KB
-
KBDUS.DLL.dll 36KB
-
KBDUSA.DLL.dll 20KB
-
KBDUSL.DLL.dll 20KB
-
KBDUSR.DLL.dll 20KB
-
KBDUSX.DLL.dll 24KB
-
KBDUZB.DLL.dll 20KB
-
KBDVNTC.DLL.dll 20KB
-
KBDWOL.DLL.dll 24KB
-
KBDYAK.DLL.dll 24KB
-
KBDYBA.DLL.dll 24KB
-
KBDYCC.DLL.dll 24KB
-
KBDYCL.DLL.dll 24KB
-
kbdnec.dll.dll 24KB
-
kbdnec95.dll.dll 24KB
-
kbdnecat.dll.dll 24KB
-
kbdnecnt.dll.dll 24KB
-
kbdnko.dll.dll 20KB
-
kbdphags.dll.dll 24KB
-
kd.dll.dll 53KB
-
kd_02_10df.dll.dll 69KB
-
kd_02_1af4.dll.dll 61KB
-
kd_02_1d0f.dll.dll 81KB
-
kd_0C_8086.dll.dll 85KB
KBDLT.DLL
- SHA256 df09ef721a030684d00a35220a711284bb9cfc6bc3ab85e222365b49551f4aaa
- MD5 909fa328d526637d4c9ee7e8f6f71df1
- SHA1 c9c72c4c1a3b7b9749424a8ff35632a12e25ea94
- SHA512 0d60e276e1a9fc5df01843d9c94ca7f329cec2dc42ca9e9bdb0782809ffcb406e4e291eef1519b5a719ca1132b95da9b2032bfa29e6d45afc098daa8de1cc975
- SSDEEP 96:we6NFyw+iwY+1EzlOCClI6wFbApq4nljBOnuWE8Wwj6vP+vv:eNUYiEhOCCeDduWE8WjO
- TLSH T1A2925455A7B8049AF1F38B701EBB0E629A3DF9218633967B04C1610F1C91B855B65F29
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdlt.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDLT1.DLL
- SHA256 7becbc28654bd5ad31519935f1c266604274a5e63085a2f3d84d9107b4b3895b
- MD5 77d850c121812f4862ac30498532756e
- SHA1 a9582df7159e80b74bc68034121af67cb86c26e7
- SHA512 51e316da1f413ba76f06a7aa57ad8f492a3980ec922244a438dfb4458dc817b418b63dab4ba7334430487d71ff0b92afc7cb652c21dbb4cb8f7200eb4f274eb6
- SSDEEP 96:e+NFyw+5ud61ztjzlzotlI6wI/bApy4nvOt3HWzmIYWwUPevv:PN6ztjhEteq1lHWzmIYW9O
- TLSH T1D3B2325497B9045AF1F38B705EB70E626A3AFE30453396BB0491110F5C91B895F3AF39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdlt1.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
184B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDLT2.DLL
- SHA256 4c814372ebdd8b795dba3838dd7ace95cd96b65c6b397dfef061aab211d077aa
- MD5 e593a9d5caa901b3b915153a2baec91e
- SHA1 65290b0ca1073972784696795e25d2fd242f53e3
- SHA512 cd9af790903db2d44940841be918edc0648d7275bd56ec8f91b1a201651948d7ee81e3e6d2b29a818c02fea3f482ff47c2a3c46192ce742ee4a1392f3dd68a31
- SSDEEP 96:5NFyw+J6V1QvI6bylCDCbApi4nGOHWzpuWw7vv:5NU6frV2A2HWFuWI
- TLSH T178B2431593B8044AF1F38B381EB75E627A2EFE31453293BA0881110F5CDAB456B39F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdlt2.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDLV.DLL
- SHA256 e007bc0ab443502671ba6206213251584c25760185ca7c70995dad6ce6f72ddb
- MD5 d10f60d75177dd467cc98242ea5f84c7
- SHA1 6ee8af64ec55fbf392f35f47ce3d3cb1f37f3696
- SHA512 5b455ae91696553d7fc94f90b978ecf115e32a08eff21a6c95cb6107be94143a087932be3c75f59b18efed2ed575826cfd643c6fe7bed6b906be9e9c81d73a85
- SSDEEP 96:tNXew+N6JuR15pRCwAZKq3MZGnIqQjApIdHN1OWv+Wwjvv:tNO5pRCPfMeG1OWv+WQ
- TLSH T138B2520496B80499F1B38B701EBB0E665A3AFE314633977B0481611F2C95B889B29F75
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdlv.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
196B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDLV1.DLL
- SHA256 40d6c2caecc206d7b7db8322b4e4ddc7b6f52846ca4ec3797aa5c17b7641c995
- MD5 74f05a2985d268a802ccef8c2bcc3eb1
- SHA1 01ae68d4b996e8df420fdace1a9c2cdccf13c06f
- SHA512 1600a75b1d92d161eebd1155dd83915f23fadf0930e1681f8269b92ca64b7ce790660b74813e4e0a2e95c6cbee2b6da8047e93f8aa58682b113bbe86d9bbabbb
- SSDEEP 96:nNXew+N6EuA1pTHIYVp/pKq3MZMFIqgjApIdHYuvTb/W4XWw6vv:nNmprFHvMii7b/W4XWR
- TLSH T108B2650097B80099F5B3C7701EBB0E666A3AFE214533937B0495211F2C96B895F2AF36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdlv1.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
196B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDLVST.DLL
- SHA256 482fb041e951796622e28558b668ff66ec23a4969304083e9c35d2b83d4a67fa
- MD5 de54cca016879ac6b3e10d490bab1f69
- SHA1 57a72abf836bda71a2fea8af9542a90a5f126dfb
- SHA512 ae918801d8a58ab8c83431bbce438050b2a79ac22e10807410af273c15092a85e134a009c3b93448a04bb8f05e54d0afec72a7d14c94b48ad419a860900ee1f0
- SSDEEP 96:HcNFyw+N6PPj21uI6l1/9VbApa4n2p+iVsBKkCT7OFWz2BWwOv:HcNv7atQjRh+lKkCT7qWz2BWl
- TLSH T143B28420D6BC00C9F1638A7009B74FA2665FFA21053A972F04A5B03E3C9F7895E29F25
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdlvst.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
192B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDMAC.DLL
- SHA256 4da133bd79c0133960520dab8a0273e0eb9cab3f50dbed1be8f4ce8d47dde167
- MD5 16b4fd31753d7747d11d4b43dc85fd7c
- SHA1 689bedbe7c29421840727cbe8ffc49deb98ef129
- SHA512 c5a8a26492561b0408de39a8237ed7d399c2055d88fef2bb98ea16d2479013973d494d008535a1222c6d4b1708aff6565dcfccba9cdb2c90ad332def73063842
- SSDEEP 96:r4WNFyw+mm1OvJynI6GbApq4n3OctWPF7Ww2vPOvv:jNeOvMIzEOctWd7WD+
- TLSH T1EF924455A7B80059F1F38BB01EBB4F5A9A3EFE2145339A7E05C1110F2C91B855B26F36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdmac.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDMACST.DLL
- SHA256 f5281c871642d65f35a64a0d14d68c848dcf339e5179daef75bdc2bc5d81fbac
- MD5 6bd73a9f6e4c72d03daa8aec1e1d113c
- SHA1 2569f07f1b5e5ca2058eee2a4d8cbd047a26898c
- SHA512 b58f9cea4318353381c95e9da53bef53b89b8e43bafb9c81460115ebd04d29340ce3a5691774b4f313fa49952a587279f5d53757f94e003e138c1b05c771917b
- SSDEEP 96:tNFyw+J6V1ovI6qjHfQ9bApi4nBKvWjsWw7vv:tNU6fDLjfQ5xvWjsWI
- TLSH T186B2432497B8045AF0F387745EB70E267AE9FE204532D27E05D1100F2CD2B469B25F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdmacst.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDMAORI.DLL
- SHA256 cbafb80d3ca1e07d096a23e5ff77e1e066b6fd59fc182dfeeedbc79efde76a79
- MD5 64f2224c02f8ffe50912fcafda743884
- SHA1 d9c7242f3f7b11cad420b402d0d061438fc200dd
- SHA512 5b3da0450a5abede3335371d09958866f291a82dbd6595eb82ef5d6b7fa44cd1ca0571e878683aeb2342c775c49532d642d32e937d5bac91935f1afb81778b5f
- SSDEEP 96:kNJLNF2w+cs19i5ezlzYkxvkpC4nCNI6/J0NWf0WwiPuvv:EJLNoI5eh07Wf0WP+
- TLSH T1FEB2544163B8049AF1F38B705DB74F166A3AFE30453797BB0481200F2C90B865B29F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdmaori.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
184B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDMLT47.DLL
- SHA256 18063f5b1cf5df7b3cf30c638d08ec14d418fb10dee5cf2927722921a326e665
- MD5 d1a4241b503cafd9d4b444d846bb4b8a
- SHA1 3bc54b386da36a4a1e4bdd4d0349b0d3554b514c
- SHA512 7bcb159d664cf558142bf4a6b4491f62dbd3a9ae5f1a805ab6fde5622609f1ad4f4666312031590666ecb3a2be8e1bc500f2bee3dc56d94c8defb1ef5cc8da81
- SSDEEP 96:/dNFyw+W6V1DvI6akkGVybApq4n7WCCWwDvv:/dNX6fEAkPGWCCWQ
- TLSH T108B26510DBB8845AF1F38B741DB70E726A2DFE214532DEFA0491110E2CDBB855B69F26
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdmlt47.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDMLT48.DLL
- SHA256 0b43735c0341a0d400c51553c29497c83d4a3cd4ea7b2d472d8a15f22e707448
- MD5 6f28a8ea83ca462633bb797e4c1e294d
- SHA1 2f617b81552bfc230dc8c945c46679e1d2667f68
- SHA512 93437e5db6ac0112d766d17d7c4847dfb8d677718293e7911cd8a56282f152a52988f1d3b05c6a22a025aac3ef0e51d4fe5e21e8d0146a94d1c2d43cd676d52d
- SSDEEP 96:9TNFyw+Wi210vI6gkkJubApq4nHDDdKRWCVWwmvv:5NXiaHqkylWCVWd
- TLSH T1A9B24111DBB8845AF1F38B342EB70E367A2DF9204532DBBA04C5110F2C9BB855B69F25
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdmlt48.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDMON.DLL
- SHA256 60765f070fba2c93d84688f7a439e12382ee45df852c98bba69e3dad312c9b6a
- MD5 3b52c56a2053ab54b90e05800dcacd15
- SHA1 b0a2cf9795e1212784d84a79b552b7aae10db058
- SHA512 2d3cefc70a0440346c47ec226cc3abb865d08076608e8c8c88f9a0e58742d34bf423bc7c4fb0f2db8f925d3de4ac7182661f07b49d27abe77641d92ab8e471cf
- SSDEEP 96:d2ggNFyw+cmaO1A5/LkilI6wFbApq4n8DghSVWxQWwVFvv:sggNxSA5/LkieDDYCWxQWU
- TLSH T14192535497B90169F1F68BF01EB70F6B5A7DFE204533A2BA1485200F1CD1B866B25F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdmon.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDMONMO.DLL
- SHA256 1d0bee19609031eb73c65148fb17ca8c06bc4e5e7fb0645f122631aa7704126d
- MD5 8c5cf8b646861460f2380fe44d27f00b
- SHA1 bd9e040346ee84344f964656e66dc5ea330ba931
- SHA512 9f20e31ca55db427db6654506620509908032b9b6b292fe232c6ad0c12e64bc2fedadf925c2a88fa7693c70a35510e64d0561dd6911634aecca3866a8482e77e
- SSDEEP 96:zONFyw5a015rz6lvn4uEMpi4nNWPCvQtWwjvv:zON405at4UWqvQtWg
- TLSH T1F692521493B80469F1F78B3119BB0F636A39FE218633967A0481100F2CD2F855F6AF3A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdmonmo.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDMONS2.DLL
- SHA256 b5aec84cb187edceba3e0a1873d5b6a87ce2a89bf2e2cb16adfef9ae6adbf63d
- MD5 0b09976310a362d110029e68202149c5
- SHA1 689f12b7f419ed1a143d23b2869774e695434e7e
- SHA512 58149114ad01ae643134ccb71f63a03b651db287ab501e9eafc7d6e3c60177f30ca8b2bad6afb3ba749b94f7e53a4fc9fdd4196d8daec878dd98c1c8e834e390
- SSDEEP 96:EONFyw5a015rzOAy9uEMpi4nFbyW0c4HrBWwPvv:EON405By9eyW03BWU
- TLSH T1DB922F1457BC0459F1F38B7819BB0F626A39FE20463296BA04C1610F2CA5F855F6AF36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdmons2.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDMONST.DLL
- SHA256 9df45e517e6d4e293136c8f4f12e24104c766a73fb795bf4d12a6ecb01e90915
- MD5 1b4ce02581d8e561c3a3146b32a8fd6d
- SHA1 a1c9aed29e99ba56ac1cba5946f8b29444f387cc
- SHA512 b83118769276d93f635bf79940464cca477ddf56e6b5fae58671b799d22114eee8e5873820f7decc3e655ed8f81226a8848405c32e09415f530dfbceddd88109
- SSDEEP 96:IbONFyw5a015rzQlUFuEMpi4nLoWjc4IXWwDvv:IbON405wquoWj0XWg
- TLSH T16492001497B80459F1F78B7119B70E73AA39FE30857297BA0481500F2CD2B865B6BF3A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdmonst.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDMYAN.DLL
- SHA256 f77bbe801fd49b0b172cf1cce61d3e58a60695278d98245b581e5061e1050337
- MD5 316856aa211c9cdd85ad22e1ba45badb
- SHA1 04166d470549f3cbf09ad809cf4252c5da57a23f
- SHA512 7ef57e152bf92a77afc92a619ac153d035627dae4b8fef907a878e58fc62d42d69582804cb309b5abfd9485b65d10c31e7b4a48462300cafe5cc7104a50308c1
- SSDEEP 96:0NFyw+W6V1DvI6LsXniF9bApq4nGMWekfWwZvv:0NX6fEqMniF5+WekfWS
- TLSH T18AB2451453B400C6F1F3AB3059B74F626A3EFE31C53696BA0891610F2C90B855B2AF36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdmyan.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDNE.DLL
- SHA256 cc8905dc018cf92c86bcf9644c17e4d8e1493f4368dafc1213432661516a4e1a
- MD5 ac1da45c11a4a6a658a9ecc37d5aa748
- SHA1 3871adee1bfed82b716f919d0187cb8107fe63c1
- SHA512 3342fec398bfb5d1bdae5ae74e61f3042de56563ddea58a2f217eabe059d85240067449c51fac2de0c36c8b2868f472f67db23244af330e1e68d1cb629d7458b
- SSDEEP 96:uR6Sfq6uiJ8C10HLpDMPlpbWA5VUTh5HtWypvWw:ufq5S0HtDMPlNda5NWivW
- TLSH T148B27412A6F4059EE173A6B05FEB9E2A6A33F92042336BAF1550520F5DD07486B2DF31
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdne.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
172B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDNEPR.DLL
- SHA256 07688c8b5c6a5884a027a847499e3f01949291b467296a2a09acf6754549b899
- MD5 254391f60504ee007ed1a9ec8e7910e0
- SHA1 a19f27bce0b3a9c27576ede6ad671d2aa16cf420
- SHA512 352d0e50ef25c3ab435a2a1b0c625b91f72f85032b32c56afeba77508fd5b4c006d41ea49310844438be5648db9aab6fb4427a387526accc53b5ce195e30a648
- SSDEEP 96:wle8NFyw+m6V1yuz8Qf0ivI6R06mObApq4ny3F3ojjWNBKtWwDP:wnNX6fvQQKomkmWDKtWW
- TLSH T1A0B21217DEB885ADF0B3863059BB0E775A29FE214D329BAA0581110E2CC37459E29F69
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdnepr.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
184B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDNO.DLL
- SHA256 4dbdca8fa0e2bccc6ff13f88cb2bf646c2f3214e6fe482b5182ed24a367da493
- MD5 289d47ac6aea5ec7010ca117b8437003
- SHA1 95943abf712776c2a66b4f488f67b470853a9b49
- SHA512 436651a2b8dd24a25b747a8154481d88b15e993d0e9067608246b94318f8a5d1a50e82f14fdd494dac2598bd9ff1f3077ffa6c001d4f79f30cedb9623ced26eb
- SSDEEP 96:Wx6ENXMYxz1CHNh9l4NTEZIUgre0WC1WwxP:W3XpCHNh34Swe0WC1Wo
- TLSH T1E4B27312E2F010DEF3B3AB705EAF9E666B27FA20823342AF1581520F5C91740675AF71
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdno.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
168B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDNO1.DLL
- SHA256 17a269d220bdde447624515ea6e295486e541645962989e9e526335fdd602cfd
- MD5 4b51bcf63899b68102ddbdecaeb13e5b
- SHA1 6ecd58cfaa662ad1784e374b4a2fca6ce765871f
- SHA512 a56f3f56493ea9cea0f0049b59ebbdee81ec2cdab5d6ad1d090b00dc2051353233916c8ae3dd6d757372a112d7a3841a131d22144b3ef66d5c81b27920b47747
- SSDEEP 96:2oNFUw+N6FmZ1i3rMWtls72kevYPinWUpy4HOnv7NWN8Ww6:2oNLmLUPXs7veAPinMv7NWN8W
- TLSH T152B29510DAF900C9F1B3C6704EBB4E267A3AF921453287EB4585212F1C9EB855E19B36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdno1.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
200B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDNSO.DLL
- SHA256 faadb483e3b5910518f2f4c87298aebe332b2ad93303b67c476fb799f8fc25b5
- MD5 84053c7c1d6d6827dcbfdad2b8a685a1
- SHA1 68e3785306c55779552e5cff9117772461fc0e10
- SHA512 f7038306003a6c3335f0a2c74e05980b1e1e72cbec26e90f76ccdbfeecadd81b48ff3685527385bc6cb74a70aaae57c12d0c25c644a325191b5d668505ad3e6f
- SSDEEP 96:J+oNFUw+AmHl1+rpqPhnG9Upy4H786EWNRwBOWwS:J+oNTmvGp8hGl6EWNR8OW
- TLSH T126B2A715DBF84489F1B3CA300EB70E627A39F9314133D6AE05D5550F2C9EB81AA29F36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdnso.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
200B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDNTL.DLL
- SHA256 4664863cbdd5acac80afa14d4754c19c61c19b43a262fe5547d114b8fa1c5661
- MD5 c63fc0e0e2aa6546a2de39447959a555
- SHA1 be5aafb0cc11e6a3c840de5bfac572883d361c4f
- SHA512 55144cfb1f8c64b81a329206ea46a5b280c7609a3af0438ecd1db5d1445a774ffbbdee62ee7bd0a3694640623399bfd159e5bc844c8fc61b346d44921fd71a9b
- SSDEEP 96:yy2NFyw+m6N1gvI6wsinbApa4nTArHHWHjSWwDvv:H2N36X7lsAmArHHWHjSWI
- TLSH T107B26314D3B8008AF1F387701EB70E765E29FA204537D67B1897520F1C96B829F69F65
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdntl.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDOGHAM.DLL
- SHA256 7a0eb01609e9aaa0fa2f4431e9bf56e8cff8cc6175a5fac1b89cac474654a669
- MD5 58ce7f19123d3dac504b3744db4db1cd
- SHA1 b8887bbcb9f1177b5e2f6bb8bffba69bd565faff
- SHA512 aa211f65d21e5aff816c020ff4f597b60237b0b166107bfe577a3a3c644470bfe8b988058b16990ddc7e8d66d6560845cf5e95e1799e223a62344b1514580939
- SSDEEP 96:gqWkNFyw5a21sDrzbsg8Mpq4nD696WP4WwC8XP8vv:gqWkN4asDQp96WP4W0s
- TLSH T17D924255E3B80459F1F38B3059B78F736939FA214533A6BA0485181F2CD2B855F29F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdogham.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDOLCH.DLL
- SHA256 8bde11435c9aaa78bf679bb41bca98a439246d584ecd328b7821258deedf4ea2
- MD5 5fe650b418efe432df1522d135a36881
- SHA1 ec2a6d1a1da9426cb6b2ae26338d8f805055cd82
- SHA512 6c27bf438bf8962690c649b9bc58070aa3bca0876784fb7397e76e70d275b6122d5525553033a6d2a21055c7854d7b56ed839e606a1371950b50fe8e7cebed9d
- SSDEEP 96:b0NFyw+c06V1MI6mh+RspbApi4njHWdVcWwD4vv:QN46fzBGsNAHWdVcWf
- TLSH T143B22004DBB8405BF1F38B301DB74E729A6AFA2145339ABA0C91110F2CD3B465F69F25
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdolch.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDOLDIT.DLL
- SHA256 32d82b57804dbc24620f32f157cbdd7e4159f984000c43f89a4e378935cbe38e
- MD5 4eef88fd3bc25ba9c720c71a377862e3
- SHA1 bb2c290fe2e007adc8e723892c9010ddae26bbec
- SHA512 d67353aa04997150430f27713c000b6f3b36c083b7dddd59fe16e890267565e8140cc9d88d4a4f5b0f4f3add9922196dc1658703e52fae5701dd4ea89cb176ed
- SSDEEP 96:HcNFyw5a21umarzpEMpi4numcWwwWWwGPevv:HcN4auTBcWPWWLO
- TLSH T16BB212149BBD005AF1F38B705EF78FB65A29FE21553296BE08E1200E1C92B455F29F29
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdoldit.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDOSA.DLL
- SHA256 e8346897da1944b7732a50cd69f2629fb79e49bb1553f067b5e9d9adaa13771b
- MD5 1e6db7a3e8af1361475462da106bf760
- SHA1 7b6a5442d9ac5b497a71f873c093b12ba7aa7351
- SHA512 731034672868ba2eae5bd05c7b9679a77689b217e38c4469582933540599a25cc320d5ce442d17a11a64b68dad0b3672e85e20aed5ba31c408c532250ce55e51
- SSDEEP 96:gNFyw+Wi21evI6DcrYOkj6AVGtybApq4noNOWdJWw:gNXiaZcOk3WQvNOWdJW
- TLSH T185B23F15DF7D8049F0B3C77039B70EB66A29FD1205339A6A85C0110E1CAB7819E2AB7D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdosa.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDOSM.DLL
- SHA256 f52cb6e9560ba9581768390d942e332a5a463f6a472f151fa5f547920ebbe690
- MD5 4379378b64ec88c9d08fdfdca93b2007
- SHA1 d6ea3adc299efcf86fcb88000cb5d4670a3de37a
- SHA512 26f9ad3bb4626d02289ba371b0a4e175cb62e5be683abaa168de3a5cbdf0b3ddce0b7d61ea7a2f41125a3491e163daec43dccfd028c1e4972a5062348aa09cf2
- SSDEEP 96:YiNFyw5aZd1fv9FbohbrzjhOEMpi4nmwUVWo1Wwmcvv:YiN4ZfvHkhbNqkWo1Ww
- TLSH T1EEB255109B7C005EF1B3CAB43DB70E627529FD21453392A988D4110E5C97B859B29F7D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdosm.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDPASH.DLL
- SHA256 ef84d2d3142c1858d2abe595dfe7176a3c5108c772e0cbf233a4c6de9f00f320
- MD5 1fdf1369473ea3df8c9a7d4218b0bd0e
- SHA1 183a2ce1b21b94742921ac261243d94ad578645c
- SHA512 fc6a74e459167cb75d43943d654f8cd5b09f474133e35802dd01ba4dd955039854cb0285e15f32a108c7386241a2f9a6bdf708ddb31ff9b5ea2216dee50e824f
- SSDEEP 96:hNFyw+J6V1AvI66y4SFbApi4n5BWTalHmWwbvv:hNU6fbH/2iWWlHmWI
- TLSH T186B2210457B8006AF1F3CB705AB74EB26A2DFA204532D27A1991690E3CD1F45AB29F35
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdpash.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDPL.DLL
- SHA256 36c4797259402ad6e49e9d9a6b2d8ff58b0d39ea70b2d5d863f3a67a9366ed01
- MD5 f3a25ee8dc840d571d0815de293d987f
- SHA1 f2d11347461031126c56ae995d15c409c84d3944
- SHA512 7ba0110a1b61f08fd4e0e5c6d3a7517d114152e3ccf01f8a5f91e8e42cbe9c8b34563af77c1fb7f19f49393225d2aff26464ad9ace3275b5310330ff89ec5b62
- SSDEEP 96:uaNF4LEweRSo81SvH0NQ+w4D9mDNRvvpC4ni9pwOWmkoWwBv:uaNeSciUu+w+kY9pwOWfoWC
- TLSH T1D9B2331986F8009AF1B3DA700DFB0F216A36F9224532937F4590312FAC95B865F6EF25
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdpl.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
212B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDPL1.DLL
- SHA256 0d718c5ed311fa34fa2f92b13cbc61e198c516d41cc3097517ea370832947da3
- MD5 4e4eefa1e51f339b8fb5d24f8a8f2c8c
- SHA1 8eea58921f3791a6d8013d674b080ba87b2a7f4d
- SHA512 8094f24144df95a73549ca4c34f36ceebc0f1e657e054c0533ca2c0128a70def987c91f8b3a47510e47da542c5c658878212bc9839652e0899059e095166a4c5
- SSDEEP 96:+oNFcwit5uhK14BdtmwoPYK5LApi4n4QWfBWwovv:+oNAcm47tmNPRQWfBWr
- TLSH T122B2241593B8049FF2B38A701DFB0F625A6AFA214A3397BB0484510F1C96B855F69F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdpl1.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
188B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDPO.DLL
- SHA256 331307df4d17e571bf4dab992886667caf73074bcbe5c78a0af645b77f37f223
- MD5 f3470743b0a4206d719f206ce478a722
- SHA1 34eb62b8b42a0aa7832cc44227ee5d5e60385187
- SHA512 0d09ca026f761ff6b10917bbe0c201782127e7079b18b35289201de8929e66ad2fdd2cb27fea9b168079e7339cd0f82ae4e8cce2c697c759c9848c83c21942c9
- SSDEEP 96:g2UfdCRVIvNZ9oH1I/mDlrgL5iU1nyPvWS7WwjP:glYR6NZGVIeRr+hyPvWS7WO
- TLSH T19BB25020B2F6008AF263F2708FDB8E765266FA20863253BB1181250F5CD1B5A2B1DF75
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdpo.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
168B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDRO.DLL
- SHA256 3ada38f13401d4e56e18885f8c448b289ceab73cab185b9600bd6162cf9d9820
- MD5 2ff1f73c93a5ee5975e332f4880a7098
- SHA1 406b04ab63511becccd80d9dba09ba38a971f939
- SHA512 333e09ac070602ce38808ccfc9685574fc3ad0ad22d3eacdfcedbe6ed7434f7df3c0466fec3abd1d852b7df0c4388317af906d8f6dce80c31543dcbed1427770
- SSDEEP 96:zgUN0n4wIN6hfmQ1m2zldjRLWjYsqPpzUdn3Ye75/W1JWwNvP:zgUNKm4VJDLcCsv7ZW1JWM
- TLSH T1A2B27604D6F800D9F0B3CA740DEB4D227666FD224532A76B4591702FACAEB465F29F35
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdro.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
212B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDROPR.DLL
- SHA256 a89a681f5a426bb01cb223f1d606c675308c784576106e590e64a7f5be7b7f55
- MD5 c14ed538f31ffe27eef0d913aae835b6
- SHA1 c10145a55f70931068d2a96d6ec888295fe127ae
- SHA512 4846f243ea8c63d84eda836748dd10cbfdc2135e650d3524bd505c2d2986b42e770e563f1956c86d660afe31499ff19873c2d85b0939a71bd0ec6f0f1df287f4
- SSDEEP 96:aVNFR4wIN61m01O1MsFzlQ7WsaHpS4nGL8KHsWfHWhILWw0vP:aVNjm0OhFJQ7Ws5LVdWhILWd
- TLSH T15BB2A804DEF840CAF1B386740EEB4E222666FD2141369B670691212F6C9FB465F69F35
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdropr.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
216B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDROST.DLL
- SHA256 dda16662b87446d649c6781a572bbcc0475bc44426a0b6aab2775e7df9f8ebcd
- MD5 edc8e120b75739e06f234478bc5ca634
- SHA1 a638e1d8d80f3731ca6f603d5d6303a565b62f5b
- SHA512 18edade6dee4ba54d0e582129299668d753188c6194c0a98836c8b9851dd3d665170a342ec9061bde6785e3f5296ed05bb348ba8a6a69ccc43bac96702d40430
- SSDEEP 96:/WVNFR4wIN61m01O1MsFM0lMMvRHpS4nGL8KHsdUGFWY3WWwUvP:/WVNjm0OhFfMPLVitWY3WWd
- TLSH T1C7B27604DEF840CAF1B386740EEB4E266666FD2145329F6B0651212F7CAFB825B19F35
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdrost.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
216B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDRU.DLL
- SHA256 97355982efcdcae4cef7f95f32df1d963a93be93e23f23459615c3b19bf3f753
- MD5 11f354e19582ec517728e5943de8e1dd
- SHA1 92c7b86fa45c1be2520db47b88fbd5d20c239cb5
- SHA512 43c7b0f1ebe2f6f99f463ca591e4c17c9ac7af03d3a73fcade046ecb9c4362cb7501ed6f48201c0ce6689459ad934f9102fa93989a01b6b4591bff09ecf94cf5
- SSDEEP 96:JyNFyw+u6j1jvI6GomNv4bApi4nlCOW1jWwuvv:QNL65knomNvGOCOW1jWF
- TLSH T190B23030D778005AF1F28B781DB70F767AE9FA21453292BA05D1610F2C97B859B29F29
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdru.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDRU1.DLL
- SHA256 2794d2ccbade24e14b3a8f812bfc4662df423e79dddb305991bf7d59a781652b
- MD5 1ba3e12463656b8404159fc6401daf03
- SHA1 9f6183b7753c13ec5c6e70e81425937d3d4a2a26
- SHA512 755a613095887a386e595e8bf252625ab2925b6660137942cfc2ba581650b06365d734d46907655eb03b35dd277650c67c1752fbddd892d1a5649ea2a38dda56
- SSDEEP 96:WxNFyw+I6N18vI6udmWmxbApi4ncdWHqWwLvv:WxNx6XvvdmWm1bdWHqWo
- TLSH T192B26420D3B8044AF1F38B381DB70E667AE9FA214533D6BA14D1500F5C97B859B25F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdru1.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDRUM.DLL
- SHA256 d9edb659593bce894401f73cc8835d4598a1118a9ad87caa46ecf19f912e6ddb
- MD5 5e98f3dfe66c56d00bb6871cdbe3c27f
- SHA1 8f98272180b5a54b543c2fcf90ace3071449f0b8
- SHA512 df09caf735f8a234ca14f1b5f6bff4590d6f47a1ea9c1a5c88629ec2a075e1e59fc0b55a7e556a3a7509857aada0702fdfe0886a25baafbb9e29a99d7f166507
- SSDEEP 96:LxNFyw+N6+6nHRc8HSu8q8j3n8SQ1pI6bXEQBCdQoYQJbApa4nnBZW0WWwB:LxNe6Hh6oasY2oYQtcfW0WW
- TLSH T13AB27330F6F42255E0B296B40EA78E35A7EFFA214132926E11C4200F5EC77765E68F74
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdrum.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
212B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDSF.DLL
- SHA256 c923dfd9b6af67dcd82fc41065d0b0cec52524d79aace269844b0995e6be7098
- MD5 e47b0424b5108803cfe217cb596884b8
- SHA1 3baebabf861c307eb0e285ac819471ff0f0b41bd
- SHA512 4d0a87cdfede9b9a269c7051b3f9c250becf77b77df4957a4c3e0f29be7371029320983a85bc2cd7e2e73c77f5b593451df1b02d21ac0000d74a685f667de51b
- SSDEEP 96:H2NZcIl1z3VgzlCHftUHR1nOHWgt12+Ww:H2rcIP7VghC2PnOHWOpW
- TLSH T1B2B25410B6F40299F173A274AFDFCE669927FA20C232836B1182560F1C927492B6DF75
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdsf.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
168B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDSG.DLL
- SHA256 1ea7b18b1d1abd8a5f917b6bfc059931dd1bc99e5469a4240f2e9ed4e381eb73
- MD5 67c7f47e6d737468a19877eb236e4eff
- SHA1 f6962711c86e236d25d8df22b13a510e20f20378
- SHA512 58e2bd1957a5546eb16ce0fdac75fb916f11997557e13140989311951d808552f58c3ca080ec7887af3522911f7707a372e7ea5d9add0db5f42256c44e7904d8
- SSDEEP 96:AgDt91NHb3wYzlnHCms2tUMeHvi80LHWCq2PWwGkvv:AgpnNHzwYhniRdPd0LHW/YWFM
- TLSH T13AB25210A6F4008AE973BBB04FDFCE699667F520413107BB5681620F1C85758EF6EB35
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdsg.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDSL.DLL
- SHA256 0f7fc9e8ae48ee21da19d2afa8a77aaf4f799c3f194b6b9622e4eb93a3592c54
- MD5 11154aed5b98afb9468a59ac66d0ccb2
- SHA1 02a9997e2d79db7b3df0f92fd3ad87fbf73a2238
- SHA512 080681ae2421e574bd753fcd67b11dd953fda2172b6a81f707ea8a59d4f1aceda29eaa07269d66a88267f9975ac52e5a612d5891f49312e61ead765bd3496a26
- SSDEEP 96:Q3NXq5wuiPjC1BSETFC2G74llpq+FAfp4dHyXxTIOWBX2EWw:Q3NjjeBSI02zMMMTIOWRzW
- TLSH T173B2631857F800D9F0B3C6701DEB4E226A36FD224633D36B05A0252FAC95B865A2DF35
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdsl.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
212B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDSL1.DLL
- SHA256 6af29dac4313d255fa909739d8fa3b6053157902d82c01e5ae96d5287bbf9330
- MD5 985b18e53f18dabb30d84d8a03b9fa2f
- SHA1 bec5e23dafd0081105b086e05e0f162eda7fe18b
- SHA512 60506b3a4e0340eba6b0db0e36e4969e428cfd42246cd5d05e3415548db0d968524a85c267549c8c350789052c9dac94fd6d478ec9ec9d041a4ec3bb96ca04e6
- SSDEEP 96:QHxVX4YwISLK19SmjT0S2QLYFZc0eWjpm6+H2PeOjdJSjhWxt2dWw1:SxVwm9SmH/2Rcd4JSjhWraW
- TLSH T110B2830596F8009AF0B3C7701DBB4E166B2BFD228537937B45A0212FAC85B855B6DF39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdsl1.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
216B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDSMSFI.DLL
- SHA256 9f1121d71db9996ad69253b0fb15f9ffb8de6684b5a126441575cec2876af1c2
- MD5 9379aae7b02a1de825c6e033e5c6a78b
- SHA1 cbfd1cdf5be3ae364ae6717a8693ce58d9182269
- SHA512 377fe5bdda2aba38452ff5c94c4c41ec4271806a143215cc8e9be45ef3bdf48c9be6b6f443b8b9bd7aeba725cbf52dca5855524ed081acb49f866bfe8fd4e257
- SSDEEP 96:iNFQw+N6FmKi1wUGlgDRvkpC4n3kevgPinXkIcsq+WPGD2pWw8D:iN3mK+FGlgxeIPinXk8q+Wi+WN
- TLSH T1F5B2A714DBB840CAF1B347748DBB1E267626F9224532D7AB0250312F5C9FB4A6B29F35
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdsmsfi.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
196B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDSMSNO.DLL
- SHA256 615af6566f9f794e0be4744ccf488747dcb359c5e75e9d4c6a9290c45d326eeb
- MD5 d6b4beee7803bd90e27b1fd6d21d009c
- SHA1 70ccfb28b2081d7c3d344523ca98ad65a4394bfa
- SHA512 8f50c532609331f4974f8cb27bb2b2643399bddc5f1fd0bf53b78bbe2972595291482dc5a40a0e76ae6e4458f4d66e06e782898a3cb5d8fdbc5a096d91a741aa
- SSDEEP 96:ldNFQw+N6FmKi1wUOlMmDRvkpC4nvkevYPinXkIDqjFHWJN2XWw8D:ldNXmK+FOlMmBeAPinXkKqjFWDAWN
- TLSH T1A9B2A904DBB500CAF1B347748EB71E12662AF932453797EB0250712F5C9FB4A6A29F35
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdsmsno.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
196B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDSN1.DLL
- SHA256 0a900cab3b7f55806749b2873235382ec76796c408b21ad8e8938f316c42bc9c
- MD5 00034b27dcf89fd905cb10e5d002f804
- SHA1 06f806243fb35a03ee080b5f2197dc0570f262df
- SHA512 e55c323f3aa2a76ad6da29467ba8b090e621e106283f99cd27c5850df05fba4b120949d69d3197128fc476eacfebd8fa902778d875a35ff73625cb7fef0d9d16
- SSDEEP 96:fNFyw+J661AvI68f4KbApi4nt6mxhhWBGO2/WwLvv:fNU62bpwowFxhhWR4WA
- TLSH T195B233249378004AF1F38BB01EB70E765A29FE214633D77A05D1111E2C96B8A7F66F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdsn1.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDSORA.DLL
- SHA256 23afd26e9cee20c85bd6678db14dbd1330bbb46eba44b6bcd7d0bc591906035a
- MD5 a4e805d9c767b50b3bf6567282fbb98d
- SHA1 5bc38e0f1b10ac82685ffd58b5ed9d36c1093385
- SHA512 d57905844b678888da72d6b8eb92a4e81010a9ca7eac07adce9d23a08aee7c9d400228f7aa3340a157291ab6f2c14875330f73417f8b017ea8b3b61214030b60
- SSDEEP 96:AsNFyw+c06V1CRI6LlbApi4ntAJWNOF2EWw1U+:ZN46fHCAAJWNgDW
- TLSH T17BB2E014DF7C8056F1F3CA3069FB0EB66529F92045339AAB49E1110F2CA7B455E39F29
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdsora.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDSOREX.DLL
- SHA256 0362a458e0ca8b941634e558d62d781da225f398a27c6832592f515ac54e9da5
- MD5 c4526a6ffa27d04e4f0ab3b1a0d2a22f
- SHA1 1dfc99348a538f530928ff4c3742582c4fa21003
- SHA512 d00ba0816609fc82a1635fcaa49a2e7b25ab33cf147612854d13caa1768f70342b083f6f14b96a357c62c44c9de5937ebf2d427ff41d5154b3c90693a62562c7
- SSDEEP 96:vNFyw+rZu1W5vI63uWle/QyHaXh9bApi4n32Z72vzZFWy0I2oWw4:vNyZyf4f3Jx5o2Z72v3Wyr/Wb
- TLSH T1CBB2560097F800D5F0B3CA748EB75E267969FD31453283AB0591712F1C9EB85AB29F36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdsorex.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
200B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDSORS1.DLL
- SHA256 363d26c749088ddb6195222503f707fcb008b67c9ca2038762a7a13ff583cdfc
- MD5 ce1bf9b0ddf4d1760e9a033932bed1a0
- SHA1 d357e114f0e2076c723c41c728f4aacb29f7a793
- SHA512 443e103513833aa43394ce3402183599e43a3a87b7aa7453a5e2ceafa19dd1580e7c8eaeacee104bcdb75a7823142ee205b486364e5794ccc1bfc3d53b186437
- SSDEEP 96:+NFyw+Amm1zFFkvI6Ttole/6abApi4n3cVFWyAF2vWw3vP:+N1mq73U4TYYsWyO4WS
- TLSH T120B25300D7B80489F0F38A749EA75E67792AF920453297BB0581601F1CAFB859B29F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdsors1.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
188B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDSORST.DLL
- SHA256 b87ea17d6d43dd44b4398a55702b2f0929f1c4572a3b9c4ca9f4c34e5379478c
- MD5 b42f5bf50858d2f7500dc9040d37f38d
- SHA1 5beabf2b7876192857ac6285fab3ead21296c339
- SHA512 d725564b7173e2574d5fa6da2b2a208517eacce4b8f7a3de2e561faa03ef823dfbd85a6222cb72130e163647077070c337868d1d8f1863af6ed3d8d5a708ebe1
- SSDEEP 96:yINFyw+rZu1W5vI63uWle/3pHjJ8bApi4nqnAtW5sm2yWwg:7NyZyf4f+FJictW5hVWz
- TLSH T112B2450097F80489F1B38A749EBB4E227539FD21453293BB0591742F1CDFB85AA29F35
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdsorst.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
200B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDSP.DLL
- SHA256 52f5ee55ee2160602bc79da6e1d4ab64937495000aebaf56e3a1d5ba8d8000c9
- MD5 0accb749a1a9d5d8884c0a035aa91cde
- SHA1 3cde0e21386f44d1ad7bef1509cccc7389715ee1
- SHA512 dedd6763e968b696c139cdbe2ee2350685ef0488c4ca2ca7a4c6bd23fcf6778cf80b99124bb33c35c6774912b2dbcf6b28b5edcccd6680f682288dc52cb8e1cb
- SSDEEP 96:3Lort8QdZsNn1oN3AzlcP3dSfYZknHPUyYwTJ1OWo9j2IWwj:38rPdZ61oNQhcPdSc2HP1OWE/W
- TLSH T1D4B24111B2F8049AE2B3A6F05FDBCE65937BF9308633836B0590610F6D99B446B59F34
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdsp.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
168B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDSW.DLL
- SHA256 57767aba5f4a43c38ff30b04205f3cf5eb5e1edbb407715da0d378336e56c190
- MD5 a58a0a797ed864ea00f9bee2318dde46
- SHA1 1052e01d8d8ebb2b368b3f2de65af9426cfb241f
- SHA512 5c1a9fbe8c4a4efba13fb395366c0491e22b709e6ed128fd6c2e78078dd311c94c669c3b2d20d8be5400507973ca312260f3a166dff28aece971317e1a34910b
- SSDEEP 96:SR6A4vzVd0B+1Sp/dU9lYPr9j0QHdaVUa5onoMOWB962fWwD9P:SkhdiiSNy3YPrKQFxOW+oWQ
- TLSH T13FB28515E2F40099F2B3DB709BEF4E666E27FA10823242BB1181260F5CD47446B6AF79
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdsw.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
196B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDSW09.DLL
- SHA256 253d68e636c3fd7292c60028193101ea17c629d1eb33d9c1651ee212c4dac6a3
- MD5 0fe3c841e501f8a9f8b68223796e13a6
- SHA1 8b3cda2162c4f940347402b489b212b132f2f04d
- SHA512 728378b776f38f123ba8de9767af98218d837b63c0652c5a90e52bcd4612f30e82fae101aa3963a8e2334134c65d84823433795ab994b2fd8d5b905a8dd00519
- SSDEEP 96:gNFyw+W6EZ1fvI6GbApq4nC1ZpOcWKEWNOf2WWwYvP8vv:gNX6eYzVvIcDEWNGxWhs
- TLSH T166B23324DFBC445AF1F38B701DB70E776A6AFE61053387AB0581110E1C96B85AA36F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdsw09.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDSYR1.DLL
- SHA256 5fb93a65e8e2807a7146f3fca70d2608d0d5ae427b17829054698e21add82044
- MD5 5f616358660ac02689d7ca198d36e34b
- SHA1 23c875a6e0e3ea7c16182987490a82559c75a8d6
- SHA512 d38a4f9448b009d797d9f53e63f347d48a33da2426d97be86499e4fd18f799b4f0999dac6d3c8f8d8e72c136364f9b3c10c25bdf9dc975ffc9ea634589cab605
- SSDEEP 96:jnNFyw+Pf691HlI6wO10KtIbApq4nH8DEWtOD2CWwhvv:LNm6nHesS9zDEWtClWa
- TLSH T156B2531457B8005AF1F38B706EB74F769A29FE304532D2BA0491610F1CD2B966F29F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdsyr1.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDSYR2.DLL
- SHA256 9b2a31cc62845f3e002bfb9246f8e8366b37b457a1d804661e5f2237866576eb
- MD5 8f5d196a0624177850735a9072aa1850
- SHA1 2d16f4f4944fd80356827f545d532929d86c70dc
- SHA512 3c94c1251c5c728739c8352959fc7fda0fd22435bc051cf3a51a50b1afe524d557b629bcc0d16983d144165af4ef757ce7f7754ad0ac4b828b67d814192db69f
- SSDEEP 96:enNFyw+Pf691HlI6wO10QlnTCbApq4nm21WoOX+2RWwRvv:wNm6nHesSK0K1WoXWW6
- TLSH T1A2B2231457B9045AF1F387B06EB70F625A29FD308533D2BA08D2610F2C92B965F29F79
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdsyr2.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDTAILE.DLL
- SHA256 48f3eaf1e4c69ca1c1ded4cbdc32e5a35c2ff5b5d615d6c6e5c8aae7ccb0f1f8
- MD5 d54419ea34b659e8e5a6a7ac674b064e
- SHA1 d7f7e901748cbeed61679762c03a0e6c05843793
- SHA512 f16697db58fc69118d69097655a0cbc1a5838f83ea574895bd53d89b219794aa64c777433bcff7bc4a843c55e57800213716ce3092d451d053b4d92a5e4be4b3
- SSDEEP 96:2y2NFyw+z6N1gvI6p+QKr0ITX9bApa4n8HWs12OWwDvv:72NK6X7GYvHWs12OWI
- TLSH T102B26304DBBC444AF1F38B701AB70E7A5A29FA708536DABA1583520F2CD3B455F25F29
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdtaile.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDTAJIK.DLL
- SHA256 59ad6df73c366ffcbae0fb8b8fda9ad3cc13c9e3c685c6455a4a789529736424
- MD5 3af89b36fab4df7139e96501fe0a3a46
- SHA1 dadd556b0b68248a63fa14efafd717f87dd7fd02
- SHA512 14aca62f75f1ccf1c04c4c424001132d9c4fda0afddc40518e52e29743b56109f189d1b38d46e5d4e3ec7a64767c3b3f3d7af01d42b2dd9cdb287c9fc5e0c3e2
- SSDEEP 96:Yo+NFyw5a015rzZmYPOEMpi4namG4b5AXcW3hWwpvv:Yo+N405gaZmG4bJW3hWC
- TLSH T16792513417B8205AF1F38B781EF70F62AABDFA20453296BA14C5200F2C91B855B25F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdtajik.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDTAM99.DLL
- SHA256 0e69865a4d1ffd7b7d8ed0a3f5cf001a9fac17d5e827b078d8458f242b056b95
- MD5 08c1948bbc10215d965f37e9a34fe0af
- SHA1 a2ba61ed01a15c5f838884e0f1216261b479d0d7
- SHA512 7dfd15b15a490211655d0bd0369320d838761b08e20818f7688365e6aaaf39d684ae7e54e8701783042f65e83f71a9ec35a78a728e8d5c7208baefcae3e9deb2
- SSDEEP 96:Z/Te+NFyw5fGU1irzSJ39uEMpi4nr/K/X/5/q/FzhWlcWwWvv:Z/TrNgUiyJ39o/K/X/5/q/JhWlcWF
- TLSH T17B92521457B8015AF1F3877059B74F27BA3DFA20463393BA0491110F2CD5B859B69F35
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdtam99.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDTAT.DLL
- SHA256 a96301b18cfef0c312970cb23dccd786e374cc47051831afad565bae09a58c02
- MD5 f68a8459991192a6a5e497901243498a
- SHA1 2ea878ab938fa15c11e290c5bda3af955f41eb8c
- SHA512 d1bcdd2c957f595539af3cc39e8fdc6daba89185f361a682f87a6b5596c0d06adbe61a5b2b3346e409f13561ecd968cff83ab689f33faa23dd722f9ca9cb1392
- SSDEEP 96:GNFyw+c6h1tvI6BqtCcbApq4nIDWRNlWwMvv:GN96zG0qYCzDWblWf
- TLSH T1DEB24520DFB84046F2F346745ABB0F667AEDF9314532DABA04D0110F2C97B45AB29F29
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdtat.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDTH0.DLL
- SHA256 679fad1adbe4e39ec1e2c6d4b2c525576bc18a7c74a34349cfd9a6bb948f2a1e
- MD5 d5e4a51fde57f7e5494bac55a744146a
- SHA1 aee6ae07fd68caa61c6b4f7d90e8ce44eca3f303
- SHA512 0a30ca35e3a05793f03db70938186aa44656259fcbd82fb2013b3adb46e02056d950ef792f3393a376b24fa63d741f4c71f744691076f14ed0fbbe4c042d1f9e
- SSDEEP 96:p4NFyw+cmE1Sd3+SlI6wFbApq4nDAWqG/WuUoWwFvNvv:uNlSd3+SeD3G/WuUoWc1
- TLSH T11D92420453B90499F1F38B702EBB0E6B9A2AFE204632D7BE04D1511F1CD1B855B69F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdth0.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDTH1.DLL
- SHA256 128ecaa73adc09136df2a7778a614575988ac24eaf0879d17d5a9d4461e0e5ef
- MD5 dd2f8426b24e21d4744ef77e207a2739
- SHA1 486693111492ea3fe8e0d384c1328cddac917790
- SHA512 623ddf3ff166caec7564b52870ee42e2ff602f2fef9dbf31feb0d3a0870fea2a8ae0bb49d8412701bcff2a6673e7feeec7487cd0df8030109f0b74830734fcf6
- SSDEEP 96:N4NFyw+cmw1O2Q0SlI6wFbApq4nkAjLfzRWsYhWwVvNvv:yN9OaSeDMlWsYhW81
- TLSH T15292211453B80499F1F38B701ABB0F6A9A29FE218633D77E1491510E2C91B859B29F79
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdth1.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDTH2.DLL
- SHA256 58053b41e8e6b313454652d5306dd9f92a1391502785400e64a81e86b45e63f8
- MD5 0c1e5be369509bc91cb089e49016e1fb
- SHA1 d0fe0cb01eacff729e86a024ef2c2b6fe09357d9
- SHA512 9c0e1170cb9a594eb9c36da76035e61a951e4ec01f448cf59753fce68e9b0b8812cae07bc53fd64d4190c8024e612f8ce5f8cc1ddbcaf355c247c1eb10bc4f9f
- SSDEEP 96:d4NFyw+cmQ1OG7+2vrUSlI6wFbApq4nrAUC8tW+FwpaWwFvNvv:iNRZfvYSeDR8tW+F0aWc1
- TLSH T109922F1693F90459F1F38B701ABB0F626A2DFE218573D67E1481910F1CD1B855A29F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdth2.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDTH3.DLL
- SHA256 9653b297f8e7f272ce9415430a1bef79d1c46cc9650a8fe04f14926a298c5bc1
- MD5 31a1dcbef81ae497206274c10058ac17
- SHA1 b97163a4e09a0a28bcb5e0aaf13b4756b749bd9d
- SHA512 a258b7ae395faa5c3652f15f79333444c20e4707d9b253cd385edeaad15d1b0eba05564c1afdde2c3b31981794871ec78ab6bd041d2ceff2bd27d5399bd69570
- SSDEEP 96:P4NFyw+cmhe1C3JZXiSlI6wFbApq4niApfaWcu3TWwVvNvv:wNwCC3JZXiSeDAaWcu3TW81
- TLSH T1C292205593F80455F1F38BB01ABB0F626A3DFE214533D67A1491510F2CD1B855A29F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdth3.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDTIFI.DLL
- SHA256 7d80d883c07b0be018b9e12b3ec9d05bc95d7d4190c37a8ee0bd6fa23778c40d
- MD5 8656b696ac45e931d57f5aee1d7bd2da
- SHA1 94793cc3c6c707d657d752b85f7935a6e8c71373
- SHA512 37e8eacd73750736f4789eddefc86ad2eb1786a0e3f3a3e065eaad8385094a4b9430dcfce2a38795935170df20c2cabef221bf8bdb59771578973c0ffd1c0a6b
- SSDEEP 96:9y2NFyw+z6N1gvI6GWMLbApa4nHWTT3GWwDvv:I2NK6X7ZSWTT3GWI
- TLSH T16CB24404CBB8405AF1F38B701ABB0E736629FA208576DABA1891510F1CC7B455F79F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdtifi.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDTIFI2.DLL
- SHA256 2bba2ded75944007a24341f704a6529f7b8920d5cdf96c5889ecc395a34b24c7
- MD5 9657a4bec1a5c14420be600b4baef162
- SHA1 e6c97fa2258f3c3a9a1cffe976cbb9b2b305a46c
- SHA512 43cbf567f7596c64829c72efc675471a7b4171fa55e453cb25bd3659eafe0d2d69d9acb3c40b400551e4fdcdbf7000ab3006fb928827301dbd2f00dcff7e8b00
- SSDEEP 96:my2NFyw+z6N1gvI6qd1SbApa4nB2cWJr0Wwjvv:r2NK6X7kuWl0WI
- TLSH T1D7B23014D7B8049AF1F387701ABB0E726629FE208533D7BA0891510E1CD7B459F39F2A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdtifi2.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDTIPRC.DLL
- SHA256 8426e75075b993944f189bca263f98784e2777fbc93da1b7228a8c549baaa1ce
- MD5 d29dcd4283082a7768d4145d05ee15b7
- SHA1 53320b6ffa1709ee656d2202aa6bb848fb171fb4
- SHA512 07b2824993d44f8ad6cd5a782fbdaa79e8d69aa2558b944c16c37d0f9e8a6233735706cd75476792d26cad56fcb8e5d12dda050fbfe8732c03ed42ba8291f082
- SSDEEP 96:ItNFyw+q6Klc8x11vI6BPB3gLybKCxobApi4nkPEWOWY/YWw:oNL6kjuo7bKCMfEWOVAW
- TLSH T1FCB24021D6BC00C9F2B38A70DAB74E661B29FA1065B29F7E84D1100E1C92B455AA9F7D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdtiprc.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
196B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDTIPRD.DLL
- SHA256 56ce665492a598c66ba5b762abea8824d2fd6ca14114e55f667491f0fc5a679d
- MD5 8a42583d18322bc93393650810663382
- SHA1 bf05ab33d01b48b1bf334a71f140c170175ffd81
- SHA512 ccdb343323837971f880d4bbf0e3691de9bbff071251a040e901fc09336cf6a64d4df6ace11659cb4b6ee0b55457b1f1879d76eca73d7531afa22bf3ce2c4d61
- SSDEEP 96:j5NFyw+q6Klc8E12vI6lK0uLybKCxobApi4nEK1WwB6vWw9k:j5NL6kkRRUbKCMaWwB6vWH
- TLSH T19EB22164D3BD00C9F2B28770D97B0E665B29FA2065B3DE6E84C1100E1C93B455AA9F3D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdtiprd.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
200B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDTT102.DLL
- SHA256 139a5ff4158b16c505259a41d3ac28cf9e464a0a740a06b381c2f6377a822fae
- MD5 3c858d511692c2cfb273bb9f51d02ccb
- SHA1 184a6bfa6192879d637fa391a594c4c609a0dfeb
- SHA512 0d9cf095aaedf7e343b30aa747bf9de9838aae9a3d132d299143fab0b412a5bc14386de28d3f305160f667ba03176bd1e156e4f5f4b20ece31d29ba3772e085a
- SSDEEP 96:pNFyw+W6V1DvI6BgyCCnbApq4nsWoXrPWwZvv:pNX6fE0gNCbJWMPWS
- TLSH T167B26324CBB4405AF2F387781EB70F6676FDFA214132DABA04D0110F2C97B455B25B29
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdtt102.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDTUF.DLL
- SHA256 dae4c4a41f9f1ab24540ea6f802af38a85b1e2774860020b1abfd7199c58853c
- MD5 5a3edf42b0ae6e09200b964c506930a4
- SHA1 174e95c34db405219b18d2d4b9bf1eb33f271047
- SHA512 b8320c6deb18d401a52cd4f63d5c403a1f01360716e9ae91431866dc7e0ca38fa9e29648026d51f76aa1b6f33d5d7269278808b722f6b34277ef8f5f2e76fc67
- SSDEEP 96:zBNF9wu7cA16laMS6uzS6A4vHpi4npD8r7WWTWw:9NkI6laMS6uut4V8r7WWTW
- TLSH T126B25505D7B80099F2B3C6705EBB0F366A2BFD22453796BB0581610F5C8AB455E2DF3A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdtuf.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDTUQ.DLL
- SHA256 89df1018e908f17fa30b20517f34550838d90be3846954620c0bd19fa9efe17e
- MD5 32683a33d8e2317c3edb83832b4e64d0
- SHA1 f3c735f1d3106dfa29e7e0db5c5f4ded9d0f89d4
- SHA512 90f6f237dc8a0d75c304354becaacf54e224d8acf81443d852f651f89132cc79616d747743890b844a571a7ebb42edd84afebf03ef36f8fa28f7727e9863073f
- SSDEEP 96:CNF9wu741fxtpZpfgQ/vHpi4nLh8CW9AcWw:CNoJtpZuQ/P6CWucW
- TLSH T126B2521597F80099F2B3C6705EBB4F226A27FA214533D2AF0581610F5CD5B866E1DF36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdtuq.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDTURME.DLL
- SHA256 5aa8256ef86af18e94c1a58e85e6f5b846050899f5f76a3acde7cce0a07f3694
- MD5 5318323e31c2d9d35f905a39cdcb9813
- SHA1 17c447bcbaa3e5e270aebf5f3d7b82c27b065931
- SHA512 c60731cd105e4e429663b9d7f9219d16863eaca4db7f29ff3e7601112b52496616301862a11cb316d82bda77c52d1f9537c83a6f3e11a9a7bcfc7d393e5c2db5
- SSDEEP 96:BNFyw+J6V1AvI65LlibApi4nMe59HWenWw7vv:BNU6fbsRgKHWenWI
- TLSH T1EBB23314D3B8004AF1F38B741EB74F767A2AFA314532D2BA0591110E2CDBB865B29F25
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdturme.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDTZM.DLL
- SHA256 326c45b79fdc01bb67384937d3d903d4826d7657a9794e4ff0d6c908fe623b82
- MD5 2debbf31c9a03e0025a697b7fd368c7b
- SHA1 dde31ec3dfdb70aa63b5fdca560b1e43005fd057
- SHA512 aee7ee83fde33b27e8bce6652636189e7abe87332547bfc981f48e85b0212a9e458581ef80436036f3b207e929efc445afa031f3f46ede2efbebb9d79ee387f3
- SSDEEP 96:vtLcNFUw+N6Wc21jgQrvbPtleYUpq4HtDRXcW55/Ww:vZcNUcapvbPXelRMW3/W
- TLSH T142B27601DAF90049F1B3CB745EB75E227A6AF9104537C3AE0582100F2C9EB85AB2DF36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdtzm.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
200B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDUGHR.DLL
- SHA256 7166068efa58e1abc90497f1957a42de160a0f2ea81cb99474eb406c0cefbeb1
- MD5 700603f8305717b91e3a5dc54497ae51
- SHA1 bbe9be4599f132dd77f08018bdf85bd688f6f665
- SHA512 29af28682fc568073fe868f0ccc5f2cabd8163c7a6f35efc8c1f062b0456a8bb3909ecbeb1cd9f88364f467cd3045dca19c2cb1758eb08a6d7cebcee71a7b502
- SSDEEP 96:0NFQw5ak1RCm+90cpy4HPEWd9EWwDvvv:0NGEgv9zEWd9EWw
- TLSH T1D892221093B8045AF1F387305AB70E726A6DFE218532D3BA0695610F2CD6F865F69F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdughr.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDUGHR1.DLL
- SHA256 b89765f04710e213917914a31f8ea4b4e349ff93e892e30fc50ce02342a4005d
- MD5 4c953669aac5172a65a2a5e54beee1f1
- SHA1 7f1abc821b90a0deb8e94a8575c60f8345523f95
- SHA512 f9ec83651b900552e90add971df242dd6c792df41a8635a64b1035615c19c12b87c3090a80713ce77a37b4cdd15d164af53c027a0fef49e5285350e6570749c2
- SSDEEP 96:AMNFQw5ak1RCm+70cpy4HIvHWJdWwTvvv:AMNGEgv7aHWJdWQ
- TLSH T10492320493B8005AF1F287305AB70F766A29FE218532977A0A91610F2CD6F865F69F36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdughr1.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDUK.DLL
- SHA256 658c27d74cfd03e959196260a603b9e07fdd3e0b6e9fd0535c251ddb5a1b2a6b
- MD5 af12c36f022509ae799edd528c69f7fa
- SHA1 c4a71a596e6e496fd0ff62f7d6981846a0a7ebfa
- SHA512 de0f4b842a670663ea23ede590d52fd964de7be4cd13711bc78b93d51594b5bdbcb799bf80c95c4606fc10285019b41b49f2536ab3ad54f5f9addafa4073f71c
- SSDEEP 96:zYt6lZswVd5O1wrloYO/Y46GypT/NHt/W8yWw1vPevv:M9id5SIl2YBZt/W8yWsO
- TLSH T1D1927412E3B40069F1B35B706EEF4F67572AF9245632867F288C120F6CD17945A25F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbduk.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
156B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDUKX.DLL
- SHA256 964dc102db5a402292f32042c22e4e7718cbcac11361545ebb643cabf7a8f140
- MD5 ce5a071734424a8101b1adaa051ea005
- SHA1 5d74bc673ab4e214aa466c4814cfd69c2d9b08c0
- SHA512 0dff029a7f921b2636610ac600618286b3e1ccf1bf8e2bbfa75e7d486a8c49a0937acafac3942baef1db0672117e851a0cfab294db68186d9c7cc6eba13f27d0
- SSDEEP 96:HoNFUw+N6Fmh1hrMHc8hqtKzGfXUpy4HS8CWsaWwG:HoNrmzRw1Yj8CWsaW
- TLSH T148B26510DFF98089F1B3C6304EBB5E326A2AFD214532DAAA4591211F1C9F7456E29F35
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdukx.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
200B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDUR.DLL
- SHA256 3c25da6e2001b13d7542e2df3b5aa8c7e334375142b010d0ea58615fd5fcd66f
- MD5 ca6c09026f027a86063148a973bd69b3
- SHA1 cd924eeb0a69c6ad5349608e00a17d56aecd11ca
- SHA512 f4aa9d24239ce05ae0ce2031ea54a37ade53eeca9b561f22b548b11d6e986662592aa5d17259c441374e184d60a5d0ea6d77943a3e6ad9ede9e3fff8e218a66c
- SSDEEP 96:INFyw+cNe1lxTRpiI6GbApq4naB6WErWwXvPevv:INrCrRp5zFB6WErWiO
- TLSH T1E8925214D7B80059F2F38BB119FB0F2A9A7DFE314576967A09C1210E1CD1B855A25F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdur.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDUR1.DLL
- SHA256 1f929ea08fa43c31fe7db4bb8ca5a7b2fe9958293b91ae61dae7e032cd676393
- MD5 9d8169243c7bdcd9936c63931938336d
- SHA1 842c6b29d38f1ea62a7e34a066340d60f61d64be
- SHA512 9db9c08b54e0fc152ba148dd16fcebc2c487e6c0caed1d2476bb3746472831495f9b214609e36ea3dbfcbdf4eef4547003a6fcd274f7d0f3b44c28013d17e683
- SSDEEP 96:cNFyw+W6V1DvI60gDT+3WbApq4nlpKFWllyWw5vv:cNX6fEBgP+cWpOW3yWS
- TLSH T14BB24024DFB8844AF1F387341AB70F72B9E9FE2145329EBA05D1510E2C93B855F25B25
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdur1.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDURDU.DLL
- SHA256 8c412c9d05b4a4bd03361a06309d60e250d3b0e39fea30b140cd3f4a684d4c59
- MD5 aaee196bbe9f9fe452a0dd9cf939fbef
- SHA1 c2c9f92ff852c8b94bf3b85e444e11dba26ed575
- SHA512 17ba35a4e6ee8699d72ebad4e1af134efbfd264d14b18cda8881f54ea3680d9fc61b60967f9d689bebe828b2a2721dde4a652896309925ca6963e66d2468fd86
- SSDEEP 96:VF/wLNFyw+cmB10nvrNlI6wFbApq4nD/AVimFWiTqWwSvP+vv:V6LNO0nvrNeDU/AViQWiTqWfO
- TLSH T1FD92425193B9046AF1F38F701EF78F629A2AFD208633D67A0881510F2C91F955B25F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdurdu.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDUS.DLL
- SHA256 a1b3947113e615b73aa601be4625a8ad6eba2755c5fa09d2a65def0b90acd0a1
- MD5 c04247780b11f093da0542d98956f334
- SHA1 02864b25a2e0d423e582a147f4ee7f924142cdc3
- SHA512 5818dd1756efd1357a084f1bc43639abe78cdc2ef9d8dd902ce6b1644a15bb47f04281b6506bf63b78404a80067a285e9290e04ca7e48adfe0e3e1a893c28be9
- SSDEEP 96:mOGFywT4FF1wzlzYCDE8GEWK8OCHWXaWw2Fvv:mOGMvwh0CoICHWXaWF
- TLSH T145F20F41A3B80459F2B6CB3058B74E276E6AFD314732D3EB5498110F1C917C16A7AF39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdus.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
214B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
4KB
Virtual Size
54B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
4KB
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
4KB
Virtual Size
384B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
216B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=260, version=33140,
count=3, id=259, version=33140,
count=1, id=256, version=33140,
count=2, id=264, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDUSA.DLL
- SHA256 f6e9754f0cb1e855c4cdbe96ee9d009200c9da148bfd4b7dc916c48b258a7429
- MD5 ed7cf2667704f68da631a3d6802918f8
- SHA1 5ec6c17a46ddb082ad3a4b5d724f5de0c19277de
- SHA512 3c94091901872ead1988fca3b4d5870c63786829b19c93dd2181e9e817e412bc03a066b4736705868b89f202046af3768aa885e103277dd26d898ec73ef848b1
- SSDEEP 96:vB2nNFyw+cM1mPzl0CI62bApi4nPc4h8WMDWwFFvv:gnN4mPh0Zzzg8WMDW0
- TLSH T1E092625493B80059F1F38B702EBB0F626A3EFE21463396BB14C5510F2C91B869B65F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdusa.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDUSL.DLL
- SHA256 29978a84370dfaf9fb763b866c652471b731665ef6b7fa5d4e9c0d944e024a9d
- MD5 4ce70a59994065aa8e65c6842126548b
- SHA1 82c772bed993247636be26f53e69b4a4ab614540
- SHA512 be8d6580777be8b51a6d18691cf40a54e248ca52c957e028f70f4fe0a7ea5850755085afeb5772db877721da3d1790500695e5344ebd66a119bc5baed5c5534f
- SSDEEP 96:z2nNFyw+cM1Y4ob/oCI62bApi4nLVqhrWwFp8GWwFFvv:qnN4YBbAZzKOrWwFeGW0
- TLSH T18592411093B9005AF1F38B701EBB1F22AA3EFD21453396BB1495210F5C91B969B79F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdusl.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDUSR.DLL
- SHA256 68361720350e9509225cb75d10ea67bc1f3e970d8aa7f47f995eb03a4bf5a976
- MD5 11e85bb9257512d7a127b5aec198d9de
- SHA1 51e83fe983ad9aeec863ce34a76649e110f4fe91
- SHA512 6f1d8a6687032dce8be2dca057430f63e21de97fd456b408cb9e71d1d656049235630cf31cc159bdf484b61ee747267a0863d176edf62da20ec955fab522e064
- SSDEEP 96:Q2nNFyw+cM1YB9SCI62bApi4nPD2hTtWPQpeIWw1Fvv:RnN4YXSZz4CTtW4sIWU
- TLSH T1A492515597B8046AF1B39B301EBB0E22592DFE20453396BB14C5110F6C91B869B69F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdusr.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDUSX.DLL
- SHA256 15c2d605ffa55589be658db3a9abf7afe596a6c7c5ff90f68c89e36a8a0b75f5
- MD5 3c5447d543b099fe7c151944d0db0ce9
- SHA1 3f1af6f1d5601272777a6b3ffd04b17c22ba7ff9
- SHA512 b039f1074aa908ddbf8447191faedb82cff0a95ec80bfc911d6c3ae8856adf2d4dbc5a4de67597ac4ff0f6222dd12bb4900d6db3c73e661254ae43b5c19a5200
- SSDEEP 96:Lt6kvsiVdQscybAdXv1hlAyfYIJZbtMpy7klzVMpEW20SWw3:LoQd2yb89hlddFMMpEWBSW
- TLSH T169B2C622E2F4409AF27356705FEF8F636B2AFC14023346AF1294560F7C9AB414A65F31
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdusx.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
172B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDUZB.DLL
- SHA256 8cbb1895fc2c8ac6bc63550e505db7ebe29c1d6ac3a0f8febe18a342eb8ff25d
- MD5 3baf1c96cc5e7f7e54274f6b2562823a
- SHA1 1da3d39ccd7179f138688cd68a1d2e4d4330e688
- SHA512 eb468047129a4310217061ada20b4dc0650c85eb84cae39fd6c23c034a1eaa42412d50ec934f756a9d0c94dbf2f8da2a3f48232fa9ca18b675fa158dba34bc6d
- SSDEEP 96:62ggNFyw+cmAO1B4RyilI6wFbApq4nKEThvWopxWwlFvv:zggN7SCRyieDSFvWopxW0
- TLSH T10092411497B80096F1F28BB01EB74F6B5A2EFE21553397BE04C5210E1CD1B895A69F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbduzb.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDVNTC.DLL
- SHA256 d39f4cb20a107642f3a2bea47a4eb8c4f7945ef89808b438f0acf0cf7695df92
- MD5 c53a9bed8bfb2be40e14c8370ec39605
- SHA1 3dbd58e8add657539863f2a7be6589c273511845
- SHA512 169ac00ed934a979bb730cb3f77f266202d8e5a3dcb376c16480288eecf0e18496cf79bd88629a3dcfedc468f757124e28496995664bc4c59e6263d8905127c7
- SSDEEP 96:alR6zN26mmFoyFe2imho0IZjFUbbWorek/WXorWw/vv:+UFoBK20IZjnk/WXorWE
- TLSH T128928811A3F54099F5B2AB706AFF4F7A872EF9204532466F158C520F6C907449AF1F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdvntc.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
156B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDWOL.DLL
- SHA256 0a42bd4c01908b13fa02449d3394e332ca82f95f39a77cb683bbf852614d3232
- MD5 bd68d1c5a0b0ad0bfcf12bddfbc79b88
- SHA1 a9df5f36ea4d0aaa4f7467c68c078c3756564721
- SHA512 7dc416df1e81fb164d0f1215ea4e730dcdc531379094445ce601a924cce88643b20fafd770e89d299599ae74bf62e5e69b2c3645f74e5c80eb707e5722960633
- SSDEEP 96:xcNFUw+N6Wc21Tger00ljUpq4HgoykOW0nYWwKP:xcNUcan0cZo9OW0nYW/
- TLSH T1ADB25515D7F80059F1B3C6785EA74F227A26FD21853392AE0591100F5CAFB466B2DF36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdwol.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
192B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDYAK.DLL
- SHA256 3f7b71c780216205bf63e63c20f1d29487952af17f29a6181e6ebdc365d2a967
- MD5 b5c341ff2bd292e248e2c0990424f806
- SHA1 ba7fc69b86ef0779f27200ca9d1244bce9bfc769
- SHA512 e8f6f0beb971f05fdcab7111448f6d3a3f7d7326182d19cc73bb1d1f8560d799130a403661f08d7f7134130344dc4f63b7f72f95d22d93faaddebba2c1d8e79e
- SSDEEP 96:vuNFyw+J6G1YvI6EmNfObApi4nNVWF3WwWvv:GNU6KzTmNfkmVWF3WV
- TLSH T16EB22234D379004AF1F38B781EB74F62B5E9FA214636966A04E1500E2C97B859B25F29
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdyak.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDYBA.DLL
- SHA256 568ba7adf5defe3d0373b84fd0d680543d58be492eb1381812d255a90e331e24
- MD5 fa6e7f9dca4245e024844f7f9acaa56c
- SHA1 fe513e3463b01214b1bb6e220516c5ace0409615
- SHA512 899b459cc867b3c8e7b2021f192fafe1fd1a9fb2164162433c327d847a1db08e46174ce81bd8367e54b8e7ac63a8431e933bc9ed6a1db29f1a9b0c30d7db4007
- SSDEEP 96:5NFyw+b65t1s9cvI6G7ol3bApi4nMgzWyeWwDP:5NK653s5BkLHgzWyeWO
- TLSH T1CEB27410DFB98449F0B386704EA74E766A29F91546339FBA0491100F2C9FB86AE29F35
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdyba.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
200B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDYCC.DLL
- SHA256 a94fc7d895976472d3994371ca6d3f48d029495660064ea12d20cfbdab8d7433
- MD5 d8629555a45fc1ccec16b01e0174be2c
- SHA1 524e72baad5cfc41b9f8149329cfa4468317c2ab
- SHA512 aa8ccc753e2b07f3e1a00e20b3b82b7877bb3881293d4f140e5b7b59ce6104f0607e8a50bd6f59d7a1444306b69b6ec38914f52b6a80c40ce3888a4f55d94c32
- SSDEEP 96:lNFfw+f6G1V7neQTUpq4HFdn/eOn1WLSyNWwmvv:lNN6KNneQu1WLSyNWN
- TLSH T172B22024D7B8045AF1F24A781EB70FB27AE9FA20453292BA05D1110F2CD7B555F29F25
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdycc.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
184B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
KBDYCL.DLL
- SHA256 2b87e3d711124f0940ebdbf09929dd59e5591a84ed3e80ad29a4798b0db367a5
- MD5 61f1c0dd495019bc02d4687e807d4be5
- SHA1 82e01385c3f189cd6252534e16becbe142881c5c
- SHA512 d3e47c23b11a8665c94119dfcc88c4665429cfae6ed43522e01d09d8db0032db34efc1a60b38b3676a8506e217222288196f2e6e844569d45de86252baa1f728
- SSDEEP 96:hNFj4wIN6omY1HF9Ifml1WbDLWR5YsCynpy4nm1rWOSMqWwRP:hNcmAIfS1ILQoR1rWOSMqWA
- TLSH T1ABB29604DAF800DAF1B397740EEB4D117A76FE214137976B05A1202FAC9EB466B29F35
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdycl.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
216B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
kbdnec.dll
- SHA256 b915a89e0e7f16f4ce5880cf0c3f0afe79577c3c515dbaf83af5cd02f177172b
- MD5 6ddbc2d1dfe3deb4426ba6c94d0e947a
- SHA1 c00b384e96810ee6e7442ac2047effc04deb1567
- SHA512 6787837b868a2da1824983533eaccbb2dcc8b80da31efbc506229916bb6747926e71ae9dc322e5a98bebd3a5dd583196139aaa3a3a2e19266620af541359b5bc
- SSDEEP 96:V0MD5B3w+QZOO0GhPHd12O7WzvbbVM9zuWL4dtGUhWIUWwk:BDPFJGPHdQFby9jQWIUW
- TLSH T1AAB22D015AF8051AF172CB701DF70D36A62AFE11CE37877E4481111E2C9AB9A5F2AF75
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdnec.pdb
KbdLayerDescriptor
KbdNlsLayerDescriptor
Name
.text
Size
4KB
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
184B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
kbdnec95.dll
- SHA256 95f87704c03fb5192049c08d36d2c34b5ae325ff5fd07a65354ebf73a9310856
- MD5 bb19cef02e8b2e6c77fa5dd61c62f5e4
- SHA1 b307861b5122d8acc0f62b9b64706de07fd52c13
- SHA512 790ceda45355d8c075771347e7addaf8c8ae1201ba693f542f748fa9bdf238d918202a879ef8477ac237d34b585e046a66df3021249242296ebf4c62bed128b6
- SSDEEP 96:i9HETsogqGCCtvbbVM90HujgvyQykKboW1aBUn1UEWKQWw:iZsHTClby9Iy9boW1aB21FWKQW
- TLSH T15FB24F119FE8084AE072877409F74E36B33AFA109A3B973B5486111F2CC57D94F1DB65
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdnec95.pdb
KbdLayerDescriptor
KbdNlsLayerDescriptor
Name
.text
Size
4KB
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
164B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
kbdnecat.dll
- SHA256 f7434b926d2e1c40ccb1662317f1c620305b35c050a01bb3c1f1b25c8e48cfd6
- MD5 0919fe199cf35692fab788dc3a2b8e53
- SHA1 0b9da528607b6caea9bae39149c83a30836da9f1
- SHA512 5e030b7569799f45e2ca03c9975fcf770ded53bfb85fa06b9b07b20e4fb6173e3872004169d4e9cc581b9e2c9b610f24d52d34056fd290fe6aa2fe546684e80b
- SSDEEP 96:1uZouxyK70GhPxIJ1vvbbVM90yMau934ouj4WchWwx:HMJIGPaJtby9WfTWchW
- TLSH T1CCB21B439EE4041AEC7282704DF70E39A329FAEC8E27833B5481150E2CD5B995F59B6E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdnecat.pdb
KbdLayerDescriptor
KbdNlsLayerDescriptor
Name
.text
Size
4KB
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
184B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
kbdnecnt.dll
- SHA256 541c74ff05fdfa58b0577cf7b3195ae3a0f0e82e8569debaafadfca8425a6f85
- MD5 3597fcda2941b1824509f0a8a5118006
- SHA1 f13499486ccef84d205aaae38aae067450457154
- SHA512 00a5858b600a41ef59dd92b4dd21d23927d79777234b2642da7ec5e9c20fc5d9a07d9ddfdd7986999d8df5f9836330138251677f4ff16c8a6f6db11073590f14
- SSDEEP 96:Z+5ouwo0gupnUvbbVM9ujmeBua4jWOuWw:jl8by9y9WWOuW
- TLSH T1ADB24D159EE8084BE072937499FB4E36F33AFA101E37873B0486210F1C9678A5F59B36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdnecnt.pdb
KbdLayerDescriptor
KbdNlsLayerDescriptor
Name
.text
Size
4KB
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
184B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
kbdnko.dll
- SHA256 293b8b5a827a8bbb172116f181357a30b3e012419f5664fdb15233d0ffdb8bab
- MD5 23d90b745bdce2e9b3f6c67534ac00e0
- SHA1 0d6202d2cdfe678423ad82a55f33000a4592a50d
- SHA512 c0f9d5fc81e6487f3a9a2787e0e41161ec67bae5370528d0f6590e729a460d96599c4aa2f5249daf9aeaa6c4c91f7116873d780c9fb1835f51aa555801594d0f
- SSDEEP 96:/lNFyw5a015rz1RzOEMpi4n5i00WlWWwJvv:/lN405VdWi00WlWWC
- TLSH T15E92531153B80059F1F386305EBB4F22A63DFD604533D6791892510F1CD6B859B29F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdnko.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
kbdphags.dll
- SHA256 158d233279c0acac1acbc4bfcd96f241fb00053f5cf6fe673cd564d0ce52a81f
- MD5 febfec7a1e2456f5146e0a879328c729
- SHA1 c2f506857f566ee0871dfb494621283f676eaf8d
- SHA512 ec07fc0b1262e911008cb3c9a7ce9e09d5f7ba1ad7f750ad49ecb51ee484d54dd9574a2ee0bc17949257db306e7e3be37cea2c3907073073eefd8b5d46d0d681
- SSDEEP 96:TRNFyw+W6V1DvI6AqW5gDpcVbApq4n4/Wo5Ww5vv:lNX6fEaWXh/Wo5WS
- TLSH T14FB25320DF784459F1F38A741DF70E32662EF9218A36DEBA0491110F2C9BB455F65F25
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kbdphags.pdb
KbdLayerDescriptor
Name
.text
Size
4KB
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=264, version=33140,
count=1, id=256, version=33140,
count=1, id=260, version=33140,
count=1, id=255, version=33140,
count=1, id=258, version=33140,
kd.dll
- IMPHASH 461024ca0c216b751b45cfdeec1031cb
- SHA256 6e38934e272434784efdcb79a8d9a9b45b5c5ee8c11f4d5ba12209de66de87ab
- MD5 85a3151b3095b5244c6bc2c723f4a135
- SHA1 d370c53cb8998b05f30b6cbfd0a18b8b650b3abd
- SHA512 e34967d022284fe332354ce84826c98f385575ac46bb800c6502ec6076d8dbbc8405f599aa0eb8cea442133bd7c5b6b3a4bac316408a74386be2691cf03eda04
- SSDEEP 192:XPU17WlmWZXwVrDBQABJzVdZcADB6ZX01k9z3AT2f/gC8h:/U17WlmWZ0DBRJzVdZcTR9zW2wdh
- TLSH T153335CD1A77C1442FD9A797062A9D4873E3CB7C20B6061EB8198F5581C9B3C5EF30A6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2a:2a:90:4c:c1:8f:3e:05:b3:fe:eb:0e:ef:e7:d1:03:26:2b:ad:bd:a0:5e:02:24:7c:6e:4a:e2:48:15:04:d8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 1, 2024
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:60:cf:42:a9:12:31:5f:6f:b3:00:00:00:00:04:60
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 16, 2023 - Nov 14, 2024
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8900-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ed:e1:5f:cb:d5:f7:a5:5d:73:00:01:00:00:01:ed
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kd.pdb
ntoskrnl.exe
PoSetHiberRange
KdInitialize
KdPower
KdReceivePacket
KdSendPacket
KdSetHiberRange
Name
.text
Size
4KB
Virtual Size
374B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
132B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
4KB
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.edata
Size
4KB
Virtual Size
163B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
4KB
Virtual Size
54B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
GFIDS
Size
4KB
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=260, version=33136,
count=3, id=259, version=33136,
count=1, id=1, productName=Unmarked objects,
count=3, id=257, version=33136,
count=1, id=256, version=33136,
count=2, id=264, version=33136,
count=1, id=255, version=33136,
count=1, id=258, version=33136,
kd_02_10df.dll
- SHA256 9283245bb1e191713a992e766f0599e93246c971b3b5a882d448dc9219d348bf
- MD5 3c99fc6166fdb975b7184fa7d4dc5f27
- SHA1 b2f70d92749a1aaa8c154b1d18bfacf7f36897bf
- SHA512 1ec278c5f528be61245ad6a2ea62c5e5ef75cc7d88e86bd5f4ce9b9d2e2ad6fdc41f412cb4c0135b76dd856349a69d0026ed61dfa2394d04d3d451f0c4b63f54
- SSDEEP 768:0/0NwwGi66BtXeTg/lKQuV16EVkGJw1PX9zh:20ldKEUkeoPtz
- TLSH T124633CC253B82C5AD6FB5538C2A6EB9BFDB531520330D6EB0350615D0F27BD49A3932A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3a:93:89:4c:32:9e:7d:0c:1b:53:8a:29:9d:b1:f4:3e:9e:61:9d:77:5d:7d:96:85:5f:85:31:5e:6a:d9:56:47
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 25, 2025
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:05:19:da:dd:aa:8b:dc:44:b2:92:00:00:00:00:05:19
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:591A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:14:8d:cd:23:44:ee:06:df:72:00:01:00:00:02:14
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kd_02_10df.pdb
KdInitializeLibrary
Name
.text
Size
16KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
fothk
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
672B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
4KB
Virtual Size
384B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.edata
Size
4KB
Virtual Size
85B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
4KB
Virtual Size
54B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
GFIDS
Size
4KB
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
444B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=260, version=33145,
count=7, id=259, version=33145,
count=2, productName=Unmarked objects (old),
count=1, id=264, version=33145,
count=1, id=256, version=33145,
count=8, id=261, version=33145,
count=1, id=255, version=33145,
count=1, id=258, version=33145,
kd_02_1af4.dll
- SHA256 e048f56840c21fb3a0377e77288a13b9b727afb83953095b070301109f5c3ff6
- MD5 8572b6ee236ebd7458101c22b8ad7f6f
- SHA1 862361fd8dee2666fe3f5097d3caa37c65b49464
- SHA512 c277682e9c6b9a9b4167ccdd00c06d8154334b9899711feb8a7e20fefef3e1d3d75dfc62805978ef1399d2df781f30d383574701831c892b7f0a81562be2da4b
- SSDEEP 384:36hm0fUMPFvGeSsfWxMWWcVQ9QDBRJKwKFo7R9zBFDz:36nf/FNSsx0VeQ1PK89zb
- TLSH T122535CC2A7B464E1DBAA5C3052A7CA137D7D72D1075082E30AE0D9580D67BC4DF34BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
98:69:98:b1:7c:f4:6d:b8:32:6d:52:63:ac:70:04:35:bb:99:c5:1e:fc:1a:a3:63:34:fb:fa:2d:ec:06:88:08
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 25, 2025
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:05:18:41:84:19:ad:cb:ad:29:4f:00:00:00:00:05:18
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:05:3c:75:6c:82:44:87:cd:fe:00:01:00:00:02:05
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kd_02_1af4.pdb
KdInitializeLibrary
Name
.text
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
fothk
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
372B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
4KB
Virtual Size
384B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.edata
Size
4KB
Virtual Size
85B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
4KB
Virtual Size
54B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
GFIDS
Size
4KB
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
356B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=259, version=33145,
count=2, productName=Unmarked objects (old),
count=1, id=264, version=33145,
count=1, id=256, version=33145,
count=11, id=260, version=33145,
count=1, id=255, version=33145,
count=1, id=258, version=33145,
kd_02_1d0f.dll
- SHA256 9cac34da51c26a30deb518644463bb99de237dbdb702333ed6830bbe3fe223de
- MD5 73fa20bc9ebd2b3be5181de31b64d1b6
- SHA1 a784d37b64212371d436a124261709715258fb2e
- SHA512 57f678c0c07c7ddee6be0b500faffae5301119589634708916d45480f55e14fa3df4fcbb31152d916cd805fb7f0fddf56878dea43a618ea039078870ed1cd6f6
- SSDEEP 768:uPlXA6m3/V9okfnl+nx3NWQlCUXywdyf+sBTX1PP6/9zHsb:6uzoakPlBXcBTlPyzHo
- TLSH T10F83388582E914D4D9A642748237D72BF6F8B045777499CB03A0A5AD0F337E46B38B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b6:2d:e6:bc:10:a6:4c:5d:fe:e8:ea:98:20:a5:ea:a2:ea:df:2c:ab:8e:d7:5b:80:2a:19:c5:75:ec:30:95:c5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 25, 2025
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:05:19:da:dd:aa:8b:dc:44:b2:92:00:00:00:00:05:19
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3303-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0f:57:9a:47:14:40:e6:46:e6:00:01:00:00:02:0f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kd_02_1d0f.pdb
KdInitializeLibrary
Name
.text
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
fothk
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
384B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
4KB
Virtual Size
384B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.edata
Size
4KB
Virtual Size
85B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
4KB
Virtual Size
54B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
GFIDS
Size
4KB
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
744B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=259, version=33145,
count=2, productName=Unmarked objects (old),
count=1, id=264, version=33145,
count=1, id=256, version=33145,
count=16, id=260, version=33145,
count=1, id=255, version=33145,
count=1, id=258, version=33145,
kd_0C_8086.dll
- SHA256 3c51a2adf0146fe17a2202beae4fc50f412db6b822cc167bb8b4bfaa35b4ba0c
- MD5 32b4dcc611b2d434714a43b1bcaed37e
- SHA1 6ed3e4cb8f5bd714dec6a72c6f5e0024443906e3
- SHA512 0f0fd64d0ec1feeb248f0ad4e3a08edd265164deea0b6d2c3c3c69ff519521653e6ad1c14db02715d69ca08572f3caae4fadb07eda002c909d200d19db4063b0
- SSDEEP 1536:QKoLT7udQXngTrX7WL423Da02Rp0eIPEzW:a/7tXM7923Da0yqMq
- TLSH T16F835CA56A6950A5CA968238C677C71BF9F5B08533A092CF4390D0BC1F733D46B3E729
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
35:9c:0f:b8:f0:21:c6:36:be:ae:d6:39:97:d1:76:31:d7:1e:97:ea:54:b2:37:60:16:fc:a8:a5:ba:ca:53:ac
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 25, 2025
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:05:18:41:84:19:ad:cb:ad:29:4f:00:00:00:00:05:18
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8900-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0e:2c:cb:28:7d:95:20:75:63:00:01:00:00:02:0e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kd_0C_8086.pdb
KdInitializeLibrary
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
fothk
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
4KB
Virtual Size
384B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.edata
Size
4KB
Virtual Size
85B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
4KB
Virtual Size
54B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
GFIDS
Size
4KB
Virtual Size
220B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
804B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=261, version=33145,
count=8, id=259, version=33145,
count=2, productName=Unmarked objects (old),
count=1, id=264, version=33145,
count=1, id=256, version=33145,
count=18, id=260, version=33145,
count=1, id=255, version=33145,
count=1, id=258, version=33145,