13d356e9a35c6ee815ea8a73e4e546f22841380018903c937dde2d834b7af862

Analysis

user interaction
yes
max time kernel
42s
max time network
43s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/09/2026, 13:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AJAZZ_AK820.exe
Size 13.6MB
Sample260916-q6nesack51
SHA256 13d356e9a35c6ee815ea8a73e4e546f22841380018903c937dde2d834b7af862
MD5 86a66a866d674a685ccc20fe739a1602
SHA1 d5b72b59a21e0689cabca597195a56d35920eba7
SHA512 7812af9556712b83f2084365d40b519a498f788e047e00b888a488a4cc40342563c2440ce4881e76cf891fcb8b3196927072b97cf7fdb055af75717505aed33e
SSDEEP 393216:SpVafuVG7RDXT2KUWZMnB0NySMfHBW/8Gl45zDMJTfs:gKUFnoySchW/l45kG
TLSH
T186E6333FB2A8B03FC55A1B7256738360597BBA61681B8C1E47F4090DCF2A5305E3FA56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery installer

Malware Config

Signatures

Drops file in Drivers directory 3 IoCs

description	ioc	Process
File opened for modification	C:\Windows\System32\drivers\SETC276.tmp	DrvInst.exe
File created	C:\Windows\System32\drivers\SETC276.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\drivers\vhidflt.sys	DrvInst.exe

Drops file in System32 directory 17 IoCs

description	ioc	Process
File opened for modification	C:\Windows\System32\DriverStore\Temp\{2fb60fb8-716a-744c-8b41-898414bdfb15}\SETAE43.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{2fb60fb8-716a-744c-8b41-898414bdfb15}\SETAE53.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{2fb60fb8-716a-744c-8b41-898414bdfb15}\vhidflt.sys	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{2fb60fb8-716a-744c-8b41-898414bdfb15}\wudf.cat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\vhidflt.inf_amd64_88a86b15a0a91b55\vhidflt.sys	DrvInst.exe
File opened for modification	C:\Windows\System32\CatRoot2\dberr.txt	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{2fb60fb8-716a-744c-8b41-898414bdfb15}\SETAE53.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\vhidflt.inf_amd64_88a86b15a0a91b55.ini	DrvInst.exe
File created	C:\Windows\System32\DriverStore\drvstore.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\vhidflt.inf_amd64_88a86b15a0a91b55\vhidflt.inf	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{2fb60fb8-716a-744c-8b41-898414bdfb15}\SETAE54.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{2fb60fb8-716a-744c-8b41-898414bdfb15}\SETAE54.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\vhidflt.inf_amd64_88a86b15a0a91b55\wudf.cat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{2fb60fb8-716a-744c-8b41-898414bdfb15}	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{2fb60fb8-716a-744c-8b41-898414bdfb15}\SETAE43.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{2fb60fb8-716a-744c-8b41-898414bdfb15}\vhidflt.inf	DrvInst.exe
File created	C:\Windows\System32\DriverStore\FileRepository\vhidflt.inf_amd64_88a86b15a0a91b55\vhidflt.PNF	devcon.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-ADIMU.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-JM028.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\unins000.dat	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\is-9M1P6.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\is-EBAPU.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-4LQGP.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-LFQ09.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\is-8UL75.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-37D7L.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-TG5NH.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-QADNU.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-L8UMC.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-EMFSP.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\driver\x86\is-6VKL6.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\language\is-H2NL2.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\language\is-GNN0N.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\is-R0G90.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-Q29IF.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-VCTOT.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\is-EIUMC.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\is-LMPC9.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\driver\x64\is-0AA41.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\driver\x86\is-VL51T.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\is-5N456.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\is-R7OT7.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-36C7I.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\is-CQE1B.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-MSQSH.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-F5JKL.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-OPMIO.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-1LRS8.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\is-PHKHA.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-DU8RJ.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-AECSE.tmp	AJAZZ_AK820.tmp
File opened for modification	C:\Program Files\Ajazz AK820 有线单光版\driver\x64\DPInst64.exe	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\is-S63LR.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\driver\x86\is-NRG57.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\is-B4JF9.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\is-6C9OJ.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-P8MKU.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-1IPKP.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\is-N8B33.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\is-GMAAM.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-U4IC2.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\is-V82TD.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\driver\x64\is-RINVI.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-8FICI.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\is-QO1KB.tmp	AJAZZ_AK820.tmp
File opened for modification	C:\Program Files\Ajazz AK820 有线单光版\mfc140u.dll	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-T03CS.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-J1PKJ.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-UHKSM.tmp	AJAZZ_AK820.tmp
File opened for modification	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\DeviceDriver.ico	DeviceDriver.exe
File created	C:\Program Files\Ajazz AK820 有线单光版\font\is-SRTB4.tmp	AJAZZ_AK820.tmp
File opened for modification	C:\Program Files\Ajazz AK820 有线单光版\DeviceDriver.exe	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\is-35L1B.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-TD6DO.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-76TGA.tmp	AJAZZ_AK820.tmp
File opened for modification	C:\Program Files\Ajazz AK820 有线单光版\driver\x86\devcon.exe	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\is-6QN4A.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\is-H2C8N.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-24535.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\is-CGHFP.tmp	AJAZZ_AK820.tmp
File created	C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\keyboard\is-78KD3.tmp	AJAZZ_AK820.tmp

Drops file in Windows directory 7 IoCs

description	ioc	Process
File opened for modification	C:\Windows\INF\setupapi.dev.log	DrvInst.exe
File opened for modification	C:\Windows\inf\oem1.inf	DrvInst.exe
File created	C:\Windows\inf\oem1.inf	DrvInst.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	devcon.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	DrvInst.exe
File opened for modification	C:\Windows\DPINST.LOG	DPInst64.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	DPInst64.exe

Executes dropped EXE 6 IoCs

pid	Process
3764	AJAZZ_AK820.tmp
1404	DPInst64.exe
1184	DeviceDriver.exe
3904	devcon.exe
4528	devcon.exe
2792	devcon.exe

Loads dropped DLL 4 IoCs

pid	Process
1184	DeviceDriver.exe
1184	DeviceDriver.exe
1184	DeviceDriver.exe
1184	DeviceDriver.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	DeviceDriver.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AJAZZ_AK820.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AJAZZ_AK820.tmp

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral2/memory/3360-1-0x0000000000400000-0x00000000004D1000-memory.dmp	innosetup
behavioral2/memory/3360-8-0x0000000000400000-0x00000000004D1000-memory.dmp	innosetup
behavioral2/memory/3360-389-0x0000000000400000-0x00000000004D1000-memory.dmp	innosetup

Checks SCSI registry key(s) 3 TTPs 64 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	devcon.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\LowerFilters	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Service	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Filters	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	devcon.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	devcon.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Service	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs	DPInst64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	DPInst64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	devcon.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Service	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\LowerFilters	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom	DPInst64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Filters	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\LowerFilters	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	DPInst64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	devcon.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	devcon.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs	devcon.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs	devcon.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	devcon.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	devcon.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom	devcon.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	devcon.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs	devcon.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom	devcon.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs	DPInst64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	devcon.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	devcon.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Filters	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	DPInst64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	DPInst64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs	DPInst64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	devcon.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002	DPInst64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	DPInst64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID	DPInst64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	devcon.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs	DPInst64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID	devcon.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	DPInst64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Service	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Filters	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	DPInst64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom	DPInst64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs	devcon.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID	devcon.exe

Kills process with taskkill 1 IoCs

defense_evasion

pid	Process
5084	taskkill.exe

Modifies data under HKEY_USERS 41 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	DrvInst.exe

Modifies registry class 19 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.myp\OpenWithProgids	AJAZZ_AK820.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.myp\OpenWithProgids\AjazzAK820有线单光版File.myp	AJAZZ_AK820.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\AjazzAK820有线单光版File.myp	AJAZZ_AK820.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AjazzAK820有线单光版File.myp\ = "Ajazz AK820 有线单光版 File"	AJAZZ_AK820.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AjazzAK820有线单光版File.myp\DefaultIcon\ = "C:\\Program Files\\Ajazz AK820 有线单光版\\DeviceDriver.exe,0"	AJAZZ_AK820.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.myp	AJAZZ_AK820.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\AjazzAK820有线单光版File.myp\DefaultIcon	AJAZZ_AK820.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AjazzAK820有线单光版File.myp	AJAZZ_AK820.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AjazzAK820有线单光版File.myp\shell	AJAZZ_AK820.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AjazzAK820有线单光版File.myp\shell\open	AJAZZ_AK820.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Applications\DeviceDriver.exe\SupportedTypes	AJAZZ_AK820.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\.myp\OpenWithProgids	AJAZZ_AK820.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AjazzAK820有线单光版File.myp\shell\open\command	AJAZZ_AK820.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AjazzAK820有线单光版File.myp\shell\open\command\ = "\"C:\\Program Files\\Ajazz AK820 有线单光版\\DeviceDriver.exe\" \"%1\""	AJAZZ_AK820.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Applications	AJAZZ_AK820.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Applications\DeviceDriver.exe	AJAZZ_AK820.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Applications\DeviceDriver.exe\SupportedTypes\.myp	AJAZZ_AK820.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\AjazzAK820有线单光版File.myp\shell\open\command	AJAZZ_AK820.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Applications\DeviceDriver.exe\SupportedTypes	AJAZZ_AK820.tmp

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3764	AJAZZ_AK820.tmp
3764	AJAZZ_AK820.tmp

Suspicious use of AdjustPrivilegeToken 8 IoCs

description	pid	Process
Token: SeDebugPrivilege	5084	taskkill.exe
Token: SeDebugPrivilege	1184	DeviceDriver.exe
Token: SeLoadDriverPrivilege	2792	devcon.exe
Token: SeRestorePrivilege	2648	DrvInst.exe
Token: SeBackupPrivilege	2648	DrvInst.exe
Token: SeLoadDriverPrivilege	2648	DrvInst.exe
Token: SeLoadDriverPrivilege	2648	DrvInst.exe
Token: SeLoadDriverPrivilege	2648	DrvInst.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
3764	AJAZZ_AK820.tmp
1184	DeviceDriver.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
1184	DeviceDriver.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 3360 wrote to memory of 3764	3360	AJAZZ_AK820.exe	87
PID 3764 wrote to memory of 5084	3764	AJAZZ_AK820.tmp	88
PID 3764 wrote to memory of 1404	3764	AJAZZ_AK820.tmp	92
PID 3764 wrote to memory of 1184	3764	AJAZZ_AK820.tmp	95
PID 1184 wrote to memory of 3904	1184	DeviceDriver.exe	96
PID 1184 wrote to memory of 4528	1184	DeviceDriver.exe	98
PID 1184 wrote to memory of 2792	1184	DeviceDriver.exe	100

C:\Users\Admin\AppData\Local\Temp\AJAZZ_AK820.exe
"C:\Users\Admin\AppData\Local\Temp\AJAZZ_AK820.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3360
- C:\Users\Admin\AppData\Local\Temp\is-377NI.tmp\AJAZZ_AK820.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-377NI.tmp\AJAZZ_AK820.tmp" /SL5="$4009E,13449666,801792,C:\Users\Admin\AppData\Local\Temp\AJAZZ_AK820.exe"
  2⤵
  - Drops file in Program Files directory
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3764
- - C:\Windows\SysWOW64\taskkill.exe
    "C:\Windows\System32\taskkill.exe" /f /im DeviceDriver.exe
    3⤵
    - System Location Discovery: System Language Discovery
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:5084
- - C:\Program Files\Ajazz AK820 有线单光版\driver\x64\DPInst64.exe
    "C:\Program Files\Ajazz AK820 有线单光版\driver\x64\DPInst64.exe" /F /SA /SE /SW
    3⤵
    - Drops file in Windows directory
    - Executes dropped EXE
    - Checks SCSI registry key(s)
    PID:1404
- - C:\Program Files\Ajazz AK820 有线单光版\DeviceDriver.exe
    "C:\Program Files\Ajazz AK820 有线单光版\DeviceDriver.exe"
    3⤵
    - Drops file in Program Files directory
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of WriteProcessMemory
    PID:1184
  - - C:\Program Files\Ajazz AK820 有线单光版\driver\x64\devcon.exe
      remove root\vhidev
      4⤵
      Executes dropped EXE
      Checks SCSI registry key(s)
      PID:3904
  - - C:\Program Files\Ajazz AK820 有线单光版\driver\x64\devcon.exe
      remove root\vhidev
      4⤵
      Executes dropped EXE
      Checks SCSI registry key(s)
      PID:4528
  - - C:\Program Files\Ajazz AK820 有线单光版\driver\x64\devcon.exe
      install "C:\Program Files\Ajazz AK820 有线单光版\driver\x64\vhidflt.inf" root\vhidev
      4⤵
      Drops file in System32 directory
      Drops file in Windows directory
      Executes dropped EXE
      Checks SCSI registry key(s)
      Suspicious use of AdjustPrivilegeToken
      PID:2792

C:\Windows\system32\DrvInst.exe
DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{5595ef8d-6982-4449-bbe6-ef55cde8845c}\vhidflt.inf" "9" "40a93070b" "0000000000000190" "WinSta0\Default" "00000000000000F0" "208" "c:\program files\ajazz ak820 有线单光版\driver\x64"
1⤵
- Drops file in System32 directory
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Modifies data under HKEY_USERS
PID:2488

C:\Windows\system32\DrvInst.exe
DrvInst.exe "2" "211" "ROOT\HIDCLASS\0000" "C:\Windows\System32\DriverStore\FileRepository\vhidflt.inf_amd64_88a86b15a0a91b55\vhidflt.inf" "oem1.inf:50ab71fe221ae399:vhidev:18.13.46.429:root\vhidev," "47645f34b" "0000000000000190" "e92b"
1⤵
- Drops file in Drivers directory
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:2648

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s hidserv
1⤵
PID:3496

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

DeviceDriver.exe

Path C:\Program Files\Ajazz AK820 有线单光版\DeviceDriver.exe
Size 1.5MB
SHA256 57b6f5e4bdbc3df3a3ce557860a49c508e102bacdfbf8c80f79e27f0853d70f1
MD5 88cad770501e301122b52fdb9edea636
SHA1 111fcf3451507b704d8eb631de8912b69bee12f7
SHA512 fcb86a3d2613f47d752cfad6dff1f21d90e106c04a3efe11e1e4afcb39f766591e8ccd1bca75451084ed1916f552140151ac4f969d198b305b6a4aaed927ceb7
SSDEEP 49152:oDhD3WUzsAv9imRzKE0V9PeMNFnvJu0AkVZdKDsFKBp6:YhD3WvgzyrXnB2k4m
TLSH
T14C759E22B941C021F8D240B3D7BD5F7A9C385B21276950F7D6C81DE9A9704E2663EB2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSVCP140.dll

Path C:\Program Files\Ajazz AK820 有线单光版\MSVCP140.dll
Size 426KB
SHA256 885a0a146a83b0d5a19b88c4eb6372b648cfaed817bd31d8cd3fb91313dea13d
MD5 c092885ea11bd80d35cb55c7d488f1e2
SHA1 bfe2f5141af49724a54c838b9a9cb6e54c4a6aa5
SHA512 8a600ccf97a6d5201bb791a43f16cd4ccd19a8e9decae79b8ba3e5200b6e8936649626112b1c6bdb1465ab8afb395803a68286c76b817245c6077d0536d03344
SSDEEP 12288:mgU0BGzePo6+J+4P0xYv7IQgihUgiW6QR7t5s03Ooc8dHkC2esMoWKl:I01Po6+J+dxYv7IQgR03Ooc8dHkC2e50
TLSH
T113943932BB464DF1E48913B971C9472193F9FC610362E3C397DAF12A2F566C6A633A50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

XYUI.dll

Path C:\Program Files\Ajazz AK820 有线单光版\XYUI.dll
Size 951KB
SHA256 9ffbaf14c42c496da1cf89f9608ccc2ab691caadd01234d9174523c648b0fcff
MD5 600bd2dfd2f7fbded975e2fd7f465604
SHA1 00c4d5c0d4e7cdecba15cdd5edeaacf7fe518355
SHA512 1d3c42f3ee81d8391e53e03b31d887dea669e8487c7d481555675f87f95adb461ed8fd0d61bd528afa96d308a05ceadf09166786fe6abdfc578a2721a181fea7
SSDEEP 24576:cKKdkmKgTAAhHTyJFwhwf85IrmFy0Q65O4f6UyjoCJPudbI9f9VhCNoh+55E:ILKTAyYhwfxrmFy0Q65O4hyjoCJPudbC
TLSH
T1BD255A70764162B2EBC881B7DD2DBD39119DEE23473CA2D3995F0A25AC702D22E36D47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DPInst64.exe

Path C:\Program Files\Ajazz AK820 有线单光版\driver\x64\DPInst64.exe
Size 900KB
SHA256 59206de6c2948a72fc174e74cb0a377e75ed6c3c02c89f04df2bdd68082fa8fb
MD5 ee62d9f1d77a9168885082db74ba049e
SHA1 326fdf492473f35b32f940fd2c86bb8011f4e372
SHA512 929d1a1b21c90c9860b0fdc22dbbdfece7ae9d6aecbe480cdd19220aa7fcb005d7875378b938c110205643987a3c983644fddc5340eb25e933fb56b761d1daf2
SSDEEP 12288:/aeRl73Vde53ss/yC+JavFV07cfT+PeQqOTqtjGsJeCIGPc47JbRqo:/F373FsgWFVicfT+PLqOCjGcIGPQo
TLSH
T1FC15B409F56A4362E8B2D1BDC5E36A59EC3138465B30CAC70349E36D1EF7BCA8535B21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OpenSans-ExtraBold.ttf

Path C:\Program Files\Ajazz AK820 有线单光版\font\OpenSans-ExtraBold.ttf
Size 217KB
SHA256 0fcbdb5cbeea00ae532352c7c94a7d288ebc911ba85f4d595012032dcab64ba8
MD5 8bac22ed4fd7c8a30536be18e2984f84
SHA1 97d0bd44f1731a9d97fc29e2b2208835575b60b9
SHA512 808c9f8383e46d32bcd4c281f69ed417e24326b675c96575ffc25f8a6645f067ebf61a2ffcdc6a705e9ad8cb01947d89cf4844b1995cbd9bb542575359cf0bf2
SSDEEP 6144:gplDnrcLUn1v+wIutgCNktQFvmnoxXTS4uFlt:gpKM1DqCNktA+SXfIlt
TLSH
T1442429B576017AE6EF10C4BBC361FD801926B8A3A77B802A68E30775C8671CDBE53D45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OpenSans-Light.ttf

Path C:\Program Files\Ajazz AK820 有线单光版\font\OpenSans-Light.ttf
Size 217KB
SHA256 cf5f5184c1441a1660aa52526328e9d5c2793e77b6d8d3a3ad654bdb07ab8424
MD5 1bf71be111189e76987a4bb9b3115cb7
SHA1 40442c189568184b6e6c27a25d69f14d91b65039
SHA512 cb18b69e98a194af5e3e3d982a75254f3a20bd94c68816a15f38870b9be616cef0c32033f253219cca9146b2b419dd6df28cc4ceeff80d01f400aa0ed101e061
SSDEEP 6144:b4kgACfHoUGMxLutgCNktQFvmnoxXTS4uUJt:z2fHowSqCNktA+SXfvJt
TLSH
T180241779720179E6EF11D4B7C260FD80291AB863A77F402A28E703BA88575CDFE53E45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OpenSans-Regular.ttf

Path C:\Program Files\Ajazz AK820 有线单光版\font\OpenSans-Regular.ttf
Size 212KB
SHA256 e64e508b2aa2880f907e470c4550980ec4c0694d103a43f36150ac3f93189bee
MD5 629a55a7e793da068dc580d184cc0e31
SHA1 3564ed0b5363df5cf277c16e0c6bedc5a682217f
SHA512 6c24c71bee7370939df8085fa70f1298cfa9be6d1b9567e2a12b9bb92872a45547cbabcf14a5d93a6d86cd77165eb262ba8530b988bf2c989fadb255c943df9b
SSDEEP 6144:Y6pzdD/rIJXiQTutgCNktQFvmnoxXTS4ubCl:n9FrIJJaqCNktA+SXfUCl
TLSH
T110242979B20139E6DF11D4B7C261FE80281A7863A73F802B64E3477A88575CDBE53E49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OpenSans-Semibold.ttf

Path C:\Program Files\Ajazz AK820 有线单光版\font\OpenSans-Semibold.ttf
Size 216KB
SHA256 aa3b0ef53db12e3d45094030cac0e69d384e44cc5978643dd4390041cad546e2
MD5 33f225b8f5f7d6b34a0926f58f96c1e9
SHA1 f1ee7a9c6d13ee2d642a806c09e737275e613792
SHA512 4169d72f086e732a30fe1b0e977b32c9ef0d2913b8608a4d2409c4876e204bfa48548188b0c2a7437dbb79a1fc632916f966b25453feb5e40f2f79d75aa3299d
SSDEEP 6144:cTPF4C9GrdELutgCNktQFvmnoxXTS4uFC8:m9f9VSqCNktA+SXfaC8
TLSH
T1292429B9B20179E6EF11D4BBC251FD80281A7863577F402A68E3077AC8571CDBE53E4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1033.lan

Path C:\Program Files\Ajazz AK820 有线单光版\language\1033.lan
Size 7KB
SHA256 a7d96a2f728788b07a0fdff7fd5186bea6a820d19467192c79db3668e356ea56
MD5 f2c1e18b300a2612dce1d2f059684a9b
SHA1 629d1a497dfb0b503ec7b713d452c1ee7ce5c93b
SHA512 4b3402fcfc584bff9c22af2da055644b15a0d0b41a3653687a6eaf8d86e8db052a2ae7828eac04277fea83197df15f041aac7400fc6e76e55557fd284f519d7c
SSDEEP 96:rB9da6LN1YNWhZaS/OMRV5LVj21SAG48zLVGSDHj12ZOWJVD2WNF+hndAnL3o1jA:Nas1YNWhZXhbrFDx2ZOWJVJf41jA
TLSH
T1E8E1936B23F81118F2F7AB85EEB41531AB36BC56AD3CD85D11D1024D09E1E40A867BFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

btn_apply.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\btn_apply.png
Size 1KB
SHA256 d49ee1bcf62e26f4dae4fab9c60487d726d7da8522d347d4a8e36db6bfefff3e
MD5 128d0cb4f5adb8f36c4e88f7f2555622
SHA1 821f098a6cba6e221a1771ac7a65040ea56bf311
SHA512 483d4c73f5ff3df988b47491328d2c1dee3c4f4e56b417d34945d54110dbe32dab962d906e546c8b3331f95f0b5a5cc6574d1a1c00d90ed5913df9b3d158761b
TLSH
T13B21D7D08B664F3EC420F9EA460C5C4F0A93134BEDD70938A2D2AC7CF47251B590B8D5
MD5 SHA1 SHA512 TLSH

Submit Download

btn_radiobox.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\btn_radiobox.png
Size 6KB
SHA256 0b03ae51491399fd53dbd6541d20fafbe16dc693a1fd04c26e6d164702a006d6
MD5 4a488c1604d0ee644366bd4e4d2f8369
SHA1 667503755af354e1bfbe783454c1b9b1cd2ea7b0
SHA512 022eb7c6c16d3d82d750f83b89713cefc56ff6a7636b62bd6a1f598311bc4bca455af1e2c1f6911f1d83fc59281f01e73129174927115c398c558f4663f1a633
SSDEEP 96:TSDZ/I09Da01l+gmkyTt6Hk8nT71OslsZUsx2KluA5ATkVtuvzXYKcRSpNUHVYu7:TSDS0tKg9E05T71O8SBEcAtztusq1vUC
TLSH
T18CE1AEFB94D589EA28CC32818F9E55610A653279840B3A343AE0A5CD8082E12EB0C9F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

btn_record_del.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\btn_record_del.png
Size 1KB
SHA256 89de525bfcbf225a17f99cd1569e05bed3ed586677c80ba86942da9dfb5ca2ee
MD5 6fd2ddd968a48cc7e2e3c6287d794737
SHA1 81572fcf444da4d3baa4d5a9f4afcc9f070428bc
SHA512 845d98d76b2a35d29391aa296b0a97de969e96d1a8c30aef07ffc476a463f6cd27c03103f411822e56d6d8e016b7d05660cc2af5f5f20273976526004431cb07
TLSH
T1A8412CE72FF34AC58A12E76B3DA684049DF0EB1ADE36B1B466E904C0560BC814D39701
MD5 SHA1 SHA512 TLSH

Submit Download

btn_record_down.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\btn_record_down.png
Size 1KB
SHA256 600645896133b83658a4697cba15ff6f93a8c828e15844100edae138f9eecd62
MD5 d9e4dd2ce4b31eb23aef889c02680440
SHA1 dd9222e0a4dcf9ec4e361c11472e2b8701ab9b1f
SHA512 1eb2e7731c7401c650a51caddfe921bee54f32de9f1f64e416c28e9b4a93341ec20ebe078ab737d6f688992917fc604871fce929f541b6885704f8e163428c70
TLSH
T11521C6C547ED98E44090CAC8A617910DA1601E5BF2EB42B90CBBD14049179CA2CC2713
MD5 SHA1 SHA512 TLSH

Submit Download

btn_record_time.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\btn_record_time.png
Size 1KB
SHA256 31cf05bda0caea1cbae0346ff8ef33c73b87fadc40a1a1a589b8182b6d753403
MD5 bc22a92973b1856d3012da0b737ccfae
SHA1 6743540b991f8ed329d10626400b87025484be97
SHA512 6650c42f54f36f70b5fc1ca678e5752643a0749031fec9911e5281e8510927ecb2fa6b4e5c4eaced00b1dd9e2586562a0d170ea681abd8a7d21f773fd63674a4
TLSH
T1F63108AF535186B1C86CB7A555D91255DC2903946E2C330D2203D8D91BCF92FF6D0B05
MD5 SHA1 SHA512 TLSH

Submit Download

btn_record_up.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\btn_record_up.png
Size 1KB
SHA256 79f6baab5768ae7787a7b21a6fcc1947ceafe63ece6541a11dc61ff9d59adfe5
MD5 c0e6d97a1f0a2e97c919e8baca51de87
SHA1 916384827e7f5559d10ba40f4c32fbd882311461
SHA512 c10b39dc2231c68e1591bb9e76b09afcd6773ef232f799b3c9ba7272a110eb7c11c6b2042100880af0a2bc0c35027c7bc60698c17622fd5c8c8edef5b1ad5dce
TLSH
T1D621A7E067F8BD388C89389F48FE6004E31F508719D11A663041CC960057CFB9AA6163
MD5 SHA1 SHA512 TLSH

Submit Download

icon_cal.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_cal.png
Size 200B
SHA256 ee9987ec5d3850b42157c49d8990d08e427e14e41982eca3cd1a87eb76b29e76
MD5 a41156edd9386b531de3540fd9635313
SHA1 443e01133642fdd09ac139c7b7c39d9084f1857a
SHA512 89223814cfa8ee4b1a48a5e68975d40b51f86d1b1a04257fc156013eba97399bcb8f8f2972aa56e69a9f2c433ffe39c785afcac5b7a45d02e32642cc76ba32e7
TLSH
T16DD022EF89005DA48E45513BC728E104CB2D2C28860AAB3E490ED855076282C9851A63
MD5 SHA1 SHA512 TLSH

Submit Download

icon_circle.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_circle.png
Size 1KB
SHA256 e0e357bea9b3609d546813f979a79579f0761d00caccc301ee9546658b632497
MD5 bc8f1af557cecaba82e2257e60967bb8
SHA1 88fe7717985e0b433b4c2cfeab19f576410c5851
SHA512 0df8cc032f517fbcfb50924b5c5d1522aa7e66834594b5b23b54fb949210ac768bef0903f70f71f5bec0e935de50bf99de4ea970ee6c738405d36d49e117d66a
TLSH
T1B721FBC0D2A3118DE8D7471A609C817CD45E493E43F8932C1CA6EFF76D555C47150451
MD5 SHA1 SHA512 TLSH

Submit Download

icon_email.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_email.png
Size 380B
SHA256 27e6bb2e01be9834d09e772cc221e400e071aac4212dcbcc0efdedf0a2623a97
MD5 e71d9e90f8c495f1d7d6d59db2496b52
SHA1 fce37e35e9eaf2df52dd6aef7e27b442357bacf5
SHA512 360e204726ff7db41790cb847baaa2873fb1868b88f56fd0fdbea760868cac29892add4bf079bb905978421b061e45e29548ada552d141492287675e9b2bf392
TLSH
T11BE06A014D3BB038C144007D03DF8810BE0A0D24CDA3EA4C103774B3293434620E9377
MD5 SHA1 SHA512 TLSH

Submit Download

icon_favorites.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_favorites.png
Size 397B
SHA256 27ea162e1979154b70c2e84d9ee3224dd7aac55f8017fc78366eebaccea316ee
MD5 398926a0995f95b01365d9534cf1c356
SHA1 4cdb3568477c87eaf72bf931cf132752daf4d5d9
SHA512 eb031e16c12ec2246f76ce031c249958e4aadb7da301c943622be1388665e55cce7baf9065f4ae890a52449139848f18af6053988192e45ce0b896df9d91b592
TLSH
T158E0F1C9AD5C1D2ABBA4D27284090548C051F519111207440C99F83C30A8E343C86BF7
MD5 SHA1 SHA512 TLSH

Submit Download

icon_home.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_home.png
Size 440B
SHA256 907e052815b3e998feaf018e31d8422004ebf0820b3f92f3a2a97593b483ff7c
MD5 f9e87c65131aab77841f509472e70196
SHA1 11cfc725a96709113383662082289160c8fafbb9
SHA512 5c6277f31eafa81a36de08a014958dbeb30365a0dabf804e38051ae2e52e96507de1a597c7e0017d0d459d682674f914485f51570ff4ed364f52a11ef017cfbf
TLSH
T175F02B839F673D5194DD78B6D52C901DD94D36D76407F5D6083174551CDB440F40104E
MD5 SHA1 SHA512 TLSH

Submit Download

icon_menu.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_menu.png
Size 273B
SHA256 e78e46eee40887f0dd0776916c07c3d9a87493013e98cacb92fda111bb6181e8
MD5 b01b9672aac53036b76948e503e3c80e
SHA1 434c950235a28ccda252e16147aa35db0837f7e4
SHA512 4cc6c44ce074c241410a1fb95de06408551af36a3845a1c8a62cba77aa1f31fefef7330643e2b574415fb4919fc4a3c3fac5efbca120075b00c8888ab37bcda1
TLSH
T1B8D0EB499294C8ACE021B77782204BEEE17AB668116C246C6048202E322A29102D82E3
MD5 SHA1 SHA512 TLSH

Submit Download

icon_multimedia.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_multimedia.png
Size 424B
SHA256 631c0c8905babc940ba427e0f0b51fe0efd9d6fe49cb6800c2d343edd440b79c
MD5 2b4dd8f0f471011828c0b942eba4d650
SHA1 b862e3faa8a313c4f3880bc648a145082517ec91
SHA512 a5c9858dd46496ef616d09af4a53034cca32b5d3007c545e3dd2ec8df2c3faed5629e1c008afa8a3918108ad79c030345af873a679a01eec51529599de102b83
TLSH
T1F4E02B457B800F38CA23327548650860E527F56CCB14A6980040B46B47380D038F45CA
MD5 SHA1 SHA512 TLSH

Submit Download

icon_next.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_next.png
Size 269B
SHA256 0a8210f2d8c485dfa82b4e758c46745be562723fa4d6616b4a520e4ab54d1792
MD5 cd3ee4e9d23ae785962cf18b6bec3be3
SHA1 664e34a2e556f9db3638e8e47361d8da591e0400
SHA512 56092a57f8d7d2b5ed1a80d51b22aeaf1161ef3bd623bae50a409cce6148663642550e53fb7035afad9f7ce1230d25a6940363273c1b4095060c4939d6d9dd82
TLSH
T138D0EBC066810679C3E1C336E71F4000EC9A01600A03B96C0A08CC7B145C40A806870F
MD5 SHA1 SHA512 TLSH

Submit Download

icon_pc.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_pc.png
Size 252B
SHA256 5d9e9a57064e97c99c236c21b50d79ab7c647e1c939fd19d4756aa107d583543
MD5 d0f1200679b9eb7c3c05bd5b2dcb17bf
SHA1 6799a1e134709d249c1e3937b816ffc7f779245b
SHA512 4c2250657521649d0a4d0c53bc8a5a1b34668b98ebcf0007beb9302ed98a2e60d020279277dfc7f41cf401b7f6eede5ea6eaa700ea7f1b71cd70516e18e02094
TLSH
T1E3D09783D2DA9C528F9AA1BBC32D5840B828DA6C13A3500C2D22E8F36F20514A011ECB
MD5 SHA1 SHA512 TLSH

Submit Download

icon_playpause.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_playpause.png
Size 313B
SHA256 3404e6b6e2a466fe71095c3fb2ecb0f21a37c3b04724c29178c365553e613eb3
MD5 e6a70f5a60d50279060e9f1156a222b1
SHA1 7374c517b32c373a725aa8288fb6862c5ef2f335
SHA512 7cb0d79f91dfb32a69daee1c3dafa304902554001400b5679bc77f48f3258d24091db1395ad1372b7605f8a28f7573d50726f6fd32606ffbfcf8e00da67820c2
TLSH
T14DE07DFE816468A4D969103F657AC4A0C819744D16627389140A152F944C618D24F98B
MD5 SHA1 SHA512 TLSH

Submit Download

icon_pre.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_pre.png
Size 281B
SHA256 d4b328a48d8eca6600fa9414b1b5b1e46a028851f74934c20ee7f7526e3e7597
MD5 3e62078ebad5419efc55021badd97558
SHA1 87bda36aca7e417e97dad931e5a8a7a0637a3277
SHA512 c2252684d63f0ec8392246bd4cdc281d260606eecef450461e45d485c0941724583a137cc290b41ca0db86bff8fcba5b7e55750361ae823cad990549fe20f656
TLSH
T147D02B99A3557D2A4B95742F5BF5C130CD3A391E2156130C9B51D1739A6841D365030B
MD5 SHA1 SHA512 TLSH

Submit Download

icon_stop.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_stop.png
Size 177B
SHA256 a364df7cc6f3d6ac77e39b64ea68ef38d41a385a28c8f9ab648e513bf2523f76
MD5 386c64a5247a2b43de0a2e5dca8b16a1
SHA1 710d5bad595aa9244fd6d7e4f25b7f3942dfb9cc
SHA512 32de5457a9bfe4b8d6f7f6488be0d91647d5c21b14cb124cf349efef230d8a8799b6c40963aa188cf0ea3b92a53979772776994a0479825a5dcb7c6fac3cc399
TLSH
T136C080EA9250C47ECE805E37975D57C49D18303402135F1E9E44582B05E5ACD0489443
MD5 SHA1 SHA512 TLSH

Submit Download

icon_vol_down.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_vol_down.png
Size 318B
SHA256 07b847296e479a863c7e9dc5cd0e12abb2f0d021d7c10cc17476bafa013c25c6
MD5 70e75aaed4a69ae1af1fd8fe7aab14a5
SHA1 85b76d42b079dfd44d6a58cdb4fad6399f66dbe6
SHA512 9aecd0d2c090700e24cc12a2edda4bff106102651eac342bbf2f04a700cec39575769adf2899536906a4c69c8b3fdeabc4b42d74fd97da3d0dad85ff5fe0845b
TLSH
T1A2E026D132621ED6924026B2D35A92F8F43520DA62A6432F9F20853A40C5D48808A9CA
MD5 SHA1 SHA512 TLSH

Submit Download

icon_vol_mute.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_vol_mute.png
Size 347B
SHA256 cdc10cebc494c56eb0f4b58033f6660e5cb724ae1bed36a622537b4ca22be00a
MD5 6c9883af0908a81e487f437a35d8f71b
SHA1 0267439692813db4dafbe280e0273368d5b908b1
SHA512 74d290970cffc300d06af7331f659bfcc34c635f868403689b7ea11df67a400c964f58e87af12b505f87c13a433425c55bc56e82983c8bc124b91fbeae4d9659
TLSH
T10AE06049CB088CFAC20890760FA3A192A93F722D4205920F0A43E4B64B44005D2D9C0B
MD5 SHA1 SHA512 TLSH

Submit Download

icon_vol_up.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_vol_up.png
Size 336B
SHA256 fc08a4328fba0329cddaca5c04140ed631fc1beb27f403e776c4e65bed984bab
MD5 25e46853b6268fa953980ee687221c15
SHA1 420d700d47e6e9a4e3fb88f45400421a7283d94f
SHA512 edcc7798829c836e49b7d94669d4f5ca1248fd3b103decbd5cfc06115959dc5480a7ad37a17d77377cb250686484be7362fecc1a67e3d4569e9586c6e69f0659
TLSH
T196E0C685AB95E528DA81AE32A32B9800C88E86270356410C8A42A132B50842AD8BE7D7
MD5 SHA1 SHA512 TLSH

Submit Download

icon_web_backward.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_web_backward.png
Size 310B
SHA256 72818ac7d62542f959b9f6211711efa8fb8459c5301e3ecc71d7a050b2636f6e
MD5 2f8877ee5369b737af49ea888ed58130
SHA1 a23337608e9d561dbb238b45b0fbf224bf774dbb
SHA512 e180f25e2e4a7c7fd51a323e48f0ab4d3ca0cbc58e14ffe73aebeab210dcdb544052f040e113fc90864e2fb316407caa1e182c07575459a8338a85365d2ea441
TLSH
T125E02DC3B64C0E28C38590A383A780658E47C1DF2303E20E0AC9E12B0520A4EB286701
MD5 SHA1 SHA512 TLSH

Submit Download

icon_web_foreward.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_web_foreward.png
Size 316B
SHA256 c0964c2dd516916dd42ff449aa1c98e54ca3563a3df8b8c681981757931cd92f
MD5 6fbcbae29d7ace1a0fef31140d1d0792
SHA1 8a82a1d93c226871c4b41c624fe92e6310e6ad24
SHA512 e634cdb045f9237463c4015411702f69ba0739226b5d8299160b49243d263084d1b40421760cc92c7b2e72cbd3c5376aab42cf911243935903e6e289f235e159
TLSH
T154E026F066382C5AC2C296A78A5D212CA976A1698252747F6805C53BAA63F01B092962
MD5 SHA1 SHA512 TLSH

Submit Download

icon_web_refresh.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_web_refresh.png
Size 552B
SHA256 ee062789eab3250cdd25300009ad939f238918640eb9e0260fec22a7d6f51d2e
MD5 2f3d03dd3989d1914c35e45ba0b70188
SHA1 d93254b3805ee273e33bfbfbb6fe70893260f9cf
SHA512 a8bd7e8fc76e57ecdba83dab9926c401db8a9ef63388e7ad15ee20818b8fc07718419cd0549652a6d7930775ae2fa8b2c51a0bafb9b4dccf4912d008f8fa8a5a
TLSH
T103F02693F2979416E7451137864D9032C6185DDD15055F0F2ACC543FEC4C605F503167
MD5 SHA1 SHA512 TLSH

Submit Download

icon_web_search.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_web_search.png
Size 511B
SHA256 0b8a8ebf9bd28ed8a376f6815ec7169b7b064e01b8430e4cb9365332c201f1f0
MD5 fe132a0ee55f496eec5c449258950fb1
SHA1 e4652932d99a9dd58fe8e5dbac91b4590eadf1e2
SHA512 360491096142fa1d9a4d10c09a404819b5b1a4804d4822ed968ffe6fa86d2d850e748274fa778c48e426c002477f4ee4d91283572eefdbfbb96584e3f4cf39ba
TLSH
T127F0C0D24B727655DB94613B832A9914CE78D7C8D13241140A8694C736636A7C08304B
MD5 SHA1 SHA512 TLSH

Submit Download

icon_web_stop.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\icon_web_stop.png
Size 286B
SHA256 f804a92c2585bec7d148a0b79542b03b3251aaf061c5dde41ac3fb0654b070a7
MD5 1ae611bd8ca5e45a93c64db9b3dae7ef
SHA1 cd8dc0979928c738094e315f808a912a3292b328
SHA512 cc9b28b829bad65bcd8f801ec94843ace9121487c34e84d89250b99d5e1080f95270bf64fb7fc62ec08d9d2f5f57f7090ed2a274e10cfe6ed6ce4bc67e8a739a
TLSH
T112D0E74DC3510E3057C5F1ABC236083CF42890754F07271C040524011C61D014527143
MD5 SHA1 SHA512 TLSH

Submit Download

tab_config.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\tab_config.png
Size 2KB
SHA256 ab5e312f8d79a00df25e80337941d70c591f5fd4fe5121a8c836b63ab5f4eebd
MD5 d6485e63d90150c480cc0371c41715e2
SHA1 37651b11814f83faf3ce1d0b47d3bea57809ec01
SHA512 499f00281fcf5e15969e524780b1e571f57a11615172023c844376ecbea6e9520e8be4aa5a3b67eec8d880a8930f62fb025a18608ce8dc181d6fb13e567523c4
TLSH
T1FB513CC500548DA55E765E6311AC0B28F5A30AAE17C62F0058BB605FD77100A91FF744
MD5 SHA1 SHA512 TLSH

Submit Download

tab_customkey.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\tab_customkey.png
Size 984B
SHA256 8fe689f164a47af13769ec50ddd8f7c498d8a9e679e1badaec5397107f87e43a
MD5 bd1421a7e0ad554b62702f9395df318d
SHA1 faf28fe70e857245e0efd2102330c823875c3b88
SHA512 002da7d0968a82c63baa71b2e354b2b8b5ee1e88a2451b65c9dea7e85b98a9634cde544429b6883a843750fa096351b2663f13d2ddd82593848e195eab2c65e1
TLSH
T18411D5CC0284F672A7C4CFBA365832242B26B0999D04F3D78956FC9C0329324394E32F
MD5 SHA1 SHA512 TLSH

Submit Download

tab_home.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\tab_home.png
Size 1KB
SHA256 42e4ff86bbef5dd4ca37c4c9bfdbc0be9e6b7cfbd45e7ffefc86dd1cdefa3ba3
MD5 92c199d749c7d296b0c80d2ff952d40e
SHA1 81b54f73e227edf7e2367b296955f7d8bf4a75f2
SHA512 40273dcb5e0dae8dcf2becfc3a76e00fb06964ac933cf7a057849cfce704452da02a3578b907884167dc38a5352fb8df6af90e3080403ea54be11b46b1a4b07d
TLSH
T1F221D5C243EA5CC71D72A965EFB40B08789ACEF8638B8501B376B58604CF20DE0BA251
MD5 SHA1 SHA512 TLSH

Submit Download

tab_light.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\tab_light.png
Size 2KB
SHA256 dcdf22a8b6c358f80c13e09752dc0abfedaf40962c59c9fe8bdafb7ef5e8a7e3
MD5 8564140e0f61d53188d1a075c2a2e3c3
SHA1 6615b523de54c9057073fc5a4628e471f1b2cf12
SHA512 aa75181bf8bb6a3ab555166fc92786c299f35b54d1ef29b8c314ae1574af8dc177916a072b0a0f73773ea05e844ce7cbcc4dd32a052b91d2c152f7ad2deabc63
TLSH
T16C513ABA7628F71173CBA0E8255C92B56C3371F82F285E0CBE463BB85650D5E512AC33
MD5 SHA1 SHA512 TLSH

Submit Download

tab_macro.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\icon\tab_macro.png
Size 1KB
SHA256 817457b53870696fca6751425e0b8607cba53fda54aa140d0ecf837f7de53e20
MD5 b21ff1d9e756a2f4360685d0ee2720c7
SHA1 a43169c289ab1f31d31fa5941f976db3370ddaf7
SHA512 2ba868c43a7117f21ce3dfe4fe6cd3ac31636a3ad9b6cd7365dfbb9af3c44f35e9d0ad9e857f2cf9e7e1d1d235a1eeeb2a14eb8886d275efef54b40124788bba
TLSH
T1E81175B161AECC37F1E31D9526E427A015D74F8A4222121627318372EA5D6D70604427
MD5 SHA1 SHA512 TLSH

Submit Download

img_combobox.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\img_combobox.png
Size 1KB
SHA256 be8180326de62b355a66f613c0c778b60eb2be5fd4db5a3e633bebbe19d8d3cd
MD5 960ccfa037589e53ed453df8201cac8f
SHA1 d0fe85a33badee56e765384f95e070871f102d14
SHA512 5b3fe65dfee6d34ae32d9dc839f52524f98a89a219fb81bf1b8a68eeebbc02ebb54247ce132a55ab7422dc9491c80b85895fb449b203683c9bcb366770df6b4d
TLSH
T16D414C3C685227789C41F7134B0C96BA2C3AF1FF1C2B23597C2E9051624D0F440EB239
MD5 SHA1 SHA512 TLSH

Submit Download

img_device_state.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\img_device_state.png
Size 1KB
SHA256 0c8cb1b8b503bd1aebc54ad9431b9166ccb3f913fa8098c91db8fe99de5dcd52
MD5 a18e505be5c603bda2b84e96efe86b15
SHA1 ec1d1fb370c46e832e9e835bc640258066f842af
SHA512 a765353a16300b5a55642c41aa78f739edee0bad4f29feb545b7bf0aa27d7dca4cade07e34d18a10cc013b681306f607d8abc04998d27e991ebd57796c88653f
TLSH
T15141D6C2FFF2C585E479998FCE490D3818E161638084B8069E58D168EDA2D9468EAB85
MD5 SHA1 SHA512 TLSH

Submit Download

img_edit.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\img_edit.png
Size 1KB
SHA256 b5c33f1f874961768c00d86e1c37439928054301b76760c25703de31db5f14ba
MD5 a66a6b0f3eef4e74cdc8db5b96f26d2c
SHA1 48ba0fdfb6785782b43597919feff6a374ed3218
SHA512 186c4c38635e0be867996633304e9d36dc035d6443d17699f4e85206f72ebbdeca70f2a03a99b8e172018518d9fc2dd4b82733679e5d0fe80071111ebbcaa8ce
TLSH
T14441A8F2DD144E67D858B0F15AE55F323829A8B82A0E575CCE4E102CD97494B9CF39D2
MD5 SHA1 SHA512 TLSH

Submit Download

imgbtn_add.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\imgbtn_add.png
Size 1KB
SHA256 167307c2a3848203cb8eff3128e64d8f553438c9a7045bc0ad7b3197e928acfc
MD5 788b9a239ac2519f97b3de9f941c2368
SHA1 b6e06b90b80bf6cc9abe3cb372569cb65231e62a
SHA512 ac83b59e7b077f48454058233ed9f9b65d40a0291028c853858bbd5902104a2cbef25cbdbc105a672b7cac4712cca5aefe82317120f2bf460c5dbe631f37a76a
TLSH
T195211AF1F8821BF1FD4122778608A49BFD67DB47115A0854F5A3C6C422834180ADC3C7
MD5 SHA1 SHA512 TLSH

Submit Download

imgbtn_del.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\imgbtn_del.png
Size 813B
SHA256 8c7f810e70734f0cb7e99cc1dee256d6f0515c9b3253cac21199e2d4dbbd01bb
MD5 d3bfffdf92ef106310cf2f0a2289207b
SHA1 1b612f39e427b77c5056b99b7c852ce7e2f81f14
SHA512 ccbb8d2adfec84b20ffeb263e9c2d3a9d67d4c96032f1a338a789a82e642b926171e867ea4b80c67b1fff03f701fd6146c62ec4d2d0cccc024fc8e53ae83ee75
TLSH
T1D10186E4F10FAD2DAC027F7225C391AA7875563012572A0A0915E3B334A3D6E5604A07
MD5 SHA1 SHA512 TLSH

Submit Download

imgbtn_edit.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\imgbtn_edit.png
Size 1KB
SHA256 264e52907385372aa15ed88fff8c83e8ce625f2372a3dc530e233c91ac7e28c2
MD5 9a64e9ce894fb8522ca30e9a9c58f5e3
SHA1 35a2f7efb8959121db36600ac54b3f0927d7f33b
SHA512 4693d87d538ac52032a4ad80ba1c5e703a923a377e961e7f27db65728bf97858bad32271d651b7c050db80d3a9061e6023064719f3147ffd36d4f7767695a0e1
TLSH
T14121BAE756001BB7752152169F1568E73A176884F30DA3324470C8242225389FFE7B35
MD5 SHA1 SHA512 TLSH

Submit Download

imgbtn_export.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\imgbtn_export.png
Size 1KB
SHA256 a6ca8a4873fd1205f2b4c9cf17bc2057e4b06405c4223dce3f30e282a098a35c
MD5 b39aca57c8ea9ef362ee0054ddeddbd1
SHA1 6b6321749e07ccdecc1b91eab00a35deb8779c22
SHA512 1ff3861868de2a43392be147663128b7788100060297a2d1b3a70ba0eaadbae59f6536df30039747c8df22bd7b3e6960ecf6169a4e8c776545667a2dab3efa59
TLSH
T1B411862E9871632E249692749A0875738A34DF051BE5F21C1541D4F9974B4A0B2D550F
MD5 SHA1 SHA512 TLSH

Submit Download

imgbtn_import.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\imgbtn_import.png
Size 1KB
SHA256 89eb36bfac1ce9528e61f311614df8e9ad2511d3906c3cb971ade2954512fa6e
MD5 49c3024961c353a7084530677b614d45
SHA1 dcf02c4a98272b19ec18c17ddccaed16f032aca8
SHA512 c99f224167941ec285d743a2d1f0de75d3d18e44f0fd7ba89b0eff2c26fbb276e5becc211600ffb597630b9be86c2e3a01ab387370979a16d09ea9a962218b67
TLSH
T1E421DA9278A4AC3FB44AD373079C814DD11C56F1F303634B478991300CD7A5B53B572A
MD5 SHA1 SHA512 TLSH

Submit Download

main_bkg.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\main_bkg.png
Size 740KB
SHA256 2f9810fed6dff63274b5ffba623a91e55121aafd8f5246583d27c45c549443f0
MD5 7796e1acacae0039f06b077c1d080b7b
SHA1 e926056a342e66bf2b452dcab23d5479a9200aa6
SHA512 7bf37da1d46c4bc8ed9a306bd534ccd72c9753c7f63aaa2e0b66ccde6f04ac3a9054d7d4d8a10c13a13cd5de9de7491137e140c97ed740f2fa6ca6aed5dd615d
SSDEEP 12288:f8Bit1uMv4Dm3PtHFUrf9Vwum8RRCqHyn8xOc3BvFYNRFCLIVv7aLo1Px0rSC0:f88uM+CVHi7X3RnSgRFYdEIVOSPx0v0
TLSH
T1E5F433CEF62967BB3178F186013CCF84F0FF6EC257A552981DA2F658EA6029EC221544
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

main_sysbtn_close.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\main_sysbtn_close.png
Size 1KB
SHA256 f56391584ee8e1fe208d74b049b4e7c7549aef1a2d3d697f3e891336c246f458
MD5 d033433ebe33bce1027d66c6bfa75466
SHA1 eee638a0e0b06863a51193c8d6fcf3f45e56ceea
SHA512 19cc8758168b3a392c23f84d755e4edcaa92fff2e9bafc17961b45404c25cc157a1da1ed1d8f3c9e671ec6422f4f5cb08a01cf22674ff13c3a844b806b8f29d2
TLSH
T10B21CA8744078E5A08761662439320729B361389C9D11864167A65EAD504A7CEDD552A
MD5 SHA1 SHA512 TLSH

Submit Download

main_sysbtn_min.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\main_sysbtn_min.png
Size 578B
SHA256 30fef5d1996fff84e9833cd357ad0d26cddbd7501c202e339842cae8ba15dbe0
MD5 76bf7db492b85432b677d473bdcb38e1
SHA1 fc41b2bf61515474832d1c338090ba42d2cb8d1b
SHA512 d7777cac3538591100cf8a4ae0f727a1987b265ec7c1e1c0bfa25c9cec16855bfd304906f5bab7caabcd8239325e7707c763b74474b8b202d3b3dd5a18470aae
TLSH
T19AF041D3D6C14CE89E6A5072A3211207DF3E5B016082178B0A3DE4B287A6F0B04879CD
MD5 SHA1 SHA512 TLSH

Submit Download

main_sysbtn_website.png

Path C:\Program Files\Ajazz AK820 有线单光版\skins\theme1\main_sysbtn_website.png
Size 2KB
SHA256 f2c6b43ff74404960e5d824027b3b724514a30e2f6eedf4dd6cbd6e529fcad92
MD5 70b66684db3952e6af6b156b872d32d2
SHA1 4db036c94382ef6c1b94a0ea95177876e8f45f9f
SHA512 5dac7133e089ca38b63dc36a854bb44e0a2ae62b3e3460dcfff55fe9fbf33985e2c3268ff060fd51d933792fbb005521462a6c283be52fc18284d08443d886db
TLSH
T1934129F68BAF64343946477899906243303088DD33A59798A0F7B5E9DC055AA31DF382
MD5 SHA1 SHA512 TLSH

Submit Download

vcruntime140.dll

Path C:\Program Files\Ajazz AK820 有线单光版\vcruntime140.dll
Size 74KB
SHA256 1e0f8f7f13502f5cee17232e9bebca7b44dd6ec29f1842bb61033044c65b2bbf
MD5 31ce620cb32ac950d31e019e67efc638
SHA1 eaf02a203bc11d593a1adb74c246f7a613e8ef09
SHA512 603e8dceda4cb5b3317020e71f1951d01ace045468eaf118b422f4f44b8b6b2794f5002ea2e3fe9107c222e4cb55b932ed0d897a1871976d75f8ee10d5d12374
SSDEEP 1536:O6HuqvERNjBwySXtVaSvrgOFw9RxKMnMecbCIdFr:O6HZMRNjKySdLcOiHMecbCId
TLSH
T173739E4278C08272D1BE0A79057AF612673DAA200FD15FDB7FD85988AB75AC0EF31213
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AJAZZ_AK820.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-377NI.tmp\AJAZZ_AK820.tmp
Size 3.0MB
SHA256 e801a93398d93b4caf142bae7bc1477d363ff1721974061114f29d6312d83ed1
MD5 9f6c4a1b33118af2b2e76060d87178f0
SHA1 dff8eb90716e833a3510f301eeb1673fff11ff1f
SHA512 712d6eb64e636df04a3a70c99464fd8e40bb82e31f82d54fe32271bc05c2cc354818f93a452393decf2887304fd5488a81fdaf08f0cc1dbc7a1156d5048c2368
SSDEEP 49152:hWGtLBcXqFpBR6SVb8kq4pgquLMMji4NYxtJpkxhGjIHTbQ3337r:jtLutqgwh4NYxtJpkxhG/333P
TLSH
T177E53A27F28C713ED06B3A364A3386909837F66169168C2797FC794C8F365942A3E747
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vhidflt.inf_amd64_88a86b15a0a91b55.ini

Path C:\Windows\System32\DriverStore\FileRepository\vhidflt.inf_amd64_88a86b15a0a91b55.ini
Size 414B
SHA256 365cba9e86dba0632f7ebf671f863964637e4c24fd0f314c869e31c218fc6946
MD5 ab0393132d057b16b20e8dc3899a54a9
SHA1 8f4dd138dd7f4b2f32251d3f999a089259d4b9f8
SHA512 0ef1ba145cf5acbfcaf316cf5f9ed9b5c8b24b259262895b175d81c24e69129503ad29626ecab6d4c9624bcc9f8a5588c14866cef76b7db3d404e765b6fff51d
TLSH
T15CE02B5132B5E5CD7048A116661D3FB7820D372B1866E6593320E29CEF05A185F906A5
MD5 SHA1 SHA512 TLSH

Submit Download

vhidflt.sys

Path \??\c:\PROGRA~1\AJAZZA~1\driver\x64\vhidflt.sys
Size 120KB
SHA256 10622f59beaf45f3815b85b7bdc391f588ade403923872abe58f3b5e2198d323
MD5 e72cd0719b9a4651786922646b53ce06
SHA1 ae662fd8045ca7ca0c7411ac5fcee76f3583fab5
SHA512 84fd15287aba55cc27c4a33c68ac0e1d5e5d13bd251a4b195b738b563001647adfc5511006fcfb9d6513c93e163679d9e28a5fcc9b083c5a70d9256e51fd5eae
SSDEEP 3072:nXGWx2wqmvHGgO6rExEuxKnGWpigguAzh6be7n:nXnx2wqmvHGgO6rG4nLamon
TLSH
T1F5C34AD28B6C5482ED97AD7052E8E9577C7877C31B5080EB01A6E4940F93BC5EB3826E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wudf.cat

Path \??\c:\PROGRA~1\AJAZZA~1\driver\x64\wudf.cat
Size 12KB
SHA256 90856ecb486de7d3dcdff4a82bf0ffe9df6b3f3c6dc667f8c3ac9793ec1f9707
MD5 0c3edf1fdb402b260a0d70e5500a8b12
SHA1 7fd974f4eac67387f76624174385bc12c266c4c7
SHA512 1124e207e2879081fb0b533a59146cb6b99bdd36447ae9a15059b58e6142e769bbec5ab077941b7eadaf12e59f652edd3e47a4be93f7258ee947adc4f3eaee2e
SSDEEP 192:HQ5yrFMwEpQWsugeQNElw+wramyKQFWQFGN6IVnKaQwP7yX01k9z3AOjsOg2b:lGw8FRc6zaHeR9zzjW2b
TLSH
T1CB4206E699AD1082FAE7EC7003E4E1A77C3833CB5C40906916D7EB250D93389FB1426E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vhidflt.inf

Path \??\c:\program files\ajazz ak820 有线单光版\driver\x64\vhidflt.inf
Size 8KB
SHA256 5957a2beb035b4ad618802efe367c1718445e00d4719890086cc3275207a461d
MD5 b99e8b3a8988adae6814dac204428040
SHA1 911df4a289ff2eae22b21d038fdc4b4579668bb2
SHA512 634c060a9bb96769505dcaf76a8ed1bd26670058cb316e6c0f2daa9695f5b6c44ed57ced1f6f925e281fa3a34eb52536b9814e627a4b273f4c00626096b09614
SSDEEP 96:6YoYMW/1PWe7SKTQR3Rfmw1D+ZAVRfmwcNowl2I:iW/1PWCSWQR3pmesApmxt
TLSH
T1C902E81266DA521CF5F22A90EAF1643AD91774D54C389F6D40ED418E2BE3E408CF3BA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3360-389-0x0000000000400000-0x00000000004D1000-memory.dmp

Download

memory/3360-1-0x0000000000400000-0x00000000004D1000-memory.dmp

Download

memory/3360-8-0x0000000000400000-0x00000000004D1000-memory.dmp

Download

memory/3764-388-0x0000000000400000-0x000000000070D000-memory.dmp

Download

memory/3764-9-0x0000000000400000-0x000000000070D000-memory.dmp

Download

memory/3764-306-0x0000000000400000-0x000000000070D000-memory.dmp

Download

memory/3764-10-0x00000000024E0000-0x00000000024E1000-memory.dmp

Download

memory/3764-6-0x00000000024E0000-0x00000000024E1000-memory.dmp

Download

memory/3764-12-0x0000000000400000-0x000000000070D000-memory.dmp

Download