06_Touchpad[.]rar | Triage™

resource
unpack001/06_Touchpad/Setup.exe
unpack001/06_Touchpad/WinWDF/x64/InstNT.exe
unpack001/06_Touchpad/WinWDF/x64/SynCOM.dll
unpack001/06_Touchpad/WinWDF/x64/SynCOM32.dll
unpack001/06_Touchpad/WinWDF/x64/SynCtrl.dll
unpack001/06_Touchpad/WinWDF/x64/SynCtrl32.dll
unpack001/06_Touchpad/WinWDF/x64/SynISDLL.dll
unpack001/06_Touchpad/WinWDF/x64/SynMood.exe
unpack001/06_Touchpad/WinWDF/x64/SynTP.sys
unpack001/06_Touchpad/WinWDF/x64/SynTPAPI.dll
unpack001/06_Touchpad/WinWDF/x64/SynTPCOM.dll
unpack001/06_Touchpad/WinWDF/x64/SynTPCOM32.dll
unpack001/06_Touchpad/WinWDF/x64/SynTPCo4.dll
unpack001/06_Touchpad/WinWDF/x64/SynTPCpl.dll
unpack001/06_Touchpad/WinWDF/x64/SynTPEnh.exe
unpack001/06_Touchpad/WinWDF/x64/SynTPHelper.exe
unpack001/06_Touchpad/WinWDF/x64/SynTPRes.dll
unpack001/06_Touchpad/WinWDF/x64/SynZMetr.exe
unpack001/06_Touchpad/WinWDF/x64/Tutorial.exe
unpack001/06_Touchpad/WinWDF/x64/WdfCoInstaller01009.dll
unpack001/06_Touchpad/WinWDF/x64/dpinst.exe
unpack001/06_Touchpad/WinWDF/x64/setup.exe
unpack001/06_Touchpad/WinWDF/x86/InstNT.exe
unpack001/06_Touchpad/WinWDF/x86/SynCOM.dll
unpack001/06_Touchpad/WinWDF/x86/SynCtrl.dll
unpack001/06_Touchpad/WinWDF/x86/SynISDLL.dll
unpack001/06_Touchpad/WinWDF/x86/SynMood.exe
unpack001/06_Touchpad/WinWDF/x86/SynTP.sys
unpack001/06_Touchpad/WinWDF/x86/SynTPAPI.dll
unpack001/06_Touchpad/WinWDF/x86/SynTPCOM.dll
unpack001/06_Touchpad/WinWDF/x86/SynTPCo4.dll
unpack001/06_Touchpad/WinWDF/x86/SynTPCpl.dll
unpack001/06_Touchpad/WinWDF/x86/SynTPEnh.exe
unpack001/06_Touchpad/WinWDF/x86/SynTPHelper.exe
unpack001/06_Touchpad/WinWDF/x86/SynTPRes.dll
unpack001/06_Touchpad/WinWDF/x86/SynZMetr.exe
unpack001/06_Touchpad/WinWDF/x86/Tutorial.exe
unpack001/06_Touchpad/WinWDF/x86/WdfCoInstaller01009.dll
unpack001/06_Touchpad/WinWDF/x86/dpinst.exe
unpack001/06_Touchpad/WinWDF/x86/setup.exe

06_Touchpad.rar

SHA256 bded6937f75438e4892b72f55bb2e6bceb8e1cd2a28db040c8a09183aac6e9bc
MD5 8d011fb8b1bd2289833175d3a06ff9ea
SHA1 7873f90413a8928ba5b159d0f852bf54545b3a84
SHA512 418c6c789acc9a7410d36372bcfbf48cd95d21e994af6ed14c88fa5ab6c2ab9204c5ea255d2de96d22ea0e5d176c1f74701493004e12730f9fb3fc15b78cfd71
SSDEEP 393216:wnHbji1Ta2XfbcZfu9p2xWqkbk/4Zif4/f+9+Jz2lPXD2wPyco6ZJ8Qi2xEq6ZKj:+PmHbcFQp2xWqkbksiAH3JzKPXD/c6Tn
TLSH
T1F047333BBD3461E3C8F82EBDB45A126452ECB7202591DF1565DF884A6A0CEEDD1304BE
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/Autorun.inf

SHA256 266c3e31f09df60221c72b4eea591668d37b8cee117ef80f863171eed5fe8689
MD5 55cc3295a7ac6d384b5348208361177f
SHA1 a0ebeb8f50794776fe2de243b6c1aee2996443e8
SHA512 04a220ac8247a4801e7c6c85525746aed7c60bf43c9681cf58be4adf8ddd6c4ba114f9b430a5c4a66e8c708e344d4bbb41047770e1f42b7ff51ad28c2afa97d6
MD5 SHA1 SHA512

06_Touchpad/Release.txt

SHA256 c6cf80255b063aeb0c65da37dd27d1729bc2d41aef3c4402bf5369a9ffb5f3e7
MD5 5d910f846820a4436ddbd8cf6dec60c1
SHA1 8aba24349e2afbb8e6dd029edcf16015ebeaa173
SHA512 26295419771e098f9c2296665c243f6513060d67f6de6a10f87b444124b9dd950e5a9d354be42c1ece1f94debc8b7ca0cc4e61f068641d030535325b142b9b9f
SSDEEP 6144:fDGRU2uoHWB5W87xtBL8e83qiKkE03B13LLW3pd:OAcG
TLSH
T1BB64C9162D52A331A1F7C012672E5396E73E41ACA3722E143CDEF05C2E964B993BF4E5
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/Setup.exe

IMPHASH c482f234b45547b436f1ee193a33ae4f
SHA256 be2bfef7589ba2195be76ce8113c99cf04365da4ea7ed0f9c8bc8a697415f5a7
MD5 11c3c8f8d5f4b217a51e6bb8532b7cf4
SHA1 1b24576a5917ad24f448faf3f0ec0843523a46fd
SHA512 b66d72b51f1423ae1541b4a1f3253d5ecb244a0551308ddc835655721bfeb4dd2f3e12cdfe85fb10f8109f6f9fc2a15a05ebd2ececb0bd162d36ceb47a230882
SSDEEP 3072:B7ez8WRfcaClOcpbhr1orxhgjt5y02pqDcn6WpjL1CrVheZgHpX:QznRc7vpb5oxhUEn1CrS+HR
TLSH
T12324910177FA8274F6F32B71ED7556944B3ABC926E38E58E3354089D1830A90DAB9733
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

7e:81:c6:fb:34:6e:43:9a:64:71:89:68:d1:19:09:b4:51:dd:e1:72

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

30255

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW GetVersionExW DeviceIoControl SetLastError GetTickCount FreeLibrary GetProcAddress LoadLibraryW SetEvent InterlockedDecrement InterlockedIncrement SetFilePointer WriteFile ExpandEnvironmentStringsW ReleaseMutex SetEnvironmentVariableA CompareStringW CompareStringA CreateFileA ReadFile SetEndOfFile WriteConsoleW GetConsoleOutputCP WriteConsoleA LoadLibraryA FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle GetLastError GetExitCodeProcess GetCurrentProcess CreateProcessW WaitForSingleObject GetModuleFileNameW CreateFileW CloseHandle GetSystemDirectoryW GetSystemInfo FindResourceExW FindResourceW LoadResource LockResource SizeofResource DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetLocaleInfoA GetStringTypeW GetStringTypeA RtlUnwind RaiseException DeleteFileW SetFileAttributesW GetFileAttributesW GetSystemTimeAsFileTime HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetCPInfo GetACP GetOEMCP MultiByteToWideChar LCMapStringA WideCharToMultiByte LCMapStringW Sleep HeapSize ExitProcess GetTimeFormatA GetDateFormatA GetTimeZoneInformation GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId VirtualAlloc HeapReAlloc

user32

LoadStringW MessageBoxW ExitWindowsEx UnregisterClassA

advapi32

RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegisterEventSourceW ReportEventW DeregisterEventSource OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegSetValueExW RegCloseKey RegOpenKeyW RegCreateKeyW PrivilegeCheck

shell32

SHGetSpecialFolderPathW ShellExecuteExW

06_Touchpad/WinWDF/x64/Eula0401ARA.tx_

SHA256 ba65e1bbef9bf7956b16a3890fd0d6e660d194e05b71858d8172bbbe047c282e
MD5 f4e5c93eb36110999ff03f53ff6472a8
SHA1 2aac9ddca7829632f272e8b2d75ac7a85eb576a9
SHA512 6f5a5fc9615e57268be3fa87b78c8cafcab3ddba6704c7e9a92c5b9de8b0232dd786a62ebafce9d44617cf59fce26cd0188097d9764a36e6c867f8e7d0f1f166
SSDEEP 192:+hzEVOk1Jwg9kX1LfK3C2iOyta2v8NQbm0lMvXCgPyI7j/o0qidnd5+5Uig6Bmtl:+hzEVOk1J5kXdfKS2iOytaI8NQbm0Mv1
TLSH
T1682234E20A3698B14B9A9E1ED1D6315CE8B1AD23DB4AFC3234D31610C9C7867D35EA35
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula0404CHT.tx_

SHA256 b26c3f56ebea7d9473898371f88db0bc09c1e8edc206629895ec0f7f45150df5
MD5 8e9ec467827259e1a93b66762e9df7b2
SHA1 dd3ba17723dace0965a7afb1709917344b1c2e9f
SHA512 566ca12de551cd5ae1ad4e9ee960522b78475dbc613ee56bc6e4c51c57aad2f743eb2bf84918a51f6bb8696fc167568bbc566d6ab5f10edee99cbc275fc1e01f
SSDEEP 96:OZZeVRS17D064Mvnbp82Z79CmkvSuP0ok7SvJ0Xy6lVXZeZKt/IiSykOxtNpMlBF:kh17p4MBmPP01uvFovO0/IiPkOfNOn
TLSH
T1BDD1C56DA026A5FC080C3717A312437278980B292BF7A8B5FBC911177E50E5C623A74E
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula0405CSY.tx_

SHA256 afd73e0e4d3460a6a7551365ca86b3d631e555182e3e70c190abb692eda29924
MD5 e9c8a750a4852655efae015be60a33cf
SHA1 20d5b67210ec7d279bb4cd19072c34c46ba3fe7b
SHA512 a9a611e5385d63e38a3a1d96c52ba234976c9bca5fecc19e2c9fa0f4aa572ed21dc9e3aacc4da80d6d9b3bf8ecbcf0280846a8d31c8b9332de295c4ac8ceccd3
SSDEEP 96:ZXpoGiWCHz7TFMIhYmoeSd9UnqoVkqaPS31THvxRuJguAsP4DN7r0KOUT5ZcR8wf:37ihnTFaylV463RHZRuJg3BoFiMgu
TLSH
T1BEF1A62EB842F215DBB50388339AB1187A8F1FA8492D86FE7C4BD24625635E5DF74CC4
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula0406DAN.tx_

SHA256 179aab8757f4dbbdd94f1110fba54344cf160f9b29ff44805e1abef4e621bcc9
MD5 39c8171a7410f8322c21bf2d234a1629
SHA1 b2ccd2214cce578a2a9bb73927301791510d954a
SHA512 246606613c909ec2eb7531612922ac54d7c4913413579fc1430a70ff56b5b09c2a5e612116e355ea7415b489cb1b0e01861a0fa916544ed38d90700c43b199e2
SSDEEP 96:qfunySAI9GVQ8Xu6YFf0qgZF3gRkpkxpyLXznJ4AS6hYkUVV1ldBe2YG5JaYXe/k:qfB3mEQ8XRhpuAvyAbhYLVVfYgsGzNJ
TLSH
T1FEF19602B07633396F3E4B5AF404497B965F272CC16495A5F588C1BB05C3AF492BF18A
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula0407DEU.tx_

SHA256 8617ee31aedf207c4741a8c4776f0d05d1abe806f99ea1713b6e96de4e99abe0
MD5 94b75245d9bb50b201d3f2764c53e2e3
SHA1 7012f0f1ff8bbca199a36990461a9806d980bf87
SHA512 b7a6eba892e7e0afcf89f30c974afde27a770a98dd39fe9453e78e3808826b1b93459aaabd339e2e31decb51bd6c7a04853f6d4adc02c731d695befc747e1379
SSDEEP 192:Fhuvzn4HKtpajKtsCRXmg4K2XUpX2C5FOc2o1i2XQ1:FM4qtUjksCRWs2XUZhN982A1
TLSH
T1A302B5B17CEBE23EA745778876018CD2B38E93ACC359B172B368C176260A0F585DE15D
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula0408ELL.tx_

SHA256 c5e7f757d16089cafd5a7a05a49dd8d48de047d0926e23e7ab830a390ba8fec3
MD5 58b4a7b0ff5dc5bffeac0b3595daf0e4
SHA1 d01dd56946cc76c2ded3f2a2ba5d2918313aa707
SHA512 d33961911740f3bd85c3e01c58f8804965bb0420a8fdc20b9e8cd114c7d0a57a8ee06b18ff453fa0318e5c944b7bc2a19100016a31a618ad76f342d762f410f1
SSDEEP 192:9dlM/Ph507pctXs3TFSRE9Z7t7rgmnIpT/XmAhlTluzzf+bNPUp:xMXh5EpQ2TFSRA7en/WAnbNPUp
TLSH
T13B626CDFB1552DEE8086990A44D8E03D6BC66C2CE789C6E4B239C711BEFC461C925E1F
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula0409ENU.tx_

SHA256 4491f92a9a03c8b843a7d945266daca5dffac636e47a458a117030765f39df3c
MD5 d013fa0d5b4d9e1d3288e977e256a81d
SHA1 31e4b82184c92fe84bd05628f12ed416b4ef4786
SHA512 6231b4d4de363e5df43ea391f2fdd825be05aa8a40859fb2dcc43db48a9b44accc0eff57ea6c065910c648fae80c8fd2d92e5e0df0462678df1666448f79365d
SSDEEP 192:6Rc3wy7SUI+eGltTtS80SLDe+uFpQaXkm:jwMltk2LC/Fp9V
TLSH
T13DE1A87E710B23B1099203A2664EE5D1F71F1DB4B26F13917CAA81282355B39137F699
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula040bFIN.tx_

SHA256 6d1e5fbd597178272669509631bb66114d5fed53701b09568d6d96d01a24357e
MD5 a7388c0f8d482e82478f566176a3d9a8
SHA1 e5a3e6fcc4f995b9f6b6eb5d69328a8bb59302b1
SHA512 8078bd653e43a5711a79f5c6cc5d42fd20dc92097a08a6e79d44a8ff6569556ad0830b228e2ad5dfbadba042d1cd4c8a789b4bc42af1b06ea7a764a3ae92d6e5
SSDEEP 192:2X+KRcx1XtbxQELc60LZWyVjJ7UmXIhflyVwK/Bc+go:2XfuXor/UmX/wR6
TLSH
T191E1A6E36145D0707BC082FEECA151AAE7D05E4D0E78DA11F6C7CAF812DA44636B227B
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula040cFRA.tx_

SHA256 1c4a541801f68ff467684ec5047840aaecc374f9fc9513051cf6a5ba1351c6ce
MD5 bd44fcfde0f473faac30475b7e4aaa67
SHA1 8ef7f6e3b5f8aa2ee6fc42182f716fe0ae414f6d
SHA512 4fde975fbabafd6606fc040a1ecaa29aeff2d542faf6cb057ab90837a2d0f7ac2ab44030689821ff7241a7eb8d1d2e23ac07d434a8067096a0b7f5bfc796fb92
SSDEEP 192:U0DRH4EMTJDWEijqKaMedXwDwfbUKBBc7WLo3UG7ifbXnulLjWzvWk3:5DRHBMJij+MeRfbUMq7p3UG7CbXnAWz7
TLSH
T1E302A67E95CF11D51EC612A3FB62DA67C53CC1986225E324E8CF4146138985CF3AB2ED
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula040dHEB.tx_

SHA256 06e233fac186806daf138f64c096f07aacfcb8dd45d2e1e3831c8d6e8ed059a3
MD5 2f8d1bc1e4f586788ca49ce29cde0a8f
SHA1 259194bde6ac53781c1cbef03ec2db74f7d96eaf
SHA512 1823ccf5c5be085dff3bfbe86e3c01be1f1f3f1862219c800081105fb3cee9a9ac2eb6b464c00f1a66dba8e2a236121cb7b10f80b27c0b20c2415f9b4c592758
SSDEEP 192:YmEkqEHpkTVDHYFCYpxMB3gxuWtb3zztZqutuLJp+bdqX5VSS5V7vANmqY2AIeRj:XeHYFCYpxMUusrzztttuLn+bdqX5VSSv
TLSH
T1A61213C8F2C51225523666D3DF55F625AFF28AB23CA66515CF08122CFC374E5BE234A8
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula040eHUN.tx_

SHA256 8bccef020cffb252156379728db537fd77c4f04f0e83b1c6b90c589ce58ce343
MD5 c052b3e11e03272bd9b879b6a1ac77f8
SHA1 869c84ea01ce28edb983cb0c5ae505b537a38d44
SHA512 e09a1ee8862022d4f27068c6a8d62a8e8ce8e58bd0f4ebc91ffd73defd12d63ff8d55c02caec2c1d4f429eda3e8983d84246de0bc971e0c930a1c82604166795
SSDEEP 192:jjwdzueUhroFIzkN/uT6o8cvLM2Y6SWqLLcIyBaS:36YcIzkNHgLNXqLLUH
TLSH
T1E602A83F173291989F2F0FC76420BA0C458A15BD272F2AFF78CB851920566896DC74EE
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula0410ITA.tx_

SHA256 1ba080a7e8dbd90de115a5dc232e08c2aeb0b3b29bd669f2c8b933fd9d6d9126
MD5 14a626b92ac6ba519d973720e9cbcde8
SHA1 f0746d90f87a88932afecc7e29cf8f7e7e090d66
SHA512 404813c2456080d55a940d4331e01488886b06674f703185ff7898fe4fd97ff2ea9b14bc8631b1001a4ff2b061a546192e24b8d3cd09c849516c906da9c001ae
SSDEEP 192:fz2pSni0fkUnZqnVHzNu3eVIT24hBkEShcKyc9Haq:Dni0fznWTNWeAfQpyA
TLSH
T18B02853532D323195D9A43D9A56AD184F67FA8C8F94F3574B4D9033C10CEA84F12E68D
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula0411JPN.tx_

SHA256 f928cd9ffee90b35c72e734e87a7fb3993ff22299d582c9e75dbb2b3a0518831
MD5 180066a9e8a7bd72782ff7af1015ee4a
SHA1 a266af0c77337f5b1bf123d56362bde6a77878e9
SHA512 2a2a6e57f818fc5132aefcfb86155b3fef10ab2966dc8e7d36dd488b6925458bc0d25ec51205184894bb4d24ba3200b1df0c709b3e605de4222f3e2b2caee429
SSDEEP 192:HJr6ClgR+HblPMnMSMpVFN6UpWg5mMuJakBQM6Zjz7bLltdnBWlg+NrXcPH6rP7B:WcJMJakut3XdnBhiM/6I82JID
TLSH
T16912216CE3C1A03AA913A1436C8E256864585D5FDE937776047EC4747AA4FCCE484BF8
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula0412KOR.tx_

SHA256 227718f61ea01db0ff08abb695b6fe38b52f39610273d85e0585991498365c71
MD5 06b3496f6569ac37a3878539ef8c08e9
SHA1 04390ca57cddbabed7f391e28552fb196dba5d8b
SHA512 2f13f452600b12dbcc922a3504af690470e8b03d8d1709893ef7e9004d2b6cbcd1eb7a9cf893538d311609120bd7877236d8a833a6dd24890cedbe33a2cff3de
SSDEEP 192:gnzdr9T5SWWDwrPTRkMzE28sl1kSg3Rm1NvZUcEbv9T:gnzdr9T5SWWDmPTeyE28slWdRm1NvklT
TLSH
T1B4022FF43AA371C65CD6D9C1EDC1B6A1C24244B2EFD705B4BC44CE18A898393498FA7D
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula0413NLD.tx_

SHA256 58dfe8966320a68bcbe0512c5997e1b7c6fadd82aa2992704600f4d97a4f0df4
MD5 b61ea07e5eb3dfdfc914db7a2e42f442
SHA1 84c70ce3604c676963a3179251f0aecbee766f6d
SHA512 18d41078ac2a6cf473f3b9dc11ec5a3b09aeaf79f49bf64bab0d734d25b8f7aeb3333a3dfecdc9f3bb2397eaa6282546771b07d73617213a7813a46d60b462c0
SSDEEP 192:t/beFw1GCnMOCRjL17JbHf8K0T9/eBx+Hra:p6U7C5p7Jrwa
TLSH
T15F02831234DF2B7C9C459B89B40915FBEB5BD37CC678B2B8A868C3386502E91413D9DA
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula0414NOR.tx_

SHA256 d6c8fe993c6eb11418efb1249eaea617f410f0600c4b9d5197aa2a2a551b4e9c
MD5 817082f389a7dd965ac02634a25d4411
SHA1 2b0c3fb65a0cdb1af8cea301db857553ff9b0788
SHA512 9178ffb736b185e0717e5d07a121ef97f2454e40a4f61cb91694d61a5587afee406c711ee9c065a8cc2782245ca92975fcbc4d4e50df1a20791f19711425a7e2
SSDEEP 192:xjNjOvXpEIxbREiLJ/YJ95O4XBocPEofOv4B4tmJLfF4a48d8IGpYwnzcJ:bjOvGIxb3LJ/mC4acsSOv4B4tofF4a4S
TLSH
T10EF18303F05AB3356F2A8B56F80C5E63874E9A1CD50C4BA65E9CD1BF04C7FE451AE286
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula0415PLK.tx_

SHA256 5e0d021044a41346b04d1c95b955f2126b9329d61bef0e1e6874b7dc88582b71
MD5 dd4e352e3eb08358618b044187c2ab27
SHA1 d10a9d13abfdcaac8e48c2756fa781799e61e5f0
SHA512 7f2616bc6f1ac0a215347bffae40e2d879ed0ce719587360c6c928509e809ba3b268e7fc8861da6f16e2eccad01da7f878c2ebc8945f1c45e15918e0e6151182
SSDEEP 192:/CzZGf464HRG86jGmKJsptCAQEkvmEfeIx1:qJ6E6jGm9zCAQwri
TLSH
T19C02B65AE4D3928FCB314588D1E37F3404EC88C4A51A8B6B3D5FA8398121A55D7AE3BC
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula0416PTB.tx_

SHA256 6ac342d3e76d7d5e212af10a5d4876650b3e5cfd79db11a236c53b4e559c76b8
MD5 c6c45897ed07be636c4b3d85093afc87
SHA1 ac57482e7a784adafaf0ccfa4ddae5a9474481fa
SHA512 1a4ea8ebf4f733e4cb812b3537b8d1f8e5974f2facfb9f8821c803e7a30a8e399c0c705622a3645a866769b811c00c1309a4663da5791fb5a2400f20712e1b1d
SSDEEP 192:QpA/TRNPv9hgXK/B/NlJZfw08TJ3GMCcg:QpA7RNPDBVNlJZonGMCcg
TLSH
T1C8F1536435C213780F1143912A0BCA02B5495BD8BE06D6EAFAB64F9BB3DEC80C777A54
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula0419RUS.tx_

SHA256 832a483adf079fc4264ffc0f974718fbb6808bc75bac80749129d4aeeae5f87d
MD5 4e93f9db913b99d5e886123ddecbefdb
SHA1 773add34b05abdd5bab9137223adb8a82a4f0305
SHA512 290f09cedad59e07900e9df69b8c03e78dd7fbc3f6a2a744ec7fd05ffccad956218d27d918188f1ab2a4260754e2ff3048ad85b389d32337f4a84406f41fe3d8
SSDEEP 384:/mopke50PJYL1QYbIm7GZgHh5fvuSfRvRVAD53PJX:/mKJ50PJYL1QRwPH3fvuCgD5xX
TLSH
T110826A619A9A548E1102F41BD808BD0D7DEB91FF3FA7936325942D7F31F1038CA7962A
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula041dSVE.tx_

SHA256 f2d079c600e98aea971df858c8e76019da5ac968b888bc9ed35908c738de39c2
MD5 a5903bf8eb9d0db5655ef6493411f30d
SHA1 e4ff018d67929255767a50e0c22f22b8af1715b9
SHA512 db5271a04faffafcf624bede2e83d9a6a7cb37bf84502ba8895585de0e4fb483b8c2b2c1f8a96decb6580e822c746b04381ca6a74f2393003c9b62c5af23c706
SSDEEP 192:ZRaps+rtWnS+GyAbIzVxJymR9+Q16k/vN5vEyPJnCl:ZRa//+6bIzzJymb+JkN59E
TLSH
T177F19403922218B43F6A569BC084466643EDE16CE2F95851BC984EFF4887ED855FE70F
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula041fTRK.tx_

SHA256 0f220e84847993351652a8f128113ae331eaca39a5d6a3f901870294a9ad6c22
MD5 6566288c265899d01a2da2ef876cc53c
SHA1 5dbf97a0680237a1612ec6f7994f4aad8c952043
SHA512 90efe754b5526c7f3820dab64ca4157f067ddc89f027178f5a6526ee2a56f9bc64b3529cdb4f194c7da8193f47c808b8a697faa43be299500f6db16cd0816f95
SSDEEP 192:AsGt4ZudFxoC+mDhIdhZux4fvh/XU3n3foOx5y+WJqevdAOzqw2llaPrQ:OtjJx+aIdhZuyfO3PoQ0/qei2zGwPrQ
TLSH
T1D00262811ADBAD3D4F7523CF65920196F8AF0BD753319C9AAA15BA2A3B047474393E0C
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula0804CHS.tx_

SHA256 34aa86d9cb452d81139d51eee839ab60f3b407550f04dd88849402aded0dea2f
MD5 c514acc9300699c27a4ad822f81a372d
SHA1 8b9c4dee75b6c0f2841d5e4da426b9fa6e44004c
SHA512 7be70333c08d2e2e901e52f71eec90f0a490d86029a1a49226303c4b2c68041d2c0872612b9b8d2573d9fff04ccacd05571d58d7c9e8342348fe9aecbdd013d6
SSDEEP 96:agDP7cBQw9eejz/szVBydfXsCvb6s9tZjQt8qkF6loVGpiGrN9B3QDoryT952qR6:63LdfX8KtZjQtkBV2iGrNgor0952qRn6
TLSH
T16FD1D83F903B28DB064B37A60B089735B4D81F499176ACB0BE1591AB7B04E4E131EF5D
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula0816PTG.tx_

SHA256 d4d1920ef41aa0987f784f6a2b6acb657025dfb62c1cc90292494b214647d3f2
MD5 df6182b835c111ecc4066b38dc01b2fb
SHA1 04d542d24ac8e7c8faacc5cf23ffb61c2523dea3
SHA512 68e2663fae942707b3d0303531e77a1329f548c8782de11427b1429ca2533e3b4cc0b59f830fbc77b3054167a64d37f2c114a48e12df207579007f4a43e6728a
SSDEEP 192:YIxaZ6Tv4Ud8Cn5+CE5NLwPeXYIKH9Y7F5zQ8hzlPxTGz:YIYCnQZLXYozRYz
TLSH
T1AB02733CB5C652340B1113832B07CE82B58967ECAB16E5E8F6BA4B4673C9DC4C67EE54
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/Eula0c0aESP.tx_

SHA256 b914b42132fa300a4b3b018724bcf239e3a3e558baa9e7ff537fa9ae2173d020
MD5 11f9b1b160752970f97f1e2de0435e95
SHA1 d0e8a5cdd432a66d691fb84720c7f408106edbf3
SHA512 700f1fb056fc5abb458537c76592ead5b16b353affd2ec328a78b37adf477b416fc5fe6246f15c9e8465dfada17cd808fdded0eb4e273febc09081f40ab274f1
SSDEEP 192:/tsO+DHsAgUVHqPru6WR003dQ5ol/RbTRm:V8DMAgUVH+qTR04ldRbTRm
TLSH
T1F8F1852574DD13635D6263C1AA43C59BF8A897D4F50EC6E0F0A9832925CD2CCC2EBED9
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/InstNT.exe

IMPHASH efc6c2f1bc80a8171d2f23fcf2392b74
SHA256 ad73c1f27591eb9514ef0fd241efb7cd4e751d35568ea40e62ce75cbc8c23bd6
MD5 d00ca58c99cfd499aff105f041c669c7
SHA1 51a27928a184a502594f1e513c67ef0d28f0316f
SHA512 a5374a56f5453edccf34f33e08334b5b3b66df0be279e72b5343a8f9c390528bfbac46765bf28d95dc7c8e87bafcdc0ed494ec30b3754aa645e4d21a05625434
SSDEEP 3072:SbuyPNyl8bbCeHV3/WUxVWOZPFf+6Yvt7SL2h74eTid:SDNzbPhZ9xMn6l
TLSH
T1A7E32882B2D184F5D0B7D238CCA266519B71BC155735A3CF3360B6592E37BE8AE39321
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

08:2d:05:b2:11:57:c7:3d:ac:cd:18:02:a0:6b:2c:13:f7:9e:ba:5a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

27296

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

setupapi

SetupOpenInfFileA SetupDiSetDeviceRegistryPropertyA SetupDiGetDeviceRegistryPropertyA SetupDiOpenDevRegKey SetupDiDestroyDeviceInfoList SetupDiCallClassInstaller SetupGetInfInformationA SetupQueryInfVersionInformationA SetupCopyOEMInfA SetupDiClassGuidsFromNameA SetupInstallFromInfSectionA SetupDiGetClassDevsA SetupDiEnumDeviceInfo

newdev

UpdateDriverForPlugAndPlayDevicesA

shlwapi

SHDeleteEmptyKeyA

kernel32

GetProcAddress LoadLibraryA FreeLibrary GetWindowsDirectoryA LocalFree FormatMessageA GetLastError CloseHandle GetCurrentProcess GetModuleFileNameA GetCurrentDirectoryA CreateProcessA FindNextFileA FindFirstFileA FindClose RemoveDirectoryA SetFileAttributesA GetVersionExA EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection ExpandEnvironmentStringsA GetStringTypeW GetStringTypeA HeapReAlloc FlushFileBuffers SetEndOfFile ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW Sleep GetProcessHeap GetModuleHandleA ExitProcess RtlLookupFunctionEntry RtlUnwindEx HeapFree DeleteFileA GetFileAttributesA GetCommandLineA HeapAlloc GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlCaptureContext RtlVirtualUnwind SetHandleCount GetStdHandle GetFileType FlsGetValue FlsSetValue TlsFree FlsFree SetLastError GetCurrentThreadId FlsAlloc WriteFile RaiseException RtlPcToFileHeader GetCPInfo GetACP GetOEMCP HeapSetInformation HeapCreate LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CreateFileA SetFilePointer GetConsoleCP GetConsoleMode HeapSize GetLocaleInfoA

user32

WaitForInputIdle

advapi32

RegOpenKeyExA RegQueryValueExA RegDeleteValueA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges PrivilegeCheck RegCreateKeyExA RegSetValueExA RegCloseKey RegCreateKeyA

06_Touchpad/WinWDF/x64/SynCOM.dll

IMPHASH 87fb7be802655fc7d084a3996f1d0a42
SHA256 fbe221305f101b6a39b333367dc1b55640c76dba12ccf0518bb3c08f6d4280a4
MD5 6d7c4b655b389bc932d64f6c0776f9e7
SHA1 37145583a528fd48b8e9bc252029a1d803b08ee5
SHA512 af83eb3a32b83c3307f5360fea4c197eb0dd740bf7aec1a5e6bb37189d11e37fdc3c46e16ecb30d6831216bc59bc46868d2c5330eeb77996b70c8d1bb68178c4
SSDEEP 12288:qZxvsqPyxyUAIAALin3aCvLoSsTvCaX7nJZ4h9LG5Tb4y:qjvsqPQVA8Lin3aCvLoFTvCaXTJZF5TB
TLSH
T10F846C82F7A548F4D07FE139C9D3478AE6B1340457A16BCB0754879A2E337E1AA3E325
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

97:cd:fc:81:c2:0b:04:f2:bf:4a:73:5a:3f:40:ad:8f:47:47:73:8f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

96112

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

f:\checkpoints\TPDrv\Do_Not_Release_v14_0_3\SynCom\SynCom\x64\ReleaseA\SynCom.pdb

kernel32

FreeLibrary SizeofResource LoadResource FindResourceA LoadLibraryExA GetModuleHandleA UnmapViewOfFile OpenFileMappingA CreateThread SetThreadPriority CreateEventA SetLastError LocalAlloc GetTickCount GetProcAddress LoadLibraryA GetSystemDirectoryA TerminateThread ResetEvent WaitForSingleObjectEx OpenEventA SetEnvironmentVariableA IsDBCSLeadByte GetCurrentProcessId GetTimeZoneInformation IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetTimeFormatA GetDateFormatA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetLocaleInfoW FatalAppExitA SetConsoleCtrlHandler IsValidCodePage GetOEMCP GetCPInfo GetSystemTimeAsFileTime QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetModuleFileNameA DisableThreadLibraryCalls lstrcmpiA lstrlenA InitializeCriticalSection __C_specific_handler RaiseException lstrlenW WideCharToMultiByte MultiByteToWideChar SetEvent OpenMutexA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection CompareStringW LocalFree Beep GetLastError CreateFileMappingA MapViewOfFile GetVersionExA CreateFileA Sleep DeviceIoControl WaitForSingleObject ReleaseMutex CloseHandle CreateMutexA CompareStringA GetFileType SetHandleCount HeapSize HeapDestroy HeapCreate HeapSetInformation ExitProcess RtlVirtualUnwind IsDebuggerPresent GetCurrentProcess TerminateProcess FlsAlloc GetCurrentThread TlsSetValue FlsFree GetACP GetLocaleInfoA GetThreadLocale RtlLookupFunctionEntry RtlUnwindEx HeapAlloc HeapFree RtlPcToFileHeader VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc GetCurrentThreadId FlsSetValue GetCommandLineA GetProcessHeap UnhandledExceptionFilter SetUnhandledExceptionFilter RtlCaptureContext WriteFile GetStdHandle FlsGetValue TlsAlloc TlsFree

user32

PostQuitMessage EndPaint BeginPaint DefWindowProcA ReleaseDC GetDC CreateWindowExA PeekMessageA wsprintfA GetForegroundWindow RegisterClassA DispatchMessageA GetMessageA KillTimer SetTimer GetWindowLongPtrA SetWindowLongPtrA DestroyWindow CharNextA PostMessageA SendMessageA FindWindowA LoadIconA LoadCursorA RegisterClassExA UnregisterClassA

gdi32

SetDIBits GetDIBits CreateDIBSection GetDeviceCaps GetStockObject CreateCompatibleDC CreateCompatibleBitmap SelectObject SetPixel StretchBlt DeleteObject DeleteDC GetPixel GetObjectA GetBitmapBits BitBlt

advapi32

RegCloseKey RegEnumKeyExA RegQueryInfoKeyA RegSetValueExA RegOpenKeyExA RegCreateKeyExA RegDeleteValueA RegDeleteKeyA InitializeSecurityDescriptor SetSecurityDescriptorDacl RegOpenKeyA RegQueryValueExA

ole32

CoTaskMemRealloc CoInitialize CoTaskMemFree StringFromGUID2 CoTaskMemAlloc CoCreateInstance

oleaut32

VarUI4FromStr RegisterTypeLi UnRegisterTypeLi LoadTypeLi SysAllocString SysStringLen SysFreeString

06_Touchpad/WinWDF/x64/SynCOM32.dll

IMPHASH 8a6e3a92dab968b71db0c19cf79616c3
SHA256 0177c6d434c2f765849352b35cd2ea5c4f51b0680609d92dc0e62326164ef678
MD5 04162a531a506b8dec1e388ceb60547f
SHA1 65457baa56ca3bd7b1557f7cf869677697ba28f1
SHA512 02ddefb31f77067eff1d98a31f83261d7178c9c267e3fdfbb94f923e7c4fc3d25bad12d403febbc5663ded35c2fc5524fd100c7379835eb27725a394d3d6892a
SSDEEP 3072:bUAxuHZ2vv8H4mD1VJDmNRHMtDyiBWGmK5:baHZ3uHG5IC5
TLSH
T1C4F38D1236C6C073E14E013E8943E3925BFF7C625EF6564B7FA8168D2E742958B39392
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

3e:26:5f:f3:60:5e:f4:2a:98:fd:19:8f:7d:f6:9c:6c:12:cc:f5:44

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

62953

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

f:\checkpoints\TPDrv\Do_Not_Release_v14_0_3\SynCom\SynCom\Win32\ReleaseA\SynCom.pdb

kernel32

IsDBCSLeadByte FreeLibrary SizeofResource LoadResource FindResourceA LoadLibraryExA GetModuleHandleA UnmapViewOfFile OpenFileMappingA CreateThread SetThreadPriority CreateEventA SetLastError LocalAlloc GetTickCount GetProcAddress LoadLibraryA GetSystemDirectoryA TerminateThread WaitForSingleObjectEx GetModuleFileNameA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA IsValidCodePage GetOEMCP GetCPInfo GetSystemTimeAsFileTime QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType DisableThreadLibraryCalls lstrcmpiA lstrlenA InterlockedDecrement InterlockedIncrement InitializeCriticalSection RaiseException lstrlenW WideCharToMultiByte MultiByteToWideChar SetEvent OpenMutexA LeaveCriticalSection EnterCriticalSection DeleteCriticalSection LocalFree GetCurrentProcessId GetLastError CreateFileMappingA MapViewOfFile GetVersionExA CreateFileA Sleep DeviceIoControl WaitForSingleObject ReleaseMutex CloseHandle CreateMutexA SetHandleCount HeapSize ExitProcess HeapCreate HeapDestroy VirtualFree IsDebuggerPresent GetCurrentProcess TerminateProcess TlsFree TlsSetValue TlsAlloc TlsGetValue InterlockedExchange GetACP GetLocaleInfoA GetThreadLocale RtlUnwind HeapAlloc HeapFree VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc GetCurrentThreadId GetCommandLineA GetProcessHeap UnhandledExceptionFilter SetUnhandledExceptionFilter WriteFile GetStdHandle

user32

DefWindowProcA CreateWindowExA PeekMessageA wsprintfA GetForegroundWindow RegisterClassA GetMessageA DispatchMessageA KillTimer SetTimer GetWindowLongA SetWindowLongA DestroyWindow CharNextA PostMessageA SendMessageA FindWindowA UnregisterClassA

gdi32

BitBlt SetDIBits CreateDIBSection GetDeviceCaps CreateCompatibleDC CreateCompatibleBitmap SelectObject DeleteObject DeleteDC GetPixel GetObjectA GetBitmapBits GetDIBits

advapi32

RegEnumKeyExA RegQueryInfoKeyA RegSetValueExA RegOpenKeyExA RegCreateKeyExA RegDeleteValueA RegDeleteKeyA InitializeSecurityDescriptor SetSecurityDescriptorDacl RegCloseKey

ole32

CoTaskMemRealloc CoInitialize CoTaskMemFree StringFromGUID2 CoTaskMemAlloc CoCreateInstance

oleaut32

VarUI4FromStr RegisterTypeLi UnRegisterTypeLi LoadTypeLi SysAllocString SysStringLen SysFreeString

06_Touchpad/WinWDF/x64/SynChiralRotate.mpg

SHA256 48469d43a7438fad4dfb31d70413d29d6a9f89616568501ab9d615fec1a36cfb
MD5 cc4d2c6dc4e4cd185a76634bec0ea6fd
SHA1 48c075b35da99465de31e86e759d50c114da0517
SHA512 7f5f3693c846004ae13b423d9d29246d82959775c24683200539178cac6a1e8a8f810999620fb5b9b4d81c159b3a92e13cd206b6b06347e7e8101b9b894668d1
SSDEEP 6144:1gU2dFS7Jwv6mNRYmLFqeWTCaTCVBPrI+wtAsvxrDLmAGjOb32tcZmQYtH5r6Xus:1gU2dUu6yGmp7UCk+cfvxnLjBbmcUQY+
TLSH
T1DA8412285B8FB8B5E34DEC0A441C12236173BA7B1C81BAF7777BDB4CA49D0356A42859
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/SynChiralVHScroll.mpg

SHA256 b06b20b2887238b7bdc677f9935e4aaa70295f33c7ad79b80d8ba8079dfaa8b0
MD5 ea81c8b6cbb5fc85b3e2702ab1a3a979
SHA1 f84374a54ac9b57fd20ef8f8b626c713adc4da41
SHA512 0243e72411a9670628cca7ce70c243bd5ed58eee59a6d1c3f23c48a19d1fb911b6f10af6db09762e5d714b21e2220aa667f2ef0723afae5af603baee36f48874
SSDEEP 24576:nsO9ZSyslDPhGHJMDx7PZVFAfMVMHNcy9dJOrVOGz0iHZGpI:nsOSy8S2jRkcy9bOYGdHZiI
TLSH
T1A17523162F1F08A4F27F5ED90C466092C565FEA76F847892BB79C39C70B35B62E50883
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/SynCntxt.rtf

SHA256 6c01123252306b55fcc8806104bb0654c7f51e99ba7760da1f8dab8a10643ec4
MD5 d38b1b91e69ac2367372357d12d8bdf0
SHA1 bdd60e4fc16904a521e2158b2c85e9bb3f9457d8
SHA512 299a206771924c856a45650df6e3f88cd335e504f10493af356ef125069a183cb02e6474f874328b2036174fa639c920a997676d4bb643b5684d2a52c6730dd6
SSDEEP 98304:rej9ASn9sWR1J2TeM2nyTGyflQV2g2dK0iKae4lRwlHpAm1hlHTF3TSI3ON:vTeN
TLSH
T12D76DC4A6C707A5D0A8A017E970B51D2BBED492ECEF5A012FC5F6207156E4BDE2E34C3
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/SynCtrl.dll

IMPHASH e6ae5fd9c65e5621889e3041fd24dc3d
SHA256 d84da697fd3898b593c02a2fdfaed65189b44d49183d1b053fb8d41189b06922
MD5 107d20f4a3aa7c1aadb56ce010356420
SHA1 b1f22a40ac97e48494129897308c638f410f5e34
SHA512 5b71dee8f27426398b161af177058c5645897cd88eb27d36c17dbac283708ab006d29149c0094937afad058e5e03e4b5e2859685446e25dc2a37a72f0c508038
SSDEEP 6144:m44/EpCkRlEcSAzycRpKMU0Kbw4f/sKiUNqva:m43p/RmOPUjJNqC
TLSH
T1D8442942B76082B2C56FC139C8974795FF7274526F6267CB22114B3D2E733E1AE3A612
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

12:26:4e:e8:f3:6e:01:f8:30:9e:9b:00:49:96:05:6a:6e:fc:f2:27

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

105984

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

GlobalLock GlobalAlloc GetCurrentThreadId SetLastError LoadLibraryA IsValidCodePage GetOEMCP GetCPInfo GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GlobalUnlock FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount Sleep HeapSize GetStdHandle WriteFile ExitProcess FlsAlloc TlsSetValue FlsFree TlsFree FlsGetValue RtlCaptureContext RtlVirtualUnwind MulDiv GetCurrentProcess FlushInstructionCache GetModuleHandleA LoadLibraryExA FindResourceA LoadResource SizeofResource FreeLibrary IsDBCSLeadByte GetModuleFileNameA DisableThreadLibraryCalls lstrcmpiA lstrlenA DeleteCriticalSection GetLastError InitializeCriticalSection __C_specific_handler LeaveCriticalSection EnterCriticalSection RaiseException lstrlenW WideCharToMultiByte GetEnvironmentStrings MultiByteToWideChar LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess HeapDestroy HeapCreate HeapSetInformation GetCommandLineA FlsSetValue HeapReAlloc VirtualQuery GetSystemInfo GetProcAddress VirtualProtect RtlUnwindEx RtlLookupFunctionEntry RtlPcToFileHeader InterlockedPopEntrySList VirtualAlloc VirtualFree GetProcessHeap HeapAlloc GetACP GetLocaleInfoA GetThreadLocale GetVersionExA InterlockedPushEntrySList HeapFree

user32

CreateWindowExA RegisterClassExA InvalidateRect IsWindow UnregisterClassA GetWindowLongPtrA SetWindowLongPtrA CallWindowProcA BeginPaint GetClientRect EndPaint IntersectRect EqualRect OffsetRect SetWindowRgn SetWindowPos GetDC ReleaseDC LoadCursorA GetClassInfoExA UnionRect PtInRect DefWindowProcA DestroyWindow CharNextA GetParent GetFocus IsChild SetFocus ShowWindow GetKeyState

gdi32

StretchBlt DeleteDC Rectangle CreateMetaFileA SaveDC SetWindowOrgEx SetWindowExtEx RestoreDC CloseMetaFile DeleteMetaFile CreateRectRgnIndirect SetTextAlign TextOutA GetDeviceCaps CreateCompatibleDC

advapi32

RegQueryInfoKeyA RegSetValueExA RegOpenKeyExA RegCreateKeyExA RegCloseKey RegDeleteValueA RegDeleteKeyA RegEnumKeyExA

ole32

OleSaveToStream CreateOleAdviseHolder CreateDataAdviseHolder OleRegGetMiscStatus OleRegGetUserType OleRegEnumVerbs OleLoadFromStream StringFromGUID2 CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc CoCreateInstance WriteClassStm

oleaut32

SafeArrayGetVartype SafeArrayAccessData SafeArrayGetLBound SafeArrayGetUBound SafeArrayUnaccessData OleCreatePropertyFrame LoadRegTypeLi VariantChangeType SysStringByteLen SysAllocStringByteLen VarUI4FromStr RegisterTypeLi UnRegisterTypeLi LoadTypeLi SysAllocString SysStringLen SysAllocStringLen VariantClear VariantInit SysFreeString

06_Touchpad/WinWDF/x64/SynCtrl32.dll

IMPHASH 7d8ecf9d4c86d73f70af08e8860c67a5
SHA256 947bea44d51f54c5e8c302b44d10a51c461dbf4493036db890efb3c41b70feab
MD5 65ac4f6d5a0f1cdb8d4ef460067876dc
SHA1 6f3f712e0fd8665d152afdb65ba443138f69723e
SHA512 307484d50fa7d2b744092e50c29d0b83c725fb215668ddd26540d284ce21f46c2932adc7b7239946322b7ede16a97dafc9409f24049a5fcda6de08a16dd06bf8
SSDEEP 3072:lbzw2u6pbmXLVRsMFoVRte9UIywfm5Rcv01ZtWrONKqTUzudXVIvB7hVTz:NzcXLVRsMFoV23ywjCCrsKiU2qvJ
TLSH
T129145B4277C3C473D81E023A5857D3AA6FFBA912BFE262436F54070E1E72385AF1561A
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

65:63:ef:8f:1b:5a:2b:71:2f:fa:91:0f:dc:1e:22:00:11:28:12:96

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

73232

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GlobalUnlock GlobalLock GlobalAlloc GetCurrentThreadId SetLastError IsValidCodePage GetOEMCP GetCPInfo GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA MulDiv GetFileType SetHandleCount Sleep HeapSize GetStdHandle WriteFile ExitProcess TlsFree TlsSetValue TlsAlloc TlsGetValue IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess HeapCreate GetCurrentProcess FlushInstructionCache GetModuleHandleA LoadLibraryExA FindResourceA LoadResource SizeofResource FreeLibrary IsDBCSLeadByte GetModuleFileNameA InterlockedDecrement InterlockedIncrement DisableThreadLibraryCalls lstrcmpiA GetLastError lstrlenA DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection RaiseException lstrlenW WideCharToMultiByte GetStartupInfoA MultiByteToWideChar LCMapStringW LCMapStringA GetStringTypeW HeapDestroy GetStringTypeA GetCommandLineA HeapReAlloc VirtualQuery GetSystemInfo VirtualProtect RtlUnwind VirtualAlloc VirtualFree IsProcessorFeaturePresent LoadLibraryA GetProcAddress HeapAlloc GetProcessHeap HeapFree InterlockedCompareExchange GetVersionExA GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange

user32

CreateWindowExA RegisterClassExA InvalidateRect IsWindow UnregisterClassA CallWindowProcA BeginPaint GetClientRect EndPaint IntersectRect EqualRect OffsetRect SetWindowRgn SetWindowPos GetDC ReleaseDC LoadCursorA GetClassInfoExA GetWindowLongA SetWindowLongA UnionRect PtInRect DefWindowProcA DestroyWindow CharNextA GetParent GetFocus IsChild SetFocus ShowWindow GetKeyState

gdi32

StretchBlt DeleteDC Rectangle CreateMetaFileA SaveDC SetWindowOrgEx SetWindowExtEx RestoreDC CloseMetaFile DeleteMetaFile CreateRectRgnIndirect SetTextAlign TextOutA GetDeviceCaps CreateCompatibleDC

advapi32

RegQueryInfoKeyA RegSetValueExA RegOpenKeyExA RegCreateKeyExA RegCloseKey RegDeleteValueA RegDeleteKeyA RegEnumKeyExA

ole32

OleSaveToStream WriteClassStm CreateOleAdviseHolder CreateDataAdviseHolder OleRegGetMiscStatus OleRegEnumVerbs OleLoadFromStream StringFromGUID2 CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc CoCreateInstance OleRegGetUserType

oleaut32

SafeArrayGetVartype SafeArrayAccessData SafeArrayGetLBound SafeArrayGetUBound SafeArrayUnaccessData OleCreatePropertyFrame LoadRegTypeLi VariantChangeType SysStringByteLen SysAllocStringByteLen VarUI4FromStr RegisterTypeLi UnRegisterTypeLi LoadTypeLi SysAllocString SysStringLen SysAllocStringLen VariantClear VariantInit SysFreeString

06_Touchpad/WinWDF/x64/SynFlick.mpg

SHA256 a19a395fe655ba569e4c924cafbb6a2fc6baa1f68ce6a3d3f88a2c5f9d7bb886
MD5 f797da13b9b5919c130f8d150fb1fcde
SHA1 f4acb7ee429a093ac3d13c6eaa9445ae1d9c9ef9
SHA512 1b1c8541746c578b02cb4b3b35720514bcc264f13951c5b92e5c45ee25f26090dc9b8420e7ea9930390cbf096c3c932a74a4c608be5e75cbcc5898498e6d577b
SSDEEP 12288:IKoWpz9E25ibazdPb8zeKtOiaMgPrzMtzqVmbZtTubf/29wOhuKYGAvDI:5jRldZfrzMkwb7Ic
TLSH
T122F4121B1F9B4440E14C5C57848C02318632FFBB768A59DAF357E76DB5608AEBE1282F
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/SynISDLL.dll

IMPHASH 88f1835ebf14ca94cff25ee1b3d3acde
SHA256 f250080070de75cdf6a7d70b218ea820594b750a67282eab262ae6e1e4d30b1b
MD5 6a322ca5cae498d014adc93302300774
SHA1 ad9742df6b7a8175a1d8a31a0c262aab253bb166
SHA512 26faff948a0e0c04a26912861db898d514707c983647d29dc2a046ce68cb461d0fdefeedb1e93220cde118cf3178f805e3a830d42b6b8fcf8e91d1876b0fb517
SSDEEP 3072:xTwXb6awwy1OA4QmVWp6yby/Btfk/1A5pJdW/OGFE2:xUXb6awwqhp2/TktA5pd2
TLSH
T1E314A20173F98236F5F36B75997946590A3BBDA2AF78D08F2390094D1D31A90EA78723
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

23:fa:99:54:74:ac:b9:e0:26:17:bf:c7:1f:63:f0:b7:8d:62:d6:0a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

37998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

shlwapi

SHDeleteKeyA SHDeleteEmptyKeyA

kernel32

GetSystemInfo InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection CreateFileA CloseHandle DeviceIoControl SetLastError LocalFree LocalAlloc GetTickCount GetSystemDirectoryA CreateEventA SetThreadPriority CreateThread TerminateThread WaitForSingleObject SetEvent WaitForSingleObjectEx InterlockedDecrement InterlockedIncrement OpenEventA ResetEvent FormatMessageW LoadLibraryW MoveFileExW RemoveDirectoryW SetFileAttributesW ExpandEnvironmentStringsA CreateProcessW GetCurrentProcess MultiByteToWideChar SetEndOfFile WriteConsoleW GetConsoleOutputCP WriteConsoleA RaiseException SetFilePointer ReadFile FlushFileBuffers GetConsoleMode GetConsoleCP WriteFile SetStdHandle GetVersionExA SetFileAttributesA DeleteFileA FindFirstFileA GetLastError FindNextFileA FindClose LoadLibraryA GetProcAddress FreeLibrary GetModuleFileNameW GetLocaleInfoA HeapFree RtlUnwind GetCurrentThreadId GetCommandLineA HeapAlloc GetProcessHeap TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo GetACP GetOEMCP GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree SetHandleCount GetStdHandle GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc Sleep HeapSize ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

LoadStringA LoadStringW MessageBoxW wsprintfA DefWindowProcA DestroyWindow RegisterClassA CreateWindowExA PeekMessageA PostMessageA

advapi32

RegOpenKeyExW RegQueryValueExW RegOpenKeyExA RegQueryValueExA RegCloseKey RegDeleteValueA RegSetValueExA RegCreateKeyA RegDeleteKeyA

06_Touchpad/WinWDF/x64/SynLinearVHScroll.mpg

SHA256 03338165be818588de6a4f229402bbad855df4a43bfb1e078ed06aa1405efd52
MD5 bf6677d9426988e644a7eee3e11e6d92
SHA1 2a5ddd0a9c6d2201f4ffb3a80c712be28ed3bb3e
SHA512 42ad1f80f310f228b69fe1835003ad6033e192decf2693e761a431a204e9bf4eb966c6a5c5ec79f1e9742e181677d11485885ef57f83859d5c9e8d69ffc6ca98
SSDEEP 24576:1lL4yczplJ288Odz94nXk/FSYdrR6unT/:3LHSiU7
TLSH
T1511512102F0B7664F18DAF51545C4233A432FE77FDD6B492F285EA98311B1A37EA0A63
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/SynLogo.ico

SHA256 d6d7b67f15add47ea88f06681c6027ea0a068e856f698fc2c141492f89846647
MD5 c19245ad9b745ad11fde20cd6f149847
SHA1 d9b128e7b1df48750af5df2facca6930aa1a155a
SHA512 8b1427fe68812de95f63b91661c09d7e8be137f2dccb4a0cf3db50022ea3b75ad54f073a59e23d35f5bf55ee9ab145d77f956e617b207a190b33c5105af0f95e
SSDEEP 192:AC2ZIxbMW3kvGmyeM/WAi7mteyr+KKDC+MN2:ADiFMomyeM/Wh7mteyrHKDj
TLSH
T1E23200B2D2D9C966C6D44138DC22B978BF107C0BB930F31236A55EEF5EEE6E99094341
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/SynMomentum.mpg

SHA256 c4ffbc1d6dd0cfc0a922ab347bb2f1e79a7caab7c6b6d42c4e801498d4e563dd
MD5 e11eefef2e7b86fae230639404c78440
SHA1 f5c5eed07fb0c1d3a85e598af97ba07944e9360f
SHA512 103b3542b100d457ad7da185b82d91397b1bf89b216ae4083e9eabe512209bb90f290894a1d64160a6d0800f8cc0018ca8fb319eb9f1769bce5368d525217157
SSDEEP 3072:L7JwLyrD0LgNoMDK3tmghVdoTN92kd1MwmV+lPw1pc2olFwndg/U6XYf14X:3qEZNNGmGoL3dvmCPAcncXo
TLSH
T1F234F159173F7301F06DAA14118882679577FF3AAEC1A11BB57BD63C30CA47AEF88891
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/SynMood.exe

IMPHASH b26fa37a73a8990fed7c3dd42c9c2493
SHA256 45477c6652836b1ce58871af06ba6450a74f096b90db5a59c0a716f301065be7
MD5 d728c200948e451698102ae570868383
SHA1 f8fadcb0ae26c690e897192a37bd81a57f7a172b
SHA512 57c65acc4ae08190acc23c9bad92febdd93e93da54010f13d3a685d84d1348f6c4a790885e7dc1bf2e7731b6647c58ddd2a419bfa12f00f2523de12ed660e68e
SSDEEP 3072:ohbkV8x4oOPJQhYFLT4u4b4s2wSabhEu3NStF8AG5wr73VIUTtvfoKsT+q:ohYymxQhYFou4btbm286AboKM
TLSH
T1EE347D1276D2C073E5B7067109F683B867B6FC55AF35928F6B903B0D2E306D24A35762
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

e5:5b:95:a8:d5:61:d0:2c:7d:2d:52:76:dd:e2:a4:04:c9:a0:8e:73

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

71033

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

f:\checkpoints\TPDrv\Do_Not_Release_v14_0_3\Access\SynMood\Win32\Release\SynMood.pdb

kernel32

SetErrorMode HeapFree HeapAlloc GetProcessHeap GetStartupInfoW RtlUnwind RaiseException HeapReAlloc HeapSize GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate QueryPerformanceCounter GetSystemTimeAsFileTime TerminateProcess SetUnhandledExceptionFilter IsDebuggerPresent Sleep VirtualAlloc GetCPInfo GetACP GetOEMCP GetLocaleInfoA GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA GetCurrentProcess FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale GlobalFlags WritePrivateProfileStringW TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue GlobalFindAtomW CompareStringW LoadLibraryA GetVersionExA GetModuleHandleA FormatMessageW MulDiv FreeResource GlobalAddAtomW GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetVersion EnumResourceLanguagesW GetLocaleInfoW MultiByteToWideChar InterlockedExchange GlobalLock lstrcmpW GlobalAlloc GlobalDeleteAtom GetModuleHandleW lstrlenW WideCharToMultiByte GetCurrentProcessId GetModuleFileNameW GetLastError CreateThread SetThreadPriority WaitForSingleObjectEx DeleteCriticalSection InterlockedIncrement InterlockedDecrement SetEvent WaitForSingleObject TerminateThread CreateEventW GetSystemDirectoryW LoadLibraryW GetProcAddress FreeLibrary GetTickCount LocalAlloc LocalFree SetLastError DeviceIoControl LeaveCriticalSection EnterCriticalSection GetVersionExW InitializeCriticalSection ExitProcess FindResourceW LoadResource LockResource SizeofResource CreateFileW GlobalUnlock GlobalFree UnmapViewOfFile VirtualFree CloseHandle

user32

LoadCursorW GetSysColorBrush ShowWindow SetWindowTextW IsDialogMessageW RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW SetFocus GetWindowTextW GetForegroundWindow GetTopWindow GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu GetClassInfoExW GetClassInfoW AdjustWindowRectEx CopyRect PtInRect GetDlgCtrlID CallWindowProcW SetWindowLongW SetWindowPos SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow GetSysColor EndPaint BeginPaint ClientToScreen GrayStringW DrawTextW TabbedTextOutW UnhookWindowsHookEx GetMenuItemID GetMenuItemCount GetSubMenu GetDesktopWindow SetActiveWindow CreateDialogIndirectParamW IsWindow GetDlgItem GetNextDlgTabItem EndDialog SetCursor SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW GetActiveWindow IsWindowVisible GetKeyState GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions UnregisterClassW DestroyMenu LoadBitmapW GetFocus ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem GetWindowThreadProcessId GetParent GetWindowLongW GetLastActivePopup IsWindowEnabled MessageBoxW RegisterClassW CreateWindowExW PeekMessageW DestroyWindow DefWindowProcW PostMessageW PostQuitMessage GetSystemMetrics EnableWindow LoadIconW SetTimer InvalidateRect ReleaseDC GetDC GetClientRect IsIconic SendMessageW DrawIcon DrawTextExW UnregisterClassA

gdi32

SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx DeleteDC GetStockObject Escape ExtTextOutW TextOutW RectVisible PtVisible GetObjectW RealizePalette GetClipBox SetMapMode SetTextColor SetBkMode SetBkColor RestoreDC SaveDC CreateBitmap GetDeviceCaps DeleteObject CreatePalette StretchDIBits SelectPalette

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

RegSetValueExW RegCreateKeyExW RegQueryValueW RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegCloseKey

shlwapi

PathFindExtensionW PathFindFileNameW

oleaut32

VariantClear VariantChangeType VariantInit

06_Touchpad/WinWDF/x64/SynPinch.mpg

SHA256 c8444308c28f2874996e3acfff7a59d3984fb1da145f36e51586fed021cc59a0
MD5 13f42dd9bc7cc8d2913c0f60cd224bc4
SHA1 1376bdefb04bf46fffbc914bd44d0e918fdd8e35
SHA512 5f98b067c20b4ea3d4c89e6aba30c401ac73824f9e68dbbfe6fc5388e2f8e9128c6c25493aaa05556c08361e5777616b652c2246cf696f7ba535ce113a2b6d53
SSDEEP 6144:v83UffpUlu3fiLAwpBXBK95GzPbvJQKffdy7wptZ:v1HpUfPtsYTjJQK9y+
TLSH
T15C541209AB8B9620FA9EED53C5060593C190FFBBBDC9F143B39EC93571921762918C93
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/SynPivotRotate_ChiralRotate.mpg

SHA256 716a662ae69cba7cde18c0f3f58a1d4be7048c4247ea0f08370d874817ba0ebd
MD5 e452eb98b4eea71fbab9105596c92a55
SHA1 00ddb2426af4c91dede51e46db06f1c28dc80bc1
SHA512 d9bf72d153bf504d58649e00b2733835ef2c1063bd69a5bfc6a353c84676997613a5a809869bd788e124c19e7e7157b03a2ac8021a0a9b14ee0806fc8cd7a535
SSDEEP 24576:Cgaw85hNyyEqGxESlirRuIqsnsC32r4P6gWxcs:Cga1hNIejgCsC3eAcN
TLSH
T1B73522166F0F1BD8F11DAA1C884C59ABE221FE7114C2512577A2CB8C61B78FE3E66D13
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/SynTP.bmp

SHA256 ec215bfa7095fd838ceca43022a6e1685c60f0dca15a1965272bd848324f305e
MD5 56863d6aff8bb759afe566b9d04fb3ee
SHA1 865b296a6744775115a33cb1d1e634dde3772958
SHA512 8948c5345a7e6b818af719fd9185bccaf205b43310b4b3e590fed91f5334822350bb0ef4362c48bc14c4d6ed890f1460c9c1583a377b70ac0a7e6e426d9d0b19
SSDEEP 384:VnJ91SuoOZZBc9+aRIAjjjuYL5F64gDYGWFmVou:Vz1SuoOpeRIAjjj5q4+TWFmVou
TLSH
T17E52F84377471D2F9FC2E83980E574C5CDD45AF6AD2AE96B7684280ED0478801FDDB2A
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/SynTP.cat

SHA256 045d0987d73a2592ee43477337197f157f93fa8b61926ee925f01183bd3c7a2d
MD5 13ef02f534bf398bdbd70b253aa86979
SHA1 1dc9aa21ff9d3bc947343e07ca3198da2d7d543e
SHA512 a5eb4ff09e19ef32ce3008c5a89e4c4d1627eefb4b77f00fea9eeffad0b68956c5d09fa7ba8f6cc59d2b1f1a0c4a3adb68b079965bedde4137351baadea756f9
SSDEEP 384:CeJm99hdAu1OWv1yYS/1t6HuYtJuTjhk4HV8pxyD1QdUur2cjpv+luqF0i8z:jgmR1m22jpv+luqv0
TLSH
T1F7A2656E06ED02A2A15BC8F28FE6E46FF431DE9BE8019A7D20DB37604542750774ED2D
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/SynTP.sys

IMPHASH 070259a926932278d858d04f0eec26ac
SHA256 607779de4382c9342d12894d2b5585917ef05efc84ec7263aa18c1e96ed0011c
MD5 8f63178d1db81bb79270ae55ecdd8321
SHA1 3a4a50c6454def1eed9aef2d004ae55943361dd9
SHA512 e3df6254eee7ae09d1da5920dd3d8577614864a997306e01534297493acc8af28497871509bec435ca44bf5d629869023e49e84510e60c4d574828faba2604e9
SSDEEP 6144:+MkD0XYDUBNMdU/VKyhFQ+12mDc77a5z/VeHQI:r5X7MdUPjc77a5z/VeHP
TLSH
T179545C8B93B1106BE5A3D17EC693C77AEA71784063644BDB03B046AA6F437E05D7D322
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

32:24:55:0f:88:f5:b6:1f:53:9c:71:9b:f6:7f:a3:b2:1d:83:2c:db

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Serial Number

61:0c:12:06:00:00:00:00:00:1b

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

May 23, 2006 - May 23, 2016

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

1

Major OS version

6

Entry point

241628

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

f:\checkpoints\tpdrv\do_not_release_v14_0_3\kernel\winnt\synwdf\objfre_wnet_amd64\amd64\SynTP.pdb

ntoskrnl.exe

IoGetDeviceObjectPointer IoStartNextPacket PoStartNextPowerIrp IofCompleteRequest IoReleaseRemoveLockAndWaitEx IoFreeIrp RtlWriteRegistryValue IoAttachDeviceToDeviceStack PoCallDriver ObfDereferenceObject IoInitializeRemoveLockEx IoReleaseCancelSpinLock IofCallDriver IoRegisterShutdownNotification RtlCheckRegistryKey RtlQueryRegistryValues ZwEnumerateValueKey IoGetDeviceProperty RtlCreateRegistryKey ZwEnumerateKey KeClearEvent KeInitializeMutex KeSetEvent KeInitializeEvent KeReleaseSpinLock KeReleaseMutex KeWaitForSingleObject KeAcquireSpinLockRaiseToDpc IoBuildSynchronousFsdRequest IoFreeWorkItem IoAllocateWorkItem IoAllocateIrp IoQueueWorkItem IoInitializeIrp IoCreateSynchronizationEvent ZwClose ExEventObjectType ObReferenceObjectByHandle IoRegisterPlugPlayNotification IoDetachDevice PoSetPowerState IoUnregisterPlugPlayNotification towlower ZwOpenKey RtlUnicodeStringToAnsiString RtlFreeAnsiString KeInitializeDpc KeInsertQueueDpc KeSynchronizeExecution MmUnmapLockedPages ExFreePoolWithTag MmBuildMdlForNonPagedPool IoFreeMdl MmMapLockedPagesSpecifyCache IoAllocateMdl swprintf PoRequestPowerIrp IoCreateNotificationEvent ZwMapViewOfSection ZwUnmapViewOfSection ZwCreateSection ExQueueWorkItem KeInitializeTimer KeSetTimer KeCancelTimer KeSetTimerEx ExAllocatePoolWithTag IoBuildDeviceIoControlRequest RtlAnsiStringToUnicodeString RtlIntegerToUnicodeString RtlInitAnsiString KeDelayExecutionThread RtlFreeUnicodeString RtlAppendUnicodeStringToString RtlCopyString RtlCopyUnicodeString ZwCreateFile ZwWriteFile KeBugCheckEx IoCancelIrp IoReleaseRemoveLockEx RtlInitUnicodeString PoRegisterSystemState PoUnregisterSystemState IoAcquireRemoveLockEx KeQueryTimeIncrement sprintf wcsstr _purecall __C_specific_handler

hal

KeStallExecutionProcessor KeQueryPerformanceCounter

usbd.sys

USBD_ParseConfigurationDescriptorEx

wdfldr.sys

WdfVersionBind WdfVersionBindClass WdfVersionUnbind WdfVersionUnbindClass

Name

.text

Size

242KB

Virtual Size

242KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.CRT

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

960B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

06_Touchpad/WinWDF/x64/SynTPAPI.dll

IMPHASH f35341d152d400129c9aed6d2a6646b8
SHA256 199e7d5253ef78c04280d6480d748b04d0ff2bd6a2087088bd69936e26c0c5e1
MD5 3b53a115de700d72b1a68e8661544fd2
SHA1 7579bb2477c334b06b16c9fe5494240c0fe6bbc7
SHA512 41b3f8b82f6fcf0bdbbbb67391f76a6d19b6daa14136f14e89ff174d8cf5a4a5cc6b78852e475ccb21ad2ac1fbb251d454da8ce240170979f4251f01ae509b63
SSDEEP 3072:waWiogaTxTDe+BWZFsw6heRO4OiTFb7hyZOeVBDvTTzHYKEWTQZOKRKGZHdodtaL:4ipVv6hiDz9hQB7zHYMQZOxGsm0ed
TLSH
T1A9143B82B29540B4D8B7D13D89A20A52FA72BC154730D3DF1760A77E2E337E5A93E325
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

56:fe:d6:6d:15:dd:75:86:cf:43:d7:0a:c1:ff:59:eb:f1:b1:25:ba

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

52080

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

f:\checkpoints\TPDrv\Do_Not_Release_v14_0_3\SynTPAPI\x64\ReleaseA\SynTPAPI.pdb

kernel32

PulseEvent WideCharToMultiByte TlsSetValue TlsGetValue TlsAlloc CloseHandle UnmapViewOfFile CreateEventA GetLastError CreateMutexA CreateFileMappingA FlushFileBuffers CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA MapViewOfFile LeaveCriticalSection EnterCriticalSection LoadLibraryA GetProcAddress GetModuleFileNameA DeleteCriticalSection LoadLibraryExA FreeLibrary CreateProcessA WaitForSingleObject InitializeCriticalSection ExpandEnvironmentStringsA MultiByteToWideChar SetStdHandle ReadFile HeapReAlloc GetConsoleMode GetConsoleCP SetFilePointer lstrlenA HeapFree GetProcessHeap RtlLookupFunctionEntry RtlUnwindEx GetCurrentThreadId FlsSetValue GetCommandLineA GetVersionExA HeapAlloc RaiseException RtlPcToFileHeader GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleA FlsGetValue TlsFree FlsFree SetLastError FlsAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlCaptureContext RtlVirtualUnwind HeapSetInformation HeapCreate HeapDestroy LCMapStringA LCMapStringW Sleep HeapSize ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WriteFile GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

PostMessageA wsprintfA LoadStringW LoadStringA PtInRect IsWindow GetWindowThreadProcessId SendMessageA

advapi32

RegEnumKeyA RegCreateKeyExA RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey InitializeSecurityDescriptor SetSecurityDescriptorDacl RegCreateKeyA

ole32

CLSIDFromProgID CoCreateInstance CoInitialize

oleaut32

SysFreeString SysAllocString VariantClear

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

06_Touchpad/WinWDF/x64/SynTPCOM.dll

IMPHASH efe6b73520358b568b26ef52b28de626
SHA256 657523b832fd9f4afd5e5eb3e35dc1bf70e29e216efc4627ee1d366771b365d7
MD5 60fcb65450de86141549b48f8efb16de
SHA1 fa6d6b4e3b75f65c93a37b6f43694574a97a9470
SHA512 997c4292d68d2b61a2df5512ca959127f2ddd47d89fd8c54467f07e62cc76b47a159d7a7745318fdf5faed72af1eae61df92e60a24fa32091b220c5d08085cae
SSDEEP 1536:n5JLgur3p4VCXrMy4OM6hkdEN4N7mMQcASRjnpavs9s0tUIMDPLnj0BdZSNcSmqK:5JBriy4l4keCN7mM9A8LVtUI0PLnIbHX
TLSH
T12BC34A56B29580F5D46B8279C8D24B8AEBB2B8158B7163CF4324A75D2F733D08E3D361
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

5f:19:b9:28:e8:8e:19:92:64:a3:b7:0b:a5:06:92:61:8f:c8:fa:fc

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

44832

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

f:\checkpoints\TPDrv\Do_Not_Release_v14_0_3\SynTPCOM\x64\ReleaseA\SynTPCOM.pdb

kernel32

TerminateThread WaitForSingleObject SetEvent DeleteCriticalSection lstrcpyA MultiByteToWideChar lstrlenA WideCharToMultiByte lstrlenW RaiseException __C_specific_handler GetLastError lstrcmpiA DisableThreadLibraryCalls GetModuleFileNameA LoadLibraryA SizeofResource LoadResource FindResourceA LoadLibraryExA GetModuleHandleA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetProcAddress FreeLibrary GetTickCount SetLastError DeviceIoControl CloseHandle CreateFileA LeaveCriticalSection EnterCriticalSection GetVersionExA IsDBCSLeadByte InitializeCriticalSection GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount Sleep HeapSize HeapDestroy HeapCreate GetACP GetLocaleInfoA GetThreadLocale RtlLookupFunctionEntry RtlUnwindEx HeapAlloc HeapFree RtlPcToFileHeader VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc GetCurrentThreadId FlsSetValue GetCommandLineA GetProcessHeap FlsGetValue TlsFree FlsFree TlsSetValue FlsAlloc GetCPInfo GetOEMCP IsValidCodePage TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlCaptureContext RtlVirtualUnwind ExitProcess WriteFile GetStdHandle HeapSetInformation

user32

CharNextA GetDesktopWindow UnregisterClassA wvsprintfA LoadStringA SendMessageA FindWindowA PeekMessageA DestroyWindow PostMessageA GetWindowRect

advapi32

RegEnumKeyExA RegQueryInfoKeyA RegSetValueExA RegOpenKeyExA RegCreateKeyExA RegDeleteValueA RegDeleteKeyA RegOpenKeyA RegEnumValueA RegCloseKey

ole32

CoCreateInstance CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc StringFromGUID2

oleaut32

VarUI4FromStr RegisterTypeLi UnRegisterTypeLi LoadTypeLi SysStringLen SysAllocString SysFreeString

06_Touchpad/WinWDF/x64/SynTPCOM32.dll

IMPHASH b9c4eccb7762035ec154d9863bbc6e3b
SHA256 d9c970ffd4633770eb8ad8ad6cd53df1337035d334df9872cf756877141d10f0
MD5 c8f6599e3c145c7ae02589967108fd91
SHA1 8b51ddf2b31c7a5ee8bff054f78dc8113fea2b52
SHA512 a2cbabded9ec3bd4953b991239168c83b6edf6a75618c1149dec36241a6ae335a17d975ac59ff83e1b738bffdd74e3863e0157fd7edcbe06529cce3e6c830397
SSDEEP 1536:S85/dnQrxSGL4hv12wRBoV2VNykShLKFnAtE3USNcgi81qmg:S89ZQBLwzRCEN0h2FnAtE3AgPtg
TLSH
T156B37C1274CBC073E489053E8886C3914BBF7C126DF2658BBFD8374D5E752998B29B62
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

ff:18:7c:2e:b0:a9:fe:47:0d:5f:d5:03:c4:90:00:47:9d:8f:6e:90

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

39138

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

f:\checkpoints\TPDrv\Do_Not_Release_v14_0_3\SynTPCOM\Win32\ReleaseA\SynTPCOM.pdb

kernel32

TerminateThread WaitForSingleObject SetEvent InterlockedDecrement InterlockedIncrement DeleteCriticalSection lstrcpyA MultiByteToWideChar lstrlenA WideCharToMultiByte lstrlenW RaiseException GetLastError lstrcmpiA DisableThreadLibraryCalls GetModuleFileNameA LoadLibraryA SizeofResource LoadResource FindResourceA LoadLibraryExA GetModuleHandleA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings GetProcAddress FreeLibrary GetTickCount SetLastError DeviceIoControl CloseHandle CreateFileA LeaveCriticalSection EnterCriticalSection GetVersionExA InitializeCriticalSection IsDBCSLeadByte FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount Sleep HeapSize GetStdHandle WriteFile ExitProcess InterlockedExchange GetACP GetLocaleInfoA GetThreadLocale RtlUnwind HeapAlloc HeapFree VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc GetCurrentThreadId GetCommandLineA GetProcessHeap TlsGetValue TlsAlloc TlsSetValue TlsFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo GetOEMCP IsValidCodePage VirtualFree HeapDestroy HeapCreate

user32

CharNextA GetDesktopWindow UnregisterClassA wvsprintfA LoadStringA SendMessageA FindWindowA PeekMessageA DestroyWindow PostMessageA GetWindowRect

advapi32

RegEnumKeyExA RegQueryInfoKeyA RegSetValueExA RegOpenKeyExA RegCreateKeyExA RegDeleteValueA RegDeleteKeyA RegOpenKeyA RegEnumValueA RegCloseKey

ole32

StringFromGUID2 CoCreateInstance CoTaskMemFree CoTaskMemAlloc CoTaskMemRealloc

oleaut32

VarUI4FromStr RegisterTypeLi UnRegisterTypeLi LoadTypeLi SysStringLen SysAllocString SysFreeString

06_Touchpad/WinWDF/x64/SynTPCo4.dll

IMPHASH e95a68c49df39a67cdb70364b0ff8ec9
SHA256 057a28370fc03ca3a255ac6b70881550c42008428f095ec5f61b99235dee973a
MD5 1b2ffc3a1181878e28704b81aaea5311
SHA1 2b92d78dcc0b2846983f23c4d2ceccbeadc6e54e
SHA512 8ea00184cc4f3fc05780324b0ed37da9ac1e1caf551adce4ecaa8fd64ce9d6754b34c4f12c07541614b7e3bb23a16dc692adbbd041af28f2ebc97172417f03be
SSDEEP 3072:0rNV/gZ8MVdjI1cZmJYV+D8W6+YeC4MYtEPAhNEfwNovcALs5q3Vm:CNVJy0jAWyZDEhUW5rH
TLSH
T1B6E35A96B2A250F9D4ABD23CC9D20792E7B1B424872563CB137086261F637E87F7D724
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

32:53:a8:3c:f6:61:47:a9:87:fc:a0:78:30:9b:a4:fa:25:8e:a2:d0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

25232

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

setupapi

SetupDiSetDeviceRegistryPropertyA SetupDiGetDeviceRegistryPropertyA SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiClassGuidsFromNameA SetupDiGetClassDevsA

kernel32

ExpandEnvironmentStringsA GetSystemDirectoryA CreateProcessA GetSystemWow64DirectoryA ProcessIdToSessionId GetCurrentProcessId EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetVersionExA CloseHandle GetCurrentProcess MultiByteToWideChar GetCurrentDirectoryA WriteConsoleA HeapReAlloc HeapSize SetFilePointer CreateFileA ReadFile FindFirstFileA GetLastError FindNextFileA FindClose LoadLibraryA GetProcAddress FreeLibrary GetConsoleOutputCP WriteConsoleW SetEndOfFile CompareStringA CompareStringW GetCommandLineA FlushFileBuffers GetConsoleMode GetConsoleCP WriteFile SetStdHandle GetTimeZoneInformation FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA RtlLookupFunctionEntry RtlUnwindEx HeapFree GetCurrentThreadId FlsSetValue SetEnvironmentVariableA HeapAlloc GetProcessHeap TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlCaptureContext GetCPInfo GetACP GetOEMCP GetModuleHandleA FlsGetValue TlsFree FlsFree SetLastError TlsSetValue FlsAlloc GetFullPathNameA RaiseException RtlPcToFileHeader RtlVirtualUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA HeapSetInformation HeapCreate HeapDestroy ExitProcess Sleep GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

advapi32

RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegCloseKey RegDeleteValueA RegSetValueExA RegCreateKeyA RegDeleteKeyA

06_Touchpad/WinWDF/x64/SynTPCpl.dll

IMPHASH 01a7915846bc02d882dd55f09ce7b7d1
SHA256 494f496834290f80e63e0f5701d887bbde0e2ebc336de626ac5957577e1101d5
MD5 dd4ebb34414f9f4aaf8e98078692173b
SHA1 6e280951cb97b82ea79c167d523a970f8a3a8a55
SHA512 9c7fe5fc45962235040088d2812b66320497bb0f51cb71d081f8b4b0c4d4322ac58ff8015e3496c7625a5613672c78931d450dd8c0d266c08cbb2f0a65bb4f85
SSDEEP 24576:usyhpFSGao8qXbkg0SeKTxPNZkpKH8eeiWbU:usyhpFrrkKeebkreeXY
TLSH
T15F654A57BA64C165D1BFD17DCA928E6BD6B234004720DBCB12648B3A1F63BE54A3E730
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

c3:b5:aa:d7:0f:32:7a:c9:7a:16:39:1b:23:6f:fb:df:12:bd:bd:97

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

804560

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

f:\checkpoints\TPDrv\Do_Not_Release_v14_0_3\SynTPCpl\x64\Release\SynTPCpl.pdb

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

winmm

mixerClose mixerGetLineControlsW mixerGetLineInfoW mixerOpen mixerSetControlDetails mixerGetControlDetailsW

kernel32

GetShortPathNameW RtlLookupFunctionEntry RtlUnwindEx TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlCaptureContext RtlPcToFileHeader GetSystemTimeAsFileTime GetTimeZoneInformation HeapFree HeapAlloc HeapReAlloc FlsSetValue GetCommandLineA GetProcessHeap VirtualAlloc VirtualQuery ExitProcess HeapSize FlsGetValue FlsAlloc RtlVirtualUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage GetStdHandle GetModuleFileNameA GetConsoleCP GetConsoleMode FreeEnvironmentStringsA GetEnvironmentStrings HeapSetInformation HeapCreate HeapDestroy LCMapStringA LCMapStringW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetStringTypeA GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA SetEnvironmentVariableW CreateFileA SetEndOfFile FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringW GlobalFlags SetErrorMode TlsFree LocalReAlloc GlobalReAlloc LocalAlloc GetThreadLocale GetProfileIntW GetCurrentThread ConvertDefaultLocale GetVersion EnumResourceLanguagesW lstrcmpA CompareStringA lstrlenA WaitForSingleObject GetCurrentProcessId GetModuleHandleA VirtualProtect GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom CompareStringW LoadLibraryA GetVersionExA FreeResource GlobalFree FormatMessageW LocalFree GetEnvironmentVariableW ExpandEnvironmentStringsW GetModuleHandleW LoadLibraryExW lstrcmpiW WideCharToMultiByte SetLastError RaiseException MulDiv lstrcmpW GetCurrentProcess FlushInstructionCache lstrlenW GlobalAlloc GlobalLock GlobalUnlock CreateEventW GetCurrentThreadId GlobalHandle GetLocaleInfoW FindResourceExW GetVersionExW GetSystemInfo GetSystemDefaultUILanguage GetUserDefaultUILanguage GetSystemDefaultLangID GetWindowsDirectoryW OutputDebugStringW GetFileAttributesW GetCurrentDirectoryW DeleteCriticalSection FindNextFileW DeleteFileW InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetEnvironmentStringsW FreeEnvironmentStringsW GetLastError FindClose FileTimeToSystemTime GetModuleFileNameW Sleep lstrcpyW lstrcatW CreateProcessW GetSystemDirectoryW FindFirstFileW OpenEventW GetProcAddress FreeLibrary LoadLibraryW CreateFileW DeviceIoControl CloseHandle TlsAlloc TlsGetValue TlsSetValue MultiByteToWideChar FindResourceW LoadResource LockResource SizeofResource InterlockedPushEntrySList VirtualFree InterlockedPopEntrySList FlsFree

user32

GrayStringW DrawTextExW TabbedTextOutW MapDialogRect GetAsyncKeyState SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuW CheckMenuItem SendDlgItemMessageA GetCapture GetClassLongPtrW SetPropW GetPropW RemovePropW GetLastActivePopup DispatchMessageW GetTopWindow GetMessageTime GetMessagePos PeekMessageW IsWindowVisible GetMenu GetClassInfoW RegisterClassW AdjustWindowRectEx SystemParametersInfoA IsIconic GetWindowPlacement GetActiveWindow SetActiveWindow CreateDialogIndirectParamW EndDialog GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu IsWindowEnabled IsDialogMessageW SetDlgItemInt SendDlgItemMessageW GetSysColorBrush GetDlgItemInt GetForegroundWindow GetWindowThreadProcessId WaitForInputIdle LoadImageW CreateAcceleratorTableW GetWindow DestroyAcceleratorTable GetClassNameW IsChild RedrawWindow InvalidateRgn ClientToScreen CharNextW RegisterWindowMessageW GetClassInfoExW GetWindowTextLengthW DefWindowProcW MapWindowPoints DrawEdge CreateWindowExW GetNextDlgTabItem KillTimer SetTimer UpdateWindow SetRect GetCursorPos ReleaseCapture GetFocus SetCapture SetForegroundWindow SetWindowsHookExW CallNextHookEx UnhookWindowsHookEx IsWindow LoadIconW DestroyIcon IsMenu TrackPopupMenu GetSystemMenu InsertMenuW EnableMenuItem AppendMenuW LoadBitmapW OffsetRect InflateRect SetRectEmpty PtInRect IsRectEmpty EqualRect UnionRect IntersectRect GetDesktopWindow GetKeyboardLayout CreateDialogParamW LoadStringW WinHelpW EnumChildWindows ScreenToClient MoveWindow BeginPaint GetClientRect EndPaint DestroyWindow GetDlgCtrlID GetDlgItem GetWindowLongW SetDlgItemTextW SetWindowPos SetWindowLongW UnregisterClassW WindowFromPoint GetDCEx GetMessageW TranslateMessage ValidateRect InvalidateRect MessageBoxW ShowWindow GetWindowLongPtrW PostQuitMessage DestroyMenu SetWindowLongPtrW FindWindowExW CallWindowProcW SetFocus BroadcastSystemMessageW PostMessageW LoadCursorW SetCursor GetSysColor GetWindowRect DrawTextW DrawFocusRect FillRect GetKeyState GetParent GetWindowTextW SetWindowTextW CopyRect FindWindowW SetDoubleClickTime SwapMouseButton SystemParametersInfoW GetDoubleClickTime GetSystemMetrics MessageBeep wsprintfW SendMessageW EnableWindow GetDC ReleaseDC UnregisterClassA RegisterClassExW

gdi32

TextOutW ExtTextOutW Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx SetMapMode RectVisible UnrealizeObject SetRectRgn CombineRgn EnumFontFamiliesExW SetROP2 RestoreDC PtVisible CreateRectRgn SelectClipRgn SetBkMode CreateBitmap CreateSolidBrush CreatePatternBrush GetStockObject CreateFontIndirectW GetObjectW GetDeviceCaps SaveDC PatBlt CreateRectRgnIndirect SetTextColor GetClipBox CreateDIBitmap Chord GetCurrentObject FloodFill SetPixel Ellipse GetBkColor CreateHatchBrush GetTextColor GetTextExtentPoint32W StretchBlt CreateCompatibleDC CreateCompatibleBitmap SelectObject CreatePen Rectangle BitBlt DeleteObject DeleteDC MoveToEx LineTo SetBkColor

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

RegDeleteValueW RegCloseKey RegQueryValueW RegOpenKeyW RegSetValueW RegDeleteKeyW RegCreateKeyW RegEnumKeyW RegEnumValueW RegQueryValueExW RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW

shell32

ShellExecuteExW ExtractIconW ShellExecuteW

comctl32

DestroyPropertySheetPage CreatePropertySheetPageW ord17

shlwapi

PathFindFileNameW PathFindExtensionW

ole32

CLSIDFromString CoGetClassObject OleLockRunning CoUninitialize OleUninitialize CoTaskMemAlloc CreateStreamOnHGlobal CoCreateGuid StringFromGUID2 CLSIDFromProgID CoCreateInstance CoInitialize CoTaskMemRealloc CoTaskMemFree StringFromCLSID CoDisconnectObject CoRegisterClassObject CoRevokeClassObject OleInitialize

oleaut32

SysStringLen VariantCopy VariantChangeType VarUI4FromStr LoadTypeLi LoadRegTypeLi OleCreateFontIndirect VariantInit SysStringByteLen SysAllocString SysAllocStringLen VariantClear SysFreeString

06_Touchpad/WinWDF/x64/SynTPEnh.exe

IMPHASH cd2668c04f5b48d8f4294f3dee0729ad
SHA256 fadd63e22805e23bad3bf13f361641f8af6f08166f8a9317499ee6640383a05e
MD5 30f41b2e49e182e3bcdbf3735e4bd25b
SHA1 8001ed1991617815e4b1b1766174fe44a4d4f866
SHA512 88ed3cfe361c2663059d6302a4c7287b0557ff62008090a519325a14feaecb9c4b5e312841a15d71c476f66ead7564498e7457b73ca8457debd8b2448d6bdfd3
SSDEEP 24576:84Gho4NgcoZz7RCYVvLSMeej4jz73KqeRG28moMVo:84Gho4KcodwYVNeejceRG28moMVo
TLSH
T144859241A3FA4129F2F3AB74EDB552618E76BC92AF34D28F1250265D2D32ED08974733
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

69:10:83:63:9b:88:ea:17:6f:91:d4:35:b6:62:e9:94:5f:29:73:91

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

466528

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

f:\checkpoints\TPDrv\Do_Not_Release_v14_0_3\SynTPEnh\x64\Release\SynTPEnh.pdb

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

winmm

mixerClose mixerGetLineInfoW mixerOpen mixerGetControlDetailsW mixerGetLineControlsW PlaySoundW

psapi

GetModuleFileNameExW EnumProcessModules

kernel32

GetPriorityClass GetCurrentProcess SetPriorityClass OpenEventW lstrcmpiW GetVersionExW LoadLibraryA SystemTimeToFileTime GetSystemTime SetEvent FileTimeToSystemTime FindClose FindFirstFileW FreeEnvironmentStringsW GetEnvironmentStringsW DeviceIoControl CreateFileW GetModuleHandleW DeleteFileW FindNextFileW GetFileAttributesW OutputDebugStringW GetWindowsDirectoryW GetUserDefaultUILanguage GetSystemDefaultUILanguage GetSystemInfo CreateProcessW lstrlenW GetEnvironmentVariableW GetCurrentProcessId QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStrings FreeEnvironmentStringsA FlushFileBuffers GetConsoleMode GetConsoleCP LCMapStringW LCMapStringA IsValidCodePage GetOEMCP GetCPInfo HeapCreate HeapSetInformation OpenProcess GetStdHandle WriteFile ExitProcess FlsAlloc SetLastError FlsFree TlsFree FlsSetValue FlsGetValue GetModuleHandleA RtlVirtualUnwind GetStartupInfoA GetCommandLineA GetTimeZoneInformation GetSystemTimeAsFileTime RtlUnwindEx RtlLookupFunctionEntry RtlPcToFileHeader RtlCaptureContext IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess WideCharToMultiByte lstrlenA GetProcessHeap HeapSize HeapReAlloc HeapFree HeapAlloc HeapDestroy RaiseException GetVersionExA GetThreadLocale GetLocaleInfoA GetACP SetStdHandle OpenMutexW CreateMutexW ReleaseMutex GetCurrentDirectoryW SetCurrentDirectoryW GetSystemDirectoryW CreateToolhelp32Snapshot Process32FirstW Process32NextW WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringA CompareStringW SetEnvironmentVariableA SetEnvironmentVariableW Beep ExpandEnvironmentStringsW LoadLibraryExW LeaveCriticalSection EnterCriticalSection GetTickCount lstrcmpW GetLastError GetSystemDefaultLangID GetCurrentThreadId TerminateThread CloseHandle CreateThread Sleep CreateEventW WaitForSingleObject GetSystemPowerStatus MultiByteToWideChar FindResourceExW FindResourceW ReadFile SetEndOfFile LoadResource LockResource SizeofResource DeleteCriticalSection InitializeCriticalSection LoadLibraryW GetProcAddress FreeLibrary TlsAlloc TlsGetValue TlsSetValue SetFilePointer CreateFileA GetStringTypeA GetModuleFileNameA GetStringTypeW

user32

EqualRect SetCapture ReleaseCapture CopyRect GetClientRect SetWindowLongW UpdateWindow OpenClipboard EmptyClipboard SetClipboardData CloseClipboard ScrollDC IntersectRect OffsetRect SetClassLongPtrW GetScrollInfo EnumChildWindows LoadIconW CreateIconIndirect RegisterClassW GetMessageW IsDialogMessageW TranslateMessage DispatchMessageW BeginPaint GetAncestor CreateDialogParamW IsDlgButtonChecked DestroyWindow CheckDlgButton ClientToScreen SendNotifyMessageW SendInput IsWindow EnumDisplaySettingsW PostQuitMessage SetRectEmpty DrawTextW GetSysColor GetDlgCtrlID wsprintfW WinHelpW SetLayeredWindowAttributes RedrawWindow SetRect WindowFromPoint DestroyMenu CreatePopupMenu TrackPopupMenu SetMenuDefaultItem EnableMenuItem CheckMenuItem AppendMenuW GetDoubleClickTime LockWorkStation EnumDisplayDevicesW GetWindow WaitForInputIdle EndPaint GetGUIThreadInfo SystemParametersInfoW GetDC ReleaseDC InvalidateRect SetWindowPos GetDlgItemTextW ScreenToClient SendDlgItemMessageW GetWindowTextW MessageBoxW EndDialog GetKeyboardLayout PostMessageW DialogBoxParamW CallWindowProcW EnableWindow SetDlgItemTextW GetKeyNameTextW GetWindowThreadProcessId AttachThreadInput SetForegroundWindow SetFocus GetDlgItem SetWindowTextW GetKeyState FindWindowW MessageBeep SendMessageTimeoutW LoadBitmapW DrawEdge FillRect SetTimer KillTimer LoadStringW GetParent GetDesktopWindow GetForegroundWindow IsZoomed IsIconic IsWindowVisible GetWindowLongW GetClassNameW RegisterClassExW CreateWindowExW DefWindowProcW GetWindowLongPtrW SetWindowLongPtrW SetCursor SetCursorPos GetWindowRect PtInRect ShowWindow MoveWindow LoadImageW LoadCursorW ClipCursor SendMessageW DestroyCursor GetCursorPos GetAsyncKeyState GetSystemMetrics MonitorFromWindow MapVirtualKeyW UnregisterClassA DestroyIcon

gdi32

CreateDIBitmap CreatePen Ellipse MoveToEx LineTo SetBkColor SetBkMode CreatePatternBrush SetROP2 Rectangle CreateBrushIndirect CreateBitmap CreateSolidBrush CreateEllipticRgn CreateRectRgn DeleteDC DeleteObject BitBlt SelectObject GdiFlush CreateDCW GetDeviceCaps GetTextExtentPoint32W GetObjectW CreateCompatibleBitmap StretchBlt GetStockObject CreateCompatibleDC SelectClipRgn

comdlg32

GetOpenFileNameW

advapi32

RegQueryInfoKeyW RegCreateKeyW RegEnumKeyW RegEnumValueW RegEnumKeyExW RegDeleteKeyW RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegOpenKeyW RegQueryValueExW RegCloseKey RegNotifyChangeKeyValue

shell32

DragQueryFileW ShellExecuteExW Shell_NotifyIconW ShellExecuteW DragFinish

ole32

CoInitialize CoCreateInstance StringFromGUID2 CoCreateGuid CoUninitialize CLSIDFromProgID

oleaut32

SysFreeString SysStringLen VariantInit VarCmp VariantClear VariantCopy SysAllocString GetActiveObject

shlwapi

PathFindFileNameW PathFileExistsW

06_Touchpad/WinWDF/x64/SynTPHelper.exe

IMPHASH abcecb801720fc09ddacb7f573a7b827
SHA256 3205e07febac7338415316346c6a331d7fc038c9192a7d076d3d89bbafde02b3
MD5 cd7dcf4392f629eae8365b498630d491
SHA1 abdf0b207920697c248f0cda0994bff360d7a5da
SHA512 162368b29d6972a7a86e851c12b2974ea2f52f8ae7f3202805ba618e57b59b46c3b99e631a64f7bfecd1551098dc2604583209ac0f545fc8f8a971a753213cf0
SSDEEP 3072:WNsTeLNtZtX/Wyfu2crjqdJtdXbLRuRJT6rI:isQrX/WyfSnqd7uRMI
TLSH
T154C31882B3D444B4E4B79339CCB26A15AB31BC156771A3CF3260B6992E737D06E39321
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

55:1d:ee:cb:e1:ab:4a:2a:32:7e:71:df:d6:d3:ae:1a:45:8f:01:6c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

15072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

f:\checkpoints\TPDrv\Do_Not_Release_v14_0_3\SynTPHelper\x64\Release\SynTPHelper.pdb

psapi

EnumProcessModules GetModuleFileNameExW

kernel32

ExpandEnvironmentStringsW FreeLibrary GetCurrentProcess GetLastError GetPriorityClass SetPriorityClass QueryDosDeviceW WriteConsoleA CreateMutexW FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle SetFilePointer GetLocaleInfoA GetStringTypeW GetStringTypeA WaitForSingleObject ReleaseMutex CreateThread Sleep OpenProcess CloseHandle LoadLibraryW GetProcAddress DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetConsoleOutputCP WriteConsoleW HeapAlloc HeapReAlloc LCMapStringW WideCharToMultiByte LCMapStringA IsValidCodePage RtlLookupFunctionEntry RtlUnwindEx LoadLibraryA HeapFree GetVersionExA CreateFileA GetProcessHeap GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlCaptureContext GetModuleHandleA FlsGetValue FlsSetValue TlsFree FlsFree SetLastError GetCurrentThreadId FlsAlloc RaiseException RtlPcToFileHeader RtlVirtualUnwind HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsA MultiByteToWideChar GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapSetInformation HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP

user32

FindWindowW RegisterClassW CreateWindowExW GetMessageW TranslateMessage DispatchMessageW GetWindowThreadProcessId DefWindowProcW PostQuitMessage SendMessageTimeoutW PostMessageW SendNotifyMessageW SendInput SendMessageW IsWindow

advapi32

RegCreateKeyW RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegCloseKey

06_Touchpad/WinWDF/x64/SynTPRes.dll

IMPHASH 6a19ab6b1bb2681a6081d98c99caa77f
SHA256 7a9d9dd933bc709e9781a83ed591012ab66e0ce53cca34d6fc583b607d2b0016
MD5 69fe88adc2b6e92b3aad86c9d855d712
SHA1 3d1997b2f5e5f5fdc29a151287b9d82f0ff1b67e
SHA512 462535147e21c2502e946797f0b80d970784965273a0bee89824ce6e32d11693e37a06ccea2adaaeda77447036980190b00b357294d8b9de31ac177ffdc505f4
SSDEEP 196608:QBnAn4QjGb99QHsqZGMtMDbBnAn4QjGbIIwY2qmSrgIEueHtKeue8SgTp6vmUh89:QBAn4QjGb99QHsqZGMtMDbBAn4QjGbIK
TLSH
T1E486B525BBF94048FBFA6B749AB875440B3B7C4EA8B5D09D65453F080870BB29A74733
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

64:a4:40:50:22:89:67:05:3a:23:e3:a5:d8:4b:1b:f9:bc:42:10:4b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

5040

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

06_Touchpad/WinWDF/x64/SynThreeFingerFlick.mpg

SHA256 49f8fb284011ceab465eb5600800410aa6d4600bf358eb2f42424f3bb6781207
MD5 473bd738db0eafbcfb242fd69b559414
SHA1 55b8cffdbf650fc640d857d2a7cc39ae4b048465
SHA512 0a8b66ecef17bf0b0212a2488a39487241b5a5e81793c473424b18e35491b2fd34ef6cbccf8e5eba5f56efa0a2c67e515ebb23c5688a331e17f472f39596a5db
SSDEEP 12288:CEKMRY6JehvHT0BzR3i+bCqIzXL8ouNcvP3jYRCDMkGXpwfSOeXy:C4yHcR3bFIzHNMkVReXy
TLSH
T1B8D412580B1F1728F11EDE49E60941279533FE7A5FC63943A3A1CB5EB0528B7BD8AC06
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/SynThreeFingersDown.mpg

SHA256 02bafb5ea69bc63b769996d9845c0c18587be30b103014a8e99bb20195857062
MD5 f2bde53252e6ef3e7eb0a1a55aeb61c4
SHA1 8693a6eb6e29e648fe2fad903b270e0fdb32ebbc
SHA512 8d9036cbe7cdc891e5441cc0b70260d8ad2f18c0883639af6e31bcee9c2cc29cfbf1ba253982e6b882c34b530aa04b425b5d9068d3fc30461be04d0c885fba1a
SSDEEP 3072:SVbXh/2cZ+VCivW00b+9RU4AymxEKw+iRo3bUUl/8y48pPYDoTTlN3xXIrTRlUN:SRR/HcV0bimxEuixC/8BgTT3NIZC
TLSH
T12624F14C1726EF48E92EDA08855681379173FFB37FC5306973B6CA28618E532AF52C06
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/SynTwoFingerVHScroll.mpg

SHA256 c9f437c7d9adc63eb31429d9363637680428b764cf75201a342ab5ab63f59e10
MD5 878a1872cbc075f50a7e0d6dfd36d6f8
SHA1 89353de0cf1a7843212eb8e79b55194bd913952d
SHA512 83a284ce19743f39daae868d483cc4d2e6ca4fb4dbe78a971b0aeeaa0921a8f898e9ec5b58048d4c0720c5e044d3a0bf93598c5ed27fef1ae71bbdaa23d04f22
SSDEEP 12288:AYLnuZg7hdnxrbh1n0029qlaByfl+amz6XiT04WYHqKAjcRnrhnQsJp2Z4ANa1ot:AwuZg7hNtn006Mrl+amw7eH5AjKlnH0j
TLSH
T121F412285B1F272DF1CEDA960209895AD173FFB257836544F2E2CB4C629B073AC4A947
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/SynUnst.ini

SHA256 5dd3660d281676d7bf3ff1cfefc280b2f41c302a38549995eb920d224c1f258a
MD5 a949e673a6c260c0ab9da53e08702767
SHA1 3f57aa5a23d78241598d3762d5621cf0b5a075f9
SHA512 1647e0498905039f6b2b6fba9ab4f58ba984f7e1c0343666c5745ef6f181dea1163f5f4022056830e351e62f49334f05bba637c1082b10e96a21c5ad836aad53
SSDEEP 1536:f4AgFOcyvLaQ3HvwPrSAzd7aXnco0ChXJ4SR+pS+chvOQceCnPCwNrqHI0ZANxU9:grpqz3DzuGHM37Hu0WtSCHyLGcAeyfb
TLSH
T18BC4155B342116B4CD479746FB8ABC25426CF19590E32D7E62BAE8C02DD6CD70CAFB09
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/SynZMetr.exe

IMPHASH 09ace58afcd0065043def8a42f7ca2af
SHA256 ea6261cf5322e3a0440e5a3fca60d62c73c59025164e8004e36b5c1be8bceb88
MD5 983122704a7f570aea3daff3ceee7352
SHA1 f3e61fb1b2d71fe3141a15e82fe33f1b20b2981c
SHA512 31787105b46da39edae083bc67c6f42f166fbc260360c3faa226ed114a6763b71c1f87f03feb601d36184538a56fdd61e046b5c8358071135d618dd55bed8ed8
SSDEEP 3072:GNcO5CeML/WOLk4RCbo1AG80lf8aWbYt2s0UryuiCwr732GTkWIC/tm4NUEzCANO:GNzceML/I2io+ZbYt6U+u9I55s
TLSH
T13C345B1237D5C073E5BF0A3249E582B86AB6FC519F32968F67B03B0D6D316929E34352
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

a9:ba:38:33:4b:4e:08:c3:e2:c8:7d:85:12:5d:8d:69:95:e0:26:c0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

75464

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

f:\checkpoints\TPDrv\Do_Not_Release_v14_0_3\Access\SynZMetr\Win32\Release\SynZMetr.pdb

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

kernel32

GetCurrentProcess SetErrorMode HeapFree HeapAlloc GetProcessHeap GetStartupInfoW RtlUnwind RaiseException HeapReAlloc ExitProcess HeapSize GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime TerminateProcess SetUnhandledExceptionFilter IsDebuggerPresent Sleep VirtualAlloc GetCPInfo GetACP GetOEMCP GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringW GetThreadLocale GlobalFlags TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue GetCurrentThread ConvertDefaultLocale GetVersion EnumResourceLanguagesW GetLocaleInfoW InterlockedExchange GetCurrentProcessId WideCharToMultiByte FreeResource GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom CompareStringW LoadLibraryA lstrcmpW GetModuleHandleW GetVersionExA GetModuleHandleA GetLastError GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageW lstrlenW MulDiv MultiByteToWideChar FindResourceW LoadResource LockResource SizeofResource CreateThread SetThreadPriority WaitForSingleObjectEx GetModuleFileNameW InterlockedIncrement InterlockedDecrement SetEvent WaitForSingleObject TerminateThread CreateEventW GetSystemDirectoryW LoadLibraryW GetProcAddress FreeLibrary GetTickCount LocalAlloc LocalFree SetLastError DeviceIoControl CloseHandle CreateFileW LeaveCriticalSection EnterCriticalSection GetVersionExW DeleteCriticalSection InitializeCriticalSection GetCommandLineW

user32

UnregisterClassW SetCursor GetMessageW TranslateMessage GetActiveWindow GetCursorPos ValidateRect GetWindowThreadProcessId IsWindowEnabled ShowWindow SetWindowTextW IsDialogMessageW SetDlgItemTextW SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW ModifyMenuW EnableMenuItem CheckMenuItem RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW GetCapture SetWindowsHookExW CallNextHookEx GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetFocus IsWindow SetFocus GetWindowTextLengthW GetWindowTextW GetForegroundWindow GetLastActivePopup SetActiveWindow GetSysColorBrush GetDlgItem GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints ScrollWindow UnregisterClassA GetKeyState SetForegroundWindow IsWindowVisible GetMenu MessageBoxW GetClassInfoExW GetClassInfoW AdjustWindowRectEx CopyRect PtInRect GetDlgCtrlID CallWindowProcW GetWindowLongW SetWindowLongW SetWindowPos SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow GetSysColor EndPaint BeginPaint ReleaseDC GetDC ClientToScreen ScreenToClient GrayStringW DrawTextExW DrawTextW TabbedTextOutW DestroyMenu GetDesktopWindow CreateDialogIndirectParamW GetNextDlgTabItem DispatchMessageW EndDialog GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu PostQuitMessage GetSystemMetrics LoadIconW IsIconic GetSystemMenu SendMessageW AppendMenuW DrawIcon CreateWindowExW PeekMessageW DestroyWindow wsprintfW DefWindowProcW PostMessageW LoadCursorW RegisterClassW EnableWindow UpdateWindow GetClientRect GetParent

gdi32

SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx DeleteDC CreateBitmap CreateCompatibleDC OffsetViewportOrgEx GetObjectW SetViewportOrgEx Escape ExtTextOutW TextOutW RectVisible PtVisible GetDeviceCaps GetStockObject SelectObject CreatePen DeleteObject MoveToEx LineTo GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC BitBlt

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

RegSetValueExW RegCreateKeyExW RegQueryValueW RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegOpenKeyW RegCloseKey

shlwapi

PathFindExtensionW PathFindFileNameW

oleaut32

VariantClear VariantChangeType VariantInit

06_Touchpad/WinWDF/x64/Tutorial.exe

IMPHASH 9a7967391d23ba126cc4b52504c1f78d
SHA256 a446009c6897a03254dfcfa622b97c7e2745d16224b55552325601059b46783d
MD5 0eca6fa8c134242ce896de79fc322715
SHA1 1dbdcc58a330ba7a212d5e8d9de017502a9f6d7b
SHA512 69a3399d919973e03371c4ed4d1da83c34eca2c1add27a8a3f361e6fcc26e406bf716469920e510bcbc4dbd770d64697cf58ce3ae876151ae96fb8ed52691bbd
SSDEEP 6144:/50SPgMxgpQpXKtK4MGr7ub+/LShVNVJiRVFOG2PzKUO:ZgCdKtKeu6eDJi5OGoC
TLSH
T10F746C12B7D0C432D5A60637CD669329A3BAFC516E3183477BD13B5EEE306D29A38352
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

ea:ad:d6:a2:1e:65:25:4d:70:23:1b:2f:30:fd:2e:8f:47:d7:92:54

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

127011

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapSize SetUnhandledExceptionFilter GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount TerminateProcess UnhandledExceptionFilter IsDebuggerPresent Sleep VirtualAlloc GetTimeZoneInformation GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA ExitProcess HeapReAlloc RaiseException GetSystemTimeAsFileTime RtlUnwind GetStartupInfoW GetProcessHeap HeapAlloc HeapFree SetErrorMode LocalFileTimeToFileTime FileTimeToLocalFileTime WritePrivateProfileStringW GetVersionExW CreateFileW GetShortPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile lstrcmpiW GetStringTypeExW DeleteFileW MoveFileW SystemTimeToFileTime FileTimeToSystemTime GetThreadLocale lstrlenA InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags GetDiskFreeSpaceW GetFullPathNameW GetTempFileNameW GetFileTime SetFileTime GetFileAttributesW CloseHandle GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesW lstrcmpA GetLocaleInfoW CompareStringA InterlockedExchange GetModuleHandleA InterlockedDecrement GetModuleFileNameW GlobalFree GlobalAlloc FormatMessageW LocalFree MulDiv FreeResource GetCurrentThreadId GlobalFindAtomW GlobalDeleteAtom FreeLibrary CompareStringW LoadLibraryA lstrcmpW MultiByteToWideChar GetVersionExA GetVersion lstrlenW GlobalLock GlobalUnlock GetCurrentProcessId GetProcAddress GetModuleHandleW LoadLibraryW GlobalGetAtomNameW GlobalAddAtomW GetLastError SetLastError WideCharToMultiByte FindResourceW LoadResource LockResource SizeofResource

user32

GetNextDlgTabItem CreateDialogIndirectParamW CharUpperW DestroyIcon ValidateRect PostQuitMessage EndPaint BeginPaint GetWindowDC GrayStringW DrawTextExW DrawTextW TabbedTextOutW ClientToScreen SetWindowRgn DrawIcon FillRect FindWindowW SystemParametersInfoW MoveWindow SetWindowTextW IsDialogMessageW SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem SendDlgItemMessageW SendDlgItemMessageA IsChild SetWindowsHookExW CallNextHookEx GetClassLongW SetPropW GetPropW RemovePropW GetWindowTextW GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime EndDialog MapWindowPoints ScrollWindow TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow MessageBoxW CreateWindowExW GetClassInfoExW RegisterClassW AdjustWindowRectEx DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement DefWindowProcW CallWindowProcW SystemParametersInfoA GetWindowPlacement GetWindowRect GetClassNameW GetSysColor UnpackDDElParam ReuseDDElParam LoadMenuW DestroyMenu WinHelpW SetWindowPos SetFocus GetWindowThreadProcessId GetActiveWindow IsWindowEnabled GetFocus EqualRect GetDlgItem GetDlgCtrlID PeekMessageW LoadAcceleratorsW GetParent SetActiveWindow IsWindowVisible IsIconic InsertMenuItemW GetSubMenu GetMenuItemID GetMenuItemCount CreatePopupMenu IntersectRect OffsetRect SetRectEmpty CopyRect GetLastActivePopup BringWindowToTop PostMessageW SetMenu GetDesktopWindow GetWindow ShowWindow IsWindow TranslateAcceleratorW GetMessageW DispatchMessageW UnregisterClassW GetSysColorBrush GetMenuItemInfoW ShowOwnedPopups GetMessagePos TranslateMessage ReleaseDC GetDC InflateRect PtInRect GetSystemMetrics DrawMenuBar GetMenu DeleteMenu LoadBitmapW GetKeyState GetCapture ReleaseCapture GetCursorPos SetCursor LoadCursorW EnableWindow SetCapture KillTimer SetTimer InvalidateRect UpdateWindow ScreenToClient GetClientRect RegisterWindowMessageW GetClassInfoW LoadIconW SendMessageW GetWindowLongW SetWindowLongW FindWindowExW ShowScrollBar UnregisterClassA

gdi32

GetPixel PtVisible RectVisible TextOutW ExtTextOutW Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx CreatePatternBrush CreateFontIndirectW GetTextExtentPoint32W SetMapMode DeleteObject GetStockObject GetObjectW SetBkMode RestoreDC SaveDC DeleteDC Ellipse CreateEllipticRgn CreateDCW GetDeviceCaps SetBkColor SetTextColor GetClipBox GetCurrentObject Rectangle DPtoLP GetBitmapBits CreateSolidBrush CreatePen BitBlt CreateCompatibleDC CreateCompatibleBitmap CreateBitmap

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW ClosePrinter DocumentPropertiesW

advapi32

RegSetValueExW RegCreateKeyExW GetFileSecurityW SetFileSecurityW RegQueryValueW RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegOpenKeyW RegSetValueW RegCloseKey RegCreateKeyW

shell32

DragQueryFileW SHGetFileInfoW ExtractIconW DragFinish

shlwapi

PathFindFileNameW PathStripToRootW PathFindExtensionW PathIsUNCW

oleaut32

VariantClear VariantChangeType VariantInit

06_Touchpad/WinWDF/x64/WdfCoInstaller01009.dll

IMPHASH 70497fec79daa5f71de3b34faee686a5
SHA256 18487b4ff94edccc98ed59d9fca662d4a1331c5f1e14df8db3093256dd9f1c3e
MD5 4da5da193e0e4f86f6f8fd43ef25329a
SHA1 68a44d37ff535a2c454f2440e1429833a1c6d810
SHA512 b3d73ed5e45d6f2908b2f3086390dd28c1631e298756cee9bdf26b185f0b77d1b8c03ad55e0495dba982c5bed4a03337b130c76f7112f3e19821127d2cf36853
SSDEEP 24576:oU4MsColC6Je/ZgY7OOfcEpiRLH87SyVXGe38uKUj+NFVov1PJLfVKZ8F5mEeZWF:BFCsfZRZA6Xn388avVovfLd+Mo4iEF
TLSH
T10485234577FC1178F1F3AAB48ABA84062A767C854FB6D28F0250C95D6DB2FC489B4363
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

05:63:99:fa:ac:b9:fc:49:f3:cf:78:bf:c3:d9:f2:f4:63:e5:01:2e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 14, 2009

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:47:52:ba:00:00:00:00:00:04

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 16, 2006 - Sep 16, 2011

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 15, 2019

Subject

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 11, 2005 - Apr 26, 2010

Subject

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:02:a4:e9:00:00:00:00:00:09

Issuer

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 11, 2009 - Apr 26, 2010

Minor OS version

1

Major OS version

6

Entry point

60084

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

WdfCoInstaller01009.pdb

msvcrt

memset memcpy __C_specific_handler _amsg_exit _initterm _XcptFilter _ultow malloc _wcsnicmp free _wtoi _wcsicmp _stricmp _vsnwprintf

setupapi

SetupDiSetDeviceInstallParamsW SetupCloseLog SetupOpenInfFileW SetupCloseInfFile CM_Set_DevNode_Problem_Ex SetupDiGetDeviceInstallParamsW SetupLogErrorW SetupOpenLog SetupDiGetActualSectionToInstallW SetupFindNextMatchLineW SetupDiGetSelectedDriverW SetupGetStringFieldW SetupPromptReboot SetupFindFirstLineW SetupGetLineCountW SetupDiGetDriverInfoDetailW

kernel32

GetModuleFileNameW SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind Sleep LoadLibraryExW ExpandEnvironmentStringsW GetFileInformationByHandle DeleteFileW CloseHandle FindNextFileW RemoveDirectoryW LockResource GetLocalTime FindClose SetLastError CreateFileW FileTimeToSystemTime TerminateProcess GetExitCodeProcess FormatMessageW SizeofResource WriteFile OutputDebugStringW WaitForSingleObject CreateDirectoryW CreateProcessW LoadResource FindResourceW FindFirstFileW LoadLibraryW WideCharToMultiByte FreeLibrary lstrlenA LocalFree GetWindowsDirectoryW LocalAlloc GlobalFree GetProcAddress GetLastError VerifyVersionInfoW GetModuleHandleW VerSetConditionMask

advapi32

DeleteService OpenSCManagerW QueryServiceConfigW ChangeServiceConfigW RegFlushKey RegSetValueExW RegCreateKeyExW RegCloseKey RegOpenKeyExW CloseServiceHandle QueryServiceStatusEx RegQueryValueExW OpenServiceW

crypt32

CertGetCertificateContextProperty

wintrust

WTHelperGetProvCertFromChain WTHelperGetProvSignerFromChain WinVerifyTrust WTHelperProvDataFromStateData

shell32

CommandLineToArgvW

user32

LoadStringW IsCharAlphaNumericW IsCharAlphaW

ole32

CoTaskMemFree

06_Touchpad/WinWDF/x64/dpinst.exe

IMPHASH 3eacb9638877275335da4b58e52824f8
SHA256 a961cb8cdc32ae94eb1a45bb3ffcec22645706274c909516f8cc8e3f1dcd37c6
MD5 db8b931f80f404192cb03937fadaad0a
SHA1 4604e15d17fd8a3293937d132aadea00a8a9cf3f
SHA512 aefbbc5b6da231ff99f2fb7cc3b9e193faca945f9a5d6f068a312741184a3b487b4e11ed1131959b7c8c77759a2ba08687f355ac783e60391dc6e937a8dade88
SSDEEP 6144:3sSOzpPId26dQcEaUrPvwgwkRVagRoDHTj8K1sqI6VLp4XOigSbduP/1HHm/hHA6:pIId79EaUTvwieMozMEcOigSpuPMaLir
TLSH
T1FE258004E7FA4225F9F3AB7DA9B152528A32BC815B34CA8F4240569D1DF3AD0D971B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

bf:2c:50:54:a4:3a:a3:54:81:e2:9a:d4:b6:4d:5c:bc:8e:cd:ae:c6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

1

Major OS version

6

Entry point

379816

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

DpInst.pdb

advapi32

RegOpenKeyExW RegQueryValueExW RegCloseKey OpenProcessToken GetTokenInformation AllocateAndInitializeSid EqualSid FreeSid IsTextUnicode GetLengthSid InitializeAcl AddAccessAllowedAce InitializeSecurityDescriptor SetSecurityDescriptorDacl SetEntriesInAclW DeleteService CloseServiceHandle ControlService StartServiceW OpenServiceW ConvertStringSecurityDescriptorToSecurityDescriptorW OpenSCManagerW QueryServiceStatus RegDeleteValueW RegDeleteKeyW RegSetValueExW RegCreateKeyExW CheckTokenMembership

kernel32

CreateMutexW ReleaseMutex SetFilePointer HeapAlloc GetProcessHeap HeapFree LoadLibraryW GetProcAddress GetStdHandle GetConsoleMode SetConsoleMode ReadConsoleOutputW FillConsoleOutputCharacterW SetConsoleCursorPosition FreeConsole FreeLibrary WriteConsoleOutputW WriteConsoleW IsValidLocale VirtualProtect Sleep GetFileAttributesW DeleteFileW FormatMessageW RaiseException CopyFileW SetFileAttributesW GetTempFileNameW FindClose FindNextFileW CompareStringW lstrcmpW FindFirstFileW lstrlenW UnmapViewOfFile GetConsoleScreenBufferInfo CreateFileMappingW LCMapStringW WaitForMultipleObjectsEx WaitForSingleObjectEx SetEndOfFile CreateEventW SetEvent LocalReAlloc DeviceIoControl VerifyVersionInfoW VerSetConditionMask GetSystemDirectoryW GetCurrentDirectoryW GetSystemWindowsDirectoryW GetShortPathNameW RemoveDirectoryW MoveFileExW CreateDirectoryW GetFullPathNameW SetLastError GetLocaleInfoW LoadLibraryExW GetSystemDefaultUILanguage SearchPathW UnhandledExceptionFilter TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter GetModuleHandleW SetUnhandledExceptionFilter OutputDebugStringA GetStartupInfoW GetEnvironmentVariableW lstrcmpiW GetVersionExA DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection HeapSize HeapReAlloc HeapDestroy GetFileSize CreateThread SetThreadLocale GetThreadLocale WriteFile CreateFileW FindResourceExW FindResourceW LoadResource LockResource SizeofResource MultiByteToWideChar GetCurrentProcess GetVersionExW GetLocalTime GetWindowsDirectoryW SetCurrentDirectoryW GetUserDefaultUILanguage EnumResourceLanguagesW GetModuleFileNameW GetExitCodeProcess WaitForSingleObject LocalFree GlobalFree LocalAlloc GetLastError GetCommandLineW CloseHandle MapViewOfFile

gdi32

CreateBitmap CreateCompatibleBitmap GetObjectW DeleteDC SetLayout CreateCompatibleDC EndPage StartPage EndDoc StartDocW GetTextMetricsW CreateFontIndirectW GetDeviceCaps DeleteObject SelectObject

user32

DestroyIcon CreateIconIndirect DrawIconEx GetIconInfo LoadIconW LoadBitmapW CharLowerW UnregisterClassA PostQuitMessage DefWindowProcW RegisterClassExW CreateWindowExW ShowWindow AllowSetForegroundWindow DialogBoxParamW SetDlgItemTextW EndDialog MessageBoxW GetDlgItem SendMessageW GetProcessWindowStation GetUserObjectInformationW LoadImageW SetWindowTextW PostMessageW GetParent IsDlgButtonChecked CheckDlgButton SetFocus CallWindowProcW GetWindowLongPtrW SetWindowLongPtrW SendDlgItemMessageW InvalidateRect GetSystemMetrics GetSysColor DestroyWindow SetWindowLongW SystemParametersInfoW GetDC ReleaseDC DrawTextExW

msvcrt

_wcmdln exit _cexit _exit _XcptFilter __wgetmainargs _resetstkoflw __C_specific_handler memset _wcsupr _wcslwr _errno __CxxFrameHandler fread _initterm fclose fwprintf _wfopen realloc ??2@YAPEAX_K@Z wcsstr _wcsicmp _wtol _vscwprintf free malloc ??_V@YAXPEAX@Z ??3@YAXPEAX@Z _amsg_exit __setusermatherr _commode _fmode __set_app_type ?terminate@@YAXXZ _unlock __dllonexit _lock _onexit ??1type_info@@UEAA@XZ memcpy memmove _CxxThrowException mbtowc __mb_cur_max isleadbyte _iob _snprintf _itoa ferror __badioinfo __pioinfo _fileno _lseeki64 _write _isatty _wcsnicmp _vsnwprintf wcsncmp bsearch ?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z iswalpha ??_U@YAPEAX_K@Z wcschr wcspbrk wcsrchr iswdigit feof memcmp

ntdll

NtQueryInformationToken RtlNtStatusToDosError NtClose NtOpenThreadToken RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext NtOpenProcessToken

shell32

ord59 CommandLineToArgvW SHGetFolderPathW ShellExecuteExW

setupapi

SetupDiSetDeviceRegistryPropertyW SetupDiGetDeviceRegistryPropertyW CM_Get_DevNode_Status SetupDiOpenDevRegKey SetupDiEnumDeviceInfo pSetupSetGlobalFlags SetupDefaultQueueCallbackW pSetupGetGlobalFlags SetupDiGetClassDevsW SetupDiDestroyDeviceInfoList SetupGetFieldCount SetupGetIntField SetupGetStringFieldW SetupFindNextMatchLineW SetupFindNextLine SetupInstallServicesFromInfSectionW SetupInstallFromInfSectionW SetupPromptReboot SetupDiGetDeviceInstanceIdW SetupFindFirstLineW SetupOpenAppendInfFileW SetupGetLineCountW SetupDiGetActualSectionToInstallW SetupCloseInfFile SetupOpenInfFileW SetupDiGetSelectedDriverW SetupCommitFileQueueW SetupTermDefaultQueueCallback SetupInitDefaultQueueCallbackEx SetupQueueCopyW CMP_WaitNoPendingInstallEvents SetupCloseFileQueue SetupOpenFileQueue SetupDiGetDriverInfoDetailW SetupDiSetClassInstallParamsW SetupDiOpenDeviceInfoW SetupDiSetSelectedDevice SetupDiCreateDeviceInfoList SetupDiGetDeviceInstallParamsW SetupDiSetDeviceInstallParamsW SetupDiBuildDriverInfoList SetupInstallFilesFromInfSectionW SetupDiCallClassInstaller SetupDiClassNameFromGuidW SetupDiOpenClassRegKey CM_Enumerate_Classes CM_Get_Device_ID_ListW CM_Get_Device_ID_List_SizeW CM_Locate_DevNodeW CM_Query_And_Remove_SubTreeW CM_Setup_DevNode CM_Get_Device_IDW SetupCopyOEMInfW SetupGetTargetPathW

wintrust

CryptCATAdminCalcHashFromFileHandle WinVerifyTrust

ole32

CoTaskMemFree CoInitialize CoUninitialize CoCreateInstance StringFromCLSID

oleaut32

VariantInit VariantClear SysAllocString SysFreeString VariantChangeType

comctl32

PropertySheetW CreatePropertySheetPageW ImageList_Create ImageList_ReplaceIcon ImageList_SetBkColor

comdlg32

PrintDlgExW GetSaveFileNameW

crypt32

CertFreeCTLContext CertFreeCertificateContext CertGetCTLContextProperty CryptQueryObject

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

06_Touchpad/WinWDF/x64/dpinst.xml

SHA256 51220badb453904808d613589fd56ef8e5905ebc1e1bac050f285b2814b2a5d8
MD5 7d01c5b07e846f12a2fed50dad9073aa
SHA1 7e5fc49ba717d9dcddbea92eb65fd875d8251cae
SHA512 7532c73299b277499b045d9ff1f49083b6f1ed85b524890eec6449fcae13a8e0a8fd376869359272bd48d3520e14ca0e745dc5118d415f55e845c6c6fc0a125e
SSDEEP 384:DAgg2fjfgigAGU0Js4SxRorsWYQhv4HPiqMhararxx8WV0B:MggEt0JstOsWjfY
TLSH
T10EB2028694D223745B336741F902782AFFE0C9A64219BD607C9B016BEBF7818E45F673
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/setup.exe

IMPHASH c482f234b45547b436f1ee193a33ae4f
SHA256 dedf9ec1e3a17a6aecf7c317d9ed4150643dd4c2a21436b214f3ce7ec264ee11
MD5 0698bab73e4de5a59cf62f981799980f
SHA1 6df7f21bddb356bd5c68632447b0a21034059f42
SHA512 bca76b73723aef264a8038ccab45c8598d54143a52eab8afe6cc4707e7b3a7f5dcf0c54362e6be441686b9c82cf47ba3c39c58790c5bafe18792471f1cae3999
SSDEEP 3072:J7ez8WRfcaClOcpbhr1orxhgjt5y02pqDcn6WpjL1CrVheZgHpF:IznRc7vpb5oxhUEn1CrS+Hv
TLSH
T14A24910177FA8274F6F32B71ED7556944B3ABC926E38E58E3354089D1830A90DAB9733
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

7e:81:c6:fb:34:6e:43:9a:64:71:89:68:d1:19:09:b4:51:dd:e1:72

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

30255

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW GetVersionExW DeviceIoControl SetLastError GetTickCount FreeLibrary GetProcAddress LoadLibraryW SetEvent InterlockedDecrement InterlockedIncrement SetFilePointer WriteFile ExpandEnvironmentStringsW ReleaseMutex SetEnvironmentVariableA CompareStringW CompareStringA CreateFileA ReadFile SetEndOfFile WriteConsoleW GetConsoleOutputCP WriteConsoleA LoadLibraryA FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle GetLastError GetExitCodeProcess GetCurrentProcess CreateProcessW WaitForSingleObject GetModuleFileNameW CreateFileW CloseHandle GetSystemDirectoryW GetSystemInfo FindResourceExW FindResourceW LoadResource LockResource SizeofResource DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetLocaleInfoA GetStringTypeW GetStringTypeA RtlUnwind RaiseException DeleteFileW SetFileAttributesW GetFileAttributesW GetSystemTimeAsFileTime HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetCPInfo GetACP GetOEMCP MultiByteToWideChar LCMapStringA WideCharToMultiByte LCMapStringW Sleep HeapSize ExitProcess GetTimeFormatA GetDateFormatA GetTimeZoneInformation GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId VirtualAlloc HeapReAlloc

user32

LoadStringW MessageBoxW ExitWindowsEx UnregisterClassA

advapi32

RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegisterEventSourceW ReportEventW DeregisterEventSource OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegSetValueExW RegCloseKey RegOpenKeyW RegCreateKeyW PrivilegeCheck

shell32

SHGetSpecialFolderPathW ShellExecuteExW

06_Touchpad/WinWDF/x64/synhid.inf

SHA256 0ba9a5e2f39f76f1acdb62b37fb953fef507f8402aef95db21da38c04294866b
MD5 8df52b2536a42659779a00503dd838c0
SHA1 5bfd23bf31bcf627ce33f2eedc09149b440ace47
SHA512 0a0d925526b34f690edadd89d281403a63d2b87a6ee8fe29b11855ed69c64c5156a213dc183cb8bbeb0e6d1f36dd1da2a46732815f87787d265f5d9de572b537
SSDEEP 192:smABdrE3Z3BzonycB3oLQraIsoepvAvVIsoeGzDnFJz2WJqoZ:sDdrE3Z3BzonycB3oLQraIsoepvYIsof
TLSH
T10D12E12A4E4B0170E903E64FB74FBA43F3687084C0ED1B667BE551108ED9D8D272DA7A
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x64/synpd.inf

SHA256 5dd3660d281676d7bf3ff1cfefc280b2f41c302a38549995eb920d224c1f258a
MD5 a949e673a6c260c0ab9da53e08702767
SHA1 3f57aa5a23d78241598d3762d5621cf0b5a075f9
SHA512 1647e0498905039f6b2b6fba9ab4f58ba984f7e1c0343666c5745ef6f181dea1163f5f4022056830e351e62f49334f05bba637c1082b10e96a21c5ad836aad53
SSDEEP 1536:f4AgFOcyvLaQ3HvwPrSAzd7aXnco0ChXJ4SR+pS+chvOQceCnPCwNrqHI0ZANxU9:grpqz3DzuGHM37Hu0WtSCHyLGcAeyfb
TLSH
T18BC4155B342116B4CD479746FB8ABC25426CF19590E32D7E62BAE8C02DD6CD70CAFB09
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula0401ARA.tx_

SHA256 ba65e1bbef9bf7956b16a3890fd0d6e660d194e05b71858d8172bbbe047c282e
MD5 f4e5c93eb36110999ff03f53ff6472a8
SHA1 2aac9ddca7829632f272e8b2d75ac7a85eb576a9
SHA512 6f5a5fc9615e57268be3fa87b78c8cafcab3ddba6704c7e9a92c5b9de8b0232dd786a62ebafce9d44617cf59fce26cd0188097d9764a36e6c867f8e7d0f1f166
SSDEEP 192:+hzEVOk1Jwg9kX1LfK3C2iOyta2v8NQbm0lMvXCgPyI7j/o0qidnd5+5Uig6Bmtl:+hzEVOk1J5kXdfKS2iOytaI8NQbm0Mv1
TLSH
T1682234E20A3698B14B9A9E1ED1D6315CE8B1AD23DB4AFC3234D31610C9C7867D35EA35
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula0404CHT.tx_

SHA256 b26c3f56ebea7d9473898371f88db0bc09c1e8edc206629895ec0f7f45150df5
MD5 8e9ec467827259e1a93b66762e9df7b2
SHA1 dd3ba17723dace0965a7afb1709917344b1c2e9f
SHA512 566ca12de551cd5ae1ad4e9ee960522b78475dbc613ee56bc6e4c51c57aad2f743eb2bf84918a51f6bb8696fc167568bbc566d6ab5f10edee99cbc275fc1e01f
SSDEEP 96:OZZeVRS17D064Mvnbp82Z79CmkvSuP0ok7SvJ0Xy6lVXZeZKt/IiSykOxtNpMlBF:kh17p4MBmPP01uvFovO0/IiPkOfNOn
TLSH
T1BDD1C56DA026A5FC080C3717A312437278980B292BF7A8B5FBC911177E50E5C623A74E
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula0405CSY.tx_

SHA256 afd73e0e4d3460a6a7551365ca86b3d631e555182e3e70c190abb692eda29924
MD5 e9c8a750a4852655efae015be60a33cf
SHA1 20d5b67210ec7d279bb4cd19072c34c46ba3fe7b
SHA512 a9a611e5385d63e38a3a1d96c52ba234976c9bca5fecc19e2c9fa0f4aa572ed21dc9e3aacc4da80d6d9b3bf8ecbcf0280846a8d31c8b9332de295c4ac8ceccd3
SSDEEP 96:ZXpoGiWCHz7TFMIhYmoeSd9UnqoVkqaPS31THvxRuJguAsP4DN7r0KOUT5ZcR8wf:37ihnTFaylV463RHZRuJg3BoFiMgu
TLSH
T1BEF1A62EB842F215DBB50388339AB1187A8F1FA8492D86FE7C4BD24625635E5DF74CC4
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula0406DAN.tx_

SHA256 179aab8757f4dbbdd94f1110fba54344cf160f9b29ff44805e1abef4e621bcc9
MD5 39c8171a7410f8322c21bf2d234a1629
SHA1 b2ccd2214cce578a2a9bb73927301791510d954a
SHA512 246606613c909ec2eb7531612922ac54d7c4913413579fc1430a70ff56b5b09c2a5e612116e355ea7415b489cb1b0e01861a0fa916544ed38d90700c43b199e2
SSDEEP 96:qfunySAI9GVQ8Xu6YFf0qgZF3gRkpkxpyLXznJ4AS6hYkUVV1ldBe2YG5JaYXe/k:qfB3mEQ8XRhpuAvyAbhYLVVfYgsGzNJ
TLSH
T1FEF19602B07633396F3E4B5AF404497B965F272CC16495A5F588C1BB05C3AF492BF18A
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula0407DEU.tx_

SHA256 8617ee31aedf207c4741a8c4776f0d05d1abe806f99ea1713b6e96de4e99abe0
MD5 94b75245d9bb50b201d3f2764c53e2e3
SHA1 7012f0f1ff8bbca199a36990461a9806d980bf87
SHA512 b7a6eba892e7e0afcf89f30c974afde27a770a98dd39fe9453e78e3808826b1b93459aaabd339e2e31decb51bd6c7a04853f6d4adc02c731d695befc747e1379
SSDEEP 192:Fhuvzn4HKtpajKtsCRXmg4K2XUpX2C5FOc2o1i2XQ1:FM4qtUjksCRWs2XUZhN982A1
TLSH
T1A302B5B17CEBE23EA745778876018CD2B38E93ACC359B172B368C176260A0F585DE15D
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula0408ELL.tx_

SHA256 c5e7f757d16089cafd5a7a05a49dd8d48de047d0926e23e7ab830a390ba8fec3
MD5 58b4a7b0ff5dc5bffeac0b3595daf0e4
SHA1 d01dd56946cc76c2ded3f2a2ba5d2918313aa707
SHA512 d33961911740f3bd85c3e01c58f8804965bb0420a8fdc20b9e8cd114c7d0a57a8ee06b18ff453fa0318e5c944b7bc2a19100016a31a618ad76f342d762f410f1
SSDEEP 192:9dlM/Ph507pctXs3TFSRE9Z7t7rgmnIpT/XmAhlTluzzf+bNPUp:xMXh5EpQ2TFSRA7en/WAnbNPUp
TLSH
T13B626CDFB1552DEE8086990A44D8E03D6BC66C2CE789C6E4B239C711BEFC461C925E1F
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula0409ENU.tx_

SHA256 4491f92a9a03c8b843a7d945266daca5dffac636e47a458a117030765f39df3c
MD5 d013fa0d5b4d9e1d3288e977e256a81d
SHA1 31e4b82184c92fe84bd05628f12ed416b4ef4786
SHA512 6231b4d4de363e5df43ea391f2fdd825be05aa8a40859fb2dcc43db48a9b44accc0eff57ea6c065910c648fae80c8fd2d92e5e0df0462678df1666448f79365d
SSDEEP 192:6Rc3wy7SUI+eGltTtS80SLDe+uFpQaXkm:jwMltk2LC/Fp9V
TLSH
T13DE1A87E710B23B1099203A2664EE5D1F71F1DB4B26F13917CAA81282355B39137F699
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula040bFIN.tx_

SHA256 6d1e5fbd597178272669509631bb66114d5fed53701b09568d6d96d01a24357e
MD5 a7388c0f8d482e82478f566176a3d9a8
SHA1 e5a3e6fcc4f995b9f6b6eb5d69328a8bb59302b1
SHA512 8078bd653e43a5711a79f5c6cc5d42fd20dc92097a08a6e79d44a8ff6569556ad0830b228e2ad5dfbadba042d1cd4c8a789b4bc42af1b06ea7a764a3ae92d6e5
SSDEEP 192:2X+KRcx1XtbxQELc60LZWyVjJ7UmXIhflyVwK/Bc+go:2XfuXor/UmX/wR6
TLSH
T191E1A6E36145D0707BC082FEECA151AAE7D05E4D0E78DA11F6C7CAF812DA44636B227B
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula040cFRA.tx_

SHA256 1c4a541801f68ff467684ec5047840aaecc374f9fc9513051cf6a5ba1351c6ce
MD5 bd44fcfde0f473faac30475b7e4aaa67
SHA1 8ef7f6e3b5f8aa2ee6fc42182f716fe0ae414f6d
SHA512 4fde975fbabafd6606fc040a1ecaa29aeff2d542faf6cb057ab90837a2d0f7ac2ab44030689821ff7241a7eb8d1d2e23ac07d434a8067096a0b7f5bfc796fb92
SSDEEP 192:U0DRH4EMTJDWEijqKaMedXwDwfbUKBBc7WLo3UG7ifbXnulLjWzvWk3:5DRHBMJij+MeRfbUMq7p3UG7CbXnAWz7
TLSH
T1E302A67E95CF11D51EC612A3FB62DA67C53CC1986225E324E8CF4146138985CF3AB2ED
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula040dHEB.tx_

SHA256 06e233fac186806daf138f64c096f07aacfcb8dd45d2e1e3831c8d6e8ed059a3
MD5 2f8d1bc1e4f586788ca49ce29cde0a8f
SHA1 259194bde6ac53781c1cbef03ec2db74f7d96eaf
SHA512 1823ccf5c5be085dff3bfbe86e3c01be1f1f3f1862219c800081105fb3cee9a9ac2eb6b464c00f1a66dba8e2a236121cb7b10f80b27c0b20c2415f9b4c592758
SSDEEP 192:YmEkqEHpkTVDHYFCYpxMB3gxuWtb3zztZqutuLJp+bdqX5VSS5V7vANmqY2AIeRj:XeHYFCYpxMUusrzztttuLn+bdqX5VSSv
TLSH
T1A61213C8F2C51225523666D3DF55F625AFF28AB23CA66515CF08122CFC374E5BE234A8
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula040eHUN.tx_

SHA256 8bccef020cffb252156379728db537fd77c4f04f0e83b1c6b90c589ce58ce343
MD5 c052b3e11e03272bd9b879b6a1ac77f8
SHA1 869c84ea01ce28edb983cb0c5ae505b537a38d44
SHA512 e09a1ee8862022d4f27068c6a8d62a8e8ce8e58bd0f4ebc91ffd73defd12d63ff8d55c02caec2c1d4f429eda3e8983d84246de0bc971e0c930a1c82604166795
SSDEEP 192:jjwdzueUhroFIzkN/uT6o8cvLM2Y6SWqLLcIyBaS:36YcIzkNHgLNXqLLUH
TLSH
T1E602A83F173291989F2F0FC76420BA0C458A15BD272F2AFF78CB851920566896DC74EE
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula0410ITA.tx_

SHA256 1ba080a7e8dbd90de115a5dc232e08c2aeb0b3b29bd669f2c8b933fd9d6d9126
MD5 14a626b92ac6ba519d973720e9cbcde8
SHA1 f0746d90f87a88932afecc7e29cf8f7e7e090d66
SHA512 404813c2456080d55a940d4331e01488886b06674f703185ff7898fe4fd97ff2ea9b14bc8631b1001a4ff2b061a546192e24b8d3cd09c849516c906da9c001ae
SSDEEP 192:fz2pSni0fkUnZqnVHzNu3eVIT24hBkEShcKyc9Haq:Dni0fznWTNWeAfQpyA
TLSH
T18B02853532D323195D9A43D9A56AD184F67FA8C8F94F3574B4D9033C10CEA84F12E68D
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula0411JPN.tx_

SHA256 f928cd9ffee90b35c72e734e87a7fb3993ff22299d582c9e75dbb2b3a0518831
MD5 180066a9e8a7bd72782ff7af1015ee4a
SHA1 a266af0c77337f5b1bf123d56362bde6a77878e9
SHA512 2a2a6e57f818fc5132aefcfb86155b3fef10ab2966dc8e7d36dd488b6925458bc0d25ec51205184894bb4d24ba3200b1df0c709b3e605de4222f3e2b2caee429
SSDEEP 192:HJr6ClgR+HblPMnMSMpVFN6UpWg5mMuJakBQM6Zjz7bLltdnBWlg+NrXcPH6rP7B:WcJMJakut3XdnBhiM/6I82JID
TLSH
T16912216CE3C1A03AA913A1436C8E256864585D5FDE937776047EC4747AA4FCCE484BF8
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula0412KOR.tx_

SHA256 227718f61ea01db0ff08abb695b6fe38b52f39610273d85e0585991498365c71
MD5 06b3496f6569ac37a3878539ef8c08e9
SHA1 04390ca57cddbabed7f391e28552fb196dba5d8b
SHA512 2f13f452600b12dbcc922a3504af690470e8b03d8d1709893ef7e9004d2b6cbcd1eb7a9cf893538d311609120bd7877236d8a833a6dd24890cedbe33a2cff3de
SSDEEP 192:gnzdr9T5SWWDwrPTRkMzE28sl1kSg3Rm1NvZUcEbv9T:gnzdr9T5SWWDmPTeyE28slWdRm1NvklT
TLSH
T1B4022FF43AA371C65CD6D9C1EDC1B6A1C24244B2EFD705B4BC44CE18A898393498FA7D
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula0413NLD.tx_

SHA256 58dfe8966320a68bcbe0512c5997e1b7c6fadd82aa2992704600f4d97a4f0df4
MD5 b61ea07e5eb3dfdfc914db7a2e42f442
SHA1 84c70ce3604c676963a3179251f0aecbee766f6d
SHA512 18d41078ac2a6cf473f3b9dc11ec5a3b09aeaf79f49bf64bab0d734d25b8f7aeb3333a3dfecdc9f3bb2397eaa6282546771b07d73617213a7813a46d60b462c0
SSDEEP 192:t/beFw1GCnMOCRjL17JbHf8K0T9/eBx+Hra:p6U7C5p7Jrwa
TLSH
T15F02831234DF2B7C9C459B89B40915FBEB5BD37CC678B2B8A868C3386502E91413D9DA
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula0414NOR.tx_

SHA256 d6c8fe993c6eb11418efb1249eaea617f410f0600c4b9d5197aa2a2a551b4e9c
MD5 817082f389a7dd965ac02634a25d4411
SHA1 2b0c3fb65a0cdb1af8cea301db857553ff9b0788
SHA512 9178ffb736b185e0717e5d07a121ef97f2454e40a4f61cb91694d61a5587afee406c711ee9c065a8cc2782245ca92975fcbc4d4e50df1a20791f19711425a7e2
SSDEEP 192:xjNjOvXpEIxbREiLJ/YJ95O4XBocPEofOv4B4tmJLfF4a48d8IGpYwnzcJ:bjOvGIxb3LJ/mC4acsSOv4B4tofF4a4S
TLSH
T10EF18303F05AB3356F2A8B56F80C5E63874E9A1CD50C4BA65E9CD1BF04C7FE451AE286
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula0415PLK.tx_

SHA256 5e0d021044a41346b04d1c95b955f2126b9329d61bef0e1e6874b7dc88582b71
MD5 dd4e352e3eb08358618b044187c2ab27
SHA1 d10a9d13abfdcaac8e48c2756fa781799e61e5f0
SHA512 7f2616bc6f1ac0a215347bffae40e2d879ed0ce719587360c6c928509e809ba3b268e7fc8861da6f16e2eccad01da7f878c2ebc8945f1c45e15918e0e6151182
SSDEEP 192:/CzZGf464HRG86jGmKJsptCAQEkvmEfeIx1:qJ6E6jGm9zCAQwri
TLSH
T19C02B65AE4D3928FCB314588D1E37F3404EC88C4A51A8B6B3D5FA8398121A55D7AE3BC
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula0416PTB.tx_

SHA256 6ac342d3e76d7d5e212af10a5d4876650b3e5cfd79db11a236c53b4e559c76b8
MD5 c6c45897ed07be636c4b3d85093afc87
SHA1 ac57482e7a784adafaf0ccfa4ddae5a9474481fa
SHA512 1a4ea8ebf4f733e4cb812b3537b8d1f8e5974f2facfb9f8821c803e7a30a8e399c0c705622a3645a866769b811c00c1309a4663da5791fb5a2400f20712e1b1d
SSDEEP 192:QpA/TRNPv9hgXK/B/NlJZfw08TJ3GMCcg:QpA7RNPDBVNlJZonGMCcg
TLSH
T1C8F1536435C213780F1143912A0BCA02B5495BD8BE06D6EAFAB64F9BB3DEC80C777A54
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula0419RUS.tx_

SHA256 832a483adf079fc4264ffc0f974718fbb6808bc75bac80749129d4aeeae5f87d
MD5 4e93f9db913b99d5e886123ddecbefdb
SHA1 773add34b05abdd5bab9137223adb8a82a4f0305
SHA512 290f09cedad59e07900e9df69b8c03e78dd7fbc3f6a2a744ec7fd05ffccad956218d27d918188f1ab2a4260754e2ff3048ad85b389d32337f4a84406f41fe3d8
SSDEEP 384:/mopke50PJYL1QYbIm7GZgHh5fvuSfRvRVAD53PJX:/mKJ50PJYL1QRwPH3fvuCgD5xX
TLSH
T110826A619A9A548E1102F41BD808BD0D7DEB91FF3FA7936325942D7F31F1038CA7962A
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula041dSVE.tx_

SHA256 f2d079c600e98aea971df858c8e76019da5ac968b888bc9ed35908c738de39c2
MD5 a5903bf8eb9d0db5655ef6493411f30d
SHA1 e4ff018d67929255767a50e0c22f22b8af1715b9
SHA512 db5271a04faffafcf624bede2e83d9a6a7cb37bf84502ba8895585de0e4fb483b8c2b2c1f8a96decb6580e822c746b04381ca6a74f2393003c9b62c5af23c706
SSDEEP 192:ZRaps+rtWnS+GyAbIzVxJymR9+Q16k/vN5vEyPJnCl:ZRa//+6bIzzJymb+JkN59E
TLSH
T177F19403922218B43F6A569BC084466643EDE16CE2F95851BC984EFF4887ED855FE70F
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula041fTRK.tx_

SHA256 0f220e84847993351652a8f128113ae331eaca39a5d6a3f901870294a9ad6c22
MD5 6566288c265899d01a2da2ef876cc53c
SHA1 5dbf97a0680237a1612ec6f7994f4aad8c952043
SHA512 90efe754b5526c7f3820dab64ca4157f067ddc89f027178f5a6526ee2a56f9bc64b3529cdb4f194c7da8193f47c808b8a697faa43be299500f6db16cd0816f95
SSDEEP 192:AsGt4ZudFxoC+mDhIdhZux4fvh/XU3n3foOx5y+WJqevdAOzqw2llaPrQ:OtjJx+aIdhZuyfO3PoQ0/qei2zGwPrQ
TLSH
T1D00262811ADBAD3D4F7523CF65920196F8AF0BD753319C9AAA15BA2A3B047474393E0C
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula0804CHS.tx_

SHA256 34aa86d9cb452d81139d51eee839ab60f3b407550f04dd88849402aded0dea2f
MD5 c514acc9300699c27a4ad822f81a372d
SHA1 8b9c4dee75b6c0f2841d5e4da426b9fa6e44004c
SHA512 7be70333c08d2e2e901e52f71eec90f0a490d86029a1a49226303c4b2c68041d2c0872612b9b8d2573d9fff04ccacd05571d58d7c9e8342348fe9aecbdd013d6
SSDEEP 96:agDP7cBQw9eejz/szVBydfXsCvb6s9tZjQt8qkF6loVGpiGrN9B3QDoryT952qR6:63LdfX8KtZjQtkBV2iGrNgor0952qRn6
TLSH
T16FD1D83F903B28DB064B37A60B089735B4D81F499176ACB0BE1591AB7B04E4E131EF5D
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula0816PTG.tx_

SHA256 d4d1920ef41aa0987f784f6a2b6acb657025dfb62c1cc90292494b214647d3f2
MD5 df6182b835c111ecc4066b38dc01b2fb
SHA1 04d542d24ac8e7c8faacc5cf23ffb61c2523dea3
SHA512 68e2663fae942707b3d0303531e77a1329f548c8782de11427b1429ca2533e3b4cc0b59f830fbc77b3054167a64d37f2c114a48e12df207579007f4a43e6728a
SSDEEP 192:YIxaZ6Tv4Ud8Cn5+CE5NLwPeXYIKH9Y7F5zQ8hzlPxTGz:YIYCnQZLXYozRYz
TLSH
T1AB02733CB5C652340B1113832B07CE82B58967ECAB16E5E8F6BA4B4673C9DC4C67EE54
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/Eula0c0aESP.tx_

SHA256 b914b42132fa300a4b3b018724bcf239e3a3e558baa9e7ff537fa9ae2173d020
MD5 11f9b1b160752970f97f1e2de0435e95
SHA1 d0e8a5cdd432a66d691fb84720c7f408106edbf3
SHA512 700f1fb056fc5abb458537c76592ead5b16b353affd2ec328a78b37adf477b416fc5fe6246f15c9e8465dfada17cd808fdded0eb4e273febc09081f40ab274f1
SSDEEP 192:/tsO+DHsAgUVHqPru6WR003dQ5ol/RbTRm:V8DMAgUVH+qTR04ldRbTRm
TLSH
T1F8F1852574DD13635D6263C1AA43C59BF8A897D4F50EC6E0F0A9832925CD2CCC2EBED9
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/InstNT.exe

IMPHASH 95380febe7414ea710530894e1770a0e
SHA256 d8da73d49fb79974cf6e3a43040f5322b17e32270dec41ac8f69088afcc860f5
MD5 ad46c3029be55563059d974d4c73791b
SHA1 b08dea7dbaff2bfae08a7ac1a95e8ec3a4ef4766
SHA512 75ce67ce7a2bdb7e6befc81f5ecbd922ea646e9768aed0a0d620c46db0d37f2458639a9e491ad337f68d4d96c579e2e8ed291fd7b5d8ad8516ad4a20909196ff
SSDEEP 3072:OiVFkmZUYGz+zSj47A2UTU14+V7rtQquTi4z:1VFkmZUYGz+zSjOUoGE7Gq4
TLSH
T1EEC34A12B6D1C472E4A60635CC72EB115F3ABC22BFB5938737903A8E6D713D19A26352
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

af:0a:f7:4c:c3:eb:01:c7:d6:28:34:78:8a:b5:6d:a1:50:fc:5e:ee

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

21458

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

setupapi

SetupOpenInfFileA SetupDiSetDeviceRegistryPropertyA SetupDiGetDeviceRegistryPropertyA SetupDiOpenDevRegKey SetupDiDestroyDeviceInfoList SetupDiCallClassInstaller SetupGetInfInformationA SetupQueryInfVersionInformationA SetupCopyOEMInfA SetupDiClassGuidsFromNameA SetupInstallFromInfSectionA SetupDiGetClassDevsA SetupDiEnumDeviceInfo

shlwapi

SHDeleteEmptyKeyA

newdev

UpdateDriverForPlugAndPlayDevicesA

kernel32

GetStringTypeW GetStringTypeA GetProcAddress LoadLibraryA FreeLibrary GetWindowsDirectoryA LocalFree FormatMessageA GetLastError CloseHandle GetCurrentProcess GetModuleFileNameA GetCurrentDirectoryA CreateProcessA FindNextFileA FindFirstFileA FindClose RemoveDirectoryA SetFileAttributesA GetVersionExA EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection ExpandEnvironmentStringsA GetLocaleInfoA FlushFileBuffers SetStdHandle SetEndOfFile ReadFile WriteConsoleA GetConsoleOutputCP WriteConsoleW Sleep GetProcessHeap GetModuleHandleA ExitProcess RtlUnwind HeapFree DeleteFileA GetFileAttributesA GetCommandLineA HeapAlloc GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetStdHandle GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement WriteFile GetCPInfo GetACP GetOEMCP IsValidCodePage HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW RaiseException FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CreateFileA SetFilePointer GetConsoleCP GetConsoleMode HeapSize

user32

WaitForInputIdle

advapi32

RegOpenKeyExA RegQueryValueExA RegDeleteValueA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges PrivilegeCheck RegCreateKeyExA RegSetValueExA RegCloseKey RegCreateKeyA

06_Touchpad/WinWDF/x86/SynCOM.dll

IMPHASH 8a6e3a92dab968b71db0c19cf79616c3
SHA256 4372ba8511df507e64769149e8e745cb83794148dbc04f8473c01f042a0e0168
MD5 f495504ba51496a72635c7e9b3041660
SHA1 202a009749efbaa098a7413e6ef1ee56b36a345c
SHA512 9592b75d0fd6f9417ddbd445d051fa7bbbea5b36ab66bfac0861d1fc468da33337d3fc7610c39ccd28ed3c8c198e82d3b5adef34c5dda23dcb60582bcd66eff1
SSDEEP 3072:oUAxuHZ2vv8H4mD1VJDmNRHMtDyiBWGmKz:oaHZ3uHG5ICz
TLSH
T1E0F38D1236C6C073E14E013E8943E3925BFF7C625EF6564B7FA8168D2E742958B39392
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

3e:26:5f:f3:60:5e:f4:2a:98:fd:19:8f:7d:f6:9c:6c:12:cc:f5:44

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

62953

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

f:\checkpoints\TPDrv\Do_Not_Release_v14_0_3\SynCom\SynCom\Win32\ReleaseA\SynCom.pdb

kernel32

IsDBCSLeadByte FreeLibrary SizeofResource LoadResource FindResourceA LoadLibraryExA GetModuleHandleA UnmapViewOfFile OpenFileMappingA CreateThread SetThreadPriority CreateEventA SetLastError LocalAlloc GetTickCount GetProcAddress LoadLibraryA GetSystemDirectoryA TerminateThread WaitForSingleObjectEx GetModuleFileNameA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA IsValidCodePage GetOEMCP GetCPInfo GetSystemTimeAsFileTime QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType DisableThreadLibraryCalls lstrcmpiA lstrlenA InterlockedDecrement InterlockedIncrement InitializeCriticalSection RaiseException lstrlenW WideCharToMultiByte MultiByteToWideChar SetEvent OpenMutexA LeaveCriticalSection EnterCriticalSection DeleteCriticalSection LocalFree GetCurrentProcessId GetLastError CreateFileMappingA MapViewOfFile GetVersionExA CreateFileA Sleep DeviceIoControl WaitForSingleObject ReleaseMutex CloseHandle CreateMutexA SetHandleCount HeapSize ExitProcess HeapCreate HeapDestroy VirtualFree IsDebuggerPresent GetCurrentProcess TerminateProcess TlsFree TlsSetValue TlsAlloc TlsGetValue InterlockedExchange GetACP GetLocaleInfoA GetThreadLocale RtlUnwind HeapAlloc HeapFree VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc GetCurrentThreadId GetCommandLineA GetProcessHeap UnhandledExceptionFilter SetUnhandledExceptionFilter WriteFile GetStdHandle

user32

DefWindowProcA CreateWindowExA PeekMessageA wsprintfA GetForegroundWindow RegisterClassA GetMessageA DispatchMessageA KillTimer SetTimer GetWindowLongA SetWindowLongA DestroyWindow CharNextA PostMessageA SendMessageA FindWindowA UnregisterClassA

gdi32

BitBlt SetDIBits CreateDIBSection GetDeviceCaps CreateCompatibleDC CreateCompatibleBitmap SelectObject DeleteObject DeleteDC GetPixel GetObjectA GetBitmapBits GetDIBits

advapi32

RegEnumKeyExA RegQueryInfoKeyA RegSetValueExA RegOpenKeyExA RegCreateKeyExA RegDeleteValueA RegDeleteKeyA InitializeSecurityDescriptor SetSecurityDescriptorDacl RegCloseKey

ole32

CoTaskMemRealloc CoInitialize CoTaskMemFree StringFromGUID2 CoTaskMemAlloc CoCreateInstance

oleaut32

VarUI4FromStr RegisterTypeLi UnRegisterTypeLi LoadTypeLi SysAllocString SysStringLen SysFreeString

06_Touchpad/WinWDF/x86/SynChiralRotate.mpg

SHA256 48469d43a7438fad4dfb31d70413d29d6a9f89616568501ab9d615fec1a36cfb
MD5 cc4d2c6dc4e4cd185a76634bec0ea6fd
SHA1 48c075b35da99465de31e86e759d50c114da0517
SHA512 7f5f3693c846004ae13b423d9d29246d82959775c24683200539178cac6a1e8a8f810999620fb5b9b4d81c159b3a92e13cd206b6b06347e7e8101b9b894668d1
SSDEEP 6144:1gU2dFS7Jwv6mNRYmLFqeWTCaTCVBPrI+wtAsvxrDLmAGjOb32tcZmQYtH5r6Xus:1gU2dUu6yGmp7UCk+cfvxnLjBbmcUQY+
TLSH
T1DA8412285B8FB8B5E34DEC0A441C12236173BA7B1C81BAF7777BDB4CA49D0356A42859
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/SynChiralVHScroll.mpg

SHA256 b06b20b2887238b7bdc677f9935e4aaa70295f33c7ad79b80d8ba8079dfaa8b0
MD5 ea81c8b6cbb5fc85b3e2702ab1a3a979
SHA1 f84374a54ac9b57fd20ef8f8b626c713adc4da41
SHA512 0243e72411a9670628cca7ce70c243bd5ed58eee59a6d1c3f23c48a19d1fb911b6f10af6db09762e5d714b21e2220aa667f2ef0723afae5af603baee36f48874
SSDEEP 24576:nsO9ZSyslDPhGHJMDx7PZVFAfMVMHNcy9dJOrVOGz0iHZGpI:nsOSy8S2jRkcy9bOYGdHZiI
TLSH
T1A17523162F1F08A4F27F5ED90C466092C565FEA76F847892BB79C39C70B35B62E50883
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/SynCntxt.rtf

SHA256 6c01123252306b55fcc8806104bb0654c7f51e99ba7760da1f8dab8a10643ec4
MD5 d38b1b91e69ac2367372357d12d8bdf0
SHA1 bdd60e4fc16904a521e2158b2c85e9bb3f9457d8
SHA512 299a206771924c856a45650df6e3f88cd335e504f10493af356ef125069a183cb02e6474f874328b2036174fa639c920a997676d4bb643b5684d2a52c6730dd6
SSDEEP 98304:rej9ASn9sWR1J2TeM2nyTGyflQV2g2dK0iKae4lRwlHpAm1hlHTF3TSI3ON:vTeN
TLSH
T12D76DC4A6C707A5D0A8A017E970B51D2BBED492ECEF5A012FC5F6207156E4BDE2E34C3
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/SynCtrl.dll

IMPHASH 7d8ecf9d4c86d73f70af08e8860c67a5
SHA256 cab8c82aa5a8036fe45fc67058f7a608fda7cbd915f38c2a9b383bbb6f366a11
MD5 0363f8cefcc72f55b92622b20c2cdeb2
SHA1 e872209703a7251e239dc0328691917b8d0754cc
SHA512 5da375f1734245db49e5875a6e62ea9ad665ed0ac6baa3ab6ea17205a9ffcab0abb218b5b89d56af12141ef5b6d8fd26f251df7588f3e8eeed4c736cc9224976
SSDEEP 3072:cbzw2u6pbmXLVRsMFoVRte9UIywfm5Rcv01ZtWrONKqTUzudXVIvB7hVTG:UzcXLVRsMFoV23ywjCCrsKiU2qvQ
TLSH
T168145B4277C3C473D81E023A5857D3AA6FFBA912BFE262436F54070E1E72385AF1561A
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

65:63:ef:8f:1b:5a:2b:71:2f:fa:91:0f:dc:1e:22:00:11:28:12:96

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

73232

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GlobalUnlock GlobalLock GlobalAlloc GetCurrentThreadId SetLastError IsValidCodePage GetOEMCP GetCPInfo GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA MulDiv GetFileType SetHandleCount Sleep HeapSize GetStdHandle WriteFile ExitProcess TlsFree TlsSetValue TlsAlloc TlsGetValue IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess HeapCreate GetCurrentProcess FlushInstructionCache GetModuleHandleA LoadLibraryExA FindResourceA LoadResource SizeofResource FreeLibrary IsDBCSLeadByte GetModuleFileNameA InterlockedDecrement InterlockedIncrement DisableThreadLibraryCalls lstrcmpiA GetLastError lstrlenA DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection RaiseException lstrlenW WideCharToMultiByte GetStartupInfoA MultiByteToWideChar LCMapStringW LCMapStringA GetStringTypeW HeapDestroy GetStringTypeA GetCommandLineA HeapReAlloc VirtualQuery GetSystemInfo VirtualProtect RtlUnwind VirtualAlloc VirtualFree IsProcessorFeaturePresent LoadLibraryA GetProcAddress HeapAlloc GetProcessHeap HeapFree InterlockedCompareExchange GetVersionExA GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange

user32

CreateWindowExA RegisterClassExA InvalidateRect IsWindow UnregisterClassA CallWindowProcA BeginPaint GetClientRect EndPaint IntersectRect EqualRect OffsetRect SetWindowRgn SetWindowPos GetDC ReleaseDC LoadCursorA GetClassInfoExA GetWindowLongA SetWindowLongA UnionRect PtInRect DefWindowProcA DestroyWindow CharNextA GetParent GetFocus IsChild SetFocus ShowWindow GetKeyState

gdi32

StretchBlt DeleteDC Rectangle CreateMetaFileA SaveDC SetWindowOrgEx SetWindowExtEx RestoreDC CloseMetaFile DeleteMetaFile CreateRectRgnIndirect SetTextAlign TextOutA GetDeviceCaps CreateCompatibleDC

advapi32

RegQueryInfoKeyA RegSetValueExA RegOpenKeyExA RegCreateKeyExA RegCloseKey RegDeleteValueA RegDeleteKeyA RegEnumKeyExA

ole32

OleSaveToStream WriteClassStm CreateOleAdviseHolder CreateDataAdviseHolder OleRegGetMiscStatus OleRegEnumVerbs OleLoadFromStream StringFromGUID2 CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc CoCreateInstance OleRegGetUserType

oleaut32

SafeArrayGetVartype SafeArrayAccessData SafeArrayGetLBound SafeArrayGetUBound SafeArrayUnaccessData OleCreatePropertyFrame LoadRegTypeLi VariantChangeType SysStringByteLen SysAllocStringByteLen VarUI4FromStr RegisterTypeLi UnRegisterTypeLi LoadTypeLi SysAllocString SysStringLen SysAllocStringLen VariantClear VariantInit SysFreeString

06_Touchpad/WinWDF/x86/SynFlick.mpg

SHA256 a19a395fe655ba569e4c924cafbb6a2fc6baa1f68ce6a3d3f88a2c5f9d7bb886
MD5 f797da13b9b5919c130f8d150fb1fcde
SHA1 f4acb7ee429a093ac3d13c6eaa9445ae1d9c9ef9
SHA512 1b1c8541746c578b02cb4b3b35720514bcc264f13951c5b92e5c45ee25f26090dc9b8420e7ea9930390cbf096c3c932a74a4c608be5e75cbcc5898498e6d577b
SSDEEP 12288:IKoWpz9E25ibazdPb8zeKtOiaMgPrzMtzqVmbZtTubf/29wOhuKYGAvDI:5jRldZfrzMkwb7Ic
TLSH
T122F4121B1F9B4440E14C5C57848C02318632FFBB768A59DAF357E76DB5608AEBE1282F
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/SynISDLL.dll

IMPHASH 88f1835ebf14ca94cff25ee1b3d3acde
SHA256 6ad2354c3c6fcfc1e4bb6b104aaeb8f287d9f8b522c7d7417e2df22e3084ea73
MD5 0cbff8e1e720269b7393fd7401806717
SHA1 83adc3b50a0b1d30a4ef8e8dbe44d970d898fbcc
SHA512 78b47d3b212abf1e8a62938da473841041334b7b737a21da0fcd1ee7049fe240dd2247d03d0a3d49d6a1c7355ac7dec28d2c9a7b8d02eca7503a4818ec5c36dc
SSDEEP 3072:WTwXb6awwy1OA4QmVWp6yby/Btfk/1A5pJdW/OGFEu:WUXb6awwqhp2/TktA5pdu
TLSH
T1ED14A20173F98235F5F36B79997946590A3BBDA2AF78D08F2390094D1D31A90EA78723
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

23:fa:99:54:74:ac:b9:e0:26:17:bf:c7:1f:63:f0:b7:8d:62:d6:0a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

37998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

shlwapi

SHDeleteKeyA SHDeleteEmptyKeyA

kernel32

GetSystemInfo InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection CreateFileA CloseHandle DeviceIoControl SetLastError LocalFree LocalAlloc GetTickCount GetSystemDirectoryA CreateEventA SetThreadPriority CreateThread TerminateThread WaitForSingleObject SetEvent WaitForSingleObjectEx InterlockedDecrement InterlockedIncrement OpenEventA ResetEvent FormatMessageW LoadLibraryW MoveFileExW RemoveDirectoryW SetFileAttributesW ExpandEnvironmentStringsA CreateProcessW GetCurrentProcess MultiByteToWideChar SetEndOfFile WriteConsoleW GetConsoleOutputCP WriteConsoleA RaiseException SetFilePointer ReadFile FlushFileBuffers GetConsoleMode GetConsoleCP WriteFile SetStdHandle GetVersionExA SetFileAttributesA DeleteFileA FindFirstFileA GetLastError FindNextFileA FindClose LoadLibraryA GetProcAddress FreeLibrary GetModuleFileNameW GetLocaleInfoA HeapFree RtlUnwind GetCurrentThreadId GetCommandLineA HeapAlloc GetProcessHeap TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo GetACP GetOEMCP GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree SetHandleCount GetStdHandle GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc Sleep HeapSize ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

LoadStringA LoadStringW MessageBoxW wsprintfA DefWindowProcA DestroyWindow RegisterClassA CreateWindowExA PeekMessageA PostMessageA

advapi32

RegOpenKeyExW RegQueryValueExW RegOpenKeyExA RegQueryValueExA RegCloseKey RegDeleteValueA RegSetValueExA RegCreateKeyA RegDeleteKeyA

06_Touchpad/WinWDF/x86/SynLinearVHScroll.mpg

SHA256 03338165be818588de6a4f229402bbad855df4a43bfb1e078ed06aa1405efd52
MD5 bf6677d9426988e644a7eee3e11e6d92
SHA1 2a5ddd0a9c6d2201f4ffb3a80c712be28ed3bb3e
SHA512 42ad1f80f310f228b69fe1835003ad6033e192decf2693e761a431a204e9bf4eb966c6a5c5ec79f1e9742e181677d11485885ef57f83859d5c9e8d69ffc6ca98
SSDEEP 24576:1lL4yczplJ288Odz94nXk/FSYdrR6unT/:3LHSiU7
TLSH
T1511512102F0B7664F18DAF51545C4233A432FE77FDD6B492F285EA98311B1A37EA0A63
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/SynLogo.ico

SHA256 d6d7b67f15add47ea88f06681c6027ea0a068e856f698fc2c141492f89846647
MD5 c19245ad9b745ad11fde20cd6f149847
SHA1 d9b128e7b1df48750af5df2facca6930aa1a155a
SHA512 8b1427fe68812de95f63b91661c09d7e8be137f2dccb4a0cf3db50022ea3b75ad54f073a59e23d35f5bf55ee9ab145d77f956e617b207a190b33c5105af0f95e
SSDEEP 192:AC2ZIxbMW3kvGmyeM/WAi7mteyr+KKDC+MN2:ADiFMomyeM/Wh7mteyrHKDj
TLSH
T1E23200B2D2D9C966C6D44138DC22B978BF107C0BB930F31236A55EEF5EEE6E99094341
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/SynMomentum.mpg

SHA256 c4ffbc1d6dd0cfc0a922ab347bb2f1e79a7caab7c6b6d42c4e801498d4e563dd
MD5 e11eefef2e7b86fae230639404c78440
SHA1 f5c5eed07fb0c1d3a85e598af97ba07944e9360f
SHA512 103b3542b100d457ad7da185b82d91397b1bf89b216ae4083e9eabe512209bb90f290894a1d64160a6d0800f8cc0018ca8fb319eb9f1769bce5368d525217157
SSDEEP 3072:L7JwLyrD0LgNoMDK3tmghVdoTN92kd1MwmV+lPw1pc2olFwndg/U6XYf14X:3qEZNNGmGoL3dvmCPAcncXo
TLSH
T1F234F159173F7301F06DAA14118882679577FF3AAEC1A11BB57BD63C30CA47AEF88891
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/SynMood.exe

IMPHASH b26fa37a73a8990fed7c3dd42c9c2493
SHA256 4595c796a4fcfdc0226cffb473b4466d1ce03c1c583bca1ac8f4a2d36f9c3cd1
MD5 e12a3a6029f46d4b9d6f6a16ee10bfb3
SHA1 51cf3702dbe85c4e36bfbd72214711f765b10416
SHA512 5e014ed73a6d4a30da65f20c0914bd045d8f5443e65cd372ae31a03d7066938dd60a9f2b085107b5a16d14f3eea74f8b5b445c004c695a0693cbc36fe9281f44
SSDEEP 3072:ohbkV8x4oOPJQhYFLT4u4b4s2wSabhEu3NStF8AG5wr73VIUTtvfoKsT+Q:ohYymxQhYFou4btbm286AboKS
TLSH
T1F2347D2276D2C073E5B7067109F683B867B6FC55AF35928F6B903B0D2E306D24A35762
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

e5:5b:95:a8:d5:61:d0:2c:7d:2d:52:76:dd:e2:a4:04:c9:a0:8e:73

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

71033

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

f:\checkpoints\TPDrv\Do_Not_Release_v14_0_3\Access\SynMood\Win32\Release\SynMood.pdb

kernel32

SetErrorMode HeapFree HeapAlloc GetProcessHeap GetStartupInfoW RtlUnwind RaiseException HeapReAlloc HeapSize GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate QueryPerformanceCounter GetSystemTimeAsFileTime TerminateProcess SetUnhandledExceptionFilter IsDebuggerPresent Sleep VirtualAlloc GetCPInfo GetACP GetOEMCP GetLocaleInfoA GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA GetCurrentProcess FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale GlobalFlags WritePrivateProfileStringW TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue GlobalFindAtomW CompareStringW LoadLibraryA GetVersionExA GetModuleHandleA FormatMessageW MulDiv FreeResource GlobalAddAtomW GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetVersion EnumResourceLanguagesW GetLocaleInfoW MultiByteToWideChar InterlockedExchange GlobalLock lstrcmpW GlobalAlloc GlobalDeleteAtom GetModuleHandleW lstrlenW WideCharToMultiByte GetCurrentProcessId GetModuleFileNameW GetLastError CreateThread SetThreadPriority WaitForSingleObjectEx DeleteCriticalSection InterlockedIncrement InterlockedDecrement SetEvent WaitForSingleObject TerminateThread CreateEventW GetSystemDirectoryW LoadLibraryW GetProcAddress FreeLibrary GetTickCount LocalAlloc LocalFree SetLastError DeviceIoControl LeaveCriticalSection EnterCriticalSection GetVersionExW InitializeCriticalSection ExitProcess FindResourceW LoadResource LockResource SizeofResource CreateFileW GlobalUnlock GlobalFree UnmapViewOfFile VirtualFree CloseHandle

user32

LoadCursorW GetSysColorBrush ShowWindow SetWindowTextW IsDialogMessageW RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW SetFocus GetWindowTextW GetForegroundWindow GetTopWindow GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu GetClassInfoExW GetClassInfoW AdjustWindowRectEx CopyRect PtInRect GetDlgCtrlID CallWindowProcW SetWindowLongW SetWindowPos SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow GetSysColor EndPaint BeginPaint ClientToScreen GrayStringW DrawTextW TabbedTextOutW UnhookWindowsHookEx GetMenuItemID GetMenuItemCount GetSubMenu GetDesktopWindow SetActiveWindow CreateDialogIndirectParamW IsWindow GetDlgItem GetNextDlgTabItem EndDialog SetCursor SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW GetActiveWindow IsWindowVisible GetKeyState GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions UnregisterClassW DestroyMenu LoadBitmapW GetFocus ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem GetWindowThreadProcessId GetParent GetWindowLongW GetLastActivePopup IsWindowEnabled MessageBoxW RegisterClassW CreateWindowExW PeekMessageW DestroyWindow DefWindowProcW PostMessageW PostQuitMessage GetSystemMetrics EnableWindow LoadIconW SetTimer InvalidateRect ReleaseDC GetDC GetClientRect IsIconic SendMessageW DrawIcon DrawTextExW UnregisterClassA

gdi32

SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx DeleteDC GetStockObject Escape ExtTextOutW TextOutW RectVisible PtVisible GetObjectW RealizePalette GetClipBox SetMapMode SetTextColor SetBkMode SetBkColor RestoreDC SaveDC CreateBitmap GetDeviceCaps DeleteObject CreatePalette StretchDIBits SelectPalette

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

RegSetValueExW RegCreateKeyExW RegQueryValueW RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegCloseKey

shlwapi

PathFindExtensionW PathFindFileNameW

oleaut32

VariantClear VariantChangeType VariantInit

06_Touchpad/WinWDF/x86/SynPinch.mpg

SHA256 c8444308c28f2874996e3acfff7a59d3984fb1da145f36e51586fed021cc59a0
MD5 13f42dd9bc7cc8d2913c0f60cd224bc4
SHA1 1376bdefb04bf46fffbc914bd44d0e918fdd8e35
SHA512 5f98b067c20b4ea3d4c89e6aba30c401ac73824f9e68dbbfe6fc5388e2f8e9128c6c25493aaa05556c08361e5777616b652c2246cf696f7ba535ce113a2b6d53
SSDEEP 6144:v83UffpUlu3fiLAwpBXBK95GzPbvJQKffdy7wptZ:v1HpUfPtsYTjJQK9y+
TLSH
T15C541209AB8B9620FA9EED53C5060593C190FFBBBDC9F143B39EC93571921762918C93
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/SynPivotRotate_ChiralRotate.mpg

SHA256 716a662ae69cba7cde18c0f3f58a1d4be7048c4247ea0f08370d874817ba0ebd
MD5 e452eb98b4eea71fbab9105596c92a55
SHA1 00ddb2426af4c91dede51e46db06f1c28dc80bc1
SHA512 d9bf72d153bf504d58649e00b2733835ef2c1063bd69a5bfc6a353c84676997613a5a809869bd788e124c19e7e7157b03a2ac8021a0a9b14ee0806fc8cd7a535
SSDEEP 24576:Cgaw85hNyyEqGxESlirRuIqsnsC32r4P6gWxcs:Cga1hNIejgCsC3eAcN
TLSH
T1B73522166F0F1BD8F11DAA1C884C59ABE221FE7114C2512577A2CB8C61B78FE3E66D13
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/SynTP.bmp

SHA256 ec215bfa7095fd838ceca43022a6e1685c60f0dca15a1965272bd848324f305e
MD5 56863d6aff8bb759afe566b9d04fb3ee
SHA1 865b296a6744775115a33cb1d1e634dde3772958
SHA512 8948c5345a7e6b818af719fd9185bccaf205b43310b4b3e590fed91f5334822350bb0ef4362c48bc14c4d6ed890f1460c9c1583a377b70ac0a7e6e426d9d0b19
SSDEEP 384:VnJ91SuoOZZBc9+aRIAjjjuYL5F64gDYGWFmVou:Vz1SuoOpeRIAjjj5q4+TWFmVou
TLSH
T17E52F84377471D2F9FC2E83980E574C5CDD45AF6AD2AE96B7684280ED0478801FDDB2A
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/SynTP.cat

SHA256 b027c6c52b74d98a2a08084c9a62a586b2890d5b7827c2f7b36e175605557ea4
MD5 6d2a66d38cec1feb9c76be716f64560d
SHA1 f0c58fc8d7d166fb03c6136dc4d4fc208fc2ec64
SHA512 a8437472978732e9e3ee92fca7dd73ecd13d5ba5f9432073c71f8eadf9108798d01bac58cc0b069279d0b28b49b133d68d0fe7889178e7192bdd31d7bc891922
SSDEEP 384:NKrAKoF77qdeegI8dUur2M/jAluqF0i1q/l:nHdkeNIe/jAluqv1q9
TLSH
T106A2966F16ED42A2E01AC8F29BF5E4AFF431DB97E8015A7D209B73604542741B30ED2E
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/SynTP.sys

IMPHASH 70f200ef8109f36681ebeb8526c21d63
SHA256 5c726d7cb2bf1c811af7093ed096a4f1bd6e37d2e7eda99579c49bc479ca4c4b
MD5 6bef3acd6ee22eec55b68699e8aace09
SHA1 0b6640771125c1863fa9f7c5e713ae2c13fef446
SHA512 a6d2c7f71530b18ab4938984d16e2f6acfe5b68b7e67dc4bc3a6a85b4e73424e2d377926ebb15acbab3e20d127e4d825131dbe9c8617f8da9a94e429e6d3513f
SSDEEP 6144:dk+n1Z9MX08lA68enJ/IqOl1tJXL5FSu4OFc:dky13E08aJeJEnE
TLSH
T1A4245B72755098B1CCD336F0C89C723192ADCA91077557D712940BFADDA83E2BA3A2DB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

7c:bb:5e:35:c3:a4:28:55:73:84:18:32:ca:b0:f0:27:4a:b4:2a:6b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Serial Number

61:0c:12:06:00:00:00:00:00:1b

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

May 23, 2006 - May 23, 2016

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

1

Major OS version

6

Entry point

182976

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

f:\checkpoints\tpdrv\do_not_release_v14_0_3\kernel\winnt\synwdf\objfre_wxp_x86\i386\SynTP.pdb

ntoskrnl.exe

PoStartNextPowerIrp IoAcquireRemoveLockEx IofCallDriver IoReleaseRemoveLockAndWaitEx PoSetPowerState PoCallDriver IoCancelIrp IoReleaseCancelSpinLock IoFreeIrp RtlWriteRegistryValue IoRegisterShutdownNotification RtlQueryRegistryValues memcpy RtlCreateRegistryKey RtlCheckRegistryKey IoGetDeviceProperty ZwEnumerateKey ZwEnumerateValueKey KeInitializeEvent KeInitializeMutex KeReleaseMutex KeClearEvent KeWaitForSingleObject KeSetEvent IoBuildSynchronousFsdRequest IoInitializeIrp IoFreeWorkItem IoAllocateIrp IoQueueWorkItem IoAllocateWorkItem IoCreateSynchronizationEvent ZwClose ObReferenceObjectByHandle ExEventObjectType IoDetachDevice IoUnregisterPlugPlayNotification wcsstr IoRegisterPlugPlayNotification towlower IofCompleteRequest RtlFreeAnsiString RtlUnicodeStringToAnsiString KeSynchronizeExecution KeInitializeDpc KeInsertQueueDpc ExFreePoolWithTag IoFreeMdl MmMapLockedPagesSpecifyCache MmBuildMdlForNonPagedPool IoAllocateMdl MmUnmapLockedPages PoRequestPowerIrp swprintf ZwCreateSection ZwMapViewOfSection ZwUnmapViewOfSection IoCreateNotificationEvent ExQueueWorkItem KeSetTimer KeCancelTimer KeInitializeTimer KeSetTimerEx KeDelayExecutionThread IoBuildDeviceIoControlRequest RtlInitAnsiString RtlCopyUnicodeString RtlCopyString ExAllocatePoolWithTag RtlIntegerToUnicodeString RtlFreeUnicodeString RtlAnsiStringToUnicodeString RtlAppendUnicodeStringToString ZwCreateFile ZwWriteFile KeTickCount KeBugCheckEx IoReleaseRemoveLockEx PoRegisterSystemState PoUnregisterSystemState IoStartNextPacket RtlInitUnicodeString IoGetDeviceObjectPointer ObfDereferenceObject IoAttachDeviceToDeviceStack IoInitializeRemoveLockEx sprintf KeQueryTimeIncrement KeQuerySystemTime RtlUnwind memset _purecall _allmul ZwOpenKey _alldiv

hal

READ_PORT_UCHAR KeStallExecutionProcessor KfReleaseSpinLock KfAcquireSpinLock KeGetCurrentIrql KfLowerIrql WRITE_PORT_UCHAR KeQueryPerformanceCounter KfRaiseIrql

usbd.sys

USBD_ParseConfigurationDescriptorEx

wdfldr.sys

WdfVersionBind WdfVersionBindClass WdfVersionUnbind WdfVersionUnbindClass

Name

.text

Size

184KB

Virtual Size

184KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

128B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

960B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

06_Touchpad/WinWDF/x86/SynTPAPI.dll

IMPHASH 8348598ffaa90743ed92c3494d0d1430
SHA256 63057fc093aac7c8bf8d759ebc5fd9c589dde022ce66c92f5bce4cfc4b3f8102
MD5 2ddc029dd444a2921c286357b5329b85
SHA1 71019b07a01da8b7e18dc72230c044deaea0bac7
SHA512 116e9ffe1e64c806fdf2dcd3c14738aab7f9a88620f708d092bce033bf176663ae5c47d3088dcf371c30d354af290f7e156df42923434a9fb38b1a3d61edd1e1
SSDEEP 3072:RUXfYhuGA/uK9aeeKpvYDKFmyJCtsm1CThBW4UI:RUsA/uKpesYwmyxoI
TLSH
T1F4F39D11B7D0E0B2DC67163508678B416F7ABC415B7982CBB7A03B4D2D72AE05F3A35A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

57:e1:09:62:40:ab:13:f5:7d:6f:74:62:56:56:6a:b7:c1:43:13:51

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

36058

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

f:\checkpoints\TPDrv\Do_Not_Release_v14_0_3\SynTPAPI\Win32\ReleaseA\SynTPAPI.pdb

kernel32

PulseEvent WideCharToMultiByte TlsSetValue TlsGetValue TlsAlloc UnmapViewOfFile CloseHandle CreateEventA GetLastError CreateMutexA CreateFileMappingA ExpandEnvironmentStringsA FlushFileBuffers CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA MapViewOfFile LeaveCriticalSection EnterCriticalSection LoadLibraryA GetProcAddress GetModuleFileNameA DeleteCriticalSection LoadLibraryExA FreeLibrary CreateProcessA WaitForSingleObject InitializeCriticalSection InterlockedDecrement MultiByteToWideChar SetStdHandle ReadFile GetConsoleMode GetConsoleCP SetFilePointer lstrlenA HeapFree GetProcessHeap RtlUnwind GetCurrentThreadId GetCommandLineA GetVersionExA HeapAlloc RaiseException GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage GetModuleHandleA TlsFree SetLastError TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc LCMapStringA LCMapStringW Sleep HeapSize ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WriteFile GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

PostMessageA wsprintfA LoadStringW LoadStringA PtInRect IsWindow GetWindowThreadProcessId SendMessageA

advapi32

RegEnumKeyA RegCreateKeyExA RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey InitializeSecurityDescriptor SetSecurityDescriptorDacl RegCreateKeyA

ole32

CLSIDFromProgID CoCreateInstance CoInitialize

oleaut32

SysFreeString SysAllocString VariantClear

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

06_Touchpad/WinWDF/x86/SynTPCOM.dll

IMPHASH b9c4eccb7762035ec154d9863bbc6e3b
SHA256 1bfb889787bbebb4585f0dd13ca745c2f1702ed8bb22842f333c2d528275e59d
MD5 b25b9c974e054a1017c6573a750431aa
SHA1 eb885812b849e4ea66729ff330e94f544b0b5e93
SHA512 f9fe9845244070543f5a28e425b90119d3816fc12c48c8325f877185984d1061a4a579d46b24d6075ca4774ab3372a870bfad2e3663cb838aa05018dff4c627e
SSDEEP 1536:u85/dnQrxSGL4hv12wRBoV2VNykShLKFnAtE3USNcgi81qmR:u89ZQBLwzRCEN0h2FnAtE3AgPtR
TLSH
T1EEB37C1274CBC073E489053E8886C3914BBF7C126DF2658BBFD8374D5E752998B29B62
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

ff:18:7c:2e:b0:a9:fe:47:0d:5f:d5:03:c4:90:00:47:9d:8f:6e:90

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

39138

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

f:\checkpoints\TPDrv\Do_Not_Release_v14_0_3\SynTPCOM\Win32\ReleaseA\SynTPCOM.pdb

kernel32

TerminateThread WaitForSingleObject SetEvent InterlockedDecrement InterlockedIncrement DeleteCriticalSection lstrcpyA MultiByteToWideChar lstrlenA WideCharToMultiByte lstrlenW RaiseException GetLastError lstrcmpiA DisableThreadLibraryCalls GetModuleFileNameA LoadLibraryA SizeofResource LoadResource FindResourceA LoadLibraryExA GetModuleHandleA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings GetProcAddress FreeLibrary GetTickCount SetLastError DeviceIoControl CloseHandle CreateFileA LeaveCriticalSection EnterCriticalSection GetVersionExA InitializeCriticalSection IsDBCSLeadByte FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount Sleep HeapSize GetStdHandle WriteFile ExitProcess InterlockedExchange GetACP GetLocaleInfoA GetThreadLocale RtlUnwind HeapAlloc HeapFree VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc GetCurrentThreadId GetCommandLineA GetProcessHeap TlsGetValue TlsAlloc TlsSetValue TlsFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo GetOEMCP IsValidCodePage VirtualFree HeapDestroy HeapCreate

user32

CharNextA GetDesktopWindow UnregisterClassA wvsprintfA LoadStringA SendMessageA FindWindowA PeekMessageA DestroyWindow PostMessageA GetWindowRect

advapi32

RegEnumKeyExA RegQueryInfoKeyA RegSetValueExA RegOpenKeyExA RegCreateKeyExA RegDeleteValueA RegDeleteKeyA RegOpenKeyA RegEnumValueA RegCloseKey

ole32

StringFromGUID2 CoCreateInstance CoTaskMemFree CoTaskMemAlloc CoTaskMemRealloc

oleaut32

VarUI4FromStr RegisterTypeLi UnRegisterTypeLi LoadTypeLi SysStringLen SysAllocString SysFreeString

06_Touchpad/WinWDF/x86/SynTPCo4.dll

IMPHASH 3a2ccad4913c64f12741fb9b23fcba18
SHA256 11fc7f39d43094eab83ac814d973b2fdd05d905afb4bb7842007d9270fce366a
MD5 a24fd63d2e8cf7a05e70f7697ea3c413
SHA1 8edaa497ef1d8f8eb7b4ed5086d2a29dc604308c
SHA512 594668b2b3349e11d281f08f95a0eec23cffb720484868d76436b5029812c392b07162505c653a31a9ae0b220764703bcd56ee69ac8c290f5785988f0e15cdef
SSDEEP 1536:MTqPw0lv+zPBhPNba+UB54cFJLGR3z943t/AmZNtk9j/+pXsPA/t395tTi3+qo:Cd6gP5b2QULLtIj/M/F95tTi3K
TLSH
T1BBC39E127892C073D449053E8585E7915BBF3993BFF998CBFB700AC98EA13C0A7752A5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

66:4d:c1:41:d4:93:c5:33:98:b0:ac:bc:6f:34:3b:a0:a0:ad:3a:84

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

19420

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

setupapi

SetupDiSetDeviceRegistryPropertyA SetupDiGetDeviceRegistryPropertyA SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiClassGuidsFromNameA SetupDiGetClassDevsA

kernel32

ExpandEnvironmentStringsA GetSystemDirectoryA CreateProcessA ProcessIdToSessionId GetCurrentProcessId EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetVersionExA CloseHandle GetCurrentProcess MultiByteToWideChar GetCurrentDirectoryA WriteConsoleA HeapSize SetFilePointer CreateFileA ReadFile FindFirstFileA GetLastError FindNextFileA FindClose LoadLibraryA GetProcAddress FreeLibrary GetConsoleOutputCP WriteConsoleW SetEndOfFile CompareStringA CompareStringW HeapAlloc FlushFileBuffers GetConsoleMode GetConsoleCP WriteFile SetStdHandle GetTimeZoneInformation FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA RtlUnwind HeapFree GetCurrentThreadId GetCommandLineA SetEnvironmentVariableA GetProcessHeap TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetFullPathNameA SetHandleCount GetStdHandle GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc RaiseException ExitProcess Sleep GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

advapi32

RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegCloseKey RegDeleteValueA RegSetValueExA RegCreateKeyA RegDeleteKeyA

06_Touchpad/WinWDF/x86/SynTPCpl.dll

IMPHASH 6f32fe2074e71f060a8cd395520503ca
SHA256 482f7b7519cedfeb965368e2d3c9f18e91869e3cfbb1220b2c9c447419df4a56
MD5 56c41554c3fc3f9969bc5a4404191844
SHA1 140998487fe72bd6670ec29ca1d564aa54ef3645
SHA512 e0202e8560849732ac1b3d52e9723cb47489413c0101a4fc1f5ea8c8900ecea249e388747097c8b531d931ab3e40c3af43583f9e5d1975937d550cc729bfd29b
SSDEEP 24576:5tqFImAiK1NHjdV7W3AQJTXhIVmquoHw+l:7qFIm1K1NxHQJoVfl
TLSH
T187358C50BFE9C071DE6E17712C37A31A52BAB6455B308AE3A7483F5E9D702C1AD38346
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

6b:8d:98:0e:e7:f9:e5:e7:59:a5:1b:4b:9f:04:46:d3:72:80:81:b5

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

526746

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

f:\checkpoints\TPDrv\Do_Not_Release_v14_0_3\SynTPCpl\Win32\Release\SynTPCpl.pdb

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

winmm

mixerClose mixerGetLineControlsW mixerGetLineInfoW mixerOpen mixerSetControlDetails mixerGetControlDetailsW

kernel32

SetEndOfFile GetShortPathNameW RtlUnwind TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetSystemTimeAsFileTime GetTimeZoneInformation HeapFree HeapAlloc HeapReAlloc GetCommandLineA GetProcessHeap VirtualAlloc VirtualQuery ExitProcess GetCPInfo GetACP GetOEMCP IsValidCodePage GetStdHandle GetModuleFileNameA GetConsoleCP GetConsoleMode FreeEnvironmentStringsA GetEnvironmentStrings HeapDestroy HeapCreate VirtualFree LCMapStringA LCMapStringW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetStringTypeA GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA SetEnvironmentVariableW CreateFileA FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringW GlobalFlags SetErrorMode TlsFree LocalReAlloc GlobalReAlloc LocalAlloc GetThreadLocale GetProfileIntW GetCurrentThread ConvertDefaultLocale GetVersion EnumResourceLanguagesW lstrcmpA CompareStringA InterlockedExchange lstrlenA WaitForSingleObject GetCurrentProcessId GetModuleHandleA VirtualProtect GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom CompareStringW LoadLibraryA GetVersionExA FreeResource GlobalFree FormatMessageW LocalFree GetEnvironmentVariableW ExpandEnvironmentStringsW GetModuleHandleW LoadLibraryExW lstrcmpiW WideCharToMultiByte SetLastError RaiseException InterlockedIncrement MulDiv lstrcmpW GetCurrentProcess FlushInstructionCache lstrlenW GlobalAlloc GlobalLock GlobalUnlock CreateEventW GetCurrentThreadId GlobalHandle GetLocaleInfoW FindResourceExW GetVersionExW GetSystemInfo GetSystemDefaultUILanguage GetUserDefaultUILanguage GetSystemDefaultLangID GetWindowsDirectoryW OutputDebugStringW GetFileAttributesW GetCurrentDirectoryW DeleteCriticalSection FindNextFileW DeleteFileW InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetEnvironmentStringsW FreeEnvironmentStringsW GetLastError FindClose FileTimeToSystemTime GetModuleFileNameW Sleep lstrcpyW lstrcatW CreateProcessW GetSystemDirectoryW FindFirstFileW OpenEventW GetProcAddress FreeLibrary LoadLibraryW CreateFileW DeviceIoControl CloseHandle InterlockedDecrement TlsAlloc TlsGetValue TlsSetValue MultiByteToWideChar FindResourceW LoadResource LockResource SizeofResource InterlockedCompareExchange IsProcessorFeaturePresent HeapSize

user32

GrayStringW DrawTextExW TabbedTextOutW MapDialogRect GetAsyncKeyState SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuW CheckMenuItem SendDlgItemMessageA GetCapture GetClassLongW SetPropW GetPropW RemovePropW GetLastActivePopup DispatchMessageW GetTopWindow GetMessageTime GetMessagePos PeekMessageW IsWindowVisible GetMenu GetClassInfoW RegisterClassW AdjustWindowRectEx SystemParametersInfoA IsIconic GetWindowPlacement GetActiveWindow SetActiveWindow CreateDialogIndirectParamW EndDialog GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu IsWindowEnabled IsDialogMessageW SetDlgItemInt SendDlgItemMessageW GetDlgItemInt GetForegroundWindow GetWindowThreadProcessId WaitForInputIdle LoadImageW CreateAcceleratorTableW GetWindow DestroyAcceleratorTable GetClassNameW IsChild RedrawWindow InvalidateRgn ClientToScreen RegisterWindowMessageW GetClassInfoExW RegisterClassExW GetWindowTextLengthW DefWindowProcW MapWindowPoints DrawEdge CreateWindowExW GetNextDlgTabItem KillTimer SetTimer UpdateWindow SetRect GetCursorPos ReleaseCapture GetFocus SetCapture SetForegroundWindow SetWindowsHookExW CallNextHookEx UnhookWindowsHookEx IsWindow LoadIconW DestroyIcon IsMenu TrackPopupMenu GetSystemMenu InsertMenuW EnableMenuItem AppendMenuW LoadBitmapW OffsetRect InflateRect SetRectEmpty PtInRect IsRectEmpty EqualRect UnionRect IntersectRect GetDesktopWindow GetKeyboardLayout CreateDialogParamW LoadStringW WinHelpW EnumChildWindows ScreenToClient MoveWindow BeginPaint GetClientRect EndPaint DestroyWindow GetDlgCtrlID GetDlgItem SetDlgItemTextW SetWindowPos InvalidateRect GetSysColorBrush UnregisterClassW WindowFromPoint GetDCEx GetMessageW TranslateMessage MessageBoxW ShowWindow FindWindowExW GetWindowLongW ValidateRect PostQuitMessage DestroyMenu SetWindowLongW CallWindowProcW SetFocus BroadcastSystemMessageW PostMessageW LoadCursorW SetCursor GetSysColor GetWindowRect DrawTextW DrawFocusRect FillRect GetKeyState GetParent GetWindowTextW SetWindowTextW CopyRect FindWindowW SetDoubleClickTime SwapMouseButton GetDoubleClickTime GetSystemMetrics SystemParametersInfoW MessageBeep wsprintfW SendMessageW EnableWindow GetDC ReleaseDC UnregisterClassA CharNextW

gdi32

RectVisible TextOutW ExtTextOutW Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx SetMapMode PtVisible UnrealizeObject SetRectRgn CombineRgn EnumFontFamiliesExW SetROP2 RestoreDC CreateRectRgn SelectClipRgn SetBkColor SetBkMode CreateBitmap CreateSolidBrush CreatePatternBrush GetStockObject CreateFontIndirectW GetObjectW GetDeviceCaps SaveDC PatBlt CreateRectRgnIndirect SetTextColor GetClipBox CreateDIBitmap Chord GetCurrentObject FloodFill SetPixel Ellipse GetBkColor CreateHatchBrush GetTextColor GetTextExtentPoint32W StretchBlt CreateCompatibleDC CreateCompatibleBitmap SelectObject CreatePen Rectangle BitBlt DeleteObject DeleteDC MoveToEx LineTo

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

RegDeleteValueW RegCloseKey RegQueryValueW RegOpenKeyW RegSetValueW RegDeleteKeyW RegCreateKeyW RegEnumKeyW RegEnumValueW RegQueryValueExW RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW

shell32

ShellExecuteExW ExtractIconW ShellExecuteW

comctl32

DestroyPropertySheetPage CreatePropertySheetPageW ord17

shlwapi

PathFindFileNameW PathFindExtensionW

ole32

CLSIDFromString CoGetClassObject OleLockRunning CoUninitialize OleUninitialize CoTaskMemAlloc CreateStreamOnHGlobal CoCreateGuid StringFromGUID2 CLSIDFromProgID CoCreateInstance CoInitialize CoTaskMemRealloc CoTaskMemFree StringFromCLSID CoDisconnectObject CoRegisterClassObject CoRevokeClassObject OleInitialize

oleaut32

SysFreeString VariantCopy VariantChangeType VarUI4FromStr LoadTypeLi LoadRegTypeLi OleCreateFontIndirect VariantInit SysStringByteLen SysAllocString SysAllocStringLen VariantClear SysStringLen

06_Touchpad/WinWDF/x86/SynTPEnh.exe

IMPHASH f2e2143fdd7c802f388b11d278b8ade2
SHA256 1e4232658cbffbf1e15b4d04891f1ff77cdfb8e520595deef59e7911fbda98ac
MD5 8895be670d1d4bd478b16dd311273f4a
SHA1 ed22585045922616e7613c3b20b5b7995986e7b9
SHA512 1909a5678db6c6459287de400d64a72661786fe1ffc88cba2f9d1ad852134528d71229f8d2c0bd1b30c871f4674c7af4aca886596a19a37b57c1ee9308bd2463
SSDEEP 24576:GomxApFX97bHkHnqLTmBJEqeRG28moMVv:GlEdbSUmleRG28moMVv
TLSH
T1EC754C1167FA8229F2F76F71ADB552554A3BBDA2AE38C18F1250350D1C31AD09EB4B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

02:1b:5d:49:04:13:65:ce:aa:d2:0c:26:39:fc:c0:f0:87:b2:a5:c7

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

316352

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

f:\checkpoints\TPDrv\Do_Not_Release_v14_0_3\SynTPEnh\Win32\Release\SynTPEnh.pdb

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

winmm

PlaySoundW mixerClose mixerGetControlDetailsW mixerGetLineControlsW mixerGetLineInfoW mixerOpen

psapi

GetModuleFileNameExW EnumProcessModules

kernel32

CreateToolhelp32Snapshot GetSystemDirectoryW SetCurrentDirectoryW GetCurrentDirectoryW ReleaseMutex CreateMutexW OpenMutexW OpenProcess GetPriorityClass GetCurrentProcess SetPriorityClass OpenEventW lstrcmpiW GetVersionExW LoadLibraryA SystemTimeToFileTime GetSystemTime SetEvent FileTimeToSystemTime FindClose FindFirstFileW FreeEnvironmentStringsW GetEnvironmentStringsW DeviceIoControl CreateFileW GetModuleHandleW DeleteFileW FindNextFileW GetFileAttributesW OutputDebugStringW GetWindowsDirectoryW GetUserDefaultUILanguage GetSystemDefaultUILanguage GetSystemInfo CreateProcessW lstrlenW GetEnvironmentVariableW GetCurrentProcessId QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStrings FreeEnvironmentStringsA FlushFileBuffers Process32FirstW GetConsoleCP LCMapStringW LCMapStringA IsValidCodePage GetOEMCP GetCPInfo VirtualAlloc VirtualFree HeapCreate GetModuleFileNameA GetStdHandle WriteFile ExitProcess SetLastError TlsFree GetModuleHandleA GetStartupInfoA GetCommandLineA GetTimeZoneInformation GetSystemTimeAsFileTime RtlUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess WideCharToMultiByte lstrlenA GetProcessHeap HeapSize HeapReAlloc HeapFree HeapAlloc HeapDestroy RaiseException GetVersionExA GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange Process32NextW Beep ExpandEnvironmentStringsW LoadLibraryExW LeaveCriticalSection EnterCriticalSection GetTickCount lstrcmpW GetLastError SetStdHandle WriteConsoleA GetSystemDefaultLangID GetCurrentThreadId TerminateThread CloseHandle CreateThread InterlockedDecrement Sleep CreateEventW WaitForSingleObject GetSystemPowerStatus InterlockedIncrement MultiByteToWideChar FindResourceExW FindResourceW LoadResource LockResource SizeofResource DeleteCriticalSection InitializeCriticalSection LoadLibraryW GetConsoleOutputCP WriteConsoleW GetProcAddress FreeLibrary TlsAlloc TlsGetValue TlsSetValue SetFilePointer CompareStringA CompareStringW SetEnvironmentVariableA SetEnvironmentVariableW ReadFile SetEndOfFile CreateFileA GetStringTypeA GetConsoleMode GetStringTypeW

user32

EqualRect SetCapture ReleaseCapture CopyRect GetClientRect UpdateWindow OpenClipboard EmptyClipboard SetClipboardData CloseClipboard ScrollDC IntersectRect OffsetRect SetClassLongW GetScrollInfo EnumChildWindows LoadIconW CreateIconIndirect DestroyIcon RegisterClassW GetMessageW IsDialogMessageW TranslateMessage DispatchMessageW BeginPaint EndPaint CreateDialogParamW IsDlgButtonChecked CheckDlgButton ClientToScreen GetAncestor SendInput IsWindow EnumDisplaySettingsW PostQuitMessage SetLayeredWindowAttributes RedrawWindow SetRect WindowFromPoint DestroyMenu CreatePopupMenu TrackPopupMenu SetMenuDefaultItem EnableMenuItem CheckMenuItem SetRectEmpty DrawTextW GetSysColor GetDlgCtrlID wsprintfW AppendMenuW GetDoubleClickTime LockWorkStation GetGUIThreadInfo GetWindow SystemParametersInfoW GetDC ReleaseDC InvalidateRect SetWindowPos GetDlgItemTextW ScreenToClient SendDlgItemMessageW GetWindowTextW MessageBoxW EndDialog MonitorFromWindow SendNotifyMessageW EnumDisplayDevicesW GetKeyboardLayout PostMessageW DialogBoxParamW CallWindowProcW EnableWindow SetDlgItemTextW GetKeyNameTextW GetWindowThreadProcessId AttachThreadInput SetForegroundWindow SetFocus GetDlgItem SetWindowTextW GetKeyState FindWindowW MessageBeep SendMessageTimeoutW LoadBitmapW DrawEdge FillRect SetTimer KillTimer LoadStringW GetParent GetDesktopWindow GetForegroundWindow IsZoomed IsIconic IsWindowVisible GetClassNameW RegisterClassExW CreateWindowExW DefWindowProcW GetWindowLongW SetWindowLongW SetCursor SetCursorPos GetWindowRect PtInRect ShowWindow MoveWindow LoadImageW LoadCursorW ClipCursor SendMessageW DestroyCursor GetCursorPos GetAsyncKeyState GetSystemMetrics WaitForInputIdle MapVirtualKeyW WinHelpW UnregisterClassA DestroyWindow

gdi32

CreateDIBitmap Ellipse CreatePen MoveToEx LineTo SetBkColor SetBkMode CreatePatternBrush Rectangle SetROP2 CreateBrushIndirect CreateBitmap CreateSolidBrush CreateEllipticRgn CreateRectRgn SelectObject BitBlt DeleteObject DeleteDC GdiFlush CreateDCW GetDeviceCaps GetTextExtentPoint32W GetObjectW CreateCompatibleBitmap StretchBlt GetStockObject CreateCompatibleDC SelectClipRgn

comdlg32

GetOpenFileNameW

advapi32

RegQueryInfoKeyW RegCreateKeyW RegEnumKeyW RegEnumValueW RegEnumKeyExW RegDeleteKeyW RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegOpenKeyW RegQueryValueExW RegCloseKey RegNotifyChangeKeyValue

shell32

DragQueryFileW ShellExecuteExW Shell_NotifyIconW ShellExecuteW DragFinish

ole32

CoInitialize CoCreateInstance CLSIDFromProgID StringFromGUID2 CoCreateGuid CoUninitialize

oleaut32

SysFreeString SysStringLen VariantInit VarCmp VariantClear VariantCopy SysAllocString GetActiveObject

shlwapi

PathFindFileNameW PathFileExistsW

06_Touchpad/WinWDF/x86/SynTPHelper.exe

IMPHASH cdc8c597fab0c32eb7e296ff0f7da873
SHA256 3843c89f59a6fd1c65f4c19f712e36a385e1e63a29be9384996a6ea51e65e71e
MD5 de8c5ab7ee56a7da0166b2e2b0e496a2
SHA1 15b3542c65a6ba1f32a152d3340982de85cc5d8e
SHA512 32c5283c1cc4b41ca749413ee8ea089bc546a22e14689cfc3b457a34a2624a6656348d8ea94f9f05f2830dde7fbe85fb343597be7fa0c208660520e9cecc9088
SSDEEP 1536:LFYE20G+ESb+muGKY1V3Qk6CE5bY7wqtGat8zo1MlVMw6PqC:aHYbCGj0pqgat8zpT61
TLSH
T19FA35A12B2E1C4B2E4A60634CC72E650AF36BC627E75D78B37543ACE6D713D05A35352
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

e6:f9:b4:95:48:bc:5e:9f:fa:26:6a:c8:fc:1e:21:1e:62:2c:f1:5f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

11796

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

f:\checkpoints\TPDrv\Do_Not_Release_v14_0_3\SynTPHelper\Win32\Release\SynTPHelper.pdb

psapi

EnumProcessModules GetModuleFileNameExW

kernel32

ExpandEnvironmentStringsW FreeLibrary GetCurrentProcess GetLastError GetPriorityClass SetPriorityClass QueryDosDeviceW WriteConsoleA CreateMutexW FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle SetFilePointer GetLocaleInfoA GetStringTypeW GetStringTypeA WaitForSingleObject ReleaseMutex CreateThread Sleep OpenProcess CloseHandle LoadLibraryW GetProcAddress DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetConsoleOutputCP WriteConsoleW HeapFree LCMapStringW WideCharToMultiByte LCMapStringA IsValidCodePage GetOEMCP GetACP RtlUnwind InterlockedExchange LoadLibraryA CreateFileA GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement RaiseException HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsA MultiByteToWideChar GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo

user32

FindWindowW RegisterClassW CreateWindowExW GetMessageW TranslateMessage DispatchMessageW GetWindowThreadProcessId DefWindowProcW SendMessageTimeoutW PostMessageW SendNotifyMessageW SendInput PostQuitMessage SendMessageW IsWindow

advapi32

RegCreateKeyW RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegCloseKey

06_Touchpad/WinWDF/x86/SynTPRes.dll

IMPHASH 7b33197423f08d5868758b0f560fae0b
SHA256 1e98a488455d887deee8df15266f5e8cc0589fd6cff03aaebf9298d4f17467d7
MD5 6a3391823f60395b1ad490cb34318b0e
SHA1 5925eb127f614823d31d307fe3d4c55b82045f13
SHA512 c212e82c1dfb37304491566d913b47130a042e720953f5a3258080976cdaa8c510bebe4b5abe239b0f64cf3bd09922621dfd41553afc945247ae709c8b69eb3d
SSDEEP 196608:UBnAn4QjGb99QHsqZGMtMDbBnAn4QjGbIIwY2qmSrgIEueHtKeue8SgTp6vmUh8+:UBAn4QjGb99QHsqZGMtMDbBAn4QjGbId
TLSH
T13286B525BBF94048FBFA6B749AB875440B3B7C4EA8B5D09D65453F080870BB29A74733
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

e0:6e:18:36:f7:4c:08:2f:da:7e:3d:a0:20:11:50:95:a4:8f:47:6c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

4823

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

06_Touchpad/WinWDF/x86/SynThreeFingerFlick.mpg

SHA256 49f8fb284011ceab465eb5600800410aa6d4600bf358eb2f42424f3bb6781207
MD5 473bd738db0eafbcfb242fd69b559414
SHA1 55b8cffdbf650fc640d857d2a7cc39ae4b048465
SHA512 0a8b66ecef17bf0b0212a2488a39487241b5a5e81793c473424b18e35491b2fd34ef6cbccf8e5eba5f56efa0a2c67e515ebb23c5688a331e17f472f39596a5db
SSDEEP 12288:CEKMRY6JehvHT0BzR3i+bCqIzXL8ouNcvP3jYRCDMkGXpwfSOeXy:C4yHcR3bFIzHNMkVReXy
TLSH
T1B8D412580B1F1728F11EDE49E60941279533FE7A5FC63943A3A1CB5EB0528B7BD8AC06
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/SynThreeFingersDown.mpg

SHA256 02bafb5ea69bc63b769996d9845c0c18587be30b103014a8e99bb20195857062
MD5 f2bde53252e6ef3e7eb0a1a55aeb61c4
SHA1 8693a6eb6e29e648fe2fad903b270e0fdb32ebbc
SHA512 8d9036cbe7cdc891e5441cc0b70260d8ad2f18c0883639af6e31bcee9c2cc29cfbf1ba253982e6b882c34b530aa04b425b5d9068d3fc30461be04d0c885fba1a
SSDEEP 3072:SVbXh/2cZ+VCivW00b+9RU4AymxEKw+iRo3bUUl/8y48pPYDoTTlN3xXIrTRlUN:SRR/HcV0bimxEuixC/8BgTT3NIZC
TLSH
T12624F14C1726EF48E92EDA08855681379173FFB37FC5306973B6CA28618E532AF52C06
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/SynTwoFingerVHScroll.mpg

SHA256 c9f437c7d9adc63eb31429d9363637680428b764cf75201a342ab5ab63f59e10
MD5 878a1872cbc075f50a7e0d6dfd36d6f8
SHA1 89353de0cf1a7843212eb8e79b55194bd913952d
SHA512 83a284ce19743f39daae868d483cc4d2e6ca4fb4dbe78a971b0aeeaa0921a8f898e9ec5b58048d4c0720c5e044d3a0bf93598c5ed27fef1ae71bbdaa23d04f22
SSDEEP 12288:AYLnuZg7hdnxrbh1n0029qlaByfl+amz6XiT04WYHqKAjcRnrhnQsJp2Z4ANa1ot:AwuZg7hNtn006Mrl+amw7eH5AjKlnH0j
TLSH
T121F412285B1F272DF1CEDA960209895AD173FFB257836544F2E2CB4C629B073AC4A947
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/SynUnst.ini

SHA256 a55bf70bfcf93ee5008b5085ff01c66a5a2dc0196e028f654fb8bd28257e7747
MD5 48994aed066f6e5ed3ca14d23fc4bb48
SHA1 f80f9d94e1493c66e8436eaf6f056886ff5f9110
SHA512 a054d87a2b63caf59d7a21726c294ba151017d429b6d105465a2bc204e6706317206861b09d36846c50a6c926f2e9d3cfcc0d9141f99367c670638bee9d83b16
SSDEEP 1536:qAAgFOcyvLaQ3HvwPrSAzd7aXnco0ChXJ4SR+pS+chvOQceCnPCwNrqHI0ZANxU8:drpqz3DzuGHM37Hu0WtSCHyLGcAeyfK
TLSH
T150C4055B342116B4CD478746FB8ABC25466CF19590E32D7E62BAE8C02DD6CD70CAFB09
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/SynZMetr.exe

IMPHASH 09ace58afcd0065043def8a42f7ca2af
SHA256 420abacdbed7b78d6b02649c52df18ca231c1d59cb77528f3a39d49bae21d031
MD5 43e45d66612c8b1e757f7a194104e7f3
SHA1 db940ce1bdef8ba1abc185032ff333cde4914c3f
SHA512 f9b97bbd1babc8e65be843c02ee88c7e62d56aecf52fadaedfcdec15d8e6869ec3c73a366352099b9c301207bcccd034ee2fc72e5bb1c06d7f871ec1257397d9
SSDEEP 3072:VNcO5CeML/WOLk4RCbo1AG80lf8aWbYt2s0UryuiCwr732GTkWIC/tm4NUEzCANh:VNzceML/I2io+ZbYt6U+u9I55b
TLSH
T120345B1237D5C073E5BF0A3249E582B86AB6FC519F32968F67B03B0D6D316929E34352
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

a9:ba:38:33:4b:4e:08:c3:e2:c8:7d:85:12:5d:8d:69:95:e0:26:c0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

75464

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

f:\checkpoints\TPDrv\Do_Not_Release_v14_0_3\Access\SynZMetr\Win32\Release\SynZMetr.pdb

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

kernel32

GetCurrentProcess SetErrorMode HeapFree HeapAlloc GetProcessHeap GetStartupInfoW RtlUnwind RaiseException HeapReAlloc ExitProcess HeapSize GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime TerminateProcess SetUnhandledExceptionFilter IsDebuggerPresent Sleep VirtualAlloc GetCPInfo GetACP GetOEMCP GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringW GetThreadLocale GlobalFlags TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue GetCurrentThread ConvertDefaultLocale GetVersion EnumResourceLanguagesW GetLocaleInfoW InterlockedExchange GetCurrentProcessId WideCharToMultiByte FreeResource GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom CompareStringW LoadLibraryA lstrcmpW GetModuleHandleW GetVersionExA GetModuleHandleA GetLastError GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageW lstrlenW MulDiv MultiByteToWideChar FindResourceW LoadResource LockResource SizeofResource CreateThread SetThreadPriority WaitForSingleObjectEx GetModuleFileNameW InterlockedIncrement InterlockedDecrement SetEvent WaitForSingleObject TerminateThread CreateEventW GetSystemDirectoryW LoadLibraryW GetProcAddress FreeLibrary GetTickCount LocalAlloc LocalFree SetLastError DeviceIoControl CloseHandle CreateFileW LeaveCriticalSection EnterCriticalSection GetVersionExW DeleteCriticalSection InitializeCriticalSection GetCommandLineW

user32

UnregisterClassW SetCursor GetMessageW TranslateMessage GetActiveWindow GetCursorPos ValidateRect GetWindowThreadProcessId IsWindowEnabled ShowWindow SetWindowTextW IsDialogMessageW SetDlgItemTextW SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW ModifyMenuW EnableMenuItem CheckMenuItem RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW GetCapture SetWindowsHookExW CallNextHookEx GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetFocus IsWindow SetFocus GetWindowTextLengthW GetWindowTextW GetForegroundWindow GetLastActivePopup SetActiveWindow GetSysColorBrush GetDlgItem GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints ScrollWindow UnregisterClassA GetKeyState SetForegroundWindow IsWindowVisible GetMenu MessageBoxW GetClassInfoExW GetClassInfoW AdjustWindowRectEx CopyRect PtInRect GetDlgCtrlID CallWindowProcW GetWindowLongW SetWindowLongW SetWindowPos SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow GetSysColor EndPaint BeginPaint ReleaseDC GetDC ClientToScreen ScreenToClient GrayStringW DrawTextExW DrawTextW TabbedTextOutW DestroyMenu GetDesktopWindow CreateDialogIndirectParamW GetNextDlgTabItem DispatchMessageW EndDialog GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu PostQuitMessage GetSystemMetrics LoadIconW IsIconic GetSystemMenu SendMessageW AppendMenuW DrawIcon CreateWindowExW PeekMessageW DestroyWindow wsprintfW DefWindowProcW PostMessageW LoadCursorW RegisterClassW EnableWindow UpdateWindow GetClientRect GetParent

gdi32

SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx DeleteDC CreateBitmap CreateCompatibleDC OffsetViewportOrgEx GetObjectW SetViewportOrgEx Escape ExtTextOutW TextOutW RectVisible PtVisible GetDeviceCaps GetStockObject SelectObject CreatePen DeleteObject MoveToEx LineTo GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC BitBlt

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

RegSetValueExW RegCreateKeyExW RegQueryValueW RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegOpenKeyW RegCloseKey

shlwapi

PathFindExtensionW PathFindFileNameW

oleaut32

VariantClear VariantChangeType VariantInit

06_Touchpad/WinWDF/x86/Tutorial.exe

IMPHASH 9a7967391d23ba126cc4b52504c1f78d
SHA256 c0f4cd5e067ed479dc215f985076728a575f873294960a5d983704b3ffd79492
MD5 40696e7511a3a89afb726e8546adad99
SHA1 501129b4a5d6298e522a383cf002fc9a7089012b
SHA512 1a895888d79ab35ec74fdaf18b117e71ca1e57e89dbf6c8fcebf080b599787775e8cc65a2da4dac134d401a1618f8cd8f27b2ee3919c8c7bc269a30b917a3d5b
SSDEEP 6144:J50SPgMxgpQpXKtK4MGr7ub+/LShVNVJiRVFOG2PzKUm:fgCdKtKeu6eDJi5OGoa
TLSH
T10F746C12B7D0C432D5A60637CD669329A3BAFC516E3183477BD13B5EEE306D29A38352
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

ea:ad:d6:a2:1e:65:25:4d:70:23:1b:2f:30:fd:2e:8f:47:d7:92:54

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

127011

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapSize SetUnhandledExceptionFilter GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount TerminateProcess UnhandledExceptionFilter IsDebuggerPresent Sleep VirtualAlloc GetTimeZoneInformation GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA ExitProcess HeapReAlloc RaiseException GetSystemTimeAsFileTime RtlUnwind GetStartupInfoW GetProcessHeap HeapAlloc HeapFree SetErrorMode LocalFileTimeToFileTime FileTimeToLocalFileTime WritePrivateProfileStringW GetVersionExW CreateFileW GetShortPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile lstrcmpiW GetStringTypeExW DeleteFileW MoveFileW SystemTimeToFileTime FileTimeToSystemTime GetThreadLocale lstrlenA InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags GetDiskFreeSpaceW GetFullPathNameW GetTempFileNameW GetFileTime SetFileTime GetFileAttributesW CloseHandle GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesW lstrcmpA GetLocaleInfoW CompareStringA InterlockedExchange GetModuleHandleA InterlockedDecrement GetModuleFileNameW GlobalFree GlobalAlloc FormatMessageW LocalFree MulDiv FreeResource GetCurrentThreadId GlobalFindAtomW GlobalDeleteAtom FreeLibrary CompareStringW LoadLibraryA lstrcmpW MultiByteToWideChar GetVersionExA GetVersion lstrlenW GlobalLock GlobalUnlock GetCurrentProcessId GetProcAddress GetModuleHandleW LoadLibraryW GlobalGetAtomNameW GlobalAddAtomW GetLastError SetLastError WideCharToMultiByte FindResourceW LoadResource LockResource SizeofResource

user32

GetNextDlgTabItem CreateDialogIndirectParamW CharUpperW DestroyIcon ValidateRect PostQuitMessage EndPaint BeginPaint GetWindowDC GrayStringW DrawTextExW DrawTextW TabbedTextOutW ClientToScreen SetWindowRgn DrawIcon FillRect FindWindowW SystemParametersInfoW MoveWindow SetWindowTextW IsDialogMessageW SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem SendDlgItemMessageW SendDlgItemMessageA IsChild SetWindowsHookExW CallNextHookEx GetClassLongW SetPropW GetPropW RemovePropW GetWindowTextW GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime EndDialog MapWindowPoints ScrollWindow TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow MessageBoxW CreateWindowExW GetClassInfoExW RegisterClassW AdjustWindowRectEx DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement DefWindowProcW CallWindowProcW SystemParametersInfoA GetWindowPlacement GetWindowRect GetClassNameW GetSysColor UnpackDDElParam ReuseDDElParam LoadMenuW DestroyMenu WinHelpW SetWindowPos SetFocus GetWindowThreadProcessId GetActiveWindow IsWindowEnabled GetFocus EqualRect GetDlgItem GetDlgCtrlID PeekMessageW LoadAcceleratorsW GetParent SetActiveWindow IsWindowVisible IsIconic InsertMenuItemW GetSubMenu GetMenuItemID GetMenuItemCount CreatePopupMenu IntersectRect OffsetRect SetRectEmpty CopyRect GetLastActivePopup BringWindowToTop PostMessageW SetMenu GetDesktopWindow GetWindow ShowWindow IsWindow TranslateAcceleratorW GetMessageW DispatchMessageW UnregisterClassW GetSysColorBrush GetMenuItemInfoW ShowOwnedPopups GetMessagePos TranslateMessage ReleaseDC GetDC InflateRect PtInRect GetSystemMetrics DrawMenuBar GetMenu DeleteMenu LoadBitmapW GetKeyState GetCapture ReleaseCapture GetCursorPos SetCursor LoadCursorW EnableWindow SetCapture KillTimer SetTimer InvalidateRect UpdateWindow ScreenToClient GetClientRect RegisterWindowMessageW GetClassInfoW LoadIconW SendMessageW GetWindowLongW SetWindowLongW FindWindowExW ShowScrollBar UnregisterClassA

gdi32

GetPixel PtVisible RectVisible TextOutW ExtTextOutW Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx CreatePatternBrush CreateFontIndirectW GetTextExtentPoint32W SetMapMode DeleteObject GetStockObject GetObjectW SetBkMode RestoreDC SaveDC DeleteDC Ellipse CreateEllipticRgn CreateDCW GetDeviceCaps SetBkColor SetTextColor GetClipBox GetCurrentObject Rectangle DPtoLP GetBitmapBits CreateSolidBrush CreatePen BitBlt CreateCompatibleDC CreateCompatibleBitmap CreateBitmap

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW ClosePrinter DocumentPropertiesW

advapi32

RegSetValueExW RegCreateKeyExW GetFileSecurityW SetFileSecurityW RegQueryValueW RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegOpenKeyW RegSetValueW RegCloseKey RegCreateKeyW

shell32

DragQueryFileW SHGetFileInfoW ExtractIconW DragFinish

shlwapi

PathFindFileNameW PathStripToRootW PathFindExtensionW PathIsUNCW

oleaut32

VariantClear VariantChangeType VariantInit

06_Touchpad/WinWDF/x86/WdfCoInstaller01009.dll

IMPHASH a17af54bf9d379152b9c377204b35eb9
SHA256 7a6bf1f950684381205c717a51af2d9c81b203cb1f3db0006a4602e2df675c77
MD5 a9970042be512c7981b36e689c5f3f9f
SHA1 b0ba0de22ade0ee5324eaa82e179f41d2c67b63e
SHA512 8377049f0aaef7ffcb86d40e22ce8aa16e24cad78da1fb9b24edfbc7561e3d4fd220d19414fa06964692c54e5cbc47ec87b1f3e2e63440c6986cb985a65ce27d
SSDEEP 24576:GjG90oN2lj11mk/22yYzGrarZRm4X5Uh6rVh5LdfBwOyCSQM1fFhSWRA2+:iGtN2h1120R7m4XShYVxfBwrC21fXSz
TLSH
T1BF65234193FE0258F8F61BB0BA7CA9916A397DD25E36D48F12199C9C18B1B80DCB1773
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

a0:d0:3c:75:d3:6f:1f:f2:27:b2:62:bc:3a:a0:87:77:e7:35:12:f0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 14, 2009

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:49:7c:ed:00:00:00:00:00:05

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 16, 2006 - Sep 16, 2011

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 15, 2019

Subject

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 11, 2005 - Apr 26, 2010

Subject

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:02:a4:e9:00:00:00:00:00:09

Issuer

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 11, 2009 - Apr 26, 2010

Minor OS version

1

Major OS version

6

Entry point

56899

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

WdfCoInstaller01009.pdb

msvcrt

_amsg_exit _initterm _XcptFilter _wcsnicmp malloc free _wtoi _wcsicmp _ultow _stricmp memset memcpy _vsnwprintf

setupapi

SetupCloseInfFile SetupOpenInfFileW SetupOpenLog SetupDiGetDriverInfoDetailW SetupLogErrorW SetupCloseLog CM_Set_DevNode_Problem_Ex SetupDiGetDeviceInstallParamsW SetupDiSetDeviceInstallParamsW SetupPromptReboot SetupDiGetActualSectionToInstallW SetupGetLineCountW SetupFindFirstLineW SetupGetStringFieldW SetupFindNextMatchLineW SetupDiGetSelectedDriverW

kernel32

GetModuleFileNameW SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter RtlUnwind InterlockedCompareExchange Sleep InterlockedExchange LoadLibraryExW ExpandEnvironmentStringsW CreateProcessW WaitForSingleObject TerminateProcess GetExitCodeProcess SetLastError FindResourceW LoadResource LockResource SizeofResource WriteFile RemoveDirectoryW CreateDirectoryW FindFirstFileW DeleteFileW FindNextFileW FindClose CreateFileW GetFileInformationByHandle FileTimeToSystemTime CloseHandle FormatMessageW GetLocalTime OutputDebugStringW LoadLibraryW FreeLibrary lstrlenA WideCharToMultiByte GetWindowsDirectoryW LocalAlloc LocalFree VerSetConditionMask VerifyVersionInfoW GetLastError GetProcAddress GetModuleHandleW GlobalFree

advapi32

OpenSCManagerW ChangeServiceConfigW QueryServiceConfigW RegFlushKey RegSetValueExW RegCreateKeyExW RegQueryValueExW DeleteService OpenServiceW QueryServiceStatusEx CloseServiceHandle RegOpenKeyExW RegCloseKey

crypt32

CertGetCertificateContextProperty

wintrust

WTHelperProvDataFromStateData WTHelperGetProvSignerFromChain WTHelperGetProvCertFromChain WinVerifyTrust

shell32

CommandLineToArgvW

user32

IsCharAlphaW IsCharAlphaNumericW LoadStringW

ole32

CoTaskMemFree

06_Touchpad/WinWDF/x86/dpinst.exe

IMPHASH 3ab7cc62e4963955ad408cd420cd8ef1
SHA256 a626aea6964d38b432f7de8b8d70bb8d0fbdd1ef7a06861279998a9a8121b453
MD5 27dfd087e295fd8b51df45952c4099df
SHA1 eae5513c15eee70ab26dee6bec460777c6caa344
SHA512 f0acd818a932a9471f7d3a0eebd120e067810dad5f1b03f895df2808391d440e800dced69fd55dfa136ceec0c3491cdddbcec0ba3b2a63538d21378e78430611
SSDEEP 6144:6ZtaKSpwmx5ATm/LC3fwf3OoU9xkYSr/mdBTRhKWIjsRP/1HHm/hHAM8i6r+LyID:6ZxSpwmxvL/f3vCN1PMaLi6rAyIQj6
TLSH
T1AA158211E7FB8139F9F36F7C697952620A7ABCA19E38D64E1740065D08F4A90DA70B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

71:85:11:e5:d1:4c:f1:de:16:92:e6:78:64:21:75:0c:36:76:a6:9e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

1

Major OS version

6

Entry point

135530

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

DpInst.pdb

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW FreeSid EqualSid AllocateAndInitializeSid GetTokenInformation OpenProcessToken IsTextUnicode SetSecurityDescriptorDacl InitializeSecurityDescriptor AddAccessAllowedAce InitializeAcl GetLengthSid SetEntriesInAclW DeleteService StartServiceW ControlService OpenSCManagerW CloseServiceHandle OpenServiceW QueryServiceStatus RegDeleteValueW RegCreateKeyExW RegSetValueExW RegDeleteKeyW CheckTokenMembership ConvertStringSecurityDescriptorToSecurityDescriptorW

kernel32

GetFileAttributesW DeleteFileW ReleaseMutex SetFilePointer HeapFree GetProcessHeap HeapAlloc CreateMutexW FreeConsole SetConsoleMode SetConsoleCursorPosition GetConsoleScreenBufferInfo FreeLibrary FillConsoleOutputCharacterW ReadConsoleOutputW GetConsoleMode GetStdHandle GetProcAddress LoadLibraryW WriteConsoleW IsValidLocale lstrlenW lstrcmpW CompareStringW GetTempFileNameW FindFirstFileW FindNextFileW FindClose CopyFileW SetFileAttributesW FormatMessageW RaiseException GetFileSize CreateFileMappingW MapViewOfFile WriteConsoleOutputW UnmapViewOfFile InterlockedDecrement InterlockedIncrement CreateFileW WriteFile CreateThread WaitForMultipleObjectsEx InterlockedCompareExchange WaitForSingleObjectEx SetEvent CreateEventW GetExitCodeProcess DeviceIoControl VerSetConditionMask VerifyVersionInfoW CreateDirectoryW RemoveDirectoryW GetCurrentDirectoryW GetShortPathNameW GetFullPathNameW GetSystemDirectoryW GetSystemWindowsDirectoryW MoveFileExW SearchPathW GetSystemDefaultUILanguage LoadLibraryExW CreateFileA SetEndOfFile GetConsoleOutputCP WriteConsoleA GetLocaleInfoW FlushFileBuffers SetStdHandle GetStringTypeW GetStringTypeA GetConsoleCP GetLocaleInfoA Sleep LoadLibraryExA ReadFile LCMapStringW LCMapStringA GetThreadLocale SetThreadLocale GetUserDefaultUILanguage GetVersionExW GetLocalTime GetWindowsDirectoryW GetModuleFileNameW SetCurrentDirectoryW WaitForSingleObject GetOEMCP GetACP GetCPInfo UnhandledExceptionFilter TerminateProcess OutputDebugStringA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter VirtualFree HeapCreate GetCurrentThreadId SetLastError TlsFree TlsSetValue TlsAlloc TlsGetValue GetStartupInfoA GetFileType SetHandleCount GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetModuleFileNameA ExitProcess GetModuleHandleA SetUnhandledExceptionFilter VirtualQuery GetSystemInfo GetModuleHandleW VirtualAlloc VirtualProtect GetStartupInfoW GetEnvironmentVariableW lstrcmpiW WideCharToMultiByte InterlockedExchange HeapSize HeapReAlloc HeapDestroy GetVersionExA DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection GetCommandLineW LocalAlloc GlobalFree LocalFree MultiByteToWideChar GetCurrentProcess GetLastError CloseHandle FindResourceExW FindResourceW LoadResource LockResource SizeofResource EnumResourceLanguagesW LocalReAlloc EnterCriticalSection

gdi32

SetLayout DeleteDC GetObjectW CreateCompatibleBitmap CreateBitmap SelectObject StartPage EndPage StartDocW EndDoc GetTextMetricsW GetDeviceCaps CreateFontIndirectW DeleteObject CreateCompatibleDC

user32

AllowSetForegroundWindow DefWindowProcW PostQuitMessage GetUserObjectInformationW GetProcessWindowStation GetIconInfo DrawIconEx CreateIconIndirect LoadIconW LoadBitmapW DrawTextExW LoadImageW GetSystemMetrics GetSysColor DestroyWindow GetWindowLongW SendDlgItemMessageW InvalidateRect SystemParametersInfoW GetDC ReleaseDC SetWindowLongW SetWindowTextW GetParent PostMessageW IsDlgButtonChecked CheckDlgButton SetFocus CallWindowProcW DestroyIcon DialogBoxParamW SetDlgItemTextW CharLowerW GetDlgItem SendMessageW MessageBoxW RegisterClassExW CreateWindowExW ShowWindow UnregisterClassA EndDialog

ntdll

RtlNtStatusToDosError NtOpenThreadToken NtQueryInformationToken NtOpenProcessToken RtlUnwind NtClose

shell32

SHGetFolderPathW ShellExecuteExW ord59 CommandLineToArgvW

setupapi

SetupDiClassNameFromGuidW SetupDiOpenClassRegKey SetupInstallFilesFromInfSectionW SetupPromptReboot SetupInstallFromInfSectionW SetupInstallServicesFromInfSectionW SetupDiGetActualSectionToInstallW SetupFindNextLine SetupFindNextMatchLineW SetupOpenInfFileW SetupGetLineCountW SetupCloseInfFile SetupFindFirstLineW SetupGetStringFieldW pSetupSetGlobalFlags pSetupGetGlobalFlags SetupGetFieldCount SetupGetIntField SetupOpenAppendInfFileW SetupDiSetClassInstallParamsW SetupDiGetClassDevsW SetupDiGetSelectedDriverW SetupDiGetDriverInfoDetailW CM_Enumerate_Classes CM_Get_DevNode_Status SetupDiCreateDeviceInfoList SetupDiSetDeviceRegistryPropertyW SetupDiDestroyDeviceInfoList SetupDiGetDeviceInstanceIdW SetupDiOpenDevRegKey SetupDiOpenDeviceInfoW SetupDiSetSelectedDevice SetupDiGetDeviceInstallParamsW SetupDiSetDeviceInstallParamsW SetupDiBuildDriverInfoList SetupDiCallClassInstaller SetupDiGetDeviceRegistryPropertyW SetupGetTargetPathW SetupQueueCopyIndirectW SetupQueueCopyW SetupOpenFileQueue SetupInitDefaultQueueCallbackEx SetupDefaultQueueCallbackW SetupCommitFileQueueW SetupTermDefaultQueueCallback SetupCloseFileQueue SetupCopyOEMInfW CM_Locate_DevNodeW CM_Get_Device_ID_List_SizeW CM_Get_Device_ID_ListW CM_Get_Device_IDW CM_Setup_DevNode SetupDiEnumDeviceInfo CMP_WaitNoPendingInstallEvents CM_Query_And_Remove_SubTreeW

wintrust

WinVerifyTrust CryptCATAdminCalcHashFromFileHandle

ole32

CoTaskMemFree StringFromCLSID CoUninitialize CoInitialize CoCreateInstance

oleaut32

VariantInit VariantClear VariantChangeType SysAllocString SysFreeString

comctl32

CreatePropertySheetPageW ImageList_ReplaceIcon ImageList_SetBkColor PropertySheetW ImageList_Create

comdlg32

PrintDlgExW GetSaveFileNameW

crypt32

CertFreeCertificateContext CertFreeCTLContext CertGetCTLContextProperty CryptQueryObject

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

06_Touchpad/WinWDF/x86/dpinst.xml

SHA256 51220badb453904808d613589fd56ef8e5905ebc1e1bac050f285b2814b2a5d8
MD5 7d01c5b07e846f12a2fed50dad9073aa
SHA1 7e5fc49ba717d9dcddbea92eb65fd875d8251cae
SHA512 7532c73299b277499b045d9ff1f49083b6f1ed85b524890eec6449fcae13a8e0a8fd376869359272bd48d3520e14ca0e745dc5118d415f55e845c6c6fc0a125e
SSDEEP 384:DAgg2fjfgigAGU0Js4SxRorsWYQhv4HPiqMhararxx8WV0B:MggEt0JstOsWjfY
TLSH
T10EB2028694D223745B336741F902782AFFE0C9A64219BD607C9B016BEBF7818E45F673
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/setup.exe

IMPHASH c482f234b45547b436f1ee193a33ae4f
SHA256 2c19155ab06763fb0ae6dee4f9fea82cae02a4cfc6bc479e44a81348c8b036f5
MD5 93c2aac5572a6438b4eaa9ffe2d66508
SHA1 67d88aeea5830449133af540052661b00e8fc3d3
SHA512 9aa077469203f0cd87c36036aef023fdec6c2715dbf6bb0accc7d9e815e03b4febacc85ae506277f1845f3f7c500f53ac683d4d019570b50ce765a85189fca4f
SSDEEP 3072:x7ez8WRfcaClOcpbhr1orxhgjt5y02pqDcn6WpjL1CrVheZgHp3z:AznRc7vpb5oxhUEn1CrS+HR
TLSH
T15524910177FA8274F6F32B71ED7556944B3ABC926E38E58E3354089D1830A90DAB9733
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

7e:81:c6:fb:34:6e:43:9a:64:71:89:68:d1:19:09:b4:51:dd:e1:72

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 28, 2009

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Synaptics Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Technical Marketing,O=Synaptics Incorporated,L=San Jose,ST=California,C=US

Serial Number

76:38:5d:e6:14:bc:be:5b:ae:4d:49:d9:ae:89:5c:f7

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 25, 2008 - Dec 9, 2011

Minor OS version

0

Major OS version

4

Entry point

30255

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW GetVersionExW DeviceIoControl SetLastError GetTickCount FreeLibrary GetProcAddress LoadLibraryW SetEvent InterlockedDecrement InterlockedIncrement SetFilePointer WriteFile ExpandEnvironmentStringsW ReleaseMutex SetEnvironmentVariableA CompareStringW CompareStringA CreateFileA ReadFile SetEndOfFile WriteConsoleW GetConsoleOutputCP WriteConsoleA LoadLibraryA FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle GetLastError GetExitCodeProcess GetCurrentProcess CreateProcessW WaitForSingleObject GetModuleFileNameW CreateFileW CloseHandle GetSystemDirectoryW GetSystemInfo FindResourceExW FindResourceW LoadResource LockResource SizeofResource DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetLocaleInfoA GetStringTypeW GetStringTypeA RtlUnwind RaiseException DeleteFileW SetFileAttributesW GetFileAttributesW GetSystemTimeAsFileTime HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetCPInfo GetACP GetOEMCP MultiByteToWideChar LCMapStringA WideCharToMultiByte LCMapStringW Sleep HeapSize ExitProcess GetTimeFormatA GetDateFormatA GetTimeZoneInformation GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId VirtualAlloc HeapReAlloc

user32

LoadStringW MessageBoxW ExitWindowsEx UnregisterClassA

advapi32

RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegisterEventSourceW ReportEventW DeregisterEventSource OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegSetValueExW RegCloseKey RegOpenKeyW RegCreateKeyW PrivilegeCheck

shell32

SHGetSpecialFolderPathW ShellExecuteExW

06_Touchpad/WinWDF/x86/synhid.inf

SHA256 12fb3c88134e23d3e8fb2be60cfd2ee199d3ed9973c3bfd290e2bff3fb8f8fbe
MD5 ddee3680933f9c06ed48e33794141b01
SHA1 0cdef0e9b7994b0f844064fcc739c91ddc599069
SHA512 f30735083d2c05ee28262350d6bf6508d4f03b3af72c834ae9f07c4e370498312a2541c32655c76ca401125b8444e9579a8e030a7cb0387279e4bedda69ba7cf
SSDEEP 192:smApEgZ3Bzony1B3oLQmaIsoepKAvVIsoeGSDnFJz2WJqoZ:srEgZ3Bzony1B3oLQmaIsoepKYIsoeGQ
TLSH
T10E12E12A4E4B1170E903E64FB74FBA43F3687088D0ED2B657BE550104ED9D8D272DA7A
MD5 SHA1 SHA512 SSDEEP TLSH

06_Touchpad/WinWDF/x86/synpd.inf

SHA256 a55bf70bfcf93ee5008b5085ff01c66a5a2dc0196e028f654fb8bd28257e7747
MD5 48994aed066f6e5ed3ca14d23fc4bb48
SHA1 f80f9d94e1493c66e8436eaf6f056886ff5f9110
SHA512 a054d87a2b63caf59d7a21726c294ba151017d429b6d105465a2bc204e6706317206861b09d36846c50a6c926f2e9d3cfcc0d9141f99367c670638bee9d83b16
SSDEEP 1536:qAAgFOcyvLaQ3HvwPrSAzd7aXnco0ChXJ4SR+pS+chvOQceCnPCwNrqHI0ZANxU8:drpqz3DzuGHM37Hu0WtSCHyLGcAeyfK
TLSH
T150C4055B342116B4CD478746FB8ABC25466CF19590E32D7E62BAE8C02DD6CD70CAFB09
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

06_Touchpad.rar

06_Touchpad/Autorun.inf

06_Touchpad/Release.txt

06_Touchpad/Setup.exe

PE Signature issue

kernel32

user32

advapi32

shell32

generic

06_Touchpad/WinWDF/x64/Eula0401ARA.tx_

06_Touchpad/WinWDF/x64/Eula0404CHT.tx_

06_Touchpad/WinWDF/x64/Eula0405CSY.tx_

06_Touchpad/WinWDF/x64/Eula0406DAN.tx_

06_Touchpad/WinWDF/x64/Eula0407DEU.tx_

06_Touchpad/WinWDF/x64/Eula0408ELL.tx_

06_Touchpad/WinWDF/x64/Eula0409ENU.tx_

06_Touchpad/WinWDF/x64/Eula040bFIN.tx_

06_Touchpad/WinWDF/x64/Eula040cFRA.tx_

06_Touchpad/WinWDF/x64/Eula040dHEB.tx_

06_Touchpad/WinWDF/x64/Eula040eHUN.tx_

06_Touchpad/WinWDF/x64/Eula0410ITA.tx_

06_Touchpad/WinWDF/x64/Eula0411JPN.tx_

06_Touchpad/WinWDF/x64/Eula0412KOR.tx_

06_Touchpad/WinWDF/x64/Eula0413NLD.tx_

06_Touchpad/WinWDF/x64/Eula0414NOR.tx_

06_Touchpad/WinWDF/x64/Eula0415PLK.tx_

06_Touchpad/WinWDF/x64/Eula0416PTB.tx_

06_Touchpad/WinWDF/x64/Eula0419RUS.tx_

06_Touchpad/WinWDF/x64/Eula041dSVE.tx_

06_Touchpad/WinWDF/x64/Eula041fTRK.tx_

06_Touchpad/WinWDF/x64/Eula0804CHS.tx_

06_Touchpad/WinWDF/x64/Eula0816PTG.tx_

06_Touchpad/WinWDF/x64/Eula0c0aESP.tx_

06_Touchpad/WinWDF/x64/InstNT.exe

PE Signature issue

setupapi

newdev

shlwapi

kernel32

user32

advapi32

generic

06_Touchpad/WinWDF/x64/SynCOM.dll

PE Signature issue

kernel32

user32

gdi32

advapi32

ole32

oleaut32

generic

06_Touchpad/WinWDF/x64/SynCOM32.dll

PE Signature issue

kernel32

user32

gdi32

advapi32

ole32

oleaut32

generic

06_Touchpad/WinWDF/x64/SynChiralRotate.mpg

06_Touchpad/WinWDF/x64/SynChiralVHScroll.mpg

06_Touchpad/WinWDF/x64/SynCntxt.rtf

06_Touchpad/WinWDF/x64/SynCtrl.dll

PE Signature issue

kernel32

user32

gdi32

advapi32

ole32

oleaut32

generic

06_Touchpad/WinWDF/x64/SynCtrl32.dll

PE Signature issue