Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/10/2026, 13:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ddf2855b95c54929.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
ddf2855b95c54929.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
13 signatures
150 seconds
General
- Target ddf2855b95c54929.exe
- Size 6.2MB
- Sample261030-qrdl2aef88
- SHA256 ddf2855b95c54929b463d2d43ab81e67698f2c6c5fe6a254d957b7f84379aada
- MD5 8c6fc1da0ea229b79ebbdd26a07069cc
- SHA1 123fd813fe11958d0b6412b6641037319cc7e137
- SHA512 7983c4220b035bb1ef37113872b25856c442858e3ddf830d70f5e7f675aa6ca57579b18c2dc6a2a70de3c1c886c869149aac237fd5d71c95118070ee2c8c1b25
- SSDEEP 98304:7fZq0Z1+F2LWNmfTrbTAt8GLf6BxDa3gLCLk/JcLwv7s0bH5Jt1FeMjVcI:7fZx1+YuUTrf94wLCLk2LMzHXX
- TLSH T1EE663394D6A44A5CCCE18DBE4DE2ABBD27A2E930570105CBC160DE715D3B2E87F3624B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 3248 SYSEXPLR.EXE - Loads dropped DLL 4 IoCs
pid Process 4636 ddf2855b95c54929.exe 3248 SYSEXPLR.EXE 3248 SYSEXPLR.EXE 3248 SYSEXPLR.EXE - Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\SysExplr = "C:\\HEROSOFT\\Hero3000\\SYSEXPLR.EXE" ddf2855b95c54929.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\B: SYSEXPLR.EXE File opened (read-only) \??\D: SYSEXPLR.EXE File opened (read-only) \??\G: SYSEXPLR.EXE File opened (read-only) \??\R: SYSEXPLR.EXE File opened (read-only) \??\V: SYSEXPLR.EXE File opened (read-only) \??\X: SYSEXPLR.EXE File opened (read-only) \??\Y: SYSEXPLR.EXE File opened (read-only) \??\H: SYSEXPLR.EXE File opened (read-only) \??\N: SYSEXPLR.EXE File opened (read-only) \??\W: SYSEXPLR.EXE File opened (read-only) \??\A: SYSEXPLR.EXE File opened (read-only) \??\J: SYSEXPLR.EXE File opened (read-only) \??\K: SYSEXPLR.EXE File opened (read-only) \??\L: SYSEXPLR.EXE File opened (read-only) \??\M: SYSEXPLR.EXE File opened (read-only) \??\P: SYSEXPLR.EXE File opened (read-only) \??\Q: SYSEXPLR.EXE File opened (read-only) \??\T: SYSEXPLR.EXE File opened (read-only) \??\I: SYSEXPLR.EXE File opened (read-only) \??\O: SYSEXPLR.EXE File opened (read-only) \??\S: SYSEXPLR.EXE File opened (read-only) \??\U: SYSEXPLR.EXE File opened (read-only) \??\Z: SYSEXPLR.EXE - Drops file in Windows directory 6 IoCs
description ioc Process File created C:\Windows\MENUTHEME.ini ddf2855b95c54929.exe File opened for modification C:\Windows\MENUTHEME.ini ddf2855b95c54929.exe File opened for modification C:\Windows\STHVCD.INI ddf2855b95c54929.exe File opened for modification C:\Windows\STHVCD.INI SYSEXPLR.EXE File created C:\Windows\Dvdamp.ini ddf2855b95c54929.exe File opened for modification C:\Windows\Dvdamp.ini ddf2855b95c54929.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ddf2855b95c54929.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SYSEXPLR.EXE -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000\Software\Microsoft\Internet Explorer\MenuExt ddf2855b95c54929.exe Key created \REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000\Software\Microsoft\Internet Explorer\MenuExt\Heroplayer Online ddf2855b95c54929.exe Set value (str) \REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000\Software\Microsoft\Internet Explorer\MenuExt\Heroplayer Online\ = "C:\\HEROSOFT\\Hero3000\\MPURLGET.HTM" ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extensions ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extensions\{367E0A21-8601-4986-9C9A-153BF5ACA118} ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extensions\{367E0A21-8601-4986-9C9A-153BF5ACA118}\ButtonText = "hero player" ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extensions\{367E0A21-8601-4986-9C9A-153BF5ACA118}\Exec = "C:\\HEROSOFT\\Hero3000\\MPLAYER.EXE" ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extensions\{367E0A21-8601-4986-9C9A-153BF5ACA118}\MenuStatusBar = "herp player" ddf2855b95c54929.exe Set value (int) \REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000\Software\Microsoft\Internet Explorer\MenuExt\Heroplayer Online\Contexts = "46" ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extensions\{367E0A21-8601-4986-9C9A-153BF5ACA118}\CLSID = "{1FBA04EE-3024-11d2-8F1F-0000F87ABD16}" ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extensions\{367E0A21-8601-4986-9C9A-153BF5ACA118}\Default visible = "Yes" ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extensions\{367E0A21-8601-4986-9C9A-153BF5ACA118}\HotIcon = "C:\\HEROSOFT\\Hero3000\\MPLAYER.EXE,107" ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extensions\{367E0A21-8601-4986-9C9A-153BF5ACA118}\Icon = "C:\\HEROSOFT\\Hero3000\\MPLAYER.EXE,107" ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extensions\{367E0A21-8601-4986-9C9A-153BF5ACA118}\MenuText = "hero player" ddf2855b95c54929.exe - Modifies registry class 64 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.m1v ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\HeroVideo\Shell\open\command ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AudioCD\shell\ SYSEXPLR.EXE Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\HeroVideo\ = "HeroVideo" ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Save.wav\ = "VLC.wav" ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7D18BE38-A3F6-4508-B22B-5530523A1D0F}\ProxyStubClsid32 ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7E8F84A3-EB0F-4978-8716-9F50551ADF7E}\InprocServer32\ = "C:\\HEROSOFT\\Hero3000\\mpnetmon.dll" ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\cdafile\Shell\ SYSEXPLR.EXE Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.mpv ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.vob ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Save.avi ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Save.cda ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\HeroAudio\defaultIcon ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MPNetMon.UrlCtrl\ = "MPNetMon.UrlCtrl" ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MPNetMon.IeMonitor\CLSID ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MPNetMon.IeMonitor\ = "MPNetMon.IeMonitor" ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.cda ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{28910383-04DB-46DF-811B-E247C93F740A}\1.0\FLAGS\ = "0" ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Save.m1v ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Save.vbs ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.mp2 ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\HeroAudio\Shell ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7E8F84A3-EB0F-4978-8716-9F50551ADF7E}\InprocServer32 ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7B5D1147-1590-4250-BE2D-71215CBFEBEB}\TypeLib\ = "{28910383-04DB-46DF-811B-E247C93F740A}" ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7D18BE38-A3F6-4508-B22B-5530523A1D0F}\ProxyStubClsid ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.rmi\ = "HeroAudio" ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.abs\ = "HeroAudio" ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7E8F84A3-EB0F-4978-8716-9F50551ADF7E}\ProgID\ = "MPNetMon.UrlCtrl" ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\HeroVideo\Shell\HeroVideo\command\ = "C:\\HEROSOFT\\Hero3000\\SthSDVD.EXE %1" ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.mp4\ = "HeroAudio" ddf2855b95c54929.exe Key created \REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000_Classes\WOW6432Node\CLSID ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{28910383-04DB-46DF-811B-E247C93F740A}\1.0\HELPDIR ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{28910383-04DB-46DF-811B-E247C93F740A}\1.0\0\win32\ = "C:\\HEROSOFT\\Hero3000\\mpnetmon.dll" ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Save.m1v\ = "VLC.m1v" ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.mp1 ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.wav ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Save.ac3\ = "VLC.ac3" ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{77069247-6A6F-43DA-A9DF-ECCE3A62808B}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7D18BE38-A3F6-4508-B22B-5530523A1D0F} ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.mpv\ = "HeroVideo" ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\HeroVideo\defaultIcon ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\HeroVideo\Shell\open\command\ = "C:\\HEROSOFT\\Hero3000\\SthSDVD.EXE %1" ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\HeroVideo\Shell\HeroVideo\command ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.m3u\ = "HeroAudio" ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Save.mid\ = "VLC.mid" ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7E8F84A3-EB0F-4978-8716-9F50551ADF7E}\ProgID ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7E8F84A3-EB0F-4978-8716-9F50551ADF7E}\InprocServer32\ThreadingModel = "Apartment" ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.m1v\ = "HeroVideo" ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Save.mp1 ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Save.mpa ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.mpa ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{28910383-04DB-46DF-811B-E247C93F740A}\1.0 ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{28910383-04DB-46DF-811B-E247C93F740A}\1.0\HELPDIR\ = "C:\\HEROSOFT\\Hero3000\\" ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7B5D1147-1590-4250-BE2D-71215CBFEBEB} ddf2855b95c54929.exe Key created \REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000_Classes\WOW6432Node\Interface ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{28910383-04DB-46DF-811B-E247C93F740A}\1.0\ = "MPNetMon 1.0 Type Library" ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.mp3 ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Save.mid ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\HeroAudio\Shell\HeroAudio\command ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MPNetMon.UrlCtrl\CLSID ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{77069247-6A6F-43DA-A9DF-ECCE3A62808B} ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{77069247-6A6F-43DA-A9DF-ECCE3A62808B}\ProxyStubClsid32 ddf2855b95c54929.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\HeroVideo\Shell\HeroVideo ddf2855b95c54929.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7E8F84A3-EB0F-4978-8716-9F50551ADF7E}\TypeLib\ = "{28910383-04DB-46DF-811B-E247C93F740A}" ddf2855b95c54929.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3248 SYSEXPLR.EXE - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 3248 SYSEXPLR.EXE - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4636 wrote to memory of 3248 4636 ddf2855b95c54929.exe 90
Processes
-
C:\Users\Admin\AppData\Local\Temp\ddf2855b95c54929.exe"C:\Users\Admin\AppData\Local\Temp\ddf2855b95c54929.exe"1⤵
- Loads dropped DLL
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:4636 -
C:\HEROSOFT\Hero3000\SYSEXPLR.EXEC:\HEROSOFT\Hero3000\SYSEXPLR.EXE2⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:3248
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AdoPlus.dll
- Size 32KB
- SHA256 f6e5ef0937c87f762a4061fb9afae75f1a511fe4ec7490b2f2b4ebecf280ab64
- MD5 1423aea6d643fcc6c0fa89b588990a0b
- SHA1 2ffeb7fa21bc12bee3ef9cfc4627f3972febeb44
- SHA512 75c628287ca6e387f608bc1842f0b235539ffd7a41e36cd5fac6697f30b6ee8888e5572072ca18ed3d5785cb78365e70e1a027849486a9ece061616999750dc6
- SSDEEP 768:0d2xF1qtT/YkAJQbpcqjLQg2XNTc9gVBJ:82xFIt/AOPiAgVX
- TLSH T114E2FA939A5289EBD0D6A439574BA7BBBA2740705C78CD91EF738E20152A003BF1DD1F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin1\SKINinfo.INI
- Size 2KB
- SHA256 f37b2acf9dc60c900b5827bd79d5d71ac01af64f994e6ccbe91f8a8392e1afc4
- MD5 b069e75e2e5935bd4f6cbd566ce49c3e
- SHA1 21f48b9501ddd89f7c903f2aa5cbd460c3ec2518
- SHA512 caa14a1c85494e76772b626b350536bec22b0a51b3a2cb3641b975c2e798868c965e02f504cb0581892d7da27a5528a7e5aaf21afe319f04b26f045438f32745
- TLSH T16451AE79C2457155F44443C240C9AA3D33D8E522B3EC280D596F616EBC062B6F1BC99F
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin1\audio-e.bmp
- Size 78KB
- SHA256 cd238f8fa18498c81750c073b48aaaeb733f3f58e3b8a1aa8e2c1f8b5f3d156f
- MD5 dfb3432cd09dab388a1d33b94daeb2f3
- SHA1 93bbaf16051a770192e7c99c23139fe4f4b93671
- SHA512 eecb4221e1e1f24dbc6d7f77f6f4b0d06b2478e31432c52c0ef18d94b7ff8225b28e22b50d8bd5b9c42d1ae8d089908e837bcfe192b7b18cc46c555fcf18304b
- SSDEEP 1536:pphI4bt8JW9e8CL99a/hCC+i7aBmpQDNCcouFl7BqBcm:VI4bOJ4eBCCk2VcNCl
- TLSH T1A8733043B1A2F4AFD21614B529DEF82591DE239C7708C46CBC17CE6DB5E66032A0CE9D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin1\audio.bmp
- Size 78KB
- SHA256 932723d41798358fd6b26e658013b17a05cd3cec2d507b0426667891813a1ca0
- MD5 11ffa7a458c4e9e4fdbfca8109ad9461
- SHA1 57b44e2d14c4ced6c93c4658026684c84e1aa55d
- SHA512 3da88453f3a31f7e6d2f252f6565f201f74bb37712f4c57e635faa05ba8cbca9358e62fae1175f63158b375c4ef5f26a750d9f39efaeb305d519d633f5048cb8
- SSDEEP 1536:hTzji5xKo2KCtm4ddKkcfK0Ijx/xPaNdK47HFuoHJxgCqgV8swc:lyxKo2KCtm4ddKkcfK0Ijx/xiNdK47FB
- TLSH T16F737393F4E2E95FD21208B978EEBD3182CE234C3709D49DBC469E1C66F58436629C9D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin1\audioGray-e.bmp
- Size 78KB
- SHA256 fc8b3e021a4ce7b05efe7c11e82af16002434f9bc559198fd5fcd8dcc218008a
- MD5 5aaf4dcbf8e6f5ad0346e7b0d52147e9
- SHA1 70ebe3f4e154ae6d481b2bab76613f2437d2f717
- SHA512 11183c3e8f3fb57d30635e3293f82627a3ceb3382431a3a58a3cb12ae6750948b02a94d46ad46b53c8abd8daf14402655dce87b45874832ca331478b2925f9a9
- SSDEEP 1536:r96+cUul330XfyrT3yxZP7Sjn5uCx5yL1olN:pNcFky/sZa5L5yLq
- TLSH T124734FD1BDA3BE56D3AA49703A7D550585FA732CD70BC2BC7891CE2867C234336093A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin1\audioGray.bmp
- Size 78KB
- SHA256 34d3ce4fb329d8bba0dc8626e95c16758bc4f002245d75a3e05ad4af63817949
- MD5 c9421888b97d0eb5ae609bc18fd2cd8f
- SHA1 cf7b05fea0e331351232e776297b382ec01d0a89
- SHA512 ef7f05a7b1074905f1787b6e32681f50a54f9a2e9deed6a8eedccd7aaf30c2a0cfede865e086d2edac6f254c95f3a439adf75819c7d5ec8b894c62016cf17a84
- SSDEEP 768:G7FtAxCA/d8ub6/c4TpAcMsik078jfcn0pWi7asd1gtyeYMQKSe0itBHnqn:sFtAx774rPRX77XDYSMxtjRnqn
- TLSH T1CF7361F9716BBD65C2D60DB4233AE20481AA17314697431DB9AB8B9C33CB34B31C5B9D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin1\audioMask.bmp
- Size 77KB
- SHA256 2c85983d6512c08c418f27b0151e344322ef6a0d3e068ff9ce770ccb5d59ba73
- MD5 c23496cb049b45de31887ffcd711ce3f
- SHA1 133462e9658c34a9002a53a7925cc36c1c0c0bf4
- SHA512 22ca5af3eef308bcff0a898c519e16145a74104590adabf1025f070eb5c1d454cebbb791ca6923dd0073802d4f7bdd5b916a93aa107b5a1dbd0d2e80dcb2eb81
- SSDEEP 12:bTl5aHQhtPej8UOuE6Yj7ZZZG8ZZZZxYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYq:HlWCgj8UOuE6Yj7ZZZG8ZZZZ
- TLSH T19A73C25B7F0CA4CAC5884D7404C987692360A50E6F44434B623C3E38DC147D72D17BD5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin1\audioback-e.bmp
- Size 78KB
- SHA256 18d17e67db6c3e73df23671232fb6affa59b9923277975d07eff9b8ca9606eb5
- MD5 ff36922915436f56205976663d750d9c
- SHA1 7676d271442c70307fbf82d93d4a1a18d2080567
- SHA512 917d9bb4b886c84637b8e63fab753a5f211c4fbb31cdeb617ea5d19f9f0233908f259a01d62c6ad23e77b2ce9b9267bbb20191d8689c7b0f3959507feb143daa
- SSDEEP 768:qHc5tMv40HEnC1iPpif+Twp8YBf1ksJsiR3WWulsZ2bU:qHJ40Hj1iPs808YHkJ5ls
- TLSH T1A0730D9438823F52D5EF90747AAEEA1CC0DA32F01B0B56586860D52877E63C73B54FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin1\audioback.bmp
- Size 78KB
- SHA256 10991d9538dbfeb4ff4f9c6137649d7a49945c831cdf9fccc096b6e115de627d
- MD5 302183225c3597bbed149ae710edf675
- SHA1 a2ed9d76a081c45af2241f4fec56c6ef76592b6b
- SHA512 14c1f60a163abc3e6194f0e77691fdea8edef0fda3d01f2c2846166c348c76951f66c3dd1f0d49edbfd21291b98493fdc83ec6d8fa76b7712617514873013df8
- SSDEEP 1536:TZLjP19TqpX1Ls17yDH65ewZQMKEa9OqK8l1/h3SCnI6s:NLjPqpX1Ls17yDH65ew/K99hnl73SCI
- TLSH T1FA73FC9038E01E4BFBD701B1B1EEED10E5CE25F51B0A269DBC46C239A3A3187665CD6D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin1\audioover.bmp
- Size 78KB
- SHA256 c9a48a320d269ae7159cf21a9cc46d80ec16023ecacb2c6b0f284d330d86e478
- MD5 15866272a8b9171e8bcc8c6a4677d76c
- SHA1 1af03acb96ef786bd3518204107420a1dce15148
- SHA512 ee61880999552a967d193d4915f6c8c547dcae7e15334ae542c107db07cee39d9ab2c9a5bceade9418bbe3e411c9dffa890179083d889c561eaf092b21dc485d
- SSDEEP 1536:ApVB2EK0h7VXUCRIy2IuVAInwGV/QnHVZ:6VMh+VXUCGBAInwGV/QHVZ
- TLSH T15A735183F490EF9BD21A45BA60FAF53589EF226C425D849C7C225E1443EB353264CEDE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin1\beij.bmp
- Size 145KB
- SHA256 5aa75fc0d638f37e180b9a1e2391cc1326a67fa8f39231a9c92d8916f81c098b
- MD5 d40cb9874873465995c324486be6707f
- SHA1 a9dee96ce788895a3fb8bbfbd9441f299e00bb98
- SHA512 0c62a9be7b36e039a6c59084e2fb70ffddad84284ecbc81d129118b518282189c0d209915a208faad295610a014c0e600e3705a222f6bda7c681cb331dc79046
- SSDEEP 24:wDdyOxpaYVBSCG0j1KEoAd8LeQEDTIXUHsZAN1a:wvpaYDSP0j1KEoAd8L1E3IPya
- TLSH T1DEE3F4D06D80739CF7AF5D7011D52668DB34E57A79611F138A6676E47F0278338424C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin1\turn.bmp
- Size 59KB
- SHA256 9a1ec36c848034602536aae250aafefd52bd5ab095a509b355684c7d4b0d0987
- MD5 8f1a590e83ea64d762fa952fe16b400f
- SHA1 88bfce5ecea9ed79074328c447365ef3f13eb7d4
- SHA512 1a72ba1ef99a0dc0cfc33c698524f9ecf128b937ed8a9d69da340bea4da49de0c562394b1947343e147ccee9ac98a4dd6432da32249a8684ed5b3650e427cf8d
- SSDEEP 1536:7PPSuIXndHgHqfnOtsfawu3jw67tGe9eg0edll:7PPSuIXndHggQsf7urci
- TLSH T194532994F0B39FAFC2202236C7B9E56495A877C693930B6A75D3772011D75CBAF03229
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin2\HAND.CUR
- Size 766B
- SHA256 d490bce380174afe5121d826b97f8a35e1fd244de21aad5aa9c3959ddc1710ba
- MD5 90bff73c089d4cb32efd209d29f6fabb
- SHA1 131d3807919fd88de4ab88a8dc0f41aaeecbb0e5
- SHA512 75d8d61f93e723a2133c9e69522a99384e67e56f832cc4178d1e58ba3d94afa2b75974fb0b4f226e5cfcea559e2e8a3f28890015cb49ff950a790613dd65f88d
- TLSH T12F01C9927D30D1F4C80C2535C80B9EEF5E6E1D26AD21195B96B0BD9E3D73A0578134BB
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin2\HANDH.CUR
- Size 766B
- SHA256 0b229ecaa96b1e57c1223e69e29356ba7d419b5804a92fd0efd8154bacebd4a2
- MD5 edf1e1934d58fd50a69518dbf0689009
- SHA1 05ffed7f6eb7cadd273af32de0e807d439d751fd
- SHA512 cf65267f89ee94ece991a915cd1af54ff8a48527dd5e273cbebe0d3898c89b0aea46d943ae2abdcafb2b0b77b9bdee8829c9bf980fdce619a8c7a6291130538f
- TLSH T1C301C98AB110E1BAC09D193988578BFD4F7A5C12BC59115A97B0BDAF7D7070438230B8
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin2\HANDV.CUR
- Size 766B
- SHA256 266c62bb8eeba58bf559ec3df674a759dcf93072268f612407eedab5a1efbe01
- MD5 dca3148bbe6e633e46f18d6e651acbe3
- SHA1 b767b573e65ce6f1ab91095f6a550d602ce62907
- SHA512 c2595cb27bd1f6608921385d7001f117ffe14750a937a0d2e29a472e65b0597bc78c68944b6b5fa5e56886e47ae1e3a3e75903b250945e07d366c25707da2111
- TLSH T105016CCA2100AFC4EC4C0935C91F86AD0E352C1DBC1403AB52A0BD0E38B23007806C3A
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin2\SKINinfo.INI
- Size 3KB
- SHA256 eb1ae1f56089f903c3c9bc66eb6c2f5f462f48ce0ec62a3a85e451c53d23ab98
- MD5 564ba9f80b0c8ea7733c5fd2d5703ec9
- SHA1 1c60319bb9eb254dd01ac9dc2459958358ebf5ab
- SHA512 c911f77e4fb16389148decf2fa5888ed133dbdedcb3aaffec10c89ae32f3ea178cdfb05c6912370bf19b2e4f43fe3e47313148ab4ae14522b7b744b048110b68
- TLSH T147519C76D1417126F48446C2408DAA3D36D4E933B7EC284D6A6B215CFC492B6F1BCDAF
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin2\audio-e.bmp
- Size 66KB
- SHA256 b57c57a88ef71fd2c0392828ab9973ace5b6ad8edcbcddd23c76cddd8f5f8da4
- MD5 f8c0c1d67eb981a72d82b25e5f3e261b
- SHA1 683f37b2d13285012c4a062436bc51168f3e891f
- SHA512 83793d80d8080e2b43d988bb90acdb820871611123683bd8a4214e63513a72d097cad28cc4e524c61e9ea7dbe304726c3378cd23df969fcfb2500c284de7e512
- SSDEEP 1536:dZFYZiOHH5gXYN0NVrlGBuASoqMzvDlTvXqRSGHaqVBL:dZFEieH5HILGBuAD7DlrXtqVF
- TLSH T12C633BE6F12D62DE7C886C21F63595E98EC181D7A158A08BBF6F770C84BD9800E79F14
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin2\audio.bmp
- Size 66KB
- SHA256 8734b9a10003079ee9620d927226023e794bf69f6c48227dbd006aaf75d4c166
- MD5 5ed7caf92e5ffb9fb72704af4f9d6514
- SHA1 cd08cba7390b960ff27e5b7dee58220e85fe93c3
- SHA512 f1c46c3dc6b2cd20d51660468afdf48497bdc0ce1f4adb2f0692e16c1647402357397b08cf22e324ec3115bbb02d3ecd749bcac1b0e9cc0055cdb4aa3c4f574c
- SSDEEP 1536:9w+hyLRhmIv5uoz2KrkW+XjKneDZ/bk+0MiznXkRh:9mhnhbnwZ/bk+BcnXkRh
- TLSH T1476339B0ED29B51E53760DFE966A32401D547C9B3D43A429B87CB20ECE3BB404D89F66
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin2\audioGray-e.bmp
- Size 66KB
- SHA256 7f94bdf342abfb0698e4eeb5c92f775500718914d59ae7e6292edc46bfb14726
- MD5 6d7f3c982237e33702453c470d4e65cd
- SHA1 856f3c5aa2a05174bc90f59bd57041a13ea1293c
- SHA512 a6b35267d41cdda2b00d62584affcd8d08c7f8ddfb6e80ac35a5fd65c08a78ae11125b2af9fd38460757adcbb519505cafc552437fe8a817b1501bf596a31840
- SSDEEP 1536:emVSlW/Ik0EVEKmBcs5EVxCewnE2v5fb/39LNZg0iivULZ+Ac5DfrPdZxE5YND5G:emELv6TCFvfT39wHnc5DfrP/xE5YND5G
- TLSH T10C6329E28B55EC85B38047AC01925D2D85A56E16E7BEFCBD280D35993F773A00D0AE4F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin2\audioGray.bmp
- Size 66KB
- SHA256 93ffc0067f853b66df474efc21582634ff6244feded35ec3d445556f2b57fdbc
- MD5 f0a2cfa038de481c98a5b1ebbd20eaf2
- SHA1 68945f7f4fdc795e3e63b4b4d6bd067122f67d88
- SHA512 131356d4ad675d9a94e07371ab355c72267daa7b441f2eb263f1ee37eec713700e214040cdbcb1e192541a374043c468665caef806b6d5a72c21185b98b6a324
- SSDEEP 1536:ekw9aEsf6hbnKXkYTizdgipsy4IDmJvTDzaX1RyQTsdPrlI9GzY3QBgRq5i5topt:ek9fKbbgqsiCzal4QTgqqgc5i5topiA1
- TLSH T1126319E2DB649AD3BB610BA801122C28A5951916D7FEF87D280D34F63FB77641809E4F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin2\audioMask.bmp
- Size 65KB
- SHA256 5211d6adbe024ad97ed922c509cab5f38a951bd0aba86a1d64bdebf4fb5e1400
- MD5 eb6847032b0e21c2bc391f9fe2d2ea6d
- SHA1 1737892d73577af107e2da3f3d2a28a86d31bbe6
- SHA512 656195f53cdc85f374f65b16aeadb51024eacb20b49b4320f64c27493e812a3abfd1b5d37396b56afc74e2a4ddbc46b885969ba98cdddcf811b248fa622eddb4
- SSDEEP 3:gNzllvk/U+s3+thltll/h/RaFnlnVnnXn:gNIc+W+V/8F
- TLSH T1B76302587155F203C43E9530940281E8F6249C13F8105347100039AE690402F3A052C4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin2\audioback-e.bmp
- Size 66KB
- SHA256 23f2c9b157ecd605066631ed5460f7870d56e270a92e4e8dbede652371d8029e
- MD5 3a8e20c2c4dce75e24440017e59ec5d9
- SHA1 d8be81d8dd47372e26c4689bf1489dda43ba4d70
- SHA512 8fafc136ceec93c0edd683d40d5a52d3558026bc2078faac5f14b6b588537a3ec4531d63b89c6ca79044595ed25a4724294464893cedfc96715dc4d6322bc942
- SSDEEP 768:0yTiaD0bydbKMDO7Tcj9EFU4X8z1kGL9yBIWtN/W23BFqs+FttsnhC9093YD9rm1:0D+AMuio8zSGLABNtNO23BFOL0vBmW
- TLSH T18A630A78FC3AFC86FE71BB71A812C9950C40D2E31969306AB85F3A814796FB5086D347
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin2\audioback.bmp
- Size 66KB
- SHA256 8d7ed35fc28eb0b92bda735a2cd19824cec9e89a3186f5a0dadf3c102eddf33a
- MD5 8e619fd9bdeb6766118206e2a337777b
- SHA1 cd5d65b42f50a414d761425548abe76812207bd2
- SHA512 f9391366b76c463968bde0be4d9bde2bdf26dd3a7f5431c5615959579296e308dee7d06d741d6a350ede6cad339154f490d457fd1e7c1617d06ac2e78d7f19bf
- SSDEEP 1536:gdJlKEr8VwjWPoYnmyr/tr3W/zjjqi4g00:gdOEFGnmOlq9x00
- TLSH T19F63E790EC728C42F456677DA4C798E6F50EF2E6F83C6CAFA1AF7940C5B9B54582C201
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin2\audioover-e.bmp
- Size 66KB
- SHA256 845de7a26d65b4ed3a23762cd33af66e8290e8a0aadaab13e7d815594a77372c
- MD5 95217ac7b9f7333e759421aa15af8224
- SHA1 ceb475dc6b10cf14fdfeff8f146b1a8c73f6591c
- SHA512 64521c7e1d0991b7e5e22982e5aaa5baa6d9e748bf6728b7c5df59642202d1e251c419a3e82c9e26654a987fef0d5d806e42271becb76fce09c5627a9ed650ad
- SSDEEP 1536:YD3yOYhDpcJ62aUkP9sCuzo3WLaRNiB5Ph+:qCwX9LaRNi4
- TLSH T12863ECC3349B9E9AB2069873E1F1E9A5DB40B0C7F687645F318C791B98534C09E46B37
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin2\audioover.bmp
- Size 66KB
- SHA256 a5a6e4e0a3e3ef3ae5d2ca10dec7a357ea6e4d9198b35812d289568d0fe6b6e4
- MD5 d3c3b483fc669f20b36690160e77e2f2
- SHA1 b17f50071a4583043d9e4b776bae652d2737fbdc
- SHA512 5baec92f0913598f0daec20b2d32d82ad132e2d8039a76d933f10eb7af60fb87be5fb3a2dede066fea14612afaef29efa61aa58b06b2e3a667c01220b7f008f2
- SSDEEP 768:odlJDDPtHtzBHD/IjmBbuc0NDb/K+3cyqmfWXintD81FFytqQ1Gt0ur375iV5Z+3:YJXPdt9smBb6PWXGlh1C0ur3Q57x3JUz
- TLSH T1CA6310A9283B11ABBB46E37283F3EC80DD7961D67518103FF39C9D495909CB9B9901B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin2\beij.bmp
- Size 146KB
- SHA256 e6d7b3d4401c09226b02a26231edd1b79c84988b2b3f96e2fc9359ca46a43471
- MD5 1b000671e1f666bbeb00a292503e282c
- SHA1 840dcaa8c63b111c8520380f26b4280bdeb8e2f9
- SHA512 538c560aac6e907886c72da6bdc80804e8f5e95b9610023f2bafee0f962a5f58b0ad3b5901aff5a3ad4c6f84957d17a53060d9b75a928196927aa44ff5a27820
- SSDEEP 3072:iqbOztU3gfZDdreqqJakQNN0tRD8uTTN1ymhD0C7f8:Mt/DeTQN2FXrlA28
- TLSH T1B0E3BF9BB8FB71C2CC12B4B36E85D2A3C66F84164A57089333D86F1DC115C25AF66B9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ADOPLUS\AudioSkin\Skin2\turn.bmp
- Size 10KB
- SHA256 fd4870a6bf4d1c19f3840579a7a9998fe66dfcbe73706586864f483fd7e2a5d7
- MD5 3ebe489007c9ab35d307e67f09b379f7
- SHA1 985576aff0a6dcd4d7d990c6518912435503fadb
- SHA512 5880b4c67e3dc0a141a0304711bf6559674420edbc7cdf26a6fe4099f028234b145c5cfb53b25fac261b52bb8301af19a237767c0738e381d5ef310a1167b003
- SSDEEP 192:L6om5STIbyObsab+bEb+bsabyOdTIADuuJ11XTOstTttbHitT+/pSZIYTTFTTstE:LmwTIbyObsab+bEb+bsabyOdTIADuuJE
- TLSH T17D224BA910041587D7F8527C4B343AE4A2AC7D7E37D2287ACD4977A3FAE3143974998C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\AMPEQU.DLL
- Size 46KB
- SHA256 8cdcd8afdf2f805d83d62390f6cfbb818dce9b8d0276537f993a118705f5e8c3
- MD5 2d254e4e31bca263f8c78b9a3330af34
- SHA1 c0f31107a3f9615955e8f17527b36941a04bc4a0
- SHA512 c22ededac1c860c0969db0fc2195368e25abb5e7c97c9006c96198c0561cade6e127ab3c176fc70a1f6e28a9a3a1fc9b34bd6c9f071adb7ff5b60deae0fe2b43
- SSDEEP 768:kaT5BNzMBS2/NTJPu4r9daiqjMJznXBH0J3F62EGi+UD4VQ:kmTa42lTJmi9rNJzRHr+
- TLSH T169235C06935689B3C5693B7D909F1BBBE539A5681FD363C38F651C386C312F1063829E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\AVCDROM.dll
- Size 47KB
- SHA256 97ca5b39eaf82f3692af5d63ee99cd4ba8770c18760a01458424b5f799c791e6
- MD5 62e4070c09a6275a07bf2a97f72f7456
- SHA1 1ace129a4cf7c431bb385d95e47f2c423c3a1fe2
- SHA512 6f08730af9e3499a88700f65d96bc5173309905fdcb3e7bf04464335e61c0aa9a611551ae925c99d27e86f6b011a7fb4ff77dd155ec0450585ff6949240b4b9f
- SSDEEP 768:zD9gVPgIVK2F2X4g9v9waZm9e8HIMZWwjobZMNWHV:AHF2XT9v9se8oOjol
- TLSH T12423090AF6EACA71C5915A3D05B5B37FA23F49F48382E2D3DAC019750823AE1787457A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\AuthReg.exe
- Size 52KB
- SHA256 c82b5aaf7e9f93363b520a9e40e8cfac935a5a9047aaf83e32ed24b8062fba50
- MD5 e37db1656c69c1a3e42429e0e87b2450
- SHA1 1cfc65684f76b65b8f87c5afe739d1538faa08b6
- SHA512 5e5b509dc56df0951b1cf380c53b5721569fb96faa34c78a27b95f0d58797d02d15c121daa1c3cfa575dbc522ae1b7a3915c9e5e94e7e41443413f8e7a89b6c8
- SSDEEP 768:G4jGIhjA9rUbKZuVjBPo+McaTHJHrpZsQ/76oY:7jGSjAxZ8wzcabJHzTGo
- TLSH T149334A1676E28023F4D3167004B78BB6DE3B3C6116328587AB507FAF7E35751EA26392
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\AuthReg.ini
- Size 1KB
- SHA256 e4d7bab5886db65ca09fc8e13a2facf51e63e2f4624cc964492c081b66b19db4
- MD5 172e4140ac96241c387b1d2c4afbef5a
- SHA1 e4ac6ad6504a16d2c71fff8670db0bdac44899ca
- SHA512 df40303fac11b25752475fa9dbee2719af1a0b61b2a4ed287ed123cbdbe1b6daf84b096e44e729a6a499a33bdd0eb9d58f8f99431c8e3bd4722b3983dedfb36b
- TLSH T18831A43832ABA3B4939709B5B6F9794D63102DEAE3D8E738C5840A100F47CEE2449A1C
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\Back1.bmp
- Size 10KB
- SHA256 3ab9c7a27240534d6e88620c8f87789831cdc3dcf45db46fe296f92849d0003b
- MD5 54e4a11547859152fd3ceab46e97714b
- SHA1 985c4c6cb05faf594a07f68df609ba25694bbbbb
- SHA512 ba5462fef6a1135d996eb1226603d7af4b1c5d5124a7ee9088cebe782cca92282df8edb996ab2b9c31c94a7c8fa7f81fb4ad6fd00b30a494d58ae72937ab2d55
- SSDEEP 192:8xNkybN7XrANRGW8QPgFj+QXZWPpR7FSKoxLv//1EAFnww8o:qkyb5Yo7QIFj+QXZepR7FSKowAFnwK
- TLSH T1B5324CA3634DE356F9B27075CAB18033C972F760D7DBBA80A42D6D2DD72E102D358A84
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\CDECODER.dll
- Size 82KB
- SHA256 868de90d8043fe223a475a9de4cf36e35496a51ec4dfb1b662e86d2c8dd04e17
- MD5 a8abf7510154247ff9d753c1356f5ad5
- SHA1 e2b70343b995e52526b2c4f7af9e8807d1c8ad04
- SHA512 329691edd06037beab951ccf37c5a0822b60ef96660178021eea3b2427fcf2e2ce9ef00c37dafea08ae4528464d1d0c839b61a9c23cb09efe72cf2c761418ccc
- SSDEEP 1536:P88j+BuPUzbF59ocYweMr8cKOBsQ2zBbcF7dxg0/OxF1Xghi:08CMPURxxIN7LcF7XgC67
- TLSH T16B837CB3A295E5F1C05E53BD51F6BFBA963954304BE291D38FA710AE1C353E1823630A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\CHINATIP.TXT
- Size 29KB
- SHA256 d9c6a39001363eec0d9f72b70f1b4cd3a6127ee1226187d431ed258fd94b6e19
- MD5 3dae2459915afa6d7ceb254739b70d61
- SHA1 a538aef3941cac918e25b4274c10ecb072e7e8bd
- SHA512 7aa9087bd92243f3b8905b10974c29ecddf9a53f2b65936099d41dd247790480e5bd9a64a43e880e87c31f69f825a24a90be6e6ebab3082305b7edc282f30b1c
- SSDEEP 768:cMlPKAc4sVfL5ZZc0RmHgQwXqdkiCbPdjP0zZB7Fu:c2KAd6f9ZK7AQwXqdkiCbFjP01G
- TLSH T130D29ECFE5875229B7217E81C21B082F19880293F6B75D3C7469808A1DD79BD618BEFD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\CK.LCD
- Size 1KB
- SHA256 e19a202031960bbe49816aab5ecb86788d23a8b27ea1321688099c88e28a9e14
- MD5 0cbcd10f5242a138a59463687dc0708e
- SHA1 3f516b57d94d0ba2bcb321637ec5ce425989a596
- SHA512 012490736b578eba93965202cfebb2d8f8f699b1e37189c36c1f261f6d76de17d7581866413ccb976b6f6b90403a8fc5334b85eb6cdd9bfc35f281a7cb867563
- TLSH T169315253530DDBE9F9E8091208231535B5DB4B9E6D3D2BD3206B345C01DA9E9168AB17
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\CODEC\SthReal.dll
- Size 83KB
- SHA256 0fead2ca8e47fb433d3f83f30cf9bfed9d30e234caedefb5850b3dda158060bd
- MD5 9e64c4be6b43bbaad3f417489fca5b63
- SHA1 a77f8d595922230d0195823427a3c9bfff192267
- SHA512 6ec738bc191659eb946b8b17e79ae716499db48f9bd4c9c37af7a82a9b75140274431f35c1f58765af357ed11d910d73b8588a9a8cb599d7ced09afd56374ca4
- SSDEEP 1536:6hmZEj0+KMuoKDGFiATLiZevwe42weLutQKg+1I:6hmZGRujMLi3etwrtQM
- TLSH T121833941B351C1B0C6EE96BD00AB57BAA3339760CBD6D9C3CB542C3A983B6F05E35259
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\CODEC\pncrt.dll
- Size 272KB
- SHA256 b9e7c657138cfe88ede588b923bb8242a4cb8cb598f8fc8f4209d1b395a88240
- MD5 b9807bddd55d3d4da93a0bf5f67e4144
- SHA1 709917c41d6715b3de17ade1df4ba47f62c87931
- SHA512 2d29898f134a4beaa67689f20d1caf60c0ff7110104fe877efea0b2981bfdcd462d3b9f1449bd75f7bcf1605f301ed48e8a3c899df5a039766a5ff1184bc2dab
- SSDEEP 6144:Ai7ytqnusa8gfjLUWeD7dH5zq+erQcr4qst60C6605J/BsfufVv9rQdjpggONfjT:Ai7ytqnna8gfjLUWeDpZzq4AK60C660x
- TLSH T146446C91BDD1C8F5E582A6F904A3B77F8F3D42A90123C687D3D4DE634863271672B24A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\COOLMENU.DLL
- Size 65KB
- SHA256 0016997e70800a1734a3e01ca38e022ebc8b3f2a9a913032fba07027010c51e1
- MD5 79b516186e0423e1d797cef573abe51b
- SHA1 f58ce771815580b7a03c4773e6baa443c2c3a71c
- SHA512 97681ccbf8339829d2657f1ac1bfa0e76fb9dad215321dbf0d386c297cdb594c37874f6de5780f7226471071f8c9b6ac595aadb3c02be70d2b13ca6ae96fd872
- SSDEEP 768:rMqyDEaeUEAfub9wo4lqdL34ZJvyALSwEdGzES+1JQbblU07ta9Rh8dgLMt:0QBUEpCokqaLvPSwLvwJ0b6+t68d
- TLSH T1CB537C42BAD2E5F2C09D877D11E7A77B9637993087E39AD3C7901C7AA8332F05538249
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\Cloud2.bmp
- Size 40KB
- SHA256 baf3582f535090cf0c97e2f50a168e2b370da7f5a5603a4c99ffedbd0e4ee079
- MD5 58d24b5b4d7575546e8303aaae58bf8d
- SHA1 21ef6f6cb385307ea500de91301af3f2bc1e684f
- SHA512 e2a941d8704f90af4a80583acff9f88524071ff625e8905d2a82db37949febd0e794df512232c36650243baa862692ba9948900e460b00fb41fac4b2d7c8c5aa
- SSDEEP 768:sNil1pCC2ldFWaKQLo0AJepLaMYRH91uBRf9ezJXAv8lufwGxLesjOg8C:31Z2ldFWaKQLo0AJO1iu3f9ezJXA+sLZ
- TLSH T16403AFD4BE3D0C52D9C2A621BA2034984B53F431EA47AB369193F5A53BE3FD0354986F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DELPLUG.DLL
- Size 28KB
- SHA256 f2f86dd2cd7093203614a4b649114072e076607544175863245b2190815c34e0
- MD5 d6ebdfdd4ea7ea236747bde2296e1865
- SHA1 a834ce56b4cdbe52c3928f2ad755136156df14b4
- SHA512 79f21065b71678c8f33a78c337909da3c10817fd7add828505fc4d84cabe593b1b22f0efc43a7ceefb8044e97b625f1bea5ebc1e3ac71b589772feb2a8c5620e
- SSDEEP 384:gW2cVjQ4Skuudin7clwVXE5qmL416Oima/5HW8bNBhpged90qiNKR3Kg:Ici4fuudI7G1Hh/5HjHCZxg
- TLSH T19ED24C16DAE2C1B7C19DD27C54F3ABBFE532192427D396C3C38A28B56473AE0213D249
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDFILE.DLL
- Size 40KB
- SHA256 b0afe273f331a05293c469d16cd84ea4b5dd10c1d070b362f35f8171e051e0da
- MD5 febf0223ad061f142fb2996d9a2b15a9
- SHA1 dd29a6d8d8142c7e0e26e0368a2aa221f8fb18cf
- SHA512 1117a71896ec0850eaba98622ab6c163b55357da931e1fdafe5e07760d6fd452d04cac50a62246210779e421bccd2aa7ef040bdd5e2f64193326e638d7bf6e72
- SSDEEP 384:P7XZbJELnVf7vUyxvcLpMyN4Nq9dh5c0oVKfJgYXQz4mgQyQOfJyscU2K+:PFJELVDXC9Mg4s9dLErNByQOG
- TLSH T1F50317179641C0BBC5ABA735909A53FB6A384B342FC1D8D3DF561CB977329C1E03A21A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDINFO.DLL
- Size 23KB
- SHA256 7785b6274391cd337e277f09bae1c0316d964dfa41bd458d8b1d8bcdda427647
- MD5 b06186548eaf69f6c5d56a4d7ef8fcee
- SHA1 4551c647b2378dee48aa147012c6b17f79cfe4c9
- SHA512 9f31aaef7521b7c5ca4a865ab2090758f37950dbe0df965e14348b16f73af519ce1ce11b69d692ed0180b81830c8942caa55f6ac61baf23b4d31e531f5f2651b
- SSDEEP 384:7rMeH8OP4R71LTYoH+C5X7EdbTnwRJjoEOLvOZ4:7rMo43XYo/EpTnDvz0
- TLSH T1B2B2E606DA81CAF2C7999B7C04A72F6A9635196507D6A5C3C3932C7E58327E0623E34D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\CommPlus.dll
- Size 108KB
- SHA256 6790d4c1d666c82ac839ef39d6fa3fcfc048d58a4f42f98d36b3c06782d7ffd1
- MD5 16ddce5006a351619e17935e868bbe9b
- SHA1 1d00e768755ee5ab9e8da402d1d621c6b3d0b3ce
- SHA512 5307764327b911e4599a99a3cc6494a4a0edb205ffc1147d49e69fda8b9247353c1b67d485a657a4e1d296fc66fa0fce6c91a2b8e32af023179e0f468023ec05
- SSDEEP 1536:gf0Q1c+heIpaZ5njFWP2lCC9IlcGgFTvM/9wFpLBoQTRGhkZdf:O0Qq+jaLYP2lCC9ISGgMypLBooRcs
- TLSH T12BB37A5234C745A6C5EFD53D568B3B32D23F0F784E5B89530F62EEA9093A102AB3914B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\HAND.CUR
- Size 766B
- SHA256 3659e401dd413d4615de88a31dfc3828b83537813c6a9f7a398f86a6336e0f51
- MD5 882144e126abd6aef896b0941ca6cbd5
- SHA1 6c0d445ccb8cb3e4df1620604e75c24ea9003105
- SHA512 38557935b0f0ea1600d58d2c0eb6329c8c68f10681972c0f3e6c11e6fb334f9540cfa34ad4f8c696ba86bcc2eb2800f0ba36960346d99cd5dd35b4e42cc28ebb
- TLSH T11601C993F11284E7D0280734C88BCAEA2957AC12DD3111D727B0BD9E3DB5B016F215E6
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\HANDH.CUR
- Size 766B
- SHA256 90a17ec7ac11277674547e406d1a1732c6ed4c8efbb5ece9514c151a1ae1e14c
- MD5 da6529076cd1e2d759f0cc2c235f5030
- SHA1 66c2002f2373132b737c2bb3d4234fc11036dc22
- SHA512 15ac6c9569cac699670079aa17bdfb8eca483105e332982dcb755d1fa41c1d5069e468b4562bcc0464c3d576b93085f0002b992dbd432da5d5c6e8bef13c89f3
- TLSH T1FA0117A3B00280A6D059077488D7CAEA2A67AC02CA3521C723F1BDAD7DB4B41AF25592
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\HANDV.CUR
- Size 766B
- SHA256 3f089662d8a704592e42b421b8bce9e308db7aa95e5f8d10740455a3caf29f3e
- MD5 08ec194c749d769ed7c8e5900b81c619
- SHA1 b11ba775241ba41ad76486331f471488636b0e2b
- SHA512 01bc9327c4a7f6c6f2ce0ac97470bce48eaadbae28cafa677ec4ebac53ea87f187224de866000b4cd2162cb7d6cc55713a1c831de997f003fde76ed87932ac53
- TLSH T1E3011752B11248A2E1580770889BCBEA6953AC32CA2121C367B0BD6E3CB67456A15690
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\SKININFO.INI
- Size 5KB
- SHA256 ccdd9bb5d6012f81d173930a7e1f8a61ed600c8ec2985490d700269633b40abd
- MD5 373da435b662e0cd6bf887c6d5452284
- SHA1 230f917f6bab91eebe507c5eb56499ff92a90561
- SHA512 ec17e3356b94d480f00057384802f890a31b4cf498709f5f6fcec9fb8e56e635d2290aaed05a00927e53dd350f00e8e53b6cde90a3b267e21a1c8ac98b321ff4
- SSDEEP 96:EswmNddIl+ZgSMOC8jF6vKaL3KYkfJTfJ4fJffG4fJafJ2fJlfJox4DfG7fJTfJ2:EswmNdul+5ANeYkxTx4xfO4xax2xlxoS
- TLSH T185C1A174C3857015F0444A82458AA56C33E4F96373EC54086A7BB09DBD22AB7F2BCE8F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\Turn.bmp
- Size 51KB
- SHA256 15d650cc36ed870c2317b3579abaf18a610c74e5de3e12b1635c52cd1078dc81
- MD5 110cd579dab96c109c41bc654cd98d5b
- SHA1 3744ee9acbdba0062645633912d08676e4339b19
- SHA512 0ce2b6742cfe3410d952c52dd7ff19d8351e16c889d15c50eced2ca14ae23de46782fe2b472561e61f4d5022efd611e2a90cf3e360754560f2b5b0dcf11a5dbc
- SSDEEP 384:3aAWR6alyjW6UrZb/UNSHTE3affFffZY3pK/LoaFwB8K4RQGc1maNB77IdhSR5E2:3aAyY3I474fGlChSR5eEM0vEO2elGUeW
- TLSH T13333D696E1EFD629FE9697F96C211AD85E20EB14BEF32147245BB4FFC2416833026710
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\audio-e.bmp
- Size 100KB
- SHA256 c06aa153c6930d13f3925bdb2aa3b00e13e962d24154149b83a7e7f69bc7b495
- MD5 bceecdead768ecf8b9f0f1ed1f993f28
- SHA1 daca2d2fdde3cc6b2e76df76db175cdc889e22f5
- SHA512 178b101ea210d5d5ce84d64c496c1a1a972ac7e5a86f52e0511394fa83e1c38ab28ec4159e3e0403b91941840cfde5e0a7371ac4488f23b3d70510d4aa298614
- SSDEEP 1536:jF2cOU1JgSitll8CwmMxA7L2plXifiDeEENr+2SbLkBMlUtZPcx:jF6IJgSolQWLulX+IeEZbLkBiUt+x
- TLSH T101A34B7FBEF26B11E4AC1CFC8630B75C6369E0044B46877610355B13C8977DA27A4AAE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\audio.bmp
- Size 100KB
- SHA256 e1c5336c048ba0ae90aff3143631092005a9e371acf43e7d95461f35206b7e3b
- MD5 a97196aa94ee34db688785a50ee1fa97
- SHA1 a59aad9837b638081479090911f9f3aa254ef521
- SHA512 fc79186890a4c0413ac921e0364b2ff5be1839a7dc6eb7131a5bef92bb169347a10d302ae0a9957ce1c7a8710e88898d86d88b8b3d0e02a20c9cdf1e5adba926
- SSDEEP 1536:Z7Z+9ntmqggT9cskc5lfdFEaOEfHPdFUD1ceSfXb:Z7ZYtmqggJQcn08PdFUHAr
- TLSH T1E6A349F73E542798E2651C32E177DBD82318A885B3100683A3279155FCA77C2CDBE6E8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\audioBack-e.bmp
- Size 100KB
- SHA256 60a543d177b6e6a475dbcbb2c5d32040218494069c124ded75b90d6789157bc1
- MD5 5e0e21cec7b43571ba10e0abc883fc6f
- SHA1 b5a132118454c385bd2c5068bf4523ca9c411749
- SHA512 e9827074646c46e815781181d8961716dcd521c6bff78bec23143888ca0abe010eec0fd6386193b492350acf0d7121c5e9f8f5ee65323d95175fa11aeeb58995
- SSDEEP 1536:JIwJBCmCTl4Wuep1orpxRkLrPqY2+6tv1zHzc2VFUVBtNpDNBHR5+UgC:hRoqRWryY2+6tdroRVBXpDvHR5+Ul
- TLSH T1C3A39E6A3CAA52DC97351A1E607C6FEF56FD112EE40068B201F9E663C0D0BC7722E695
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\audioBack.bmp
- Size 100KB
- SHA256 c7355ea25172671150d5f88d0359dad161d8511741ec2f3aa35a5ba2cca6ccb4
- MD5 395c94d78f134683dc67cf40c4db9e41
- SHA1 7e43098b14338bcaf477aeb15ae385177129e294
- SHA512 00b0fdf10e9c1063a0d9f8485a3b7073ecb249092bf0bf1e185885ddb42b9baa9f93921822e93c3b1a5646d55ba727bde1e3528269ca3e40e121f8f830417231
- SSDEEP 1536:e2cCD6rXAZ9c9xwEL/ooGWoaik8Hikn5+S5En5EbdFx98NjQNmquXc:1c9AY5LAIt4n8tymtXc
- TLSH T115A37C2879F8D0B633B3802E24A719DF9FE962C96401807616D7ACC1D45F87B3B912BD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\audioGray-e.bmp
- Size 100KB
- SHA256 1fc71c294d49b7d568fdd184c2c2c9909239a5490f7eb10f389459b9308a3969
- MD5 71280e567ec9378b0a9e2bb65ffd26a9
- SHA1 3c73e370e3ed05e4f43f09de8a0daae571629e0b
- SHA512 0531b436a473eb3d0b7fefdb4e4c6286fec8d9e137e8c4afb3a1671338478ca1cdaa70ec2f2361e805a6bd8a8e631ff68a5d499ac69810eebfb1c792d73bb868
- SSDEEP 1536:mXAe9q3tMt7bRqQlJUABoiJqYbJWARFCPTvM8fu/+HjIEa6PCvlXB:mxoKdE6UABoiJqYNTmMB/DEa66tXB
- TLSH T1B3A36CEFAD783A5D53ED490D1570D2BAED3044A0D34DA6020123CA89D9A77DB2D5EBCC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\audioGray.bmp
- Size 100KB
- SHA256 fee20b1d947627dadbd8c49668bd749558304b3479b796df2fb89b34bf436de2
- MD5 9aa807dd292550b5fbec276d19482ac5
- SHA1 100a7084b5bcedc753111e19a850627ec65b3e29
- SHA512 d580f18575147fe84c4e8fb902589d5a5a6e50a1faa06196030ba9c8243d235830a08f02c9134e04248de50c7adbeee17721b1d2050d318d754c9f202ff67adf
- SSDEEP 1536:tLugDvZgZLl9AIfEHRHQsOkuKz/QWCXf7//bK8CMAEHfhCi:lhYNczk//bK8n/D
- TLSH T144A37DFC3A6E19F5047DD03ECF1085B956C26135DA0B25A6A89CA396E172AC32C7F71C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\audioMask.bmp
- Size 99KB
- SHA256 509ce538eb22f519dfc2047516f97aa79ff6de09cfd8b7f6a0a938497324e123
- MD5 625ad5832a1c18019ef0de898c4e9759
- SHA1 896b9e5a5971ec2c704e92cac8ffe68b12023b20
- SHA512 7ed51a698a790a098581e82e305749f3d58b9af9a3fa5d813920b381542b8acbffecb30aad3da869648e04235aff4c7f25a3c25766bb37ca4994b79848d56065
- SSDEEP 96:9kWFCAgW3THwLajajt1so8HAmA0kAHJYZJ4vti8/J4by2Xz7FKA0O60h1MkS:9k3AgW3TOFMdJYAvtR/wBKA0Oph10
- TLSH T154A3944C9D0D60E0F154DEB40876EA526B74615C799A91330A37DC3CFE641DB6E2F2B8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\audioOver-e.bmp
- Size 100KB
- SHA256 cc69da78319781bb345965041980cd2af77003ab3734efa23e85d3baa4e22476
- MD5 a3f77c79507a341019ae978b6772f382
- SHA1 52e6177538d2b3723c8724821333999e2cd5fdfc
- SHA512 1c93cb9436000d9c95e273d67f5e12196ad08e90b744a80d01836f3d89d06a200c4b4f4cf5bc470ae41b107377457e11e6d140524307ac421280a3fbf5a4e265
- SSDEEP 3072:cW3Og2nTm4FUW8T2uMy1BaK4X5KrCwyUZOt:jm/8KXyQwC7
- TLSH T1AAA37D79F42250F8925A9D04E4E3D38A810CD1FDA985653F3E5FF894E2D3AD12A4C4EE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\audioOver.bmp
- Size 100KB
- SHA256 27d0c1fdd530ad491a044d73fb13bcd0388c2d58c2b24f64a519a7b77fc79ae6
- MD5 0f9342444c9b79b417a78c6e66ef425d
- SHA1 42a6992e485061a2263e40515fdc12768f4b5512
- SHA512 024a1368dcff816c41b083d4044bbd3c550ccab0585ef05476521f393b34f720c02399bfdb96b295de16fd474784ff41e94c20c6f9c05f401093380b44ba3fee
- SSDEEP 1536:2Rllq8D3LeZ06+egt4lf5vvxc+bc1mjWHQbULDFmkZPPankN+gDg8IkH6:c3qZu1t4lf5RGmyHQ+TakU9FD
- TLSH T1DCA38D8CAC4F9AF4BB7992785A64F328E9683199E051AE055034F319D80FB531BDDFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\beij.bmp
- Size 145KB
- SHA256 bad0a77a4a75617953afc7386551fa24ff671e3a2120e72347c904bd96094a2d
- MD5 af4df6d39a1fc8e837fe76a0b17a2e9d
- SHA1 5e32ba1207ec3b729722df507207fb93e62c5a3a
- SHA512 2d7d87597e8f94445652fd47072743a2ff815946e959c9abb1b63342642469eb53f3d04887f8b0c0c8c92384b37a49d0bd934546c287c59fe6aa1e8fc7a14ed3
- SSDEEP 12:wDdH16mXTXnc+HInsxYoj1nsssNMnscAsss/:wDdNXydoj1tz
- TLSH T130E38243E8183302E82F0B3C0400CA83E01B6203F19317FA8800F8086A00E4BB88DAF0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\equ-e.BMP
- Size 41KB
- SHA256 7e425d606fc1d38a56206b2ee65947b8cf6f21ddb5fe04027fc281846b252b66
- MD5 9f22d146261713381b57fdfc2b5ff361
- SHA1 534820b3c78ede45fa7307f7094c5238fe1356ba
- SHA512 e0a4cb941e33dc56525eed139fd27adf2bac2b3cedde1cb902fcb05bc1c191a397879829e6722b0d200a68ce64661000bb9d8cd2800d784241334e3305cde255
- SSDEEP 768:ZAv5gUu2EJij7QuCyYJaZ888NeVJH7hBjyi80sVx4vA6:ZAvCUuRcj7QuC/a8KrTsLwJ
- TLSH T1B8136D437AC72D45BB9B6E1AB89D5AC59641038EFB3B89C6CC212163C4DF28F0E15E25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\equ.bmp
- Size 41KB
- SHA256 a47dbfe819f8ec4126bc168c6c485858ae4573f76ba285632c7797079624a756
- MD5 bcea381ea95aadf4747c53ccefbe970e
- SHA1 53e55789e7ba9e4af62fc7592ee0f7267be022ac
- SHA512 5719b0e4cfd3b523a026f2246f11e2d2a337748c9dc8894a37ffbf82a5d859b5f3becdf3520930120dd79563d04c0b11d87feb12a8573646ddd1243dddb13ed7
- SSDEEP 768:Io/TGGGKvSUAwg1Qr1b9z1ILXtSl5fnlPQT3NEqANP9Nizp:vaGDSUAwlZb9zUSDPlPQTG5Pazp
- TLSH T177138D9768CB3C45B38BB8EA380D8A7307944B8ED737D5F56D0A01D4EABB24F2564D48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\equBack-e.bmp
- Size 41KB
- SHA256 0bc95e3b4dee49b5292cfb140c800e754ec8e8a7b41baf8378128d9b00807775
- MD5 dfa9fa6db780932b7c8dfb8bbc6071ed
- SHA1 76c21d54918b33b9536a65bc4e9f5d7fdbcff6c2
- SHA512 26aa358a1ef4487de8bbdd6b5d4187645f8477aaa95de46f2e130a408dabac2ace5fc900d0fd5dcf9b6b3c916f2aa44b1929ff1a5eacbbcbdd92810551d64b00
- SSDEEP 768:jwweekoWB3Mmfv9uLHVjD0EpFuGqhVA+QmW42CRYz92Dy19TR:jjvc3M69uTVjD0sFuGmO++4Piz922R
- TLSH T17E138D073B9BCC513A8A09B7793882885B341FCDA57381AD7E0650AFC9BBBDF0D54681
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\equBack.bmp
- Size 41KB
- SHA256 66c09ee4037653d75be70c02609fe10e3522122047e7f424cacc068886432db1
- MD5 ecdd09b1dd3c04b7c75c045e570107c9
- SHA1 e2acb5102d3692bfc30efaed4fb76eec5b036871
- SHA512 c64deb10c9b03a005c29413d6b8619b3abf98bc57b9ef34364a2ea12346b15be3566d09940dc404e56b9bac6e64ee35fbeef5327a5f7c3e9e8f08fa2c509d231
- SSDEEP 768:4dxujEsRXtn8/x/CvnlmA0WYAsTvW4ZDOL4xWZ:xjEsRXWdomA0WGxgHZ
- TLSH T1B1138D6728834D83B35AB42555EC9E860B2C77AF423BE1D82CB5104DD4B3FA3261DE75
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\equGray-e.bmp
- Size 41KB
- SHA256 37bf7c2236ee266ccc2cac6453a78c39a363171e3072d75eae88762516cfa4c7
- MD5 3d8ce097942ce31dcdb9473f626d448c
- SHA1 8381a901050d803579cf1072161755ae3b49222f
- SHA512 e333f54cb2e5deefc83b70866f2e8f0bf7af4b22d7479268d5a7107fa5c38b3ece579f185e16f79ac62819486504f4446e2544008893b812582eed9ba46be552
- SSDEEP 768:1/CP1vS4wpyw3EOv6PRZ59UdiK1hMwzvfUQB:1A1Wsw3/ybUdi4P
- TLSH T128136C72A5434ED5720E626CA3ECFCF43497937C298792B6F1A43870D4BAB4F184D94A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\equGray.bmp
- Size 41KB
- SHA256 b3137777e5550fc3b73310d29f3b768b4450de9ceedaf1b791f863e90479012e
- MD5 d71bb90431f3fe53ef54ec55f4ba9d60
- SHA1 3cce5ba35440b12fb49685defbb5c8086f206153
- SHA512 5c42b899c18646307856ef4fec89511f35dc2d47e5c41a18df4c8d6a008d279eb32a4f154b4259a8fdd63c6621aff485481d03fbc14f3b0c14ee777c6396787d
- SSDEEP 768:IgRrInOPS2dtpCmoxx1a5E5ZaqbOz8Cg/H1f4ZC:I0S2LpCmoxzKgTqYHfX
- TLSH T1BB136A270BCB7ED87AE5797A851C6A0912EC9BAF643768B81D6080AFC4337DF1C58D40
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\equMask.bmp
- Size 41KB
- SHA256 f3bb07fd375db211a7b55df4451103f50d27f4fbb5ca0e7b52664da005407e5a
- MD5 73e367a82057d451b27862f13f8b0855
- SHA1 4e8c12084df0b46fc7eac42df82276b448ccfa63
- SHA512 5ef067da6c8f3fd374f9ee51aab32055d28c261ea83ef37b739db27e1f0bc1eb635853ed8b8455c2f713639967bdf0dd37c8cf3ed8c7e6585a0f43175eae3493
- SSDEEP 192:fM+nBLWO+gtZg0y9PJl5QX1zmnW7aCMUVUFVT4Yb9EaFoSqitvBj/:EmBCO+uZg0qPjGFLDVUFVDOaFoSZtZL
- TLSH T16C136395CE4C24D5DAD23678C08BDF686B60B95C90C2341B57329E3EED3018B6E5775C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\equOver-e.bmp
- Size 41KB
- SHA256 38663150be3d3c69b743b301349fb101a269fbd379c5da221a4158a2800a16d1
- MD5 6a8b82a91b066bd03d5ee98423b60265
- SHA1 e4be2627472c3f452104d981fd2091c6d7fc0b7a
- SHA512 1f9f7ff59b328a5e63d3d90cb8bc8618c694838a089fafc995f26dcb208df333ff378236682dff23f249443b185714431c94bdb21c641ff5ee5464dc11ab796f
- SSDEEP 768:FdFrmk+xAOx/tbqUHXlVA90pJzdf0f3Cv5:Fb+7/NHXTr6/Cv5
- TLSH T186138D87ABA7DE1176F76893A4280AD617403BCEAA3343E99D831167F1BB3C71C18D50
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin1\equOver.bmp
- Size 41KB
- SHA256 68cf04f1d99de593b6691d949affdd2975b4162b3fbbe2fddead5ff515ec928e
- MD5 001f0fd9eefde351bb3add7f0f581e93
- SHA1 fcaa708cb398ffd7e412f0f0b1bd74ef24d11f8f
- SHA512 0a0bfac147d9cbb7c78e52cf7e7784b16a65573dbadb295a3a99b7d5975c652275dea4f593f11a753685e846476ff65057db58b45b125814ba135edc6db6230a
- SSDEEP 384:sh3e5UnFkcbAtRIeVlu+F7mQ0n+KuMOIDSb4vYkmRhnDUrnD+efTse1Dlh4FzAYN:o2CkcbmIeA+KzOIDS0v6vOnjsFzAYN
- TLSH T16B135B6754830A93B75EEAA529FC4C524B39BB1F9633C0DC1CBA204AE0B3757053DA31
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin2\HAND.CUR
- Size 766B
- SHA256 c2bae9b49ad0afa4f77d0508506946dc5391df3b1868879fd37371a8b8d32002
- MD5 878a501c9bb1870ebdabefa16c4f6f21
- SHA1 38653d4257eb70cee23f3f7b07307bf2cdb9fc19
- SHA512 379e317469e4d2312d2cfdba04ba9564ea53fbea38213cfacf3d52169d9edb066ce729601b22ebcbf0bf24f742703e689fd76694964ab8985d469370c60edd72
- TLSH T143019E81702740DDC3431538885BCBA5852ADC025C95104B57F1BD5F3DB0B09E5038E6
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin2\HANDH.CUR
- Size 766B
- SHA256 b3864081575a9a99c40edace56501e7768062ab6363dadd543b6031addcf83c7
- MD5 bd6a1197a4744ddbef27ad3a4e6f1452
- SHA1 cefb092f0298c71e8111b0f502bb7c0f38aced4f
- SHA512 6732d1d56fc50dc86bbb9a690ca7ada8a32b1ba8c7ce6b8eccef13a90dda8d6652194375dd7e8e1a87a2140ead8e0a9315d67c473a5d00642227671a3eede46e
- TLSH T1A801C905732850DAD0160A74885B8BA9C63A5C23BD4101DBAFF1BE5F7DF0645E4371BC
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin2\HANDV.CUR
- Size 766B
- SHA256 fd49c0fe8b7f5c2de0cad0da901003f6c5b3509e63ece00f6f0d65930c4b5097
- MD5 6dd475372c69d44344a1b848b34a06a5
- SHA1 738d032438f0c508cbff8bd0fc1c4322919fcdfc
- SHA512 894c0e45bf74c36cc6cd2e78226df52e7b0d3704ae9b18a85eeb2380399bbd05110f3020cf5492fcde375af68473d39a450967303918bea22da493d6702187a5
- TLSH T1B301C2CF31145194EB080935D9478A6A95B51C32BC9401E35AAC7D3F7CB3204B4161FE
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin2\SKININFO.INI
- Size 5KB
- SHA256 ae90709d299df9babf457c2490b16a6145568bda31dfced68a16b9d6700ca20e
- MD5 e297acdef05fa47e811ca4f471acd5f4
- SHA1 9fec1964ba463141c3629bd38b0283c7d8579a03
- SHA512 81556e9c28317436ede88240d5043008def36c51d6577a16a48c752a1f1de6c4cdbb152ce0bf8b46a2fcfad789db1e0d7463f6ef5946bc0018376a0be816ac6d
- SSDEEP 96:9xUPhI588k5VzM4cChON8SF5zyPdvkk81NdNYdYd5pXlHvs7+qvAcnUMyz81iqj9:9xU4pk51MIyhT1jNwYd5pXlHvA+qvAcz
- TLSH T19EC1DE74D3457116F40886C65089A52E36E8F923A3FC28086F6F6459EC1A6B6F1BCCDF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin2\Turn.bmp
- Size 16KB
- SHA256 6d220c53a8f859228241680abd2ddbeeb9ce498ec20a252643021ad4b30841de
- MD5 ec451557b85c51b410374af34728f165
- SHA1 85eb6d366ec56cf5b1afdfebedbcbd389631b6f9
- SHA512 873dcda491b433c9b7046c5772cf517f806c61d001373c1ce17a4ca2070b44278c6c31cd35cbc4bd8d34827b39dbcfd479f165f6bbfd3b30ef592118eb283f0d
- SSDEEP 192:CiNjL2H3Oea8wrfBgJ7ccb22F7ccr7ccEQIFQIX+QI5fv7i+r:CiNjL2H3C8wlW22mNG5rzr
- TLSH T147723E073D4BE79CD0640FB4442117A5271B534A59F3031A1A256B6DD2E37E31E1E2FE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin2\audio-e.bmp
- Size 70KB
- SHA256 4bec2e015f5a216d26c184a7edf9017404faeb5a0168d5dd42327db12a9044d0
- MD5 f597017142ad19d6b12bc1b509a9407f
- SHA1 707ce75b819f4d673ca855e834ec52fbb2d30c28
- SHA512 8105f1083a228c945b1c60433532955c3d84f7e8493eae1a24b11d9331a744cd07466f9c06b174192105195b5b9c288871ca77bcf682cb6ed102e4e705e941ab
- SSDEEP 768:qCj5D10UyXv3TCXsFaMgbSRm0JLe47+7JGsFFFFFFyn0000R0l+f2:XhYjCXYa94i72Jf2
- TLSH T11863E1C054E5ADEBE356DD7C6C98ADA4D5F030B48BA9219B303ADDB0E4313A7540E36D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin2\audio.bmp
- Size 70KB
- SHA256 a347fc33f1cde46dba89d0940e215b079dcfac6718dc11af7cc1adeb5da620d9
- MD5 5e343c98623b1b271e221a742d38e3b5
- SHA1 081dea8c353a2d3f9e3a14ad2d7b35d2d2896b6b
- SHA512 afd98624084091de904e0152c2115c21b6bf823c7caa96e4f452a21556353b499f1700a40cfe357cd0ffefbe4036b3f81bcba4ea54377c0e539a5387de38d118
- SSDEEP 384:5eclWubBUB0/BTCY2OWsxBn2YBj2AmLHBT2mKB+SKerRWwyBtM9B+SGrTk+BTImW:YclWuLV8g+wGCzvRgMsrXGTPuzvx47
- TLSH T1D26332D8602EA5AB6B8784723C6094D1A5915639FF25526C303EEFB0D6777C3224F38E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin2\audioBack-e.bmp
- Size 70KB
- SHA256 be35bb9ab5d081426f52f167fb7e4a4d48e44b3b2f4994848fa7089e359fe2d6
- MD5 085db6fd8b190b66ed88e92a283eb200
- SHA1 90c9e0a8200fbb81e8896b58b1133ea5e5b216dc
- SHA512 3985fe25828c357edfbd2c080979ffcccaa6ac22138e06fad10b4fe12c58af578904b31cadfb6850fe877a6c1af83ee733ff74972925ce9eaa74adc92dc67c52
- SSDEEP 768:uFn0oj9OdxL2J22MZb5V4G/N2sDSDsmjSrLUIIGWrn66666LQ/E3:yLE2J22MZEG/NYjORIG6n66666E/E3
- TLSH T1656388D0A92F90A71B1D6C3A910CD586D3966314F163B87A70164E22FE963423D2EDFF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin2\audioBack.bmp
- Size 70KB
- SHA256 5c50519e5c90b43757c15a33a972d4002efc538857cc49cb8d5d0c25d8d84e00
- MD5 a0fa5f6577d2fc08e1fda2deca28c3f9
- SHA1 45457f6487ba55dce9db00aef6213e380534e016
- SHA512 e205e873e16ca75f51755811207da83cf1d658eb0260a3ee0264a55f2c1a8d634a4f0c6a5381d74e82fc0792dd7de2962e3a4173336ea01fc066965a640fcdc5
- SSDEEP 1536:ErVr87UaO+YK1KKSw04uG1UXMbULdZrrrr1X7F2Qwd:E587UaO+hNDsL5F2Rd
- TLSH T1F6633F40693F245326220C6AF12EBA547B6987FDEF07913EE54F69B1D1833A7354A3E0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin2\audioGray-e.bmp
- Size 70KB
- SHA256 4872dbcddb5c8669e039478f597ae3c768a3d72e671eef7d3eae1d34a0645999
- MD5 36fd5171bf1cf87f282c2b6893bcd4c4
- SHA1 afeb84b2131fee0b3e6e926450ffd5ca31017b4d
- SHA512 88f5f94fdd9034730bf92668ebf5f69ddb86924cddce5b9a5e3aa55524f05bac5bc9888563716ab53f3597e29da91b16b44ab0130ead938cb8a683739c86a2f1
- SSDEEP 768:6ekfZn6ppPmFkTsoU9/urh5F1A/////Z7+++++Ae5:Sn6ppPmyU9/urh57n
- TLSH T1A3636C98F53F3247123DD848626C6964896CB323974BD173A499CF98C393B536E7039E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin2\audioGray.bmp
- Size 70KB
- SHA256 f27d5dbb47cae710eaaa9c98520545abf8f8fc95408c366a0c99d6557b3d9125
- MD5 a5913d618d2f0beaaaf13c74a928c60c
- SHA1 15ac60ffa2ea2e388e86acb7e4b70a3dad11f9da
- SHA512 361a96a09ed76d189721aeb5ee961e2f0f365de2bdc7b2f55d6c6d5e6b52562ec31c557c00466c94a10209c5d7540e86686a0163daacff9688b4b4f759ba8cf6
- SSDEEP 768:C41Oqwdbv8vABd9KoNh7hWR3zH+4tBWqvE2IrIBR:LsbNz4tBWqvET6R
- TLSH T1EE638880BAB3391387479464BD9C3A3B8E01B7056523C232B4465D7AF994BD33B29F6D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin2\audioMask.bmp
- Size 70KB
- SHA256 9fb497e1cd5a34370a017af57c2ad222a8899035e27843701d94ee39ae207e20
- MD5 14991348fec1d316466670fcf0373f82
- SHA1 5579b7aaf45ec6d657d5aa378ef91c94cb2a1d0c
- SHA512 221016abc0e1dc29bcbb03765535e979827865f233e93757a33510487f9e992a30e22975634b438f02a39d064117c13c65b5d0175fae786cd3212abbfebcb27d
- SSDEEP 384:YfOF1OdyW9aYciiiiidwwwwwowwwwwhNnFi:YfWiiiiian8
- TLSH T1A26397177F28C4EEE1906EB111B31B421B22C6149C9507177E38E43DCDE3AE72D5AADA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin2\audioOver-e.bmp
- Size 70KB
- SHA256 e29dcb7580212118d9ebcbb4cfdca709c0c8e302d447dfada2c843ef5ff251a2
- MD5 dca71d17f477c62f153203c2eab747ad
- SHA1 1457b5f60cf8959da4b3db08e5c6973ebc0b44d6
- SHA512 1eef60e910c0d9d6a1511c4501d57416191e5442e7db31df5e7f48c518cc5ad60878d1c48c70d8b2e4fb657664e8ff7b551906c6f8dec93bb517c5de63f94980
- SSDEEP 768:a/e2tlpFGvvPdjPOA7JRl5KIfE6L7tFQmkapBSvW/qEaC6nGVGY6Ae+HoHdIjOGx:IlpFGpOA7JRl5KIfE6LZ37BxoC6naGMj
- TLSH T12E6341D040BBFAEF3250C61BD4145C25C9A857DEB36B80E3B02786ACC4997FA353B959
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin2\audioOver.bmp
- Size 70KB
- SHA256 842bfe346c6fed56190ec923dee628ee1ced9585c2394fb90fab58cee87b16df
- MD5 a4481e4d744aa2fbff845410b8c9d154
- SHA1 4b771ebf90732c3dd16967ce4bc38be5f2a44e02
- SHA512 4d7a6867b7d0d41fc11d7a28562bf3384a57d893e5eb96e2a3a352d6496e22b9fc53d9e47676ade482da5f36c8979cbbd077ca546c783603e466910aeb4cc899
- SSDEEP 1536:3fd2xMjbCvtENAdlEeup99988LXFdR+3xF7:vd2xMLALEeuJVdu
- TLSH T1F86371E6DC37AD37072AC545EC868474A3D86325877768BE002BF369D1447A73C2A93D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin2\beij.bmp
- Size 64KB
- SHA256 1267906e91efc97a64dbd3641207272a4cff4faa1163fec9eafbf96d875323c2
- MD5 90354c2fb6adfd89083730bb80f6e806
- SHA1 b758fe7854bcb9755eca73c4a1aa005f5eb81b3d
- SHA512 5d890a22110b77b03337d14c0b70e58bf78a787621f4e493f1d7fecc8bde8dd9b3e194677cdd34e611e17dba3799ec49e4ff2f40ff6233f91ff7b3f75883cce0
- SSDEEP 3:watl7ll/klsla+3+thltll/FlAjn/:waXwlsEI+x8
- MD5 SHA1 SHA512 SSDEEP
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin2\equ.bmp
- Size 41KB
- SHA256 4d60be7624f4aad05b60eb5a2f9d216e23b776269d0b2d147efe327e83a7dae7
- MD5 8287897cd72b1ae358df7be3435fcbaf
- SHA1 8951a8a79f304ac17dc33c69bf9e8a38d2821721
- SHA512 4e2dfdb39887f336ee59049657055b0649e3994d57d9197a31cf6824f111d5cf7d03760a42b291cd4618923d6a343a2ac822dcaceea0cd4471bf59a1f9f99f48
- SSDEEP 384:hCizS+xRVpgGH8cj/nGMMMMMMMMFZ3wBk497g:EizFxRRtmZABP97g
- TLSH T17213BEC8817BE55EB7DB5A3A761CBB3C51060360F033468259D34A96A6B5BC3063CB7B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin2\equBack.bmp
- Size 41KB
- SHA256 f0ce42565f6d97d710d49b421e09f8df2048e9a2b4e6344fe04044ddaaa58b41
- MD5 fff300d18ca057ff72218b4646314f16
- SHA1 3ad4682aa569bdf1bf00f9e5a73bc47ecb70b2b3
- SHA512 148fc2444654cba07c188881efc369012e0973b955feaaac5097a128171c139a51d383ff9a8a20c0d9d7cc4a0ad7d8992838b36c5083c4d7dae70c480af0a6a2
- SSDEEP 384:eVQkgRCLRCXcDwH2jMMO5N+UrePHDBq////////KUbMMBX6AbwwwwwwwwAJ35JrB:uQsLHe2jMMOH+GePlq////////pbMMyD
- TLSH T17813CA39F34BBD885F22646D05BAFDBCA6EE83C6E13FD09BB5619580D93D5036828D04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin2\equGray.bmp
- Size 41KB
- SHA256 8e29d5f4349aa8d0b0c56e5de9109e980731583ad95ee0d88685415e4d82fbf2
- MD5 08eb3a3667551182aa51d9380d138f25
- SHA1 efc7e458687555338843d2a0f0614845de6ff891
- SHA512 cfb90cffad6274666c7bb1ae0710bb945018a630b79b390c8d991839bc62166864871cc53d45ed54a7351650647a6465a20788cd98f124d3ae9f36c22cd5d9d5
- SSDEEP 768:UOYlCEcllllllllcye0RW/4ab1t5TnpG3:TYqllllllllcX4yTq
- TLSH T15013F2C131BBA02F524097343921B72E79474BB1D6BF1740F8DA266276967CB04EAB4F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\DVDPLUS\videoSkin\Skin2\equMask.bmp
- Size 41KB
- SHA256 af3dd99898eaa414780ecbacc5a3e5461476fe727425078666026673f58cafec
- MD5 8f631cedffc9d7b6fc06ffaf7829af16
- SHA1 50ea5b302aa1bc06d20a4490c4bef123efa32e30
- SHA512 772be2b7e2c7c2d7743c48410f12f691ba194d863dcbc37abdf47662cf4f9ff72261ac398e4cfa5d81b0a81a19d983c1bc4c53e921b49dbcd574b32a0952b2e0
- SSDEEP 96:Vi588888888888888888888U3SAjIsv6QnICFoM:s588888888888888888888U3esvBoM
- TLSH T16913F24B7F0E0561E6553C7000BB472A0340B9DC5741A7673F39246CCAF36CB4E266C8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\Dvbvod.dll
- Size 603KB
- SHA256 ced33a84b82b32781e8772aea9b1ea84da283f5fd8882871d316b48b8af144a3
- MD5 d2f3ff969323b3a84f94e81d6c4c19c9
- SHA1 9e3b8d56ba6c07885c436431ca7711dabcecd6c4
- SHA512 464ed7f2c0545e80074dc1c694fe52bd72b3d436a7b9dd6dc3bcb221f186c65e9154534ba89569e6043edaff35ff0965e532d7c99a63836a325f189f0ff2ba1c
- SSDEEP 768:OR47rJAyOYYmU4Wa4HmY1J9ZNaST9k6/+y/gsH1TH+c07XJfGhh:zfJAy/vFXY1J9PT95xzTHPu5Uh
- TLSH T168D44A41ABA1D5F3C46D8A7D00A77B7BA63B943007F396E3C75558AD2C326F0963930A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ENCMPA.dll
- Size 1.2MB
- SHA256 d09567c8789ac6626292ad3bb5ba2548a2968e70e59ea35eaae31aeccd42739a
- MD5 2bdd37588cad95d7d093e4f7a5c9e66f
- SHA1 16365e6659af6fbed35e3af1daf96811a2b2f5d6
- SHA512 2ea2da034d351490a068f1f4685af407ee78cf3ec8f8df858a045ff21172547920164de64503d1b403e701f16b99a880d87a1749da5b0e91ad77c12b40b1483f
- SSDEEP 24576:bPvhOdMVdddjMXuRm2kcZQymdHfiIhuOa9ZO0LB/+pM2:NOdwdo2eIOaHBB/+pM2
- TLSH T1CE458A12FCD20F62C62F42384463D36A25BD87523356E5EB27184B56F9423788BE3B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\ENGLISHT.TXT
- Size 21KB
- SHA256 83f3e3190fc6a0f36ea378405e853493bde0fde611d190bfb6c163946db4d443
- MD5 eb411103e8a6555dc4f1418fb3521be6
- SHA1 bc4e69aab6a021fd145ccdc9c2e60a4baf6285be
- SHA512 3301ce0f26894085736b2ec9ad27d940a17e1753a9cb80225bd853d96b83cece22face5f60124f045820c55d59bd3d6cf88957920bd4f700f1dd3eaf4019c848
- SSDEEP 384:970HxRb1Dca4bKeOosEdBR3WurxrN830qg8lvmBqChhu2Fn4efdUteC8LMdWiS9C:97Inb1Dcj5O2kr9ub4zWiI2ym
- TLSH T13EA2E64B72A4337152430263B70F5ECAB738427C36594369286AD3743766C6AC3B7ED9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\EngLish.LCD
- Size 1KB
- SHA256 6c49f0d92eef324a416a19c53e1d57ad50737971d29ecca15e2af08090de6f60
- MD5 5ec63324dd0d2381a391e400370a0fc0
- SHA1 0369b094c849e24a1024d35b33abf5473053ae5a
- SHA512 ee4f909349c65b1de1a08e9e99ccba16810185efe299c936a855b804c9c96dd262d0d1cfcf177407118b14e7086c530d234ddcdd085f823d9f891d397860d6a7
- TLSH T14A317427D7A5B038666E20CDC5C2CA82A1403EE41B736F1644DF134D73467BD122072A
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\Equ.dll
- Size 60KB
- SHA256 112b47b4981ca7fa2b818a45c1e3377b977c1a5998cb593b3c4adc72088a692d
- MD5 ddfc0b3d3ccd6b1265c7b01f02b25486
- SHA1 c5c9e113715273b28e5a62c403ed09c0887e05c7
- SHA512 c945caa8f80b62d02ecea941c20af6fd5ff61b0e1fe7c7edd0bca8389c47ccad739c736b830c7695c38e257c8d9e67f59addf8a732c82c6f0f118489449e6b92
- SSDEEP 768:sv09kk+RzSTf4rW0yoJE2t9GmOiB9ud7StCXurS:svHkMSTf4Aou9W4+W
- TLSH T147536B33249181B3D0A6773714A35F26EB3DE5011F8C88875FB9594E5DF2AA1EE37206
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\FACE0106.BMP
- Size 65KB
- SHA256 b9e022a3197f8f3bcc0f869fe47001caedc6c0818a8535cf1cfb9138f20be78b
- MD5 6904cbfab6d2ef1d3bbaf92d91e355b9
- SHA1 09730002e8e20b9a36fb5ab60206cf4c83adac61
- SHA512 28222ebfeb09206cd319e6abad3a38b4d71410656dd9477684a1405ece6e688069f7126edcc2bac1552c1bdf625882c798d7bcf3c5ac4ec4f367c1080e690d91
- SSDEEP 1536:WtfHSj7bFgpyDvQUWC6v7vK8HkkpYHOri16HCYTGv3pnXvA2bo:WtPU7bOpyDumykEYHOu16H7GvFI2bo
- TLSH T12E538455FB7B8816EF76A5BE632385D40FCC0D93816986BCC6E215E046C7A6006CE1F7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\FACE0109.BMP
- Size 65KB
- SHA256 13e20ee513c14bf7ccfe4e1d3b2f3229444a31c2d140feb911b484e3eb3e6ea2
- MD5 319e9cf0a0b45a5d97b65ac125dc5903
- SHA1 c3890d9930e53988e0c37690588a62fd19de0532
- SHA512 fa7b9728ae1a5ba6a777e733effcc2b4e6a1c1634f5ca0ff9201c636a236959ef7eba17278642fac4c2fed366eef0bc6f9604ee05f97bdf2990114975b9a2909
- SSDEEP 768:m/onxMYzNf2g3a4oATEdFTJ+u46oRqOOmIQsc7U9XN9HZqqoRWUyP6ak7G1jkV0W:m2MYEAYSHeQJEXN9HZFEcP6aOUkqD2GA
- TLSH T1215373551757F9D1EE629B9CB509CB6B43A2AFD3133B420094E03D1A479DB83ADCE30A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\FACEBMP.BMP
- Size 179KB
- SHA256 8b7f1f85fca131192f399ffbb4cfbc560196672a1a9aed39a6cd3cb0baf31880
- MD5 cf12b704093278a816293dd08befdb14
- SHA1 613097f486756161e44c02e2a3e82e505f8fbccd
- SHA512 b05fb857678efe7ded7787cfa3bcb5dc55902f3743e085f18aebb0b11ebf66ebcb7e626eab363eed596042bca5f10ae83e7fb98bbe46b7ecd7c1d3cbee8cdfa9
- SSDEEP 1536:lxvJ386EwSj0awMbqUT6X58AdUunAlAvDGNE5aavj/QmwD0+NII/f:vxM6S0Ux2Yun3za6TQmwQ6z/f
- TLSH T15F044C47B3059B89FD39A84D1B8970A643CA5D04DDA1A2D5ECD0FA9FC1F93307B64C8A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\FDCT.dll
- Size 48KB
- SHA256 e10edb0f24baa7699267e044b688fb95090c69e2be65d0e7e6476fef1b30b876
- MD5 d803f13f189d998f75542dac29d87519
- SHA1 c34b5bbf1eb0d89bca0b1ef7457a57967c4646d3
- SHA512 0e1f51fb577fb7d02fbf1ff067f67915c1da92f55d2859219584c207c5bb1d99511e311b297b48089d370bf19b823bec5689ca1ee625ee8905c23f2ab695b6e0
- SSDEEP 768:WYjHIT7Y5qcoHWp+ngXAdiB9xnJDnXFKXYZ:NIT7yoEoo5qY
- TLSH T16F237E22B4E586B3E3AE813644E14B23D57EAF0007D244C39FF5699E2E719E5523B34B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\FFT.dll
- Size 50KB
- SHA256 231a42af752f42bdc44c34c4d266f46115712b2e852346cacc80ddd4f1084b37
- MD5 264167bb6519b7afcba8de072c7294dd
- SHA1 9abc42f44583adb2b3e4075bcd1c0a04f72abb81
- SHA512 1c55f2f62a7b3fe96b0b677bc933844f68137a25a602b35c49cc7a05e9f2d3abbd9ef0ade3e42672223c746d5dd5e72e00b84405559bc6dda7f4e2c30e0942a9
- SSDEEP 768:s1nfZIh1j104VmX9hdbczkyu1LbypIQhfxc07s7/Ts:MIhtKFXukyU6aifmusr
- TLSH T1B5335C41F691E6F2C0ADC77D01BB97BBAA3B553157E3D8C3C79519B968222E0513C20D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\FFT.dll
- Size 52KB
- SHA256 9f8268091f5129bc36bd7d4e4814c3862882083ccaf094695b4a69cd5ae61735
- MD5 08db859dde027587f2251c2905addd78
- SHA1 20914b6163aa7aa562629f6d6a066e0842d73896
- SHA512 65683fb2a87ac7611ce1daef24f2c3ea3280aab61ad489c94954d69731c9f35cfb26714e926e0427d5fe8df38e929f1fad29f0f2568f650eea3f9da36b7d54c0
- SSDEEP 768:AEM+Z7cDT4T5q/SgoDXb8K/JMOZiB93nJO0M/sjRx:AEM6wH4T5qoP86veJsE
- TLSH T104338E63A4D5C1F3C0AE403940A49B2BB67DAA040BD199C79BA9554F2F25BF15A3F30F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\FaceHelp.dll
- Size 38KB
- SHA256 1c65ecd0ea48c3362ee803191240cbcee466babf5403b250fdeeb20b7f11fc05
- MD5 93976e053c8c49e954e1f3293f4f12ef
- SHA1 db9c7beb32f63b31d46db62934c7d4e81cb74e47
- SHA512 9d7e1d756f488c0dd40f1e6bdbf24614e9785284d897b90ac1a97e166c61113aa2ade488b58c9dc53d3e6adc8fc4f0a467c3f9a72e734f7b66e6b45269895678
- SSDEEP 384:j1b7zOveQa0AwcJUrzAgN54klKkfRIm+atdqopKxpaFF/E1GYV:j13DUrzjN54lKR9RJpKxi8sY
- TLSH T1A1031B13978582F3C995923C01A7377BAA361DE41BD666C38793687F58B33E0713878A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\Getall.htm
- Size 706B
- SHA256 50e68e3e6b4a1918d15a429761c53f2be3f5162ac8ed42b7e42bb6dc5d806a8b
- MD5 8121e7f22ec80711c2fb0233176d6b15
- SHA1 1688a17b6823d421e5c4479c59c4c3fb93a534eb
- SHA512 c74585016fbd73aa2abcaf39222286dd2fa04ed21aba11258c4d4f70573a78c1eb63afca69e9babc6d2e39049bb9de718993adfb62e787d64aa3e1ac8ff7bf5e
- TLSH T12E01C0E3BF06C8A590F2584110346894F156D1721910E91CFFDD64C22B4D7CCD590694
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\Heromp3cmd.ini
- Size 4KB
- SHA256 88a9fffbe89c77a3ececa02bbcc9d64a60b462fa64c1cd4bb86c290a112d7277
- MD5 5d2642746b335e1030ff1d4ab2313139
- SHA1 86fe1a5e650dd961abd8b977cddb4d2e95b6b26a
- SHA512 7630d8941c4ae72e31d41bce34f74c682f91875943245876a3457d2d54e649077b5fae612f4ff46ca7722b9e1a4ab3105a9aa7954876288d3bd2fb47cdf12b04
- SSDEEP 96:CO/ZxDRqTq6Oqo1aJk7W5og9WwN3jBp2XkO:tZxVRqo1e9b9Ww12D
- TLSH T18BA11F82808784D7BC14A4FAF1A28DE33873946BD2A71D5174C83B887F6120F59D38AE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\HttpFile.dll
- Size 40KB
- SHA256 148cc0ef4544a480a91d0d4c42391f3bbbf994e60ee2c38196538b7d430c482b
- MD5 4a8e8b9816d507c0037fa505b228b6af
- SHA1 410aee41f4f4c7bfbeadc8c513c375e840031c34
- SHA512 44217ecd9df7879096c8cc144f2fd7dd5a724415a1ddc57af4dbfac70357737e394baf838e0825199bd8ed342faaf4e2d07f7c4f6ea4272dbb9ebf82273f01cf
- SSDEEP 768:YxyenjqPnoLBtpA+Z4hcdIaLJTblfKOQuV4S/:YxtGPoLrgcvLpblfL/
- TLSH T16D134A03E7D6CAF2C699927C50E7676BA6325D2603D6AAD387832C7D58336D0313D389
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\LOGO\logobmp.bmp
- Size 351KB
- SHA256 cb9b874e4c57f520d819b0d749ec95cfb18e3ea243fe54aafd7617e4b498dd96
- MD5 94ecca3ba3b6fe62bee98dd3f7d4c55f
- SHA1 49d1902404fbb8cf01653496da97bf2afe0e0933
- SHA512 3ddfeb5ca176e8d029eedd4b4dbd143b4ecea578c9cc384ad07d7f1697309c81c56ba21fbac729b97978d9e5569a40c47cd82613e7f1d7df47757211032c533a
- SSDEEP 6144:Jt2uIdo8e4iU7QIe/nX9n2VjG9CxocHchi1:Jt2x+X0VueDchi1
- TLSH T184747D618E052C63DB98C037E6731B3EB9953C5574A8BA579A73B9BB4FB40B630470C8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\MIDIAPI.dll
- Size 28KB
- SHA256 92b2e31e4a48f882e2cb5d7e2ecc364220216b0e098957f588f8640ccaa3b1f4
- MD5 acea8acb2bfb6f08bd44543ebb67cd68
- SHA1 7b1af79c08fc8811e432ef462321220072f6cda7
- SHA512 95b386b9bd931e0604a1f41618c653c480bb93bc4cf6e083ebfb15e622e700b8cd5805574eab8faecf83533e1e8991fde93e5242aa0a8d6921b8b6519a3bf572
- SSDEEP 384:zooMcv8flEKTNbrtc4zIV71pQdI4T+KgcnGBhmDvhJTRwuHmx9EGXTq:zopE0O4+1id5VGaDvhJTRdmdjq
- TLSH T11FD22815E6C68AB2E5DA963C1087A7BFD3325A6407C6A3D3C7511C7E24B25F0F23C689
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\MMXAUDIO.dll
- Size 328KB
- SHA256 774e70f7566b6e6d847c1422bd715d958a83e81cfb1b05a1e4d785c73fc6123d
- MD5 3be8e56f465b5dc6c2ba4a930f8b86f1
- SHA1 914d0f18db328651f306c4e17627fac70f82b72c
- SHA512 f457c272ab3a7d327dc66636cd2a7691fabb6bd0180c34ec457d4d1daebf8a6b18029f4e35a8ec54c7c7f15b985088da0684c8cd27ccd711c228ef4f469ed7f7
- SSDEEP 3072:Vik+g7Y6r70DdvPBdm/PKVJGAbVEd6h6GiMT6NCeFgNmL6i7kPBoD/:b+g7rrsdvPu/P+GAVEdxNMnWLp7kZ
- TLSH T149647E23AF80DAB1CC5992F986DBABB7DB6898242732D5C352175B751C312C18A3374F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\MPEGSYS.dll
- Size 120KB
- SHA256 7469191b989eee53a7838e9bea7f212c083ed17b9d7136ff0924489cc918a430
- MD5 32411d2f22383087a30c9a3e84a15b71
- SHA1 343c91add5ac48a130b35ba4e79fdeefd9658fa3
- SHA512 ddcd2edd94da8b0aa576331989838ad181c2c899766e03dfcbaf2f4b2944f570eb4f3ad5b39589ac3997be84eb8845329eb876c3007bfdb825f57135cb46f256
- SSDEEP 1536:FKtW1E5dCkhV8WLWESlXegOlZfOwupwWU+AAiyuEbT4TdPWO:FKtr50kYES0xOwujU1pydbEp
- TLSH T147C37C46FBD5CAB1D891B6BD02C277BEA4B4C8A0071366D3A39419E769336E01134FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\MPGAUDIO.dll
- Size 150KB
- SHA256 246103de041b89fd7cd22cc786ad06593000f4be2c0b29ce54791fbb21122731
- MD5 b12a8fcd117db4942bfec7c6d503028d
- SHA1 f206a91ca35996261617798ad64edac6e22c61ff
- SHA512 15f2b50e5538f042bed93177f57526c5dc9d09be2581f5db4dd6216a7a2fc27f9b25f5c1027b60cbe04e28fd8f9b720d8ff2619f1676158a669efc97e2a23b29
- SSDEEP 3072:jcYCzHc2ONLD9SwiCJxw243vPyL6Z7DPEW:naOvpJL4iLm7DcW
- TLSH T181E33B17AA86FEB0D8AF87F595BE9ED7223898101762C7D393E725362C754E1053230B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\MPGetall.htm
- Size 708B
- SHA256 5cb15362654c44cd4efb693ef4bb79e0f3e5f971bd37a90ffd4ec5ea17ae3600
- MD5 a269775c4c1a46e3274b94eb2dec20e7
- SHA1 36297f50e56a8e372e29e7162e77c72e8e74b6bb
- SHA512 94ff01190a44b9a0debf45acce9d51ff0b084c91292cd0852b878603e3b68a30d6e5a3fe48270bab9b87e6cf7df0053fe11b5f27ce5e326ff65313ae4c8fe938
- TLSH T10001C0F3BF05C8AA90F2684110346894F152D1721911E91CFF9D64C22B4D7CCE590694
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\MPNetMon.dll
- Size 44KB
- SHA256 f3830380b6f7cae93dc2da244a9375aa6a6603d5edd4dbd48d9f41a6ef0d312c
- MD5 78086490692deef0db081ea73e97718b
- SHA1 7d0b17ec8526ed322f97c71853fb58d3ac100077
- SHA512 6dbe8493c414a9a071226e8c02c491fb76f22755d63bc6eaf297c52c59e5dbda53ba509cf4fd3eabf1471dbbd58283f7205178a06ea050e4b6e57e33033bdda7
- SSDEEP 768:Y1RPFQZCWNI09BCK1y0oz60AU/tDfHAhIM7Vd6VH:odQNCK1Sz60AktDfHAhIM7VYV
- TLSH T12B1328017680D4F6E3C951387DA59F2563BCED201DD6640BEF92378F2D323C2A92D296
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\MPUrlget.htm
- Size 3KB
- SHA256 38495aff38eb19e02b84043990cf81166ba5de4306ee2208615fa371e826ddb8
- MD5 0a60f842ee7a28b67585ccfd54d2bd94
- SHA1 9c0b8a04037d53f5071509aa1d70b1919e2b9477
- SHA512 4e3cb6fbe73b7602588b146f029e3f09f1a166ac7ab95ff1ddeff1d6a9fa861f12e3ee26678b045bb4ffc880892958b539642da48e60a962c7594934d8430a1f
- TLSH T1947159DD735E86810E841F6C5BB575A8F15FC0B3017940AEF9AE8CA7128CFE85085ADC
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\MPYSKIN\Defskin\DVD.bmp
- Size 44KB
- SHA256 3a73991e64365f57384bf61ef899aebe3bbbd76c56cf676350bfd7e790c22477
- MD5 cb73f026cdf911556381d8f4bdbb2272
- SHA1 ed276d76ad890bd89f64ad72c4c033f7dd521050
- SHA512 da97a2f9282656f49d0a2ddb31474acdaa6fd58eb3147d76581a913d9f94dd9c1248d9b23994ea9dbacbb00bd97b42280bc6d29b0b03f3b48458997138b0bee4
- SSDEEP 768:U0000pC8tRsZc2930jnKvbX39lKyom0lMBZg:l8tR9G30+v79Om0aZg
- TLSH T1152372A9B8237B62D31AF0385067554F87E023F5C74B899E3236B5D8FE359172436C1A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\MPYSKIN\Defskin\DVDback.bmp
- Size 44KB
- SHA256 f1162193ef84b271dc2abcbca4a664e25104b113215ddd87ae1d2cded0119349
- MD5 f47dbaa319de0d92ee7173c3b8887c2e
- SHA1 eb85864d610f3b79ec29142b2d0da6097092fa97
- SHA512 0c8e3b96b4fcb21f4230520b4603dedf4a1e4bf2796fd7b483da67f4c964ecb465f7b298099e2dc36ac1ca3349d20ff9b36c618229714f24a3a58903508e28c7
- SSDEEP 384:kIG4xqkTHOecKFCcgDfVtDrYerglrwYD8xs/sPEoP8tFkkI4HrOHzeG9WT:s09TOeciwjDEer6Ds8E88kdLOHzpM
- TLSH T17A23716EED4FB403C26AF835A837C31F816013F1E50B916DF8496D60B5122D71EE9B66
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\MPYSKIN\Defskin\DVDgray.bmp
- Size 44KB
- SHA256 f0cb54fdb6988104dd3c27ac5ab8ceec759f79842cdffaec1511ea4a68d6e219
- MD5 7d08cb74657c6891680345a4eff72c11
- SHA1 ffea8fdbabfdfe19c5b9d3b76cf2d0bce628f10c
- SHA512 8ec5f125a86ed35cb0a16e946f0edf994bb0c06c9cef4001915af44f936e292285fcbf21c9513aba6ea2b6b57978140e74f10fd8e58cf2fad15143113a05720e
- SSDEEP 768:Tjv2u1niojHRF5tl8NDcJwnVLm08RfyMGl9:3p1iWXYhoU
- TLSH T1E42382D18943DA08FF25FCB986503182D5D46399E3D3C9BA7023F5ED9C053E7A1AE682
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\MPYSKIN\Defskin\DVDmask.bmp
- Size 44KB
- SHA256 63d541b8e6e293f5937e8ecb3031dec7816b74bd556ea6b097d39ed3421dc248
- MD5 78a8a091d3721728e9134e2a87390f9c
- SHA1 459ce89da5c7a978d6c242fa4d729d15d6119c31
- SHA512 fc9b65c753a393b9c75d73b19961bc69452b877aea4735c17e801e1e834aa5f4c7a90fc53e4244bfbe4904df02d6c47201f87466a05346360353dadae6053066
- SSDEEP 384:DzQNNNBK1aYNRJqgIbhmnvQOukLKOKbKTKxKkK+KPRKcmKEPKBuDKFiExFzBaEXH:DRHUf2jMY
- TLSH T1B3230C13854FE6D989A49155A902850E2D407B5D3F33FF3812BD4D3AF24BB93669B303
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\MPYSKIN\Defskin\DVDover.bmp
- Size 44KB
- SHA256 522e8a722e5c0f80a46c050221993a014d16ae8a05c2c6364caf2f57e6d1a60c
- MD5 8fe07c1b8627bcc61c57e4457460a541
- SHA1 05896245653219be68ed0e6df344f37a30821ab5
- SHA512 9170979aec4dc6dfa5b961a28e624c192cdecbbc8706c65812bedcfc3234af369d83a6a11542153f9c7fc912a9234601935007a4ded31deb8cbead60f46dca50
- SSDEEP 768:sl2T1UAcI8DVmwXetbjWkpLETyNu+iHFcdrwGJKR7U:sIT1D8DHXetXEyU4rzmA
- TLSH T1302382F6701B4943E226E834EC6417F51366A3EECB03C8AEF164CAB4D67619B01F7609
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\MPYSKIN\Defskin\HAND.CUR
- Size 326B
- SHA256 75b84e7f5be1ef9f24d2382e5ed1e5e019b9f5f03ef91dda34080d7ce1040903
- MD5 4dc1e0e03544721ee04b64144b0a8385
- SHA1 606e89cc65b11a213f0f81a0c0b947074ece7a64
- SHA512 6067b10392cde2b3d11dda9c96078e402fd2d197f170e7e9cc5f2afe6fbbf9cdf099df38c641d8ef7742c4f6df9108b883a36d184dfdb303588f40be1b5d2c63
- TLSH T132E08C07B704D089D8D00F749A530FB40723EDBB1907078724A03ACE2CB07839C3004A
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\MPYSKIN\Defskin\HANDh.CUR
- Size 766B
- SHA256 de29702db89f2de3d15b0a8eb235569f59d798de84ed13417745ce9532aef590
- MD5 7910e6beb49e6d4fcc9b562a35ad7203
- SHA1 19e713ba9595833c6b9e3f36dc9b3d148934adf4
- SHA512 977bcc77794b4909334ced153355adfbe902baf810009c581da3b0d424004646c2757c48b074a50c42be4046434e1022be3ae9129d037dea9a52144f713f1fce
- TLSH T131017EE0B404E4DFC44028308D93CAFC3905BC29DF0D28473AE03BDF2CB2640A911352
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\MPYSKIN\Defskin\HANDv.CUR
- Size 766B
- SHA256 f37582602f542fac0274b96f3f4bfe79ecafaf2ad2488e7bf1516af9661a0ddd
- MD5 32143ee8a3e6d04e7c87a7c72d78200a
- SHA1 401717b354999388b99ea0b16d4f7a4999f3d837
- SHA512 948ba1b4dd519e385458a18717e6cbc5593723eb725657ea61db033fafa15f3dc3ffdf0b4a9c35bfd4e24bb595dad4c7ab043d226e86642ede395c98cbe5b789
- TLSH T18F0176C1B468C09FD4801A308D87CAFC28003C2AEE18090331F17BAF2C70314E922315
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\MPYSKIN\Defskin\fla.bmp
- Size 16KB
- SHA256 c547b083e315bef5e80c565600e216fa96a4d18ccc18055ef46a4d907bdfc2a9
- MD5 0159a40c103e9c1e5613cccd06a2c6f2
- SHA1 075b9b239c3e3c571192ee28e8f2ea054fecd0ef
- SHA512 6604b0177891993310f28f5ed9a8caff62e2cff10f0729157959d3446d5874e31096addca6b431b2f0c2a0269dbfc87fab5cb1799acdce1ef5058bd518a0df85
- SSDEEP 192:q84/aaXxoiWoa7HyynLCMTnUHtwe8PAp+inln:q1/aaXxoJoa7SuLXetwe8P4Z
- TLSH T1D07253E835427D1FEAE6C9BBA51ABF70BA2530AD2B2710DD1403BEB04D071E750683D5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\MPYSKIN\Defskin\skininfo.ini
- Size 2KB
- SHA256 0e7607e98b921d21acd831b7b8007d69975bf5454d354c7bc173a2c3f4a67024
- MD5 67b7334f60531b620ccbbf6204752dd0
- SHA1 37ed1da8104986ab6472000e431c22119a0b81f3
- SHA512 80ad8ae2bb5ab3b562dc6c8c293afb4d311e7d1f5534798f8f837c08ce4615a52ec36f480c08c9c8dad3223e88ce75d5dc23af7b2acb95f2bf096b3de56d07e6
- TLSH T1DC517A2AD3413159F95584838987814D33BAA9434BE8A451F33FB1EDAC644FCF2B5AEC
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\MPYSKIN\Defskin\turn.bmp
- Size 1KB
- SHA256 cadf5d01e4bfc0a4fcc8a1f7b6a29f84ee88c5f657756df9cd086092084892c0
- MD5 df6d5caa60a48d64f5874e1eee72cdf2
- SHA1 9c106888a8bdd060222006ced7454e089962caac
- SHA512 23116c9e83838d1beea5b882cec96a9f8aa79cbf107ac78375eb74e7f786dfe37f813ca57e78082df633a4aa38615fd7a1d3a14770c103686d677793ec2b74c5
- TLSH T1BA31A902ED6EE0BEEC8A1DFBCC34525D33509ED86C333E55780D0408B72381B68E5842
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\MPYSKIN\skin1\audio.bmp
- Size 57KB
- SHA256 e28fbd07d4bbed720dda05536e20527803d009fc740b8f2858967a67ecae8a12
- MD5 2e8b99c682564b5aa014f75053763600
- SHA1 ab863756efa272ab315b79df038e57b9da6afb8e
- SHA512 9f2db5e667f70a955fc68af1356b4fc03d656d40ea584336e15055d58dab4756c3495ed928d01feae4577c7c21829ae41d34b3e22327b6f68293d413e7e38713
- SSDEEP 1536:dl+kcxZnFRxu2444MwE58RxzP59gxQ4444444S:dl+kc/FRp444MwE5klP59gxQ4444444S
- TLSH T15E430EF0A12E767FC429E43D6406B46F5D95019BD168D4337CA8E1A2E2B10E37FA663C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\MPYSKIN\skin1\audioback.bmp
- Size 57KB
- SHA256 56a56761203231ca76e67fc54d120a19aa6556df43c447049495b153430ae398
- MD5 28b9ca35b001c612485219cab92dd346
- SHA1 9c9aac9f830f43abf1b73dee84f68e05874481e5
- SHA512 689198d80825977487ecb6232a3be4f7526c0f8a3af0745e265ab2c3b83a9b5519cf1c5033db5f6eccffac7f87ba7d68b948a199b5bb54a241bc01c62fa6b6e9
- SSDEEP 768:r46M2HZTxtEijo49EznSLBLxiZTiymm3TY/:r4W7tEijl9dBLxYTiyl3E/
- TLSH T1704387E4FA17CDA2F7ABD4759502F43887A9D0F5C316AC7AED28F47882113B2219D11E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\MPYSKIN\skin1\audiogray.bmp
- Size 57KB
- SHA256 51acc442c13d4f9b09ffe5b6fe7e4ee0747270267fe0211a68ef566e328b0cb2
- MD5 3802b84a9f5aed83b36ff503844357d8
- SHA1 c97c6c7ad8888756ae1441cac3b6e6b6e84da924
- SHA512 80b5210d5af1f8f61d1fdcdc8fcb7598bbe17dd708a92ea901538e0c122969e8f0632dccea93f1ec51a01f3cf809b014834a588e8e1f909dbdd179312467288e
- SSDEEP 1536:YkfiiiHiiiUiiiipiiii35oyCY90iOQY12uwV0g:Y2iiiHiiiUiiiipiiii35imvY11wV0g
- TLSH T1D7434578A231E7B5F363E139B55056AE8FB311F6E6E2A9853447B51EE0C23D02498F07
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\MPYSKIN\skin1\audiomask.bmp
- Size 56KB
- SHA256 90b99a849adce9bb336306a7631f2f6072ed6c7fd55684f18653a7751765d953
- MD5 16796ba2ea9c9b8e80df9b980b20b786
- SHA1 7deb5025c0fa60429aee171ef834b89e1dc5c314
- SHA512 7c65d18bb78d631ba872c91f2ec4579fc4b93874ffff0adb5ea16b64b89cd5b6f415e86ba03747db1970247568c543ddf5ec1bef49c9951c2e29f80191f547fe
- SSDEEP 96:FxRQAiXT4JmS2TiBMJpHt5IgmgnRm3l8iWbK:yAiD4JmJTiBMJljXJIbg
- TLSH T133431C231E0802D8E9524CB5EA1B07088B453F2EEF6C9F036938FD26FA76AC75C46201
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\MPYSKIN\skin1\audioover.bmp
- Size 57KB
- SHA256 93a5eeb969edfa746c9402e678888105fb730383ce782d2eebb4e246a470b952
- MD5 4dc82fb4ba1c54abf4d87ad0660f3d85
- SHA1 0d20b124212a590226f51db4683ffc97e70cc38b
- SHA512 f32ced4173eab2c732e999e803a20cb01673fc98f789cebcf3878a73245d04f1ce8c8c247872ea5f1f24eb2123d02ef0f391a2507c0da0d8562d08089b48813c
- SSDEEP 384:ILMMawQUm/p6M6kOFJM3tKEVdKQS6Vd8rDb4eanukeXfXSnmh+s6EomHGVyMe5nd:If6d6j0526nukWX8j6GVyd59s
- TLSH T1424373D06C1BAE57F3A3E4350310F4645688F3BDA6461BAAD596D0B4E2323A336D7D0E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\MPYSKIN\skin1\beij.bmp
- Size 72KB
- SHA256 3aa879fd0279a8ce8a176dfd66a02f7bee62560a1e843c8dd96a20e5c9704566
- MD5 7bfb3e02e52fc329a1b6c8c8151a0df0
- SHA1 65f9a4409516150eaa106366bb4834a37a2e7c04
- SHA512 cd160f74f099bb509b04bf85188a88e8fed48611832b39ce3d4d51a2d4f528a5cf462e41fdc12af68f396e52584e02e60548c16e8c802c26700fb03d6d325d99
- SSDEEP 3:3tlhllAllM/krll03+thltll/fSlHHHlHlHlHlHlHlHlHlHlHlHlHlHlHlHlHlHN:dclKka+yHnN
- TLSH T16C73024BF518AC47C03F81700402CDC457046852C53A067B4CA03CFD6D1D11C1CC62F4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\MPYSKIN\skin1\skininfo.ini
- Size 2KB
- SHA256 77bab4489148e607cc94b036707df068f32d19b9e75aedd381c26d2f9c31d05c
- MD5 4cd4031427c7b6ffa3cc922922ab7451
- SHA1 1d77f291c8add7556b9c3f6fbe6d042642e64a3b
- SHA512 68eff7fdd46265feee920289a4fc05fbeb13de302d7ae2658205cc862d8b0227e8539ec471005bc04a4300d7a165a4359b63d953d688bdf31f4482f80efef445
- TLSH T12F41AC65D1417128F44040C25189EB7C72E5E9236BEC284D6C67B26DF8862B8F1BDDDF
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\MPYSKIN\skin1\turn.bmp
- Size 55KB
- SHA256 6da6f74d565070554a320f966614abc28effac87f4bc3cc04ec7da60ef34c83c
- MD5 8abafb9e410b6483e61731162a190cb0
- SHA1 49cc8688845f1b4a65153215db980bbaf3c97c4a
- SHA512 01699d49f96871e80a33d08fbbbce268717756110fd57567b6fd898765951ffe280641f10dc05dc28781f414d2cd6a2058ded9cd9861638f80c5347d1ac4754f
- SSDEEP 3:s//nl/p+lFlm36OfN+/Affxy+33H3g+3RRWR/A33H3g+ffxyP/4/:DlfA6uY0fdH3t3W5EH3FfF
- TLSH T1614392002E393E10C3F88230C0B600002CCCC00090CD0D43F330B5514862D1D30E76E0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\MciAll.dll
- Size 44KB
- SHA256 5a12abc9c15aec58985e560dcb75cde1bcf562faabfb09b44df91181d4b24d73
- MD5 2db09aeffea297b889490dd73291776c
- SHA1 b877210a55ecf515abdce32cdfd45c3189a38f3a
- SHA512 6df600278111e7ce7ff7e6d4e9eebef78b7a460b5f1d0a6979c1b3bfd323cc0ad741512ddeaea8da7cc9f74b03fbf37d2b6cc5e74ae90142cc7f90a5ca5bd1a7
- SSDEEP 384:IGxeWuSjTQN8usXQTnNch5a77f0faqkTrLyfbUjKXAduJkajatwCkk:IG9tjTQN8/XFhA7DGuL7KXAd/0Ckk
- TLSH T1F0137E61794241F3C39D423266E68B379D7E69941BE184C79FA5E6DE0C322F0E13A307
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\Mmxado.exe
- Size 640KB
- SHA256 8e988ac4b7be9c77816c9a78446a06957099e3ea7e6e3c33fc88a7bb2315b2d0
- MD5 d6e49888bf3ed5a357930098ffdad9cd
- SHA1 62a238a65d50a56d2f12dd57f3e6a9ca16c16334
- SHA512 e2c3e64d60d69ddd6147d9552cfc5a9211ce0d964849ca43be34e340005c77914071565c9ae2ade83e3e3063fe3dbe2b7f47714efa610f769b718dddec4a062c
- SSDEEP 12288:lRUCKSnz1HilwUd0RnEtpZrL83+Bogc2Eg//pL:lR1KSnzBilwutrrY3+BoXrg//
- TLSH T17CD43810A2B7884BF45D7B3208637A31B6E1EA2192278ABB5251FB5E5D393C35D3530F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\Mplayer.exe
- Size 240KB
- SHA256 2413c988698d38ffd44823017c408dbc73782b2535c36241e65059f9e0cc3ec5
- MD5 02336c858d6ff78730868d3922b31388
- SHA1 418be0b13a36425c1c4b727c2298fd955da32822
- SHA512 eca7f5914308e2d9619d95714593478219905235091321a518215c8a4f39c7ad2102aeccd367a7a9d161131dfb600f3af403637f905368cb7669007792f17146
- SSDEEP 6144:+UkbD6WQapV0mPqPJpuH+3orKiq7Woibnn:+UkbD5QWV0mPqPJpuHgCKJqom
- TLSH T1D334393192B3C4E7EE6B6470009AFB7ABA25BE06431655D35B60FC194C311D7E93A38E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\NPLUGINS\Fire.rpv
- Size 7KB
- SHA256 b2c90dc1400090e0fe47805e3260564ee73d74ef8152edf774bd75a746547c34
- MD5 26e9cdbac93b05df2b65726d046d67f3
- SHA1 4740b92f13dc59abaa19364a5a245f906ef8998c
- SHA512 ec3cc9ee1e82b5a58791e14723ebb5200d5e9db4a914717872fd9651859cd9c55cc5083a0dffb04c94b7ed9de7a2ed06b092760af21010dc3b6dfa69d1da7584
- SSDEEP 96:vrxWHPAUg0pFcoILzRBgnkj+cw/U3YChFbtsmv3HfW5pAn7km:vFwSoILikj+RsI6D3O5pAL
- TLSH T1DCE1A572F3E51CB4F1671A32ACB653B720227D218FB0D5CB0741D46E1821E62DD38B52
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\NPLUGINS\FlareDemo.rpv
- Size 48KB
- SHA256 4622ed5eedbd614f66e7bafd907704d8eb45a0118f7d881905e05b46a4b11b2b
- MD5 7205a930e178c498a9832a77fb153f2d
- SHA1 1db2c37db1588f2dd0e8db1cdc98a841ca02a116
- SHA512 3786403149b5399274a71a53580b93092ab2b5bbeceb91c458fdc728a36e95d7227edac13fb7378f80d98bb090abaa6b925ab5484ec545bb6c1f850faab40606
- SSDEEP 768:bwCRiTjvsBr8JwAhEaoJSwSwiHDoEqO5:ECRiTjMrKwiiaoI
- TLSH T1FC236C6179D605F3D2DF033558F19B3B6A7E79201AE1588B9FA0688A1D325F0E23B703
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\NPLUGINS\FreqBands.rpv
- Size 7KB
- SHA256 853526302dc8111c30dc083c292820b4805b79286ad218aeea4817b9932bf886
- MD5 13155576cc1a62e9f4e2e3197a2fc6b4
- SHA1 3ed3af35ecbbe545ea487867930de0764d5144ed
- SHA512 152d946943eddc7eae419a13d1bb5cd768c4461c8069522cb4f6c94cdddf685a7092d9a9e3d57257107678db77254109e0071d9fe75126a802ceda39d09e5054
- SSDEEP 96:HFx2vgF0K1c6ViD+LDx/D0whFbGv36fW5wAnf:HTjA6vPxLFuqO5wAf
- TLSH T1D5F10722A3E611A4F07B5A72A8B343B71126BE008BB1C1DFA940E56B1833553DE3CB17
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\NPLUGINS\demo.rpv
- Size 48KB
- SHA256 e338740ffbf19e22cdd06e1ee7fbbad23999791cf746ba5a6f7c10cd5d292673
- MD5 a8f90ad0648e102d3ae0cda74e47e8fb
- SHA1 ce0b527e3535baf5299f8d58c1055844112dae63
- SHA512 9ec94a7d2ae9beaa65a7033d3fbd581b9aad55874f6740bba259ca683e92674481d3b248979aefeb96f10c1bce9b2b3bf4e9d2cc0f52baecd2ad40d300511733
- SSDEEP 768:ruUJT2Vz/4e17zm7QPTMuhQHlobqO5PJ:qUJT2x4AM2MEyoPx
- TLSH T10F236BA5759201B7C2CF433459F4AB3B6A7F79101AE144879FA5A8CA1C726F1E23B343
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\OverPic.dll
- Size 60KB
- SHA256 f4f49c3731fb2e67bf7d5d666affdedbea5b50296d29186a1519834404f7d5ba
- MD5 b0270cd4777e532d352e3919a9c94727
- SHA1 04705f440a7cb4511a371ce531bafa50480be892
- SHA512 ab0d7d574d8a0d0e853e6922f4067aca2f315cf9a407dedac7a9daaade7f5df8d84341875f99b60bd7cc118675fafcbbf55ee582a464f7655ebc7723a583b172
- SSDEEP 768:e221+IcQAGCL4JmgiQj98z1CqLUCG3f/X5y2YVfuXbc07wx8p:o+I5CL5jB0WUCyZ+VmX4uwx
- TLSH T1B2534A85FBD095F2C89E82BD10ABA7BB9537443057E3D5D3CB9518AA68336F0613C64C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\PICHELP.dll
- Size 26KB
- SHA256 8b1575e8dbdd88dcdec68249ef3edc6eea5f8617ee45b7d69a63295b71e25ee3
- MD5 d6de2be82760e2fbfd94dce218e7ed97
- SHA1 57d3af0c65ca30fc62e529ea7017a21e1249cb02
- SHA512 633b94e389dbf6fad95d8dedad58757f67b9cfd99b1cc4e7edc05f7856169d77da6497fb9fdeda804b0c13e2434cdd3017fe7ea9ed2b78c8660d1d86e7e1744a
- SSDEEP 384:2r3D/bXj+NtvqmcR64dUTxlwVflh8TC/+yoZT3hW/o+2Z4pu5YYnW+Yf:2r3D/bXju0k46chlhtmT3hW/o/umZn
- TLSH T191C23B17CADA9632CCC0533E04EB6F5FA73E6E626709D2D343812C7A5171BE0147968E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\Pb3.bmp
- Size 10KB
- SHA256 079ea267fe70115ee5d0ebfbc56ba656aaa8337ab095b41313f7899b4b70b5e0
- MD5 a9c9d7effa8278697f70faaeb2be9bf7
- SHA1 b7259d87ef044be0e50dc373c577f6b68330de0f
- SHA512 c5e08e4f838df0eb0fa45d0a8a26f7ddf4078078e118b01ee6889ff4407431b410cc8e15016d5ede1bed1d72b820a841d899e9b3ea778eff5837afbb5dd78b0d
- SSDEEP 192:Uk9vlSe03UEqfi94rhRjYW+IHRdKXC7P74fmxsdS+hH0LgWy5ZhQTR8f7vfb/:dlSe+pj94rQDKR4S7P71xYi6hQTgf/
- TLSH T19F229F0A576BF594FFCA0033E8E9594DCBD8843F188B7D2EC477A86E2585B62231452F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\PlayList.dll
- Size 164KB
- SHA256 ba23072efd306c3cea38bb97fed50d2abe207cb9cac83143ed37a0898d14d198
- MD5 529fb5e846b1b986cac0b65735e97141
- SHA1 ed14844e1db8bb9bdb544840a69d7af474018298
- SHA512 fb535e3703bc0c8c776ab43e2b0712081ae880e0e547cb9a671cd7ab0c285ceeaa85470a175a9e43ff2328e439eac1052410ddaf4ecfc3442309191323932e49
- SSDEEP 3072:Q/UTet2B+syv4QOCaVuUd7bpTRND0OFCEmzYU/zai:Q/iFB6wdVVuUJNoQrNr
- TLSH T182F38D0272A0D072D3AE017D1A676B37A3BFA570CEB18F83AB64DB4C1D359515E36227
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\RMCtrl.dll
- Size 64KB
- SHA256 427d6f92caf6e0f7778a7e04876f2c297c0493f613472d80a3ff265d09c183e4
- MD5 0cff3ec350bc1916ad5c4c79abaa4859
- SHA1 d98577cdd4864e7ea4aa6172eed231cf38b903a9
- SHA512 0fa648b540164a4ad55aed5f60af4cbd9c28f2894210ed2b1a427b87fce842f346f9a24b8b1127a75c1568ae22a9ac3030cf10a9ea5bd38fdb3fa22e1e3dd145
- SSDEEP 768:C8/5W+RVOH8AyiTLVgu9zVXttGB4oOEohuqiB9uunnV+ma7fTQVwoi3R:XzTiTLPvdNoTH1nV+pouR
- TLSH T195536C267292C0F2C34E127424654BBB97BF6A0246C90EC36F6DFE465D265B0DA3B316
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\RealHook.dll
- Size 35KB
- SHA256 4cfa6943522bccf4a94bb67275ca40a476c2af47f6147c0e57d40d002ba6fa5a
- MD5 8984ea40b496b7e3dc121b25e18625d5
- SHA1 7c451349cbed109694264287f6f70b27ce4c3e2f
- SHA512 89f8d02d97c8d67e0839f27a3a07b59bf8211c5e6ede3a2e8c759a624baacd622834147833841725a36d8d7d52ef898e6b894fdb669a1f999a0e12e546a93631
- SSDEEP 768:3JZNko0q8CkJzbP46+Ydmm8IWy1HpL2hS2MaDu:3JZNko0q8CkJ3N+Yn3N1HpL+9
- TLSH T1CCF23A139652C1B3C599967D10A7ABBFE53A5D3803D369D3D7426C7528B2BE0223C38E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\RegExplr.exe
- Size 48KB
- SHA256 b9b8b4b7f990ab6e13db05b37568c23d1ebab69593bf9117d787ed570cc64ab2
- MD5 c737577649dfe612df5377f995a5988a
- SHA1 b9d7585d104ecf55738edb0279283c2e680e6ee1
- SHA512 7a35af44fdf409250e949e00674837fb8f9bc1c93d9bdc606e2f9425ade62fe8fabbac5013957004981f7a461b0e35a0a3018446cb279013dcfbe5a1becf9bd2
- SSDEEP 768:yWutq6XMPzJfUTL+Ef6p4Xkjtco8eYI4g:+tq68rJf/arYyo8eYg
- TLSH T1CA237D27E9D10527C8D1C170C0A59F3B4A3B7D324221688F97D0FD9E1E325E4EA7E2A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\STHMP3.dll
- Size 111KB
- SHA256 4126ca4d6461e310ba3a74937f3f54e8e706cf10f59196203fd4cbc7809b76e8
- MD5 2d15bdcfdb252d7acabec4b1012a3130
- SHA1 54ceebbf75c2501c288d0d17cdbb29a56d785958
- SHA512 7904df08d1c369b6548dced547c68affdd72ffc07b490a2304b4f94f925a153a7ee1c40e213dc50784bcf7bf1d6e80a9df5db8934697d0d924447675addc52bd
- SSDEEP 3072:gfgcH8z0YrmxCEJiXI40XxvVbfEYx2VUdSGg1bQjIlg:9cH8z0YrmxCEJiXIpxVfEvGg2I
- TLSH T1BCB36C45B2C6C6F1D4D69A7801EBABAE91399E250B71E7D3E3943F3E98717F01835280
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\STHMP3AUDIO.INI
- Size 1KB
- SHA256 5223d675fec99fb57e3840329c2a4e0e6f948635e1aa557c48527eb9790da74f
- MD5 e9f4611a195f1e7b420935234228e9ee
- SHA1 0db7ed1fd36b01e879d277f80867c1b82bd9fa1f
- SHA512 21e488ebd212b44175522bc3660f5c094a1e8854601a4b09ee143bb89460ba8aab35b77340fc1e97a0f97174cd5386081b0922ea86ebce699e1a3b5178a476f1
- TLSH T1ED216E8CC57D1AD772A11FD140F46CAD6693BC1AB0E17645D4CF7C593DEA49A000AFC4
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\STHSVCD.exe
- Size 1.0MB
- SHA256 e107062dbb8a8e010001e864d3711a6d39fec7d212f63a7b3c059e20367662e0
- MD5 ec65b577ebbf4c667401d28eca5ba536
- SHA1 bf1e01727348372fa76f1bef1e0f41cd1ae94fc0
- SHA512 a890beff1a6d00f8f0a1ed69be485fc6575381a17b6082992c7d0852f182a629c8552d28886b23c72d5dacf771eb1726bdb29b925bf75d995c1d6ba05e1fadee
- SSDEEP 12288:6oxr75kSgyZaoc9I4rw5k64ogc2Eg1qaVCEffGe:tp7+/yvkI4rL64oXrgxCEr
- TLSH T177250761E277848BE85C4536059A76C8B9E8AE11A7338DFB515D7AC908E53C36C303EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\STHVXD.VXD
- Size 5KB
- SHA256 a6a6df66326d3e4fb7c1065a38d4d7b546ad2edfcd5ea281d5f0321678c5e38d
- MD5 261e78d60ef71d332d72c25fb182101b
- SHA1 7b629ed0a7c5293d577db848c54509d60b748a67
- SHA512 826127fcbc139bcd460818b6e78b74e321b5773a3f01601e76f6ff12151b99f9b5f3eee55beec9bb24906d032b20f892d604058d2a7f585c8616801a733b1331
- SSDEEP 96:fYNoQfegkY99KlH6LUD/EMd5I7yBYMXK8En1y6eiXkKH:fY6EkvgnMd5IyXKzwi00
- TLSH T1EBC1A710DF5FC109C5C6323AF40A5E39EA93554D0F16ABD746D3A5D4A84EAF10037EE2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\SUBPIC.dll
- Size 75KB
- SHA256 e9284c7670c5d85fecfd078742153b17690fe828d8b838cb227d70d86f00560d
- MD5 3a84536c2d49f207aca4d9ee7db19de4
- SHA1 b3b2c5e1d965e8d12d9e6f97ae61520c49e01f2c
- SHA512 ba1086ff16c4a27e655d597c98f6760d0e1fdd5cfd7e5d5cad9c72796e83351987dbd7fec22971932497fad4b6fc0163676c2d64851b2a2ab921b745e0cc4b65
- SSDEEP 768:3l9db3SfHXkasLl4wOqgKd7mr2lkyG8oKAPOwrCMm0g+IEPd6U076zoyplaa:19BCwl7tgKUr4dG8Eu2XpPdbu6Xaa
- TLSH T1EE737C8296D1C5F5C4ACDBBD00DBD77FA63A15710BF3F9C38BA418695832AE1943828D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\SVDVIDEO.dll
- Size 524KB
- SHA256 34bc086452d82fb91dec3e60803d0ec13a331d6e43f93c92d022fbe49aae4ca0
- MD5 1f2e66bace9ba3baa75253399ef24563
- SHA1 53efc7ca11b770f87c4fc1b52339c222295e7f70
- SHA512 a0dfb71e0ae04cb9378d0d45634efd37b3d082cc02742484ae660aa1f471baa73ef2a9d9bda78b4f902a9198a8603493922216fe08e7489948b1fde38fd383a4
- SSDEEP 6144:oPf2XhvmZNKCB5wjEPxqv5GPu47eOrPY4ImP6L6cLueg4+bDA6TQyrJhDQy7:if6WKreqHLOromPe6gupj/TQyrnDQy7
- TLSH T184B49E92EDB26474C850A0BC42EBB7B6B2749411A31A58D7E2583FB5C8706D1ED3F34B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\SysExplr.exe
- Size 63KB
- SHA256 820013c6393efb2db19dd237e35eb2b49fe981cce6bc12dd024a094e3a3642d0
- MD5 382d670ede4d9165e497b98c71173129
- SHA1 ddac209dc2bef9381935c886f02bd672655b6ed0
- SHA512 fcd341ff0af7f2b10b4a2ca70bced7d6ffbe3cd8c4a6ccae3f032fd6d418cd36e9829b1a24bfd81780815aaa2a51301f9e76cb7f4e5eb0bda8df6c5004bfedf3
- SSDEEP 768:HDWIpOJaZ23WYv5eyPQI4jvxnhafhxbQiNw51lhtquK0H/:jWqsv5K9vx8hOiNA3f
- TLSH T193530A2B6FF988A3E560523C06AA2799FD63ED21032641D31B517FAE5C31BC0D93927D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 10KB
- SHA256 0d8e49090c98d6bcbc1389fc8c6e6a51b75bfe493fdadd17f592e109a9015bc7
- MD5 5f57856e68036f9075fa25b261bd2c20
- SHA1 018a95fcf755e8ac68f4de660cb464045638e983
- SHA512 75e7d23fe234a1a6ca59c4e93504101dfc8ca98c967eccd9a7859e1e91b891124cced8db3edf441e58ea083aeeb5c37c270735e1955379e0254b2888fe1a5ba0
- SSDEEP 96:EN5AhiGMcn/tmHoAMFEflZHq0hdiJQ3p6/EU4n1:QA5nlJC9wc3p6M
- TLSH T12D22031F93C80C6639BA0C855E58DAFDF5F9F962553A725820F390F017BBE86D052B22
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 9KB
- SHA256 59f0112269a3523af34e2a738fdf8ddf5c3aad7b2146004526317ef63a76ed54
- MD5 38aec436430ff670a68921cbafcb3da2
- SHA1 df8e2b1a7d259681ae5ac032f6f5b9ebb48a7d49
- SHA512 d01248fed96defb2e9835e5c05ee85f8bce0e01a1d240e9d55640e6e6e822bad1d2b86d82cc2c6d313d7901efdb9adddc9874cbb1586ab90a794081a96505d1f
- SSDEEP 96:ZAhiGMcn/tmHoAMFEflZHq0hdiJQ3p6/EUj:ZA5nlJC9wc3p6t
- TLSH T1B322041F93C80C6639BA0C855E58DAFDF5F9F962553A725820F390F017BBE86D052B22
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 11KB
- SHA256 84ae7be2990e17c83be752d2072e32616673a80f973498151385a93920d103ac
- MD5 3f19a2ee4cb97a727b813dabd009730f
- SHA1 d70fd0487ff07b2b573769e11060e9a2d48b69b1
- SHA512 ab7c7bb3effb78353e14f8beba0638d92b470dc4c587c7bd297a1470a7bc76919c299e808941c0a5b4aa39007e9f20ded5a9d5c9444ce0abd3ffb9067898f4a6
- SSDEEP 96:WAhiGMcn/tmHoAMFEflZHq0hdiJQ3p6/EU4n9ECueunub:WA5nlJC9wc3p6+
- TLSH T1ED42140B93C80D6669FA4C855E58DBFDF6F9F522553BB24820F380F417ABE86D051B22
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 909B
- SHA256 5bf2169705a5eb03ed4a33ef1e8fcebafbde3f00f5edb261fe6bb6217ee2ba14
- MD5 f135b5af03fb674fa2991c742bdaa361
- SHA1 0da5f63af90f60923ad874fc70373ff78b3a9074
- SHA512 82cdf201e46ab982eb413a5ba3c0f0c7bf518c90d02d0297cf650c4ca511a649f93a369efb4b98ad203e8fc9f8a2d3b44d56207cd3e63c2a5d8be904453dcb65
- TLSH T189119B0F83C809623CF949850A29DFECF4FAB091A22F23A514F681B046A3F82D244F31
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 1KB
- SHA256 c9d2b7273dc9f67edb63ec53007a11aade14c5a47a852a0aac9ad624da6b8da8
- MD5 368a0f9ac05db6695480a6c38bb0f6ee
- SHA1 fbf738f007ce3a5ad27a8b3cba3ab1e368ccc811
- SHA512 796b95ed7aa3850b60833c7582caa27aa9ffcadfb867f9d61881ddad8d2012054de2b83127a2c1c49ed3b2acd60f2923f711927c71bb86002d8adf4f2f1ffb07
- TLSH T10B219D1F83D809623CF909841B28DFECF4FAB451A22E339114F681B046A3F86D258F31
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 17KB
- SHA256 c581b23185e53fb08790ca32890e834ce01dbb4e9c4d3766cc0443b3ba618d98
- MD5 aec839c811136f91f28c0c1607b37b49
- SHA1 324a8851eea7be696021c4e31e245695e114902f
- SHA512 e54bd36f526d21af89bc4a0b3cc36b34541ac2f8ceacba0189223407fe598775f7be90176e221d2a2b38c6ec5c80ee1264c8a217850aac8425f7e1d2061cd1da
- SSDEEP 96:AAhiGMcn/tmHoAMFEflZHq0hdiJQ3p6/EU4n9ECueunuxGTREoX3PATcw40cLPeF:AA5nlJC9wc3p6jdDPA4S
- TLSH T16B82CA0B87C40C17A9B949846E19CAFDF2F8F921506F729810F791F516FBEC6C091B66
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 17KB
- SHA256 1c61a33f626ad7e4bdf821ab1d5bf1c438e2746b177f078793833f7c5a6b57d8
- MD5 f2433d156f531ba35338bffa98576b52
- SHA1 0267c6ac84db4c5dc82fca10bf4613b843e59a9f
- SHA512 3d16e09966c356baf2b964f370188300f31add507f60559da9d3b8ce5e09b9fc0c76db1f1759379c76a64f4d8740d976eeb16058b6d0934c769273309d169ac3
- SSDEEP 96:0AhiGMcn/tmHoAMFEflZHq0hdiJQ3p6/EU4n9ECueunuxGTZuqugEoX3PATcw40v:0A5nlJC9wc3p6jtDPA4S
- TLSH T13582CA0B87C40C17A9B949846E19CAFCF2F8F921616F729810F791F416FBEC6C091B66
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 17KB
- SHA256 bda560ce7aa6788a8d821ff03aaa45fb0c9c80973f263206cef2f26f3123ba58
- MD5 25593304746e2f431c9d2be71520ba62
- SHA1 bd59992f24bdef548d1865e82f2dedd3fe0cea2f
- SHA512 5d40c6c1786fae26b5b1043d9506f06817b7c029526532bcb351591b748ac1d3966e2fc40ed791030f09a82da496a8168f3ab8330c63349523868af5dca90ddb
- SSDEEP 96:vAhiGMcn/tmHoAMFEflZHq0hdiJQ3p6/EU4n9ECueunuxGTZuquauJujREoX3PAt:vA5nlJC9wc3p6jPDPA4S
- TLSH T14482BB0B87C40C17A9B949846F19CAFCF2F8F921616F729810B791F516FBEC6C091B66
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 18KB
- SHA256 0c964b77f79652ce5393a383b24593b2877a48463296f7b4a264b3d7bdf10a6f
- MD5 3c5c4d56cc04eceea8608cbde6481083
- SHA1 a1a60242cf8f7116990fae2181a0db63025817c7
- SHA512 58ecc6b5e04be56879c01e9e0060f1fbf62a54788c92129c5cd2c66f239c8e778147c9897b7ce492a765460d35f649a0036c1eab0f021890f9d169e8043c6831
- SSDEEP 96:x5AhiGMcn/tmHoAMFEflZHq0hdiJQ3p6/EU4n9ECueunuxGTZuquauJuj7uhuLE9:x5A5nlJC9wc3p6j/DPA4S
- TLSH T1AE82CC0B87C40C17A9B949846F19CAFCF2F8F921616E729810F791F516FBEC6C091B66
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 19KB
- SHA256 fb9000fd1ea217342c1e45eb277d05978fe46d4ae1c9ff8bef7d51b3893b1cc3
- MD5 13481becd03ac458ded40a7b1e95cf22
- SHA1 1b94c5aae236d600e51005a1b7a9f62764a4c982
- SHA512 ed449ba5dd89d9129e1bd37c2153a045a007de82d1e5d91199baadcf835f202eaae7154979170208eac7645024a59e149278d8ea68de2eceacc3e42429a2109b
- SSDEEP 96:IAhiGMcn/tmHoAMFEflZHq0hdiJQ3p6/EU4n9ECueunuxGTZuquauJuj7uhuuuoF:IA5nlJC9wc3p6jQDPA4ci
- TLSH T19E92F00B87C40C17A9B949411F29CAFCF2F8F521656EB29810F781F417EBECAD091B66
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 19KB
- SHA256 a171e0d8247cb41038909256bacbf3d2314b2cefa9a9c8534b668c62c4e1b7fa
- MD5 337931849083692f031a6b039529f270
- SHA1 63798a37b13aaa9439f87ad0ea916e7d9152ea34
- SHA512 a8d434556d252f843869d21010c062b520cc92f9513fb01ed91ca9c635ef2d5b69cd3af5a94a968c1b942d95987724b62da65b8f091fc00174cc18a14cc0610b
- SSDEEP 96:EAhiGMcn/tmHoAMFEflZHq0hdiJQ3p6/EU4n9ECueunuxGTZuquauJuj7uhuuuoy:EA5nlJC9wc3p6juDPA4S
- TLSH T15A92F00B87C80C17A8B909411F69DBFCF2F8F521656EB29850F780F516EBEC6D091B66
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 1KB
- SHA256 971880e77d78d55a269a5aec7ad1385f60ebbd9d34e2e1164605baba0dfa52c1
- MD5 11b90fd4c3c9b1e89375ffc9e0bacb7d
- SHA1 c7929b2add0f743b925a5df2951dc6f4fa585397
- SHA512 c9187559f93df41799e21be447053565a456cdbfc9233e5e1f6b9f665b2fec8e7471640eaa779ffc442ec961a8a7432a68890cab5a0b769d579d64247c47276b
- TLSH T161318A2E83D909627DF90D851F299FECF5FAF490626A325105F6C1B046A7F8AD244F34
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 2KB
- SHA256 f23275d2222b758161bc62ca1d3ba97dc6af7c7c07b0337ae27df6e29e4fc7ed
- MD5 d4794ac3f8412a79c87494963242fdd9
- SHA1 a5cf29ea552f338bd3056a1269ba634b713ff2d1
- SHA512 8c72dc0d6aff582fb1544d5d919426f38754c667ad185b47df80168afd0c4880ea341383070a69068304090c19209510a0b0100a73f114bda61a425b9972d57c
- TLSH T12341971E93D809627DF909852F29DFEDF5FAF490622A325105B6D1B046A3F8AC248F34
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 2KB
- SHA256 63b082ef90bf2acc5b186f4237daa65408d243902cba14e3782aa78c5a762c77
- MD5 c73dd47b4db788971f465f6ad5994582
- SHA1 243b1257a383ffc4b585211f2769eb5d7f142ec6
- SHA512 e231b71325070af4a2d4835d5364f84ceafa58bea85ca85205b159bd536827a0de22ec9bce8f2884077d6fa7a1f8ee5f80d4d6535003d2d58cc7b5fdb29a6095
- TLSH T17A51A91F83C809623DF909851F29DFECF4FAF890626A635511F691B056A7F8AC245F31
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 2KB
- SHA256 cdf57bfbf1621f400cb672bb6fa86fe55ed2b48420419134ccd233f828b21fce
- MD5 1476b6054ea2d4cae19d5cd39047f584
- SHA1 ef3926b44351928b2d5914a637c1c2fe985815a4
- SHA512 7e25f8f637c980cd089527a71cf7c1a6bd97be991168ca0f8ecf5703014efda70cb63855087152c98c023fa36a6791b3b63969b5310025c5790b286b7619113b
- TLSH T1A251CA1F83C80DA23CF909851F28DEFCF4F9F891626A635810B781B016A7E8AD255F31
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 2KB
- SHA256 d1b5f061b09aa465c6ca0faf0201fba719ec2be5eb96b259a0b0a27afc693d42
- MD5 b4610836df68e2ee30c6303ca375c138
- SHA1 0bcfdb6ea4ef07e293413ab652fceaa6398dd095
- SHA512 ef7c47e5bc9806fbfa5231cd17277b8149f538e3bef60d9b0bb2b1992292089e1002fd48012e32afb130855424b04952e633167fe1b06a9fa4ae0b0f8fb6cace
- TLSH T13E51BA1F83C80DA23CF909855F28DAFDF4F9F891626A635910B781B016A7E8AD255F31
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 3KB
- SHA256 a3471a809227b062b6381ea85d4b2096281cb9547d3c813c39418af4035cb057
- MD5 96a67febfd53333454b139f55a94bd2f
- SHA1 dfbf105719feb73d1e6a393571e706b3314ffda8
- SHA512 4fdd7e122ee3c67a91d578f46415b1d33db131f6daac0fead51aebc83fe9008187eba918c1da02ea3de98fb81e8552df6e8d06f3a142752cbf9e392334e66af3
- TLSH T1A851CF1F83C80DA73CF909855E28DEFDF4F9F461626A635810F781B016ABE89D115B31
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 4KB
- SHA256 6f2672afc8f8f53a6de2a34c1e8edb3a27f097b60e60f8bbda4d0907dafaf1f4
- MD5 1f69d79821abfde4ac9e37517f57a997
- SHA1 6110d698d6a1b6da25027bdbb96f47b52f51033c
- SHA512 960e4cc18caab9cc580932306a07de35d10f080491c3ff097852fe41232dc3545c2ed77703255b383fff80b44da8e1bf7df41ab08510dcedb155667ae97fba41
- SSDEEP 48:0gcZQOxnw6NsWE4huUzlMl3EIAq5sI53UqDUdCN/kalB2/AwV7atcFH5ADoQTdmQ:WAhiGMcn5
- TLSH T15B91D35F97C80C9738BA4C855E58CAFDF8F8F562526F625820B380B017BAE89D116B61
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 4KB
- SHA256 69941cd9b5b604c974dfe266090b83b56f793d254107e2e8de6b7d2fea026f00
- MD5 11f6bdf6c2a5b91ab6215568b6bf29a3
- SHA1 bca9d37a22665bad793c479bc1bcdf4ff6d54c41
- SHA512 c348d3c76e92a301cf862113b893f045163e4eeb36219d612d25dd9976e7cc73cc8c83f76d7e0217ddbe7ac037dfdef239884a45379001367a9cd57a9b6481ea
- SSDEEP 48:0wZQOxnw6NsWE4huUzlMl3EIAq5sI53UqDUdCN/kalB2/AwV7atcFH5ADoQTdm4I:LAhiGMcno
- TLSH T12991D25F97C80C9738BA4C855E58CAFDF8F8F562527F625820F380B017BAE89D116B61
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 463B
- SHA256 25092e9c88272db93d666ff8789ccb0346d0ddaaef7aabc8f04f643d31274a94
- MD5 803566ac6c6557ead145dce0fd2da2c0
- SHA1 6d1db346c22e00600380f15f0028625d465c02e6
- SHA512 2d2a1bcab61a4bd1c85b51c80181240408e3aea1f05a7f87a10b53f71d504c021e4fe1411c68da5e3f9ec2d2472b415f7e4705694d8d6e5bc5cdc94111f3d744
- TLSH T135F09B0FC3D40D7228B949850B289EADF5FAB451E26A235114F681B006A3F82C100B31
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 4KB
- SHA256 4e9ac49a0d3d3f91ea9b9e3908c3b2ee15aa88e9700b38651ed3f1d015544308
- MD5 2fc4526555944f26dcf4647260375765
- SHA1 c8fba25bc2fa49640fb63c2459cd831b03983037
- SHA512 a4e509247774cd5f3e858fcf2fbc75ec2ce0d8c18073c93937b6c4f51b0510a7956367ca674540d36380ee422847fd044793d79ca1c45be4d3d02216d48fe39e
- SSDEEP 48:0zZQOxnw6NsWE4huUzlMl3EIAq5sI53UqDUdCN/kalB2/AwV7atcFH5ADoQTdm4Z:mAhiGMcn5
- TLSH T1D791D35F97C80C9738BA4C855E58CAFDF8F8F562526F625820B380B017BAE89D116B61
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 5KB
- SHA256 3248315a11bb448a45f57e699d1e0a86014aafa79db7bdbbb9e2def0a6bb91f9
- MD5 7ddd960d7f5135ccb48cf336dce4a095
- SHA1 c4f7e9332c2172997e65201b17c3a55a4c33f1c2
- SHA512 8da08cc4b50148de0e0b989f7616813c7ce3469d93341bf87a1861ab035b2804f62991ec8e782d46844b78f47bc2ff182116b4d4d93b4d46dc777bef86361751
- SSDEEP 48:4q5ZQOxnw6NsWE4huUzlMl3EIAq5sI53UqDUdCN/kalB2/AwV7atcFH5ADoQTdm+:4yAhiGMcn/tmQ
- TLSH T1D7B1D54F97C80C9B28B94C955E58CAFDF9F8F562527F625820F380F017BAE89D112B61
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 5KB
- SHA256 7863906cb61331c7c3e82d51afa89df09a4aa74e4f065552527263442dbdf06d
- MD5 6f87e3fe9e0ab2ecdaae20d1741e695d
- SHA1 7a8c17fdf972e4bb4397fe6a5813199427a81164
- SHA512 6b89c8b79354c7ea859b1b56d306a814049bb0d0cf909010a76e3d7205b889210f2b38037c1fde2094489411fe374ad4719027d613f5c86152e38c56afda46f4
- SSDEEP 48:i5ZQOxnw6NsWE4huUzlMl3EIAq5sI53UqDUdCN/kalB2/AwV7atcFH5ADoQTdm4H:qAhiGMcn/tma
- TLSH T1BAB1D54F97C80C9B28B94C955E58CAFDF9F8F562527B625820F380F017BAE89D112B61
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 545B
- SHA256 afd6d07f6b4a3c9bff390467c50f57f0b3e80a3fa7ad03f57a0f829b5ddcef4c
- MD5 5b65717770fbd7e08d98d7ee28eb60e1
- SHA1 313118362ab9ffac50ba18acba6b8a3762efb78a
- SHA512 ef027d017e272702222a5164b04fd08b1c17bfabd27ad0789aafe802a191af3005a39476288b0009b3d7f90172eeb8bd669a5e045446227cd8519da918def689
- TLSH T134F05A0FC3D409622CB949854A29AEADF5FAF451A36A23A154F681B106A3F93C104B31
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 5KB
- SHA256 9cdbd68978210beecb897ad9bf9faad4316a7fb2de62bf903abcf19f7b4a5f3e
- MD5 d84d4f12145a999c5f48380fb3e6f992
- SHA1 36a7477d3ef806c1ce23bf14202e130cc173b26e
- SHA512 f0599ed37d07520cf91aa18930f9d4c92da6941b8cd19e4e6d07a5c5834f4c5a6371bedc76aad73c7638394e9cf6e9cc209adee01881fe611801ecf61c066e9a
- SSDEEP 48:ifZQOxnw6NsWE4huUzlMl3EIAq5sI53UqDUdCN/kalB2/AwV7atcFH5ADoQTdm4y:2AhiGMcn/tmHoAB
- TLSH T1C4C1E34F97C80CA729B90C855E58DAFDF9F8F562527B625820F380F007BAE89D112B71
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 6KB
- SHA256 4aad11bddd2c0dca543df73ea18604be80b3827e40c6668ab563b2b872d7fa16
- MD5 eedec0de8d6b4423645c8a17239b828e
- SHA1 70df4fc6a351f67be0df3298950efd1ebe77b41c
- SHA512 f918fc9211522c0e9c757a4683d27c83a439d5d1d1e03117e08117ba32129db68ff69fc23e2ed31fd896100fc0f5e6f57bfeaee7a1c8a6a7af1b98477e37832b
- SSDEEP 48:H5ZQOxnw6NsWE4huUzlMl3EIAq5sI53UqDUdCN/kalB2/AwV7atcFH5ADoQTdm4l:tAhiGMcn/tmHoAMR
- TLSH T198D1F34F87C80CA729B90C855E58DAFDF9F9F562527B625820F380B007BBE89D112B71
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 6KB
- SHA256 2073e9002c54c4123800f50cc1566b217fea3d9fd2ce4f40a07e181c2a1d1ab2
- MD5 ffd09e211a8ed2529425beaeb3e52f4a
- SHA1 d72d993b61a9e665ab17d89e666928eefa7ea37f
- SHA512 94da6ddc046678716045b29473cd6bd04c65d9b4e4ab7e5556feea40e100bb10e65026514a4194387cecb4b761426c7a87bf14171df32f4a9664be58b8216bc1
- SSDEEP 48:oXAZQOxnw6NsWE4huUzlMl3EIAq5sI53UqDUdCN/kalB2/AwV7atcFH5ADoQTdmW:tAhiGMcn/tmHoAMH
- TLSH T1CFD1F44F97C80CA729B90C855E58DAFDF9F8F562527B625820F380B007BBE89D152B71
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 6KB
- SHA256 ab4de012c2ac20f40e906e68b9fecd864d4c58623ea3c7b29e752d33d572cf54
- MD5 7dd8ac6c178b2193b481007115a52a17
- SHA1 48eed506dc6b7ca63bfd971b846b9f7e8347c4f7
- SHA512 84c11373098786dabfca209531b9757fcb4b2712e9f9500a37a222ac24df8ddd556edff3e60009cd72fd5107d4683ab3f069266e81adf0bf260a0473c7b293e3
- SSDEEP 48:LWZQOxnw6NsWE4huUzlMl3EIAq5sI53UqDUdCN/kalB2/AwV7atcFH5ADoQTdm4u:8AhiGMcn/tmHoAMFEflZ7
- TLSH T156E1E74F93C80CA729B90C855E58DAFDF5F9F552527B625820F380B007BBE89D152B71
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 6KB
- SHA256 aceb47edaa35a50229511f2a588b4e617be044868f08ff8456d7b8179b4476b9
- MD5 5c0ccd937b9547e132a424b31dcb8076
- SHA1 425184d3a4f577e185bb411e2c0b9d23ff3e180d
- SHA512 0fa75032241fef8ff3f31c36f61fc72ed689329befe5d06bcf63a245335d1178da04ee7f76b32f0c993f449dec35f7cb2827780df8f5e4d5142457ad0ad0dc3f
- SSDEEP 48:3WZQOxnw6NsWE4huUzlMl3EIAq5sI53UqDUdCN/kalB2/AwV7atcFH5ADoQTdm4u:gAhiGMcn/tmHoAMFEflZ7
- TLSH T147E1E74F93C80CA729BA0C855E58DAFDF5F9F562527B625820F380B007BBE89D152B71
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 7KB
- SHA256 9e6fbfdd3cd2011ef2ac28b460ed4921e09daae01a640d123d3074d45fb326d4
- MD5 8b5b75b9845cc39f91a3916edb596535
- SHA1 dfb0fb240958f9e1799e1fad6843e318602cde4b
- SHA512 abc9d1175afcecab42c9d158f66ade2852bce1e38bc0141a921832303cd72204993dd55da0f6f08343625bde389b018d3f6df82a5bc2b85954e240875e4a9aae
- SSDEEP 48:YyZQOxnw6NsWE4huUzlMl3EIAq5sI53UqDUdCN/kalB2/AwV7atcFH5ADoQTdm4B:XAhiGMcn/tmHoAMFEflZHqn
- TLSH T16CE1E44F93C80CA629BA0C855E58DEFDF5F9F562527B625820F380B007BBE89D152B71
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 8KB
- SHA256 b379c976e6bbee443a0b96a56d767a553a9b796ddd3505d12569847ea9b3aa28
- MD5 8bb2ece460dff9e184e5e64ba2f9c2c7
- SHA1 9e5f690df981413988e0b4e2c10960779909255e
- SHA512 4a845e76fd56eaaf657a2061714ef198329e31fc30d80a7ef8a7bbc74a95ac16b07f5f2c17b737ee67b439de02f51e08a5203bbf474739d94a9d28ec2c0b867e
- SSDEEP 48:4SSZQOxnw6NsWE4huUzlMl3EIAq5sI53UqDUdCN/kalB2/AwV7atcFH5ADoQTdmB:45AhiGMcn/tmHoAMFEflZHq0hdv
- TLSH T1EB02051F93C80CA639BA0C855E58DAFDF5F9F562513B625820F390F017BBE89D052B22
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 8KB
- SHA256 06c8515ef7f10e7a106e0ae596beaa46a3c2a5baf584a8dfb7a703f57f9eb286
- MD5 23cd4a75bf0d2e73c47c562d9b55d438
- SHA1 a0ee5d762fa4189d6f72a9ead8a2bbad10d41892
- SHA512 d540f160fd0b6a0bd859a62292a5cf5085e51a47d02f59a1a16ab5c875331f778a5a9d312ceeef97a2dfa227acd1e3c9b19215b280cceebb9d881583e56d224b
- SSDEEP 48:4SsZQOxnw6NsWE4huUzlMl3EIAq5sI53UqDUdCN/kalB2/AwV7atcFH5ADoQTdm0:4jAhiGMcn/tmHoAMFEflZHq0hdi5
- TLSH T18F02151F93C80CA639BA0C855E58DAFDF5F9F562513B625820F390F017BBE89D052B22
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST.INI
- Size 9KB
- SHA256 d65c24805064be9e48ac512042532a0a694202077827d6a1e08cb11ed0aadcd2
- MD5 fefc46e0c61356ed59de8d3504c8d8fe
- SHA1 f6ec9df72de59231a9754ddfbb860549e7b68572
- SHA512 f7161c5e22d84a3760590908bef9f85dfc43594b54463af5b78911f959cbe3b8f3062ce1d1b3b5b8ae842666becc370244ddb82dd5056e0c72dfb3b9c655e490
- SSDEEP 48:+lZQOxnw6NsWE4huUzlMl3EIAq5sI53UqDUdCN/kalB2/AwV7atcFH5ADoQTdm4D:0AhiGMcn/tmHoAMFEflZHq0hdiz
- TLSH T11612051B93C40C6639BA0C855E58DAFEF5F9F962553B725820F390F017BBE85D052B22
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNINST32.exe
- Size 42KB
- SHA256 7d29cbe4079007abe38e83b2314badda70522d6f3eb45dab78a09397ebfdf5b4
- MD5 e03e145c13fb0c0c0e0cdb79c3d87166
- SHA1 e02558a2eda7c680335bc4e6d07848ccbd13006e
- SHA512 3a690115505faf92d91ab809f6f6a10be6cd459198762c53ff01484fbcedbeb5caf9c11962c6e37a3eafef4fccb7503c7464a1d65e94bca4435c36f4cf215738
- SSDEEP 384:r6mtFwzWH6iwH4llna1ninayIHeQ5x7mGjEdm9BWJPzpfzEjsDoVxpYDoV3las62:hJar7HeQeGAfJrxboZ+o1Es6EwN/Y
- TLSH T154133B2BAAB0C07BC4B44D35E02597FB4D3F9E361BA56ACBD6D424662EB12C2D534307
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UNIST936.DLL
- Size 6KB
- SHA256 8b7e78dd406163c78d403239ba05fa950f2d4c6407dcd56b3f65c952b86cab73
- MD5 2d2d8b760b70018a0cf2c792a67035b6
- SHA1 1a28ce95d738f6884f5e93499a0d43e9b298a61b
- SHA512 881d65b6a3a5c43eaabf6ab68fa7222aa536eb3b606170daf33b0d29356df4d6aa699aca40d25881d99fa5878bfe2d7ee1119ec47e045a45b392aff1e45e06fa
- SSDEEP 96:5MdViDDp7DoxFiO+ELmIQJOjO7DoxFiO+EQ0FX3a:5Mi9DoyOxkkYDoyO3la
- TLSH T1AFC1B6D456CCD853CA54D6B5E203A7706327D801A90B8F178D903FFDEE32761E928C04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\UPDATE.URL
- Size 51B
- SHA256 6f6cf9511af48c2534b4937fb26ecc69db27fecd5617af778bba545bb52e0bdd
- MD5 1da155abef103cefc4afb9b0abd9554a
- SHA1 a0236f19db3e139c04145ae7fca55d4e579173eb
- SHA512 57b6a543a7baaad619d51000be40fe8efb5838838e264a70f31c53e467e2061c3f11c54975b04e30a2c6517167340099ebe4856e13b0188fbd29f26c2104b1b8
- TLSH T1D89002588209C05585028D0CA078D550A80631D18552C4D49540CF0428470916684344
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\Urlget.htm
- Size 3KB
- SHA256 70078164d51c3c217741454c1a08e78bf2d44378b1b4474a90a87fde1287d188
- MD5 23eab345607bf2198bf89add67aadcd1
- SHA1 1e30d7153e4a4fc512b09c2aaf3acd0e8b92240e
- SHA512 1b2877b80fa44f20bb11447c8b681d65590414c367d7bb916ddcb2c0346b807b38b2005802169d1542478acf324ab6d73ffe21c81105a9eb98f594cc2087f120
- TLSH T11B7159DD735E46810E841F6C5BB575A8F15FC0B3017940AEF9AE8CA7128CFE85085ADC
- MD5 SHA1 SHA512 TLSH
- Path C:\HEROSOFT\Hero3000\VcdClass.dll
- Size 40KB
- SHA256 736220dd34f20424ac1e10efb26a897a157a4704a36cca3fad0ee8e02d630d89
- MD5 1dffb66a3c484a347bbba608a516b7a4
- SHA1 53ce8618597cf48d8a5181603a376d608f7d9a9b
- SHA512 779bc1158825b96895e01da2eb39b15135183e5c7a274ffcb79925979edca8fcb717681fde1474bd09d50a6bf861f1ffa1178ff1c1e612be0b08a877aa85940b
- SSDEEP 384:uPAb3GBThfmkfJRC8C7jx4r7jCs87l3Dyu1Svr1XWuJ+cA/8oawRO:D2TVmkf7ex4rytDXSz1XWZ/8ow
- TLSH T1FB037C227C8641F3C35E977068E24F1B6A7E76601EE18843DFB56A1A2D316E5B13B307
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\Wood.bmp
- Size 17KB
- SHA256 f77463108a9d360f4b21b2c7f20edb29256b7ba4a276ae56f91b08b447488aca
- MD5 d08ee50aaa2c38d9f9f0e099d2307eff
- SHA1 3d093a46a31b4278e2c73f901bd79b6c86f92b01
- SHA512 952c8ef1748ff337d9d830804e9e86ce6099aa1abb435021e7a49f1414e1ee9d55b9b4d7c130894f0e5b306c77ca4fd88c2aeb81235c22362a01d571ced9ea28
- SSDEEP 192:Bfk7cUDJw2QNolMVb9IXsaPBqv/Pg05qoeqDITGGpp1A:0PrE
- TLSH T112826000F3BB3693E96E6EB3C04C2A994D4EB722F1E3547D5D2C0FAA1051DCA5F88256
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\Yuvhelp.dll
- Size 88KB
- SHA256 91322102f4553a73af3337e1e8591c14eb95f111a52bba2136989cef4e279421
- MD5 7c21b689be3d0dbd87e9bc9200f98546
- SHA1 4766b8c5306a62918b62772f71e47858be1338e6
- SHA512 6970199667c8c50485003a6551280b225491af687110279e48a3a9fbee7b54ea962fa66a0623a8bae5a4f53dcab140476c10da416b0c6370a2acdf7d338544a6
- SSDEEP 1536:Tds2MSAITlgJwY1PafUPrI4ImmNWJOuvF7d1v:u2MSlgJwY9ayRNSWJBvRd1v
- TLSH T1E6935B82B2F1C5F2C89C937D00AAA7BF663E6F7047E5DAD387902CB195722E1443954A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\dllfile\AC3Audio.dll
- Size 72KB
- SHA256 1d41f08187b922ae31afb88e16daeeb36d0e44d00281192199127b8dae4e82c9
- MD5 1318231cfb2e76201ef59c495e9c8bf0
- SHA1 5adf1528f9031a031036c9600cf2f9ddaef9d3e0
- SHA512 82d7f157f17e769b77324d691be54dc542809ed073e1ff5a42272ca751254bbb58fe49ff27d9c7732910df436871a2b539c9368b1cd11f515352c07d031e9407
- SSDEEP 768:SDPqrR92/z2pvXJfyl6eL67N0H15GjoNKT7BwCs4ofSeX9VViB9RuJyxR1zE:YPt1yhT7fo6kEX
- TLSH T1A173AF1270D189B7E71E613060B35B37A7BDAE100BD1D9D34FA9E9BE1D32B636136242
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\dllfile\CDAudio.dll
- Size 44KB
- SHA256 74e06dba9dedcc91ecc92981e5728190ca9ec8c918ee300702fd56247faf8966
- MD5 2b8be06d0901706c27352cbcbda2ec08
- SHA1 37f0505c3fa30750d8a5825cb383528e21e225f8
- SHA512 09650fc43b45b56bd2ed8b4f768c9ab77bdee1a0802e030ea15a805b80c69926eb4f644ca07be6511edae59a9e82c041b99f357dc0e49cac5ca1d4f72747a5bd
- SSDEEP 384:DOZ3DcMjMT138cOT0h1GOrFlqnXI37mb0sbV3jyIwaMGuPId4h:g3vwT138n0bLlCXI3M1jMaMGDQ
- TLSH T1A5135B11748141B3C36E137251E54B27BBBF69502BD194878FA6EACE2D325F4E23A30B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\dllfile\DSOut.dll
- Size 52KB
- SHA256 05a6927518e8f369bd81003ebd42f0507f2781fe17de1353e4963217ca2c865a
- MD5 d1e1a8f698631d8b2699903d60bdd3db
- SHA1 bb0c5920d90a1eebd4a8fa75663d308a82c2709a
- SHA512 f6a0577959bdcf429a7a5245c7ff2cf1d4bb0b71e636845ce72292606bc89ebc198e1cb9ebd506b35d018b63ae59c54ca88a7517e6df367071272087bfa501cb
- SSDEEP 768:FUSt+Q4ThOw/6IoOwteJI0jsiB9VBK1iRo5HzSSN4:FT74ThVXopegN5N
- TLSH T19C339F2265D381F3D28F613550E69B3BAABD790417E1C5834FB6DA4E1D226E2D23E307
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\dllfile\MCICDAudio.dll
- Size 44KB
- SHA256 49ec328f6ae11e4d05ee514644a7d473ac4df8920806a776dc452b4d41d60e89
- MD5 b995ab721baef732498b354c347f8336
- SHA1 ddfc3101a9a1d4d56a67fc598429c2279f4eb3be
- SHA512 dc7a2c670b881f07ce4e63971cc338c80890b048a1081fbd8890e343618b3864c56d382da6cbac2d99caa423356c9935d75f401d2bd6e1c625502bd14daa5890
- SSDEEP 384:6nBQ68CTBIs3cvgc6SSRNMb7DAoxBw7MNvyIzRlYSquO8EtlJyn:6y6fTBIsUgRab5NvRlYSqn
- TLSH T1A0136B13B88249F3C39E5239A1D55737AEFE65901BD184839FA6E98E1C315E0E13B347
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\dllfile\MCIMidiAudio.dll
- Size 44KB
- SHA256 9808de62e2fa238c49bbf0ce66fb058ac154c8c63badae3e5cd3769375d2afa9
- MD5 3e3200a5535fa3adfa8e4f26f2516002
- SHA1 fb2d438a1a03eaa8d83cbb4bfdc4705a78f247d8
- SHA512 113a8f055c216dae07228e682066813d87cd32ef70930948689eaf4496b0633490d5afa9de972f54ce0b12227c1026901364499499eb12dd6900fe0f47888a75
- SSDEEP 384:VQTVDeBCThuy2rjAeqyyxM97MswmRhB4NXymkv68J6JuNUsOYeb:KTUkThuyQj6xM95GXx8J6JIe
- TLSH T15B136D52788249F3C35F423954E68B37AEBF695017D08887AFA6A59E1D315E0E23B307
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\dllfile\MIDIAudio.dll
- Size 44KB
- SHA256 e296fbda8ba2e885b5905a3eb6f9ee9d5ad56daf136c569098373e038abe7515
- MD5 253ef8bcf167f45565325b830487809d
- SHA1 7ff93abc27cd0325a6f74af14432b794400b6a6b
- SHA512 456d96a7cc1e530ba7fa5e23407d1ff8648f03cb7cdc85c7d7567c5dbc5f06cf6f9de5e8dcf2876ca8b9ece02693bdc345cf4b5245dd54c4b160c24c9dfc6c41
- SSDEEP 384:Z0FgQIMTMRn4IoQ1C7vxyR375ojc8Tfh3zy6duEIluxSF88dC:Z/8TYn4nDxyR3oZzHuEIlmT84
- TLSH T1A4135B61B89245F3C36E527544E14B36AA7F68002BE184839FE1ED9E1D725E1E23F307
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\dllfile\MPAudio.dll
- Size 52KB
- SHA256 adb9de7efda9c4bb701ac0f6a212e5ee1012b14b053a42668a57e6ce304d7105
- MD5 67944f5808d84c73e4d39ae07149fd77
- SHA1 23745ea10497bc0a31b731536eeb38b4acf75793
- SHA512 e0693ec2d2b59387a510d6334f74053e230a624cb6ec656e2ba1ec216a99380c922955b545c8929b38efdb966473dde02aa76191c2eefe539ae2f16e81a51df6
- SSDEEP 384:Gxkq+Dm1LImY5eTRQSy5QuZQgKjyZ7r/KqXULJFy5+rZSr0wumSoM+XSsJ:KkTm5TRQH0gayZ3GJFBr60wr
- TLSH T109337C52B48144F3C39A56F250D25B365B7FA8A50FF094835FB2E91E2D316F2A23A347
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\dllfile\MPOut.dll
- Size 48KB
- SHA256 fb75df59ba360c5bfcaede72c7f78ecf38b8a8c8542255c6ad3b1da525c2f604
- MD5 62b84850e8cef6785a27fcbda86aa75e
- SHA1 eab347a702849f832b8e89dc5854fa10e14db76d
- SHA512 52c47bea27cc42e1eb717cfa814cfe2eb44ed790d03ef07a325f822ca5c6ce43cc7b8fdc1dc70b4567c37f461bb7e35fb23249fd0dcd41571b8c95390b36b4b4
- SSDEEP 384:qCED2HcQRZ4X9x55hTQeni8DG75ENV6UQsX72/E5WRwYN6ayJspckKujACgz/cdp:qCE+6H5DTQei8jVxVXbi6aFckK7O
- TLSH T11F235C617A9184F2C31E823154E39F176A7FB90117D6C8C7AF669BCE1D312E1F92630A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\dllfile\Mp4Audio.dll
- Size 112KB
- SHA256 500b2a27a5f9d65d6fcb96e9aa0117104c6ef48ea845677cab8148899ad2a2fb
- MD5 b78e0d37a455f17e5c7c3069ffef29fc
- SHA1 266674444eee1b943f360b9b2dca75a975ca71fc
- SHA512 5b7163f4ec74fa240438da256dc47aa70e23e5840b106d13df838d1917f24ee7c93d855f3aae58c47a0c074253f39ee773580890552d50f5e8d9a09e225ac6b6
- SSDEEP 1536:t1Vyg5as/mABkOhZT6YoI2mBtRhgi0/LK5iVvJg2BWaAmGEru:t1kMP5Qip8Vv/WaFGE
- TLSH T1AAB38C12A0D057B0C47D413D84A65B3A873FB119FA92CF0357A8E9BA2DA31616F2735E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\dllfile\RAAUDIO.dll
- Size 48KB
- SHA256 8b4c0fa134d7d48b46d3c141dd520269cb1568d8927a42f7454e576c21a5279a
- MD5 942720e45d8762efc74576b331e12dc1
- SHA1 0fdc93a99fe62763e4e530b379ad4695597c55e9
- SHA512 598192ae3e5d3647c8a29a0f68aba26e2ead4847a45bf1c61ff82eb852f94da3ed6966947e1a3d0d0c0aa7ecc35fb6cd8e1bded9ff77f0b16f56d75f73381c22
- SSDEEP 768:af0TbBgTygo1Jt9rGz/tK3iB9omnJkhHwvXZ/:A0TVwofGwmKQvV
- TLSH T15B237D2175D282F7D2AE503A41E64B339A3FA9400BE151D39FB1998F2E305F5623B717
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\dllfile\WavOut.dll
- Size 48KB
- SHA256 53e55627490baeb2a6f40b0d31a56ef61e3120fd2a04c652ab55e59b873d0e73
- MD5 2c07606669f1c5dd3c1fe49511b18713
- SHA1 3ad139f3c4daf3c0709e938a30a444a380626ca1
- SHA512 783aa78e0b917a8c8bb3e4a66c58dd984d751b62e692971ffa47956c8bbbd5589500650c2bae4cfbf3c13806f482f719ba6579cf52a0cbe1dd35cd4732e82eb4
- SSDEEP 768:89nb7aTIZUrSgocgxo+UvF/fUSiB9onJzyKdvdP6:89b7aTIMocCMGQlP6
- TLSH T106237E2374D287B3D26B803A51D14B27EB7EA9140BD159C39FB2994F6E305E1A237316
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\dllfile\WaveAudio.dll
- Size 44KB
- SHA256 87d0b64e5c4a2c5e40746b263118739d51f41b3715f1a54512a4ec43600e8b84
- MD5 c4281e59dc98c29c97a3335286bcc6ae
- SHA1 3e1d64cc29810c19cec03899d1f2bb0b32a6fa13
- SHA512 89e8ae3ab5cf69766605cf54ccb6e14750825fc56461cff84e812e6397dacb6d826975f7eaebb17a8a4e9729f7abfca7f89fac119c5f5be56b8cee78cae4140f
- SSDEEP 384:Zwgmy+8StjbALTf5fnC4Opt4Fy7J0+2T2UG37aXU8jfF3Ty3cGesZuKAx:ZCypOkLTf5fnC4OLF0+2T83M1TtGesZ
- TLSH T1AE136D51789281B3C25D623690E24B36AF7E69102BD185879FA6FDCF2C721D1E13634B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\dllfile\WordAudio.dll
- Size 100KB
- SHA256 70efaaaedfd507d90c7d2f21e4454177ccfdfb18101910e846b0e5f0dfdab056
- MD5 dfa2a06f2f97f004424e55ebfedcc72a
- SHA1 b1c1b89b2f1bd6ab884b42aa735c5841858c4f85
- SHA512 f6711ab31ae1832e16450cc8ee9b63c41549c2c82e75ea330964435af18c58f4a55f6e6a0607043f209aa9eb0cc8b7b1de1636aed99dbc8834180fa137cdff68
- SSDEEP 1536:fNGoTD/eOjBfxskz0S3jjRppppp4rRYItmfXqtL:fNsOckYSOqIt
- TLSH T16FA3C5AE7462C975D9642DBECB17C108AD1767D14832C61A277E7C4F22230729BB633E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\resdll\MPlay936.dll
- Size 56KB
- SHA256 30f5b7b4ad1d540831f0fd27fd8c98ed8d7738a206da3906211ba796a7e427f5
- MD5 1f65081760fd1006845948d3c3bd39c3
- SHA1 a25d59afee087c322c31bc4a017d905f372cf25b
- SHA512 e3a1b417e2fd1c8bfec3f9e919e9face9bf4fe96b78de78188988da9adcf804029170112e489c84fee54bb32c7939479a4f091ad9db15c9cd8e4a92b6c92d76d
- SSDEEP 384:+Fi4RKDSkKDMeKDYFq2KDYFw/KD+ggKDco7svHc9XVdr4ANwFdW5OXDCC/QzT:TWFqOFwfgko0Hu3XNwneC/U
- TLSH T1FE43EC37C2378C53DEAC4130404A7968B9297E06C3461AF35EA0790E6E356EBEE3579D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\resdll\RegEp936.dll
- Size 16KB
- SHA256 fbaf06d534359b2f84848f70cddc575769a99e94002f6baf30ce9803ad32f213
- MD5 961a5fcdbd2514cde89c524927c733d2
- SHA1 f721dbebfbf9b3fedc388f87990c1a996e531d5b
- SHA512 79935ad1f79d98a0845e909c5be126d4bebf3a782323ce86e490e28cc0616ac65d4fb0f39cb5f196d9adfe8063d550f86b7da429052db741cf6bd6ad185ee66b
- SSDEEP 96:5f0j+lyKCWORmr/FOUDdmorHHcCzUxKRYEnOtJyg4DOF6:5HyK6ywUxmorncCz/uEOKDOg
- TLSH T162729337CB088854C9D48938858F59B22134FD13E193BAAF47D03F2F2D379A8E75915A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\HEROSOFT\Hero3000\sthcmd.ini
- Size 4KB
- SHA256 00e5d5efcd695e24c456e779a193ba5b0baea8bbbc845f23efda9e3dd9bb6f9c
- MD5 ccef787720cdca61764c7012f8f8048a
- SHA1 000d1832c8506a0b706df0c7d7abf8c3388177f7
- SHA512 3016c76e1f67ead7043f3affb667377668a1e3c92745e641bf22ef52f116b064d4511466ca51d77cce3077276c52b6883873d1b8bc36cec8820396f6a84d7f08
- SSDEEP 96:CO/gdk+RuL+ORFeD1OJk7W5odcuj7Op2Xa1O:tgd1mnRFu1C9KcuDKM
- TLSH T120A16292408780D7B814F8FAF2A28D5278635469D09B0D6574CC7FC87F6034FA9D39AE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\0E596F4A\SETUPLUG.dll
- Size 124KB
- SHA256 55d53a0563637dd3d7d862a96f61bd2ffc568dab5d110e26c8b72c6b69a66cd3
- MD5 dc4aac308fe95889fc1be51e6b46e33d
- SHA1 15b75ecdb7649bb901fd4bde0fb6088065639ddc
- SHA512 ce368bba7bcb14ef8913ff8b685f51a921edd913fc64d5f8d3869a395459b5c54394932622c55ff5216a446cbcbb50fd3948d3f1c72eb78954c1d7c8cf98aaf5
- SSDEEP 3072:ZXXsk831OB8wnJzotptDxcDLfJZqPfdS6qanl:RXsH1LwnJwptDxcD7A86qanl
- TLSH T1FAC35B8161A15DF1F0EE537D01C9BB9EA3268324D3F381E3EF952899D9292F04CB594B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Herosoft\Hero Video 3000\Order Now.URL
- Size 112B
- SHA256 0d2de686cdedda61871c62d261cfcba038e4901ae64b38eb2385365de4b379a8
- MD5 e7a59924a33314ca93e4ec8281a7c39d
- SHA1 635581c94d01bd5fdb78e9df4d3780d878c20491
- SHA512 4413516d252e1e8a9489f1ea079022a8971fd58ee71db92cfb68056b5a90d0f484afe3114644a0565bd6967cf66521a3e96d9b5764129f13e2f33d933f08b285
- TLSH T1A8B0921AAACE8EECA007447DF0AA8A129B8170F08043D0A2E2554A04595D09A894AB48
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Dvdamp.ini
- Size 1KB
- SHA256 a5c5f07ce347d8e4f3c46f494c30a801ee664e426ea2577d3d87ba03fc4ac520
- MD5 e87c23001ed12113b7848fb6f99f6383
- SHA1 1ebce37ee5b75862ad31cb4824ffea4d81856668
- SHA512 7a9407dd56a4050059bba0a2f8fb1fb2d748c7823cf67ee240ab3b9824e38c42afa5fd049968864f14860f78e1e77b31be1f57b917f5c935db1ee38730e1a7e1
- TLSH T1B7213DBDA83ECAB6CCDC74E12C60018EF8927391636E4CC5A1B87ED00DB091216BDD95
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\MENUTHEME.ini
- Size 2KB
- SHA256 54003dafe4a26a251cffab3af00043a79eb7a73cba1d560f99ce3e14371dc7f2
- MD5 cf4101e7183bf00848708fa94902a197
- SHA1 f5c6feaeb2012adcf8ba71b2403021a7e639d15e
- SHA512 8732f7376bf586791fcdf156281bbe8eed293356e4d8ab88f6984b715ddeccf1fac44b2c2185277867f6d034392d1d4b830860517fcb7b3ab77520184213a0e0
- TLSH T12D511D2D40F51F79F08F588E55AA2392ABC3370DA41273FBC66DD94E2B4092F28D52A1
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\STHVCD.INI
- Size 786B
- SHA256 e78ef5404d3f7b9bb2c34d0baf2193bbddcfc203fc54b08fe6306fd255c6ccbe
- MD5 be92bbff7d82e74f4367b4ee8dcf115e
- SHA1 2f7b24cc4f9172bb98afd74ea9ac381c3f7a0b3b
- SHA512 d128f466593eeedf25df8f31eb3a3703b2da5c6b3f685e7ab0693871f2e39c086421b67ba326f22c37d5ccc194ceaf71086f40946f2182c71c5764e32d7eaa7c
- TLSH T1FA0190BF139E888C79B9642276FD4F85B1F97451179DB290A5B3D4321F4254DC088F41
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\STHVCD.INI
- Size 993B
- SHA256 0b1ea13b46031510e27ac7f1929178a2ecd6b70c13723f7f27c4d29b6717fb2a
- MD5 9f1a814197a8eb92a2cb334c2d66a09e
- SHA1 d8fa57f06acaef19c4cd59f98f6c6b1e43577e15
- SHA512 de7681e31bd02824acfcec3b1caf0a79e0f7715b9cbafaed10bbb33dea06a47e6c7060ac139247d0dc8d40d808e74a011f9cdecd21e92ac30cd63765018201c4
- TLSH T1B4117D7F139E84CC79B8282276EE5FC9B1F67452169EB290A5B3E4321F8164DC088F11
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\STHVCD.INI
- Size 1KB
- SHA256 2c9df96ced58c2223d08d78e335ad68549e6756161500c4be0c82fb7ff78ad75
- MD5 f5260ef8e00b728a3ba0bb43e4c71f14
- SHA1 b633073e83d7b326bfa8b95ab4207395bb2085aa
- SHA512 839c3373bffd8869b56e47c892477a5f10440f1400695ddbc22024b04c081e45d9443be3493ddf0b98de93d6136f93f86b400265cb81e74f83882401907329a4
- TLSH T132218CBF535A848C7CB9273276AF9AC9B1F570523569B2D097F2A4360F9265FC088F01
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\STHVCD.INI
- Size 1KB
- SHA256 2f4d3d5aa497e6d4ad1ebeec59faaab6590b21abcfb94b0cf029c4889cc90ee9
- MD5 1e9d4635a3a41613915fc5121454f07c
- SHA1 476b605d0564d51213ef8dd4f51e300ab4cd895c
- SHA512 530547ac07044088ed5a368a259bcb6abbfef27c9c6936d5df35d4a1b1fe7ff0f2a2f7015877d474b6917fcf414c4d922b6ff4b1859c0a8681ab5352507972f4
- TLSH T18D41007F836B859DF8BC2323B29E49C96BF1B611746CA1E097B1D4254F4960FC0B5B00
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\STHVCD.INI
- Size 1KB
- SHA256 731198ad645b67636d32159226bfae80437dc835201e565bddb8812a1787628b
- MD5 fd0d136ab07692f95aba6b6aca858253
- SHA1 3461afd18c56088604fa2a28fee7c9130f8d665a
- SHA512 848a94029de997e746e438e4d9d5a732f124a2a4a6110f483016a80424ca585f0f7a9ccbea1ac29106482011cd374a4cbfc92cd3330aef9cf9ef88ab076773eb
- TLSH T13F41027F436A858DBCBC1323B69E89CD7BF5B111756CB2D097B1D4254F4961BC0A8B00
- MD5 SHA1 SHA512 TLSH