# Verified Software and Package Identities — Spectra Core

> Complete reference of Spectra Core verified software identities including applications, LOLBins, LOLDrivers, steganography tools, hacker tools, and frameworks detected during file analysis.

# Verified software and package identities

## Application identity: Software

|   |   |   |   |
|---|---|---|---|
| 7-Zip | Adobe Flash Player | AnyDesk | AnyViewer |
| BeyondTrust Privileged Remote Access | BeyondTrust Remote Support | Bonjour | CCleaner |
| Foxit Reader | Lansweeper | LogMeIn | Microsoft Lync |
| N-ABLE Take Control | NetScanTools LE | NinjaOne | PsExec |
| PuTTY | PuTTYgen | RealVNC | Remote Utilities Host |
| ScreenConnect | Skype | Skype for Business | TeamViewer |
| Total Network Inventory | TShark | Wget for Windows | WinRAR |
| WinSCP | Wireshark | Zoom |  |

## Application identity: LOLBins

|   |   |   |   |
|---|---|---|---|
| advpack | atbroker | bitsadmin | certutil |
| cmdkey | cmstp | control | csc |
| cscript | CtiIo64 | dellbios | dfsvc |
| diskshadow | dnscmd | eneio64 | esentutl |
| eventvwr | expand | explorer | extexport |
| extrac32 | findstr | forfiles | ftp |
| Geotest HW | gpscript | hh | HWiNFO |
| HwOs2Ec | ie4uinit | ieexec | ieframe |
| infdefaultinstall | inpoutx | installutil | makecab |
| mavinject32 | mavinject64 | Microsoft Workflow Compiler | mmc |
| msbuild | msconfig | msdt | mshta |
| mshtml | msiexec | netfilter | netsh |
| nltestrk | odbcconf | openwith | pcalua |
| pcwrun | pcwutl | powershell | presentationhost |
| print | psr | qmbsec | Realtek Port I/O |
| reg | regasm | regedit | register-cimprovider2 |
| regsvcs | regsvr32 | replace | robocopy |
| rpcping | rundll | rundll32 | runonce |
| sc | schtasks | scriptrunner | sctasks |
| sepdrv3 | setupapi | shdocvw | shell32 |
| syncappvpublishingserver | Sysinternals AdExplorer | Sysinternals Process Explorer | Sysinternals PsExec |
| Sysinternals PsExec Service Host | syssetup | url | verclsid |
| wab | WinIo64 | wmic | wscript |
| wsreset | xwizard | zipfldr |  |

## Application identity: LOLDrivers

|   |   |   |   |
|---|---|---|---|
| ActiveClean | ADV64DRV | Advanced SystemCare | AEGIS |
| ALSysIO | AMD OverDrive Service Driver | AMD Ryzen Master Service Driver | AMD uProf |
| amifldrv64 | amsdk | Anti-Cheat Expert | Antidetect 2019 Public |
| AODDriver | asas | AsIO | Asmedia PCI Driver |
| AsrAutoChkUpdDrv Driver | AsrIbDrv | ASRock IO Driver | AsrRapidStartDrv |
| AsrSetupDrv103 Driver | AsrSmartConnectDrv | AsUpIO | ASUS Kernel Mode Driver for NT |
| ASUS VGA Kernel Mode Driver | ATI Diagnostics | ATK Generic Function Service | atlAccess |
| atomicredteamcapcom | ATSZIO Driver | AvalueIO | Avast Antivirus |
| avast! NG | AVG Internet Security System | bedaisy | BIOSTAR I/O driver |
| BlackBoneDrv10 | Bs_Def | BS_Flash64 | BS_HWMIO |
| BS_RCIO | BSMI | capcom | capcom2 |
| CDRTools | Chaos-Rootkit | CITMDRV | ComputerZ |
| Corsair LL Access | CP2X72C | CPUID service | cpuz |
| CT Access | CtiIo64 | CupFixerx64 | CYREN AMP 5 |
| DBK64 | DBUtil | DcProtect | Dcr |
| dellbios | dianhu | DirectIo | Driver_Map |
| DriverAgent | DriverGenius | EC tool | echo-driver |
| ECSIoDriver | EneIo | etdsupp | FH-EtherCAT_DIO |
| fiddrv64 | fidpcidrv64 | Filseclab Dynamic Defense System | Filseclab Firewall |
| Fintek PCIECOM | GameAcc | gdrv | Geotest HW |
| Getac System Service Provider | GIGA-BYTE Software driver | GLCKIO2 | GPCIDrv64 |
| GVCIDrv64 | hidetools | Hostnt | HpPortIo |
| HW | hwdetectng | hwid-shifter | HWiNFO |
| HwOs2Ec | HwRwDrv | inpoutx | INtime |
| IoAccess | IObitUnlocker | iomem | iQVW64 |
| irec64 | iscflashx64 | jokercontroller | kbdcap |
| kdriver | Killer Traffic Control | KProcessHacker | Lenovo Diagnostics |
| LgCoreTemp | LHA | libnicm | LLKD |
| Logicool Webcam Software | LogMeIn | Low-Level Driver | Ludashi System Driver |
| magdrvamd64 | mapmom | Mhyprot | Micro Focus XTier |
| MiTAC System Service Provider | MsIo | msr | msrhook |
| MTA San Andreas | NCHGBIOS2x64 | ncpl | NCR Corporation Hardware Manager driver |
| netfilter | NetFlt | nicm | nscm |
| NTIOLib | nvaudio | nvflash | nvoclock |
| OpenLibSys | otipcibus | Overclocking Tool | PanCafe Manager |
| PanIO Library | Paragon System Utilities | pchunter | PDFWKRNL |
| PhyDMACC | phymem | Phymemx64 | physmem |
| piddrv64 | Pinduoduo Secure VDI | Port Contention Driver | PowerTool |
| Process Explorer | Proficy Machine Edition | ProtectS | ProtectXPF6 |
| ProxyDrv | qmbsec | RadHwMgr | RawDisk |
| Realtek IO Driver | Realtek Port I/O | rentdrv | RTCore64 |
| RwDrv | Rzpnk | Samsung (R) BIOS IO driver | SEG Windows Driver x64 |
| SelfTest Data Collector | semav6msr64 | sepdrv3 | SiSoftware Sandra |
| skill | smep_capcom | smep_namco | softEngine-x64 |
| SpeedFan | stdcdrvws64 | superbmc | sysconp |
| SysDrv3S | SysInfo | SysInfo Detector | TdeIo64 |
| TdkLib64 | test2 | tfbfs3ped | titidrv |
| TmComm | Tmel | Truesight | UCOREW64 |
| Unlocker | VBoxDrv | vboxguest | VBoxMouseNT |
| VBoxTAP | VBoxUSB | VBoxUSBMon | VirIT Agent System |
| vmdrv | VProEventMonitor | WCPU | wfp_WIN8 |
| Windows Vista64 Smart IO Device | WinFlash64 | WinIo64 | WinPhlash |
| WinRing0 | WiRwaDrv | WiseUnlo | wnbios |
| wsdkd | xjokercontroller | YYProtect | ZAM |
| Zwuqi System Driver |  |  |  |

## Application identity: Steganography

|   |   |   |   |
|---|---|---|---|
| AleXa Steganography Tool | Anubis | BMPSteg | CameraShy |
| Camouflage | CenoCipher | Cirx08 Steganography Tool | Clotho |
| CrypSten | CryptaPix | Crypton | Crypture |
| DataStash | DeEgger | Deep Sound | Dound's Steganography |
| DriveCrypt | Encrypt Text Within Images | FileStegano | FontStego |
| GifShuffle | Hexa Stego BMP | Hide In Picture | Hide'N'Send |
| Hide4PGP | HK BMP Steganography | HK MOVIE Steganography | HK WAV Steganography |
| Image Processor | Image Steganography | ImageHide | Invisible Secrets |
| JP Hide'N'Seek | JPGRAR | Kasludo | Magic Cipher |
| Mimage | MP3Stego | MP3Stegz | MSU Stego Video |
| OmniHide | OpenPuff | OpenStego | OurSecret |
| OutGuess Rebirth | Puffer | QuickStego | Red JPEG |
| RRMS Steganography Tool | S-Tools | SafeBit | SecretLayer |
| Shade LSB | Shainy | Shusssh! | SilentEye |
| Snow | SSuite Picsel | Steg | StegaMail |
| Steganifyer | SteganoDotNet | SteganoFile | SteganoG |
| Steganograph X | SteganoPic | Steganosia | SteganPEG |
| StegHide | StegoTC | TextHide | Trojan Steganography Tool |
| Ultima Steganography | Virgo Steganography | wbStego | Xiao Steganography |
| Xidie Security Suite |  |  |  |

## Application identity: Hacker Tools

|   |   |   |   |
|---|---|---|---|
| Acrylic Wi-Fi | Advanced IP Scanner | Advanced Port Scanner | Airbase |
| Aircrack | Airdecap | Airdecloak | Aireplay |
| Airodump | Airolib | Airserv | Airtun |
| Airventriloquist | Amap | Amass | Ammyy Admin |
| Angry IP Scanner | ArpAttacker | Arpsnmp | Arpspoof |
| Arpwatch | Besside | Binwalk | Bitlocker2john |
| Bopup | BrowserPassView | BruteForce | Buddy |
| Bugtroid | Calc_Stat | Capinfos | Captype |
| CeeInject | Chklastlog | Chkrootkit | Chkwtmp |
| Chntpw | Cprepair | CrackSearch | Cryptsetup |
| Cupass | Dirb | Dmg2john | Dnsspoof |
| DroidSheep | Dsniff | DSploit | Dumpcap |
| Eapmd5tojohn | Easside | Editcap | EggDrop |
| Embryo | EquationBrokers | Essential NetTools | Ettercap |
| Etterfilter | Etterlog | ExploitScan | FaceNiff |
| Famaster | Fcrackzip | Filan | Filesnarf |
| Free IP Scanner | Geckodriver | Genmkvpwd | GFI LanGuard |
| Gongjitance | Gophish | HackAv | Hashcat |
| Hccap2john | Html2dic | Htsserver | HTTP Proxy Scanner |
| Httrack | Hydra | Idl2wrs | inSSIDer |
| Integritysetup | Interceptor | InternalMonologue | IPCCrack |
| Ivstools | John | JuicyPotato | KeeFarce |
| Keepass2john | Kekeo | KeychainDump | Kismet |
| KKFinder | KMSActivator | KMSAuto | KPortScan3 |
| Kstats | Loic | Macof | Mailsnarf |
| Makeivs | Masscan | Mergecap | MetaSploit |
| Meterpreter | Mimikatz | MiniStumbler | MiTeC Network Scanner |
| Mkvcalcproba | Mmdbresolve | mRemoteNC | mRemoteNG |
| Msgsnarf | MyLanViewer Network/IP Scanner | Nagios Discovery Tool | NBTScan |
| Ncat | Nessus | NetBScanner | NetCrunch Tools |
| NetScanTools Basic | NetSpoof | NetStumbler | Network Scanner |
| Network/IP Scanner Shared Resources | Nexpose | NLBrute | Nmap |
| Nping | OphCrack | Packetforge | Pcap2john |
| Penetho | PortScan | Procan | Proxytrack |
| Prtscan | Putty2john | Pw-Inspector | Pwsh |
| Racf2john | Randpkt | Raw2dyna | Rawshark |
| Reaver | Reged | Reordercap | Replay |
| Sadstrot | Sampasswd | Samunlock | Samusrgrp |
| ScanLine | Sharkd | SigZero | Sipdump |
| Slitheris Network Discovery | Snifftest | SNMP Scanner | Snort |
| Snort2lua | Socat | Socks Proxy Scanner | SoftPerfect Network Scanner |
| SolarWinds Port Scanner | SqlCrack | SQLTool | SshBrute |
| Sshmitm | Sshow | Steghide | SuperScan |
| TCP Port Scanner | Tcpkill | Tcpnice | Text2pcap |
| Tgtsnarf | Tkiptun | Trufflehog | U2boat |
| U2spewfoo | Uaf2john | Unsecure | Urlsnarf |
| Veritysetup | Vncpcap2john | Wash | Webmitm |
| Webspy | Wesside | Wi-Fi Scanner | WiFiCrack |
| WifiInfoView | WinCred | Wpaclean | Wpapcap2john |
| xDedic IP Scanner | xDedic Log Cleaner | xDedic RDP Patch | xDedic Socks System |
| xDedic SysScan | XHide |  |  |

## Application identity: Frameworks

|   |   |   |   |
|---|---|---|---|
| Chromium | .NET | .NET Core | .NET Framework |
| OpenJDK | OracleJDK | Python | Visual C++ Redistributable |
