txzy pasted paid temp leak.rar
- SHA256 ee811541b78da2bb8e60b6ec771e609cff7387fa39e1e469568a517f3724b6fe
Password
fucktxzy
Static task
static1
1 signatures
General
- Target txzy pasted paid temp leak.rar
- Size 889KB
- Sample260824-x54tpseg68
- SHA256 ee811541b78da2bb8e60b6ec771e609cff7387fa39e1e469568a517f3724b6fe
- MD5 34fde3335a173e48613aab5f2d78c8e6
- SHA1 0fa90adc8b3596b80e8a18c3e12c18a2e69ce769
- SHA512 4a6b7f90028b5dfb6cd750d5af9ecee8e3a236ac5fe53d6f9ab544ec294c8cedb909556037ff71ebafed053e6d6d335b506b770a521e9806ec0a197b7fe511bc
- SSDEEP 24576:LYkPjVxuVAFotagp265YsXEGgSY79q7fM0O:L7PjS3ag865lXEGTP7tO
- TLSH T1FB153348FF7608DD1240C3938C05A2C18EA910999DDDAC4FC6B5977DA2C6B45ACFA39B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/x64/Release/Spiritx Temp/temp_spoofer.sys unpack001/x64/Release/rtcore.exe unpack001/x64/Release/temp_spoofer.sys
File Explorer
-
txzy pasted paid temp leak.rar.rar 889KB
-
ReadMe.txt230B
-
Spiritx Temp.sln2KB
-
cleaning/cleaning.cpp3KB
-
cleaning/cleaning.h325B
-
core/core.cpp1KB
-
core/core.h947B
-
includes/IA32.h1009KB
-
includes/Pages.h14KB
-
includes/crt.h5KB
-
includes/debug.h386B
-
includes/hde64.cpp9KB
-
includes/hde64.hpp2KB
-
includes/oxorany.h19KB
-
includes/shared.hpp9KB
-
includes/smbiostables.h15KB
-
includes/table64.hpp3KB
-
includes/unload.h14B
-
includes/util.hpp17KB
-
includes/utils.h3KB
-
spoofer/arp.hpp4KB
-
spoofer/cachedmac.hpp4KB
-
spoofer/disk.hpp28KB
-
spoofer/efi.hpp8KB
-
spoofer/gpu.hpp1KB
-
spoofer/monitor.hpp2KB
-
spoofer/nic.hpp17KB
-
spoofer/pnp.hpp31KB
-
spoofer/smbios.hpp10KB
-
spoofer/spiritx.hpp1KB
-
spoofer/tpm.hpp15KB
-
temp-driver1.filters1KB
-
temp-driver1.user274B
-
temp-driver1.vcxproj10KB
-
temp-driver1.vcxproj.filters2KB
-
temp-driver1.vcxproj.user352B
-
x64/Debug/Spiritx Temp.tlog/CL.command.1.tlog1KB
-
x64/Debug/Spiritx Temp.tlog/CL.read.1.tlog6KB
-
x64/Debug/Spiritx Temp.tlog/CL.write.1.tlog1KB
-
x64/Debug/Spiritx Temp.tlog/Spiritx Temp.lastbuildstate200B
-
x64/Debug/cleaning.obj22KB
-
x64/Debug/hde64.obj10KB
-
x64/Debug/vc143.pdb252KB
-
x64/Release/Spiritx Temp/temp_spoofer.sys.sys 42KB
-
x64/Release/rest/Spiritx Temp.tlog/CL.command.1.tlog15KB
-
x64/Release/rest/Spiritx Temp.tlog/CL.read.1.tlog34KB
-
x64/Release/rest/Spiritx Temp.tlog/CL.write.1.tlog4KB
-
x64/Release/rest/Spiritx Temp.tlog/Cl.items.tlog1011B
-
x64/Release/rest/Spiritx Temp.tlog/Spiritx Temp.lastbuildstate299B
-
x64/Release/rest/Spiritx Temp.tlog/link.command.1.tlog7KB
-
x64/Release/rest/Spiritx Temp.tlog/link.read.1.tlog3KB
-
x64/Release/rest/Spiritx Temp.tlog/link.secondary.1.tlog520B
-
x64/Release/rest/Spiritx Temp.tlog/link.write.1.tlog1KB
-
x64/Release/rest/cleaning.obj22KB
-
x64/Release/rest/core.obj374KB
-
x64/Release/rest/hde64.obj10KB
-
x64/Release/rest/temp-driver1.log94KB
-
x64/Release/rest/temp_spoofer.sys.recipe416B
-
x64/Release/rest/vc143.pdb380KB
-
x64/Release/rtcore.exe.exe 143KB
-
x64/Release/rtcore.rar.rar 56KB
-
x64/Release/symbols/cd920ed1be89bd2217fbf6b19c6e3314.pdb915KB
-
x64/Release/symbols/cd920ed1be89bd2217fbf6b19c6e3314.pdb.md532B
-
x64/Release/temp_spoofer.pdb564KB
-
x64/Release/temp_spoofer.sys.sys 42KB
ReadMe.txt
- SHA256 803f40f4b07531a1e954be08983f7ee3d8b86c90294097a4389c081205d1afd6
- MD5 c056c93c9ff6d9424fd640a9383015e8
- SHA1 0e6696358f97ae7e7cb3a5c589fbbc156d45468b
- SHA512 e213f8918b3bb17b7a6a96033dcd15d369be3541199823f4331d719bdca9a3441816fe94f5c0b6986d629e746d8bd5f4424ea3e3ad6258b91fc951f4a2e4cf3b
- TLSH T116D0971A23223300802B33F9100486314B13012D7320808A7C0408E880A20E292B289E
- MD5 SHA1 SHA512 TLSH
Spiritx Temp.sln
- SHA256 4661c359630795d3d77d63ac1cb38dfb623f2b89ecc9469dfcbabb6defb8b574
- MD5 2ab3331ccd77f40b67446be1ad381191
- SHA1 b0bf20c3cc0e4289721e74b1137ae58d44f98c54
- SHA512 9a63a0f773ad56311ad980494fddf40e0566c613a18b9371772e480887167461bfb2e9e2bd89d11cc1a677434835ba077e0087cbbd8fa13ac744c26a4a3acffd
- TLSH T1B751596A211EA9B1B1C5122FC8BEE4A83F3FA78CC1958D3D5A4B385D353F504489F0D1
- MD5 SHA1 SHA512 TLSH
cleaning/cleaning.cpp
- SHA256 7159ed39505b6f90f06140b7175488bad4c4c0378b41167f8482736f9154ef5b
- MD5 46f2b5488cad4dab97d0a2ed8216c589
- SHA1 50779f9887f74205c08efd9c202cb0e1531869e4
- SHA512 3ecce56589071d6658f39e26ec05978a45ebf88b4928fe44c80ec8072094906bbe50ff94c656c00ac327c29124682e41cd34132ade64ebcf4c72ef2b1685aced
- TLSH T1E96173D95223640B5DE1EB7851F5A000FD9165B007B9D3ABB89DC3F266284AECDB309E
- MD5 SHA1 SHA512 TLSH
cleaning/cleaning.h
- SHA256 6e745bd5329f387f6b4bf350b12b4f6f868c5cc4f2e2ecafab246ad8a5398cde
- MD5 ab6ecac8612f669f3bbfa2f417b7f68d
- SHA1 a1c8f33940c64dbdee2b0e71c888e348582bbaf8
- SHA512 b4474db6bd7f10cad4cbb0832aa3b85042a4b79e6c8bd4db7df67e100e81ed766cb551b79093088775a7f2b71d2126a0c2af1a9d7aecb53c7c1529d321310a6c
- TLSH T16EE07D89B405730FDC574AF2020FF206F56450B0B2E475212C55D0F5E93220C8F3B535
- MD5 SHA1 SHA512 TLSH
core/core.cpp
- SHA256 6a1bddd9fa3173e930d3c2ff1f70ca73be51d77f6cc78b0198251d6dcbf87032
- MD5 0b9fc42dd8fbae5f257fd9e499beac23
- SHA1 352b0e1f77e9780b0a205bcd4d502bad46a6a302
- SHA512 a73f8e53e3aa553cb9bde557e783098d462a05e26f12d0b88d8bd1abb76d106556fe12219e1e7a85ec68a322339adda08334b60157e28708468f507b4f5249b2
- TLSH T1F9118C4CF82DDF2396B28D3A677714306984B2491B633554FCD2C7A1E7949CD019B29E
- MD5 SHA1 SHA512 TLSH
core/core.h
- SHA256 2f5acb86395e5295e58127b3eb5f483c39525f79a67f89a87b181da5aa9ede60
- MD5 31f19402b6429dc4648758d2bd7ace1c
- SHA1 690bb02563eac3f573d4b3b1483b89d4deee1cfb
- SHA512 0ec66ae8bb6a787e3680bf4e7d50b6a05017a632d2bfaadb43b8171ffef18826101536814b3e756b44d6f73847b0a3b5d6141bb85c535f235d577d042162641d
- TLSH T14C1110037D14B22FD9F2640672870C5E41C3E2927E738A94C002D3B1B27A54CA671746
- MD5 SHA1 SHA512 TLSH
includes/IA32.h
- SHA256 ff6d7e5d114eb83993fe0a0886e1dddb73841199594b784c92e95c981ca60a58
- MD5 28bb777d6e1243999cae5b6600405e9c
- SHA1 ea89522d4c4fc7a0aceb1be447b4a6bfb96102b7
- SHA512 20634ef3b5110b7cdbed27f88082b5883d2d21a31b30f53a57f13c9e71508c846fd1f24540c8793df210991c14215f3c543c4834497e00af6752781535097783
- SSDEEP 6144:SCC17JmCQVLSQfQlLb6CgV9yAX92Lxl4Ypgb4MxxlxwFZNQHbNui0x20f0Itxo9y:SmDOieVJVxdJt8rpFje2Jp1o
- TLSH T19F25964E1DD2329A247420151709A205E755FABF23E42AD939FD4E7D2F7072283F36AE
- MD5 SHA1 SHA512 SSDEEP TLSH
includes/Pages.h
- SHA256 3c5044afbe3d909fbe69186a668bc1558cfeace0775804176e755fde5cb2febd
- MD5 69b836cd9135ce3b373756c793b79bf1
- SHA1 f63ea47bf8520c9b20be0505834a122be909a292
- SHA512 a183194d16eb928cdec38b5e7e7fcd057e4cc12eaa0b0e6c8b2cd963f4f0e3d1bfe00c0d3a5d41dc29da1ee7b32e099758c7b3ad2d9e81084ed5bc5bdca74cb9
- SSDEEP 192:kxyF0YOxgNv2l17/VR1fH7vCAe1+nbMaTVcjIIduxetd9vAryp:bFOx9VRJLcaTGZAxEPoryp
- TLSH T1766275CD886720094E3366BDBF93450AEFB2952391615149BB9C86D02FB60B0D7F0E9F
- MD5 SHA1 SHA512 SSDEEP TLSH
includes/crt.h
- SHA256 d4d95cc9667e2b834fc244056aca00069812135ca9aceaf5c88f57f03fbd0f6f
- MD5 c5760bc93d25bf597a6a8f309266f8e7
- SHA1 ed02c45098a778bbcc7c7869d42c3cb343512035
- SHA512 d1bb30700ab95838d03e8721b87155fa225e534cf5b68c3e775f5e6ae28ba4339d4b3451bbd11cebad4728a91f123db01478063b482a813b0761ebef4cb007fd
- SSDEEP 48:4j7FRoEZEUA3NK1NJdIYxA3XXXxKPOBqWRwJKUCBF0RcFRh7Z5z:IFKE3lLIYxA3XXXxKPOBODCBFdtbz
- TLSH T170B1DC8855D3609547F753AA5F4B880CF70E845734E64AA4FE9EA264AF3D010C2B2F5E
- MD5 SHA1 SHA512 SSDEEP TLSH
includes/debug.h
- SHA256 c345c5429c8e774f48bba7cb71dfe86eb01c7e4755a3e76c4555602c910827f4
- MD5 192db8971cdd931f99a8b0cc9a9e8cd0
- SHA1 6a650ebfa16f6c08dba2d602bcfe5d98cc03d682
- SHA512 ebe6aa41e531d70e85fc4b22457f32ed409e545e53eed921803304d37c5fa89b449c110b08cceb94b6cef59af49d0c8e1a8da1a9c8e93543a068f0eee41a47c4
- TLSH T107E068C5D81BCE95AA13475B326E3E814BFCB01C31782C66A24B91D7B221ACC31A2378
- MD5 SHA1 SHA512 TLSH
includes/hde64.cpp
- SHA256 1c4c55343d14a5666a4f69c272330dbe80aedd86490c45ed12243eba87527062
- MD5 430a44fc88ebd644a2cf7cb73bb3fe6d
- SHA1 71716e1c43abe170dbcf0f54709114d2075cb26f
- SHA512 61ccf1454fde59cbc0cd0d6b48a7c026651dfba9064232a5f698a34785f19521f35ea58256a7e34ca36ad5bd6501720e71b881b21d6a605eeb63b624a82783be
- SSDEEP 192:YTaAxFFC9GgMNAHWs3/4QhptKB8POwMVEgmApEkVm8TWlRVHvlpy:YTaAx69GgMNAHWs3/4QhpQB8POwMCnxy
- TLSH T11112CB75446321A64936A73F9FC7D08DE77E5007836218363E9CC0A1FFB06A99AA4F31
- MD5 SHA1 SHA512 SSDEEP TLSH
includes/hde64.hpp
- SHA256 cf9a4db180914f9ccb4fc677ad0e99648a1d775af0e97fa57ee3fed6e82ca376
- MD5 50f0a7842d92ed44aae2195abb17930b
- SHA1 7479dd19d6aba0729f0acfdef3f05a1d3a8dc63e
- SHA512 a11274ec1aebf989c94762e7f18f3db1debd60178fe000b2b7ff70696e8542c8a8e88e077e625974ca27a45472db73fdaa0edd94d862fb875c57b1357b359bd3
- TLSH T14B518E9E1CC56402D2F228547BDE7020F094F5B395C6E8E9394C6C9CAF32C9CD8E26AD
- MD5 SHA1 SHA512 TLSH
includes/oxorany.h
- SHA256 b3c3f355edeb7eb01853d31875f1463c404d98b76784d157fa14965fa552a8aa
- MD5 e87de1d8b83c016d35a4919eb6522141
- SHA1 9f7cba75da7862e6141a216acd20840af8e6ccb6
- SHA512 cdc6de6da9f0bcd002bc567675d232c92ef056da9bf41c761f31d0992707a3872ddb3c52de831dca5be299be17e3424e5f84dd1862c0b389bba172bcaba5f6fe
- SSDEEP 384:Ey+ncpr27iV3XRQ898n5so2MZAtHsoJb6M5Gf:z+ncZXVRzaCojAKoJuyGf
- TLSH T1769296959CE5B4088D73A377971A8015E71BD12357948B94F65F82602F32822C2EFEEE
- MD5 SHA1 SHA512 SSDEEP TLSH
includes/shared.hpp
- SHA256 56381964eb91a0e90ef84ecadefc699a779f5736188a9ec096cca8102e01a73a
- MD5 356dedbe3c46fd7380f728763893106a
- SHA1 346f4b231f70a3c869140ba6db5a052c17946f7c
- SHA512 f80922ebec16d61c9af4f82d8e68197449879b1c481bad4e36e2a8e436345a74203d781e1d3a0649e99a846736082719edf5a9030beae469fce05b47bf94776f
- SSDEEP 192:FfXnPEpeCJpnWjgFNy23HOtiCA5E8We/jy6BIeoXb7xoNUahtoHhzUitoHCHz:F/nPEpbJpnWjgLy23HOAE8We7hBIeApx
- TLSH T1A722C7B0F28F612FEBE1555251F054C0DDDDC2281F3B98A9B8C782B0E02A559B3F49CA
- MD5 SHA1 SHA512 SSDEEP TLSH
includes/smbiostables.h
- SHA256 3ac7818515e716f324801968532ba1f3b23798b4c454d8733bddb907cfd21f7d
- MD5 b2ce386aeca410313b03f1a4498deeec
- SHA1 f9f0c4e70b59f689f5526869e27af70ef9b7b9b4
- SHA512 8600240716e28a71117735abc0f97bb372108dbd31e8f62e595a465f820f97d9b179eb3be7793c697192a0014e8e3f1d702ad0006921c1c51fe0d135713801a6
- SSDEEP 192:fuI+cmf70Wm4WEgAVtWvSBG6FjnsFKFbTHhs2haMf+F/ipmLhgDgGw:fH4WdAyCG6pZXHmHFwmLiMR
- TLSH T1BB62230179A8BA466491AD8765304145699FCDE3A0834EE6BDCDFE318F2D5A403DCFBC
- MD5 SHA1 SHA512 SSDEEP TLSH
includes/table64.hpp
- SHA256 bc919f0fe7629470d416a0fa790c5b729ef0538a6ac2eff6e7e55ee4dbfbb03f
- MD5 da1b2a19ab2b7cae056b6f1ab82a8c5e
- SHA1 da77755232446c9fd60f5d4f535684e4d3fea031
- SHA512 0091119746d9e1be3a5681d4905ac52da3d57b5d200859b4dee219f2639de66842bf5f290921084db71a9ce2e61bef40e72a09ff0de5e20e25f9e5cbe393ecef
- TLSH T11F717FDA39C03119D27BC7215789629544BFC61144C06C8AF5782FAEB5ECFE3B49A38C
- MD5 SHA1 SHA512 TLSH
includes/unload.h
- SHA256 aecb9819eb04bf5ad6cd2535cfac9b1bed5ef7946e551eff2224759862e16294
- MD5 ac61f8469d49ea745f868f758477499e
- SHA1 cadf9574dfb94e29670aa64c3896e11e85dbe714
- SHA512 2a42c66b4d42a480f371717744221e18677c017cfbd9cdc1e872a25ca1984d8b06b25c41ae15423bcb5569bbf1558d99f39c4ab36cf7291e7f7884c2262c2208
- MD5 SHA1 SHA512
includes/util.hpp
- SHA256 8eb6793358c0e7ae31749deb07888d35f795e00c612f89f8fd9788a64b343c8b
- MD5 951de931676c3a81d6d91c41fa5448c4
- SHA1 30968c2911a0ff75127df7fe7cffe4eefc0550f1
- SHA512 dd8c94b339ef34d3ce77466ad575b4fedae9cbc14336c7d2cf51aecb348541021066141694285fcbc61d85bc425e07ab90e160d768e8d3bd3b67fcc6904873ac
- SSDEEP 384:uSi13XDApzTD2rnGM90bRDKuMq5IDQ6jGK9W:uSi13XD8mr2bh6jGK9W
- TLSH T1C88283B0EB1AF0049C9B922613F18046CF7E79413521F59BAEC6C950F15AB29837B3B7
- MD5 SHA1 SHA512 SSDEEP TLSH
includes/utils.h
- SHA256 f4d20c20b4d84a1c5239f3138c4b0e8d620dabb9ade366505b8fd6101aa0c4b2
- MD5 2a96b57e9b6ee4e8f78d7326b1f8d25b
- SHA1 901f5238e737dbc8797d058a95d838bcb6a25fa8
- SHA512 a6365a297c2eba9b64097cf39a66867243c3a38ebcdd8df412bbd3456e181c6dd7cc372987620faa21b0f5d75911f2de683fafd8cfc2bd96fd8c8846352d962e
- TLSH T1ED71478ABC07A127AFA0320699B018ED8E98D62046375AE5F401C374B4995ADD5F97CE
- MD5 SHA1 SHA512 TLSH
spoofer/arp.hpp
- SHA256 8529e96ac486ae7696304a70762473ff4f64213e48a97cf1ab13a5f94842867d
- MD5 22c4624d590d0633dd73b9542e38080f
- SHA1 6f850742ac705bf6c473eb3e673f3b13b8159bc9
- SHA512 81058e0c8bfe5d776ca66d9671d9e352816105d94ae044e7b350022f3155f9ba10cc31ae190f8b673397fe7d6ebc72a03426608981ae5a5e41bd45935bc316eb
- SSDEEP 96:Qnaq/4gkkkBzS8kV1jUVWlSnt8nRhh+oSNHSM632PU4DPZP4nn+45A:ZwRz8k/4VGyGFPsf4nve
- TLSH T133B1A444B79CD34A9E94C16E2B78C81DCE6DE0316593A0E1F0CDDB61F3A9658CF224A7
- MD5 SHA1 SHA512 SSDEEP TLSH
spoofer/cachedmac.hpp
- SHA256 eaa268dbaec1691b4ac9ca29f2f72d13d3abd4eb55b47e3c7794231b31a43c9d
- MD5 806b1f8953c19416ffc4c169bd5254cd
- SHA1 de2a1212a5e45721251bbb8b77d9dd36b0cfae42
- SHA512 701f67d30e6b624b29d107ba084749392b1014b2aca81018c4f0d123588dc848749859915d350ec25ddf7bdf8c2adb9a907b004590872d56a3287b8f6c848d7e
- SSDEEP 96:ZUnYOd3FUzwUoiTMaNnFpCyvPLL+LYK24WbA/v1zRFhSoO669:gd3FpSpPLLv8WuzZo6g
- TLSH T174A1A704F3BC644BA2E16822F2B4C129CDBDFC520335A9D5F4DEC190E265135D7B9ACA
- MD5 SHA1 SHA512 SSDEEP TLSH
spoofer/disk.hpp
- SHA256 2be25b313bfe98dfb740295b0175192f3b7e92aa757480df2b2dae2c5ce1ed7e
- MD5 7072e8fc1f17b19748730ded597caa05
- SHA1 2d6112a8d35d70c5f343341660560de9f56483ee
- SHA512 8a5a6400de1944f15514633054b101bdb19e44b02adce0e47dc75549de252438f08ed9b4db47a8c96a591040c3f19c9e3130b76a43f571c6374dbec1b6d181ab
- SSDEEP 768:2QIObbcWUD09T6eR72RG0OiESJ4nRO8djB7icQ+bReUWVyndAMQeXr7Gi2xw3O8Z:J+eXr7Gi2xw3O+
- TLSH T198D20B61376CD28E6603333E39360966D81EE0376211D8FEC851D6D9E8F98449B64EFB
- MD5 SHA1 SHA512 SSDEEP TLSH
spoofer/efi.hpp
- SHA256 1e535a882e61a4a3f87128da7ea4ba9f53742479601842f4f5c24daebabc0b26
- MD5 f02a9b933d355c1f92979fce3f4bc4ba
- SHA1 a6fcd45e491a18d7dd63ba845852e8a24956a8d0
- SHA512 f5a6075968858aef58ec149bf23a94582aa1bb6cfa777f8cc27f6ef01a6879b9394e6c050874ac5ea95f34dbdd488b7fef670d758d24ff416ca86c5e6622f0b0
- SSDEEP 96:ZUnYZqTOUOSa2J6W8P4KLUUouDt9VGsQMCQuhMjjANM8VFzMR:b7SavW8P4KgMBPGssQjAdvwR
- TLSH T188020061F72C029EA7E01A1B1478243CDC2EE595E22794EAD4150B35F05DF1CB2EDAEB
- MD5 SHA1 SHA512 SSDEEP TLSH
spoofer/gpu.hpp
- SHA256 fb64732106c2a2d1a2e703971d55815cf6d5591bc475567570b575a90f7cf171
- MD5 72e6476e6f5240919282ccc7c66d86c1
- SHA1 d1fee4678639fcde6bd803b1b79c09b344377816
- SHA512 bf6d80bc10ecdd00675039bd76a93b5d87bb33d15085bac458b2ed418bc608644bd5bfe7b8b4b4bfa0b56d22feda73143144699fc3f6876eb0f2eb1a0df46345
- TLSH T10A31CF80FB0D4D0625B292B216B5A01ADC9DE14002D5F7A5FC7882EAF3622CB976F775
- MD5 SHA1 SHA512 TLSH
spoofer/monitor.hpp
- SHA256 3032eabf5f973875945474b0a614633c153ff66d8b84178fee63d58d8aa394fe
- MD5 32baed2ca3b62c407704cd99d695046a
- SHA1 78f19ffeeecdc73f58635aa682cdcf579dfd64ee
- SHA512 6cd9b6550b5a1121d7054798c76a9e7d28b146c6a863b6d9e89971632b3e544d7c68f3f65124d8c6d251c6d1f14f68e53d233fdd4879498aaeafb422a6256712
- TLSH T1CA41B001726C9ACBD661793914379D26FE9DF44123B7E4C18020E6F4F066A5DD31B672
- MD5 SHA1 SHA512 TLSH
spoofer/nic.hpp
- SHA256 c4fd8ada1d16a3163d64d54980e73ffe412279b0f276564082b4db7b662d9807
- MD5 479db6fe1512f6e97032dd5bbc0a55d9
- SHA1 4537343e5820fa715bbe8eef3aa0fd4f6041d7d6
- SHA512 0106a0829191cbe593b066557ec312121eb57d3852a48d458166d4778254380d96e10b899bc08424a1b0a1908d477a6716b9b650a4fdfdecb39359ce71673b06
- SSDEEP 384:qXHomMHeu3SoGVSFWIUHfCdygCdy0DC5gabKb8aCv8YNv:qXEz9FV+CAgCA0WKAv8W
- TLSH T19582C604F71CF24A91D1101A7B72C90CDD6ED0B0122994D6F8AEE6A5F1FD464CBB61EB
- MD5 SHA1 SHA512 SSDEEP TLSH
spoofer/pnp.hpp
- SHA256 4b38c8ebc77206f8f3a209680f97f549191580f80b24914f5bd822aefb57554f
- MD5 b991a9a4bd0c8812609dbd47a4a2a484
- SHA1 aad5d5b5311ca42aae4f800acb541b6026d2fe0b
- SHA512 2ff0ecbc6b5f65cd849a78a7d78004ee44a0d1f44f0bc1cd1086202a2d355c937fd432118222404a0474456c8eb4eebdbff8a8c8ef75967cbebab2a622d74c4c
- SSDEEP 384:dkNaoRccVzUMavKi+lDdBRDeL3DbWh3ieuKm7amOiqmUzUfuUlIK:aV39m7pOOPIK
- TLSH T1AEE29455730C74065F730A1CBDB11516ECEFF0A482BAA0FEFCEDD294E0A815997A1AE1
- MD5 SHA1 SHA512 SSDEEP TLSH
spoofer/smbios.hpp
- SHA256 a63bf8d967ca0e7ca116b2fa8d829707f2f819a4f582244371384cee6ef75797
- MD5 fbbc458b40609961ec84a10f3d7dacd2
- SHA1 1f0ff50812e78bb185f1508ead4cd3d17c5f7737
- SHA512 cdb765dde0c849f6c28f0bdc8e06a49c750aeceea3a65fee9ca9307208350e817b4a22e6f8f7731caa3d4b682f0e49cc924b13e2dc7520ecb4278734a2b1682b
- SSDEEP 192:a2odzfjZDjOTIKbkPMf5Rk4YfC+f7N56ZsfTfPXfAExf/H/PNkf/jtAfF056A0xy:rodzZJKbkPK5FYzSs7Hxdk5AQ0xgSW
- TLSH T139227390B31EF01E8540122BE030917BC82CD73561B3B9F5F9869656E5F6A68D3ACBD8
- MD5 SHA1 SHA512 SSDEEP TLSH
spoofer/spiritx.hpp
- SHA256 a3e834afb99c9954f18107ca941eb4ef677343bb6e1c61e2d43c68ae46a55af4
- MD5 0f466bd58daad723abad0772796da70b
- SHA1 8fe8b69aecfd419d0f9007e2f2ec3cc0dfe05b0f
- SHA512 fa5c57bfc7de3d48b637230a914f4e5f736267ccd41a9a7c0f5ba22abe7cb6e1634e321860962f5900737354980a6fd61dfce1b0ed32e9453a52ea3c1d9145b5
- TLSH T183313A0CE5BD2B2BD6E90E67B53994355CD8F50013B624E68CB9C780965610967CF2CF
- MD5 SHA1 SHA512 TLSH
spoofer/tpm.hpp
- SHA256 621971279d4e03a7ae269e267df590e2699e12e922776ac3be3377d0509de03f
- MD5 23a75635a6921991e17860c4ddd4ec1f
- SHA1 033e8d3c4bb634b95da897d79b1d2a2c2ad0f6bb
- SHA512 4e4fef7d73463b1faf9de09184de00442bb3b8e7ec087b57dda1dfad3abc9b0be739e879d4486a8aa3011eab59ea6871b52032e6bc6571bb2beafbc7bf3837ca
- SSDEEP 384:mJ+58ZFGf51EUIamaMAybhW6fJuJeMLQTRZRW+d:mJ+5Pj+W4ue1zW+d
- TLSH T14A62A6E5BB4C658D529024631532881BED8FF88213B7C4D4B85CA779B3F8460E3B57AB
- MD5 SHA1 SHA512 SSDEEP TLSH
temp-driver1.filters
- SHA256 970b2149463e0bb9b159c77dfd8dd55be0d86eceb266246a9d2542ab017f08f2
- MD5 9ae26a282b7a2bfe906cc32b8b5ed0a9
- SHA1 88244cc73c36466b6d902aef0ab540d66f197987
- SHA512 d4c5d1d1b731431e277502e14a2684d8082bdaff7c90df891319f95517446d4eedf5048da27adafb107acb2f47f2a04b78a6a635c224d71983ac37df7ccaf413
- TLSH T17C31A020D9EC1F996132496BF691CC50EF78B3E36086010976ACE5877FB3208D22B39D
- MD5 SHA1 SHA512 TLSH
temp-driver1.user
- SHA256 07266f4866de425d0c27fd0d1ddc79c5b7e8ae641851702f7ec3e0ca0e54882b
- MD5 6dcf38626ab3e3b94f1d94e1bd8cf477
- SHA1 b4fbdf08e450475168a388363b2f171602a177ac
- SHA512 f31bc707ec98b830d9276b172d82a1a7edbb097186073ab198d946140203a21174c496d0892b4ba044be8e8a28b26004207e69a8edff7f136c7896a7342d0fe4
- TLSH T1BED02B424180A812A1BA893592D994A4E3B172A308F048ACF6E9911D121B0552013722
- MD5 SHA1 SHA512 TLSH
temp-driver1.vcxproj
- SHA256 3f471f4bd62536bab14d20681de225869c374e2d88f8f45289aaddae82430027
- MD5 ef6389e47790961dfcd48ba8b792e87d
- SHA1 805bc9eb320bc886dd05824334a259eb205c9649
- SHA512 d720919b2ad69294b1ba8695b4ad4b5f9a741996969479676004e2867db6907d56135dbe2b95f4c7aedb283c98d9b37fdbc1a4dd0700fcac4a6c335f6bce6ea4
- SSDEEP 96:t0/zc7R3bzlgnGo2cfN2ZNZ8vZFyYZe7DZaZjVZBeZ/yaLDmfQyVpMnpXHltG2BL:i/zc7R3bef2cZJZe42BJsE
- TLSH T1DE22A899F5FC1D6A92B34227E1C7A984EF30638305665C5CF69EA357AB7B04C2203372
- MD5 SHA1 SHA512 SSDEEP TLSH
temp-driver1.vcxproj.filters
- SHA256 b04d475a4a7612f50c5ab86aec9194239047f0decc5241df716034035fa309ab
- MD5 65c9ee6a0cced2d372df6b1f9761a825
- SHA1 27620533ab10ad634d3a6f59374645ad6b1198f0
- SHA512 e5894da10602ed5bcda4bf8f7dbd9b8587288534878bd33f65b9021797f383f3d4cefec9dc83888325f2fa46287902606d6bda8953fe857834f7a94ac27e8194
- TLSH T12E51C621E5FD1EAC2372087BF146D60AE91A73F361811508729865C7FFF760CA267359
- MD5 SHA1 SHA512 TLSH
temp-driver1.vcxproj.user
- SHA256 182f112652e4a227f9f7f680eb5eaadb5d8a08c4b827c8aa73eb2bfc3e3a506a
- MD5 0428d43708f6b3c6b0617eccb724476f
- SHA1 67fd6ef265c310a22e6fd04f9694076eb7bd83c6
- SHA512 3413d0eaaedebbe90f04b23b036e25de0be5809e804b111658fcc9aaded91a813485f79da1155ab9d113b2ab4a6156781c4a45779b9479ec9b7adf7aa14281ff
- TLSH T168E026114180B82171BD8A35A2D998A4E2A1E2A308F10C98F7E9E20E122B0196007773
- MD5 SHA1 SHA512 TLSH
x64/Debug/Spiritx Temp.tlog/CL.command.1.tlog
- SHA256 9686ca44f20e88f9901d80159865e70f2e6d2f3ad1b4898c8ab9dab8d4e80283
- MD5 31e0b0383e029240c6d8a3106651a8c0
- SHA1 f0ad3e5473432bab839a5dd697b08bc3359f4f6b
- SHA512 130247a677d40ac7662d10c29bb8c02c651c1ebba6b5bcb391ef229ba234370af7fc4e9148764de75196d182e062c0190fbff9aa41574a58b5da55f578ba326d
- TLSH T150212B1035EC610F6372BBCE9FEBC48F85B8B6A95A37462E0170434B4A71E01DB11B36
- MD5 SHA1 SHA512 TLSH
x64/Debug/Spiritx Temp.tlog/CL.read.1.tlog
- SHA256 7b0e630c84e85713cc9a848a55760f8acf652a3b7200848ba29513ef467bb5bc
- MD5 9ae296f3046752820580bf190c3114d9
- SHA1 4db035cddf84f07c7f12c361eda3f677b247563c
- SHA512 5d0c4033862f41d757e43446eab6ebffe01bb27d51c215bcc072a9fc18d91043a1c341f7c78fe45f1f5055464a6a0d13a9d82e859cfd8777d90f913de39d5a39
- SSDEEP 96:MyjHLXO3WdMmJdvwmJZmJUosesqCqOu2Y8ssHxAfXnnAtr7XPr/MFr2ieJg1k/iO:JVT1rD/WRc
- TLSH T17CE1072870EA17481323B6C39FC7E59BD222A2A8D77B53AF25D003430351A125E96FBD
- MD5 SHA1 SHA512 SSDEEP TLSH
x64/Debug/Spiritx Temp.tlog/CL.write.1.tlog
- SHA256 08d6e66953b41295e0dd56d67a6d757dc12f254395c7ebd890815be6d6610769
- MD5 8b41ffe3ca22fa5579cc075215e4d26f
- SHA1 8b3bc5dd8b16fe8e2df7af1e9b8b8a9c915a6f15
- SHA512 670f71b7ccc61d64bcb4ce63ff31ebe6dffabd7312240984f0111e369c17d7d9894daff9d7e25cb4f034cfcde6eb9b5f688d6c068c8ea235a61888044130aed6
- TLSH T1A521EC2274E5A58A0727FFE35FCFEC99D6B5E6F5D70B033B00649123A780A11C612A72
- MD5 SHA1 SHA512 TLSH
x64/Debug/Spiritx Temp.tlog/Spiritx Temp.lastbuildstate
- SHA256 8c705e5befecd37a13f73663fbdb0ac3737f799958924020e7885759fe4a8c50
- MD5 215c7ee1acb0e2ca748ab1a4fefb105e
- SHA1 17e65ae205bc764f4b7c5a47775a5e2d8e713165
- SHA512 4fbcb9b01a787f86365f9f7f3a1fd15e424909998d31fdd29e6c05522e826d6e7e21ee2d0b2b2162be77e3c71d5c7f8cf8b4bcd0a305f7ba68e81fb936751ac3
- TLSH T1F2D02202F27899B06433A90A94E5404E93EC1262A915B14C2D881B181F4EA0800C23B3
- MD5 SHA1 SHA512 TLSH
x64/Debug/cleaning.obj
- SHA256 2386dad06f800bea74d915b307e7e9a1817917d3276e3460652e4d3b1675ef30
- MD5 e9fae4a8a59300055990472bdf5924dc
- SHA1 1b9c864c0d9f96ffcfcefaba8cfe02af6659b805
- SHA512 597f05061a358d1b76ec7b387f884aed3a1ee1f859b7a755409beefe9983fed856bb4fd05edb39f63feac5ba619827861953873f139905fd2df821a422b1dca3
- SSDEEP 384:6Y+V+yzkhzh4kiPgJsg/O44H/xYXca5fRkEwYCW9YfOubhckFVGF8+5R:6hfEzhZ9XcGEO+OkF8FH
- TLSH T1D6A21A06F51A8E44FA26C979B2A7890DB390FA27B65B5303239DE193FDC33117A5F091
- MD5 SHA1 SHA512 SSDEEP TLSH
x64/Debug/hde64.obj
- SHA256 b220ece878d1974df57fa798256e0b1b39cc7de4e2e3d4bb5d567ba9c54bf357
- MD5 b8c1570a6ca1caf4dd645b81c5d8f673
- SHA1 d837c461da2a15e219083785a76f184721fa4e30
- SHA512 24f3c4e8131fe1cdd4a34c2ee485f85481f51640a4d2c6775a744d1252df108388405b853a0498460412ccddc54485034651cb0c8b40e9a805f2d75e61d0be11
- SSDEEP 192:sPk9xhawp6uA4u2ZBSV/G8LdrsnKoFum/uiomq+HJZpmoSgZnD/cF:yk/hawp6TtxGodsK/2quJZpvS4AF
- TLSH T1FD22A406EC98C651CD29803493A74D3D33A4E94D5E8DC3436B8DA13EFDC62556A8E27D
- MD5 SHA1 SHA512 SSDEEP TLSH
x64/Debug/vc143.pdb
- SHA256 08195dae65fa7cd497577b9e630f8f95bde0c83617f0defba3c133b1b6e41265
- MD5 3b63b2291b0cb9c6e6adf9a3c3bb5fa4
- SHA1 47e6a0ae5f34c3942206ff15e6780ba92d3a3925
- SHA512 0eac6c2d427f8619383911394d7c4a40fb83f7e03c487d916970b6ad2d8d1b910b2083a5fd5cde2a2aff9ad2ce2fcc9cdf7dd4b6500af58908993fddfc61a92a
- SSDEEP 3072:5loNIoeEwulE3IWVePBiEEtLGU4rze93bVBsvbIBsm:5loDexkE4lPBiEKiU+ze93bVBWbIBB
- TLSH T174449735BE107DA3E8BF0A3DA9C11110262E1FC1ABDDC7D55A407B7684F76B09A38B52
- MD5 SHA1 SHA512 SSDEEP TLSH
x64/Release/Spiritx Temp/temp_spoofer.sys
- IMPHASH e37e8d157b2c97704cd0b54acbb575ad
- SHA256 dfa481e9bc17ac303c20f9d839cf28b54c8722d373a83120c625bfc4f433c02f
- MD5 70ca134973e54d841c84078b1614998a
- SHA1 e692867091bd013f6c380cee48b873665e71568a
- SHA512 eac2b2d8ef1d74d7a6ecc5e8e73c53d9dbe073f557c0ba8a4ec87f7feb67351ca43a35db98a69a5f86ad273976e64d2172cbefdb4ed2b6441a4f48ca3560a6a1
- SSDEEP 768:eHFFq/52QwnLsnz1Nta4+ZhCPt9kg5KxZVPpOklup5jX+pr/z3sTGan8Wgm:osn7ta4yitqVWjiBan8Wgm
- TLSH T1F1136D7AB2A518E4E3918278D9211526D7F2F0542321D7EF53A1C628AF33BE02D37BC5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
27532
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Clix\Desktop\Pablo Emilio Escobar\Desktop\Dev\Desktop\Kernal\Desktop\Yizuz\Desktop\Yizuz\Documents\Hyperv\spoofer\Spritx\Spritx Spoofer\x64\Release\temp_spoofer.pdb
ntoskrnl.exe
ExFreePoolWithTag
ZwQuerySystemInformation
strlen
islower
isdigit
toupper
tolower
RtlInitAnsiString
RtlInitUnicodeString
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
DbgPrintEx
RtlCompareMemory
KeInitializeSpinLock
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
KeQueryTimeIncrement
ExAllocatePoolWithTag
ExGetFirmwareEnvironmentVariable
ExSetFirmwareEnvironmentVariable
MmProbeAndLockPages
MmUnlockPages
MmMapLockedPagesSpecifyCache
MmUnmapLockedPages
MmMapIoSpace
MmUnmapIoSpace
ExAllocatePool
IofCompleteRequest
IoFreeMdl
IoGetDeviceObjectPointer
IoGetDeviceInterfaces
ObfDereferenceObject
ExUuidCreate
MmGetPhysicalAddress
MmCopyMemory
MmIsAddressValid
RtlRandomEx
IoEnumerateDeviceObjectList
_vsnprintf
_vsnwprintf
ObReferenceObjectByName
__C_specific_handler
strcmp
wcslen
IoDriverObjectType
IoAllocateMdl
strstr
hal
KeQueryPerformanceCounter
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=259, version=33145,
count=1, id=260, version=33145,
count=5, id=257, version=33145,
count=64, id=1, productName=Unmarked objects,
count=3, id=261, version=35222,
count=1, id=258, version=35222,
x64/Release/rest/Spiritx Temp.tlog/CL.command.1.tlog
- SHA256 646e1725fa0732a1348c73cc7031d1dd4ee2adeb825c12899819af976ef867f3
- MD5 60bbd9eb79719fcae5ec8d9048053f69
- SHA1 ca2336d6d7368b0ef666afb735dcf32893c52787
- SHA512 8ef5a85dffa36d3bbb86c7e04018179983aa5cc1e5a0e28bd504c11b59989c78c662d576b0c0bc591af4bbc590b94003fafc96d4b4796312d62f30c6991fe759
- SSDEEP 192:usjrsjXsjnsjtsj9sjJMsjBsIsjBwMsjB0:LkgwSinIQi
- TLSH T1ED62572431EC510E6362BBDE9FEBD4DBC2B8B5E99A77462F11B0435B0620E01DE11B36
- MD5 SHA1 SHA512 SSDEEP TLSH
x64/Release/rest/Spiritx Temp.tlog/CL.read.1.tlog
- SHA256 82fe4eaf07d38ca7c0b6853dcbdfbd93f132bc70fd5277dfa87db0ef5a27f08d
- MD5 39b28193e080cdb2d7cc300f3bf093e7
- SHA1 edadd4a262308de4ce6b3212ecec56a5bcb4a2d9
- SHA512 571b0a8fad72f006a201d751f64f5c27d5130d99c60fd2a01b33ca5780101ad250b4b9770fc190af7018b59913fc176c551ce59971dccf0975be29814c51394a
- SSDEEP 192:ATd4T1rD/l/REHa90fLgd4T1rD/lRt//RqhO0yefrKO9Y/A//Uhc:rT1rDtRALdT1rDhRSV
- TLSH T17CF2202870EA16481313B6E39FCBE5ABD322B2A8D73B476F35D403230351A125A55FBD
- MD5 SHA1 SHA512 SSDEEP TLSH
x64/Release/rest/Spiritx Temp.tlog/CL.write.1.tlog
- SHA256 e8dd6f1b053bfbec032efce5242a1bf7980fb134780803b11e2d815df1b796e2
- MD5 7622f894fa79abdb387b585aabaeaf81
- SHA1 98db00ba97a179cb14e57ba169e5dbb4e4081b2e
- SHA512 3659a250e28650febc866a24306f79a41d79c71a99e35fe94390ce1f89fa1a803b826b4e7e4da8b0adc29db0ce876beb1d571b186e880e1d52c06d30406e59e7
- SSDEEP 48:41u9k1ua1udZ1utW1uh11uL1uTf1u9F1uS1udZ1uS1uf1utW1u1:AuGuWuJuwuJuhuRuduOuJuOuNuwu1
- TLSH T160A1A46974E864890B16BAF35FCFEAF5C375B6E2C7770A3B30E4523B12A09118511671
- MD5 SHA1 SHA512 SSDEEP TLSH
x64/Release/rest/Spiritx Temp.tlog/Cl.items.tlog
- SHA256 bbe9cbeafddc70cfb5441c627f7f770f20f98d0d110221c2d13fb63f52f3edcd
- MD5 80920a63d2d93866273b46a178636fb4
- SHA1 56648ab12a6827e6bd85aa0f34f852e48c720ca9
- SHA512 7626707022873541004ed95cc2c294c1f40b28a1d2e023dd906c1148d3ac0ea6cc62e8b39e4516d67150ad2502f403a87a93da1eb3a61b3ea66ca1f3dfba3347
- TLSH T17411DA5FB9754A091041EA0DE1E7C10DDF88FD0255C8AD287DF8D20770CBA45C0DBE95
- MD5 SHA1 SHA512 TLSH
x64/Release/rest/Spiritx Temp.tlog/Spiritx Temp.lastbuildstate
- SHA256 8bacd1a8c68ceed4df06a31b6ff40fe01f40a10d9abff3a94adac88cfd072569
- MD5 cc590dcd166f88d346478ec4155764f4
- SHA1 dfa73d5ec4cda4e4025d783fb6ec9e628d092ee7
- SHA512 8656b244dbd53972cb57b674e665542b9c10008ea4349ea3e7c4c336b659b22e6f93a76f6dbc91c31539f4407df13386f594177e5343e60c30b1bfc5f2c24b2a
- TLSH T1ADE0C20FB2704A602012EA0EE0D3C00EC7DCAD12A599A51C6CE4570F3ACFA09C097EB6
- MD5 SHA1 SHA512 TLSH
x64/Release/rest/Spiritx Temp.tlog/link.command.1.tlog
- SHA256 bcc17bc8cc5c6e9526a80e59b1063082dabd76794ebd85bd4f2e4286e1831e33
- MD5 2bff71888c14a34f80accf831dd3bd71
- SHA1 58e0758383b3a955359ff6f5b26c30b98698e478
- SHA512 d512c10411326b7e82781b4ad94fc4830463e4718ccc3d3da1a759ca0d062a2749955f69abfa80531e8f7cb5ae29361a2d6104ea61c7ae6adb930de09b9dbfca
- SSDEEP 192:I6WDcs0z2rYZEkUucs0vz2rYZWSAwA4Dcs0z2rYZS:I6WO20ZEkUN20ZdtfO20ZS
- TLSH T1C5F1BF3970F9224A1715BADA8FDBD5BBD33676A4D6BF433F24A0479F03516029A03A34
- MD5 SHA1 SHA512 SSDEEP TLSH
x64/Release/rest/Spiritx Temp.tlog/link.read.1.tlog
- SHA256 fa66d2e8bfd6d868e46ab489cfaecd7c7dd41f81f6ced35664d934a3ba653ee2
- MD5 9f8bad24478e503c5e7ea90f9393c35c
- SHA1 3cb7b82d8b29b392266f68fbd22f090412bf9dad
- SHA512 2eefd1c526f00b27596ed6d62a46d546a744fb88fc7a9b335d8f780912fe991459119ae8a232580eab7e7ead282d794759334ac0d7ceb688a8036bf0afee12f1
- TLSH T1EF61F77934E925890716BAF35FCBEAF6C365B6A1C77B073B34D4433B02A19128502671
- MD5 SHA1 SHA512 TLSH
x64/Release/rest/Spiritx Temp.tlog/link.secondary.1.tlog
- SHA256 cc6b2fa73dab5acbecb9e2bbbf79c7bc815cf655e8050e6758620b7054c2376b
- MD5 22c86d0a5c93685dfb3359da66356bfe
- SHA1 ead2d37db44df8f9e519a00d6762ca258afd64ce
- SHA512 fe78142272ddd01c9e87f37d80d05d85268230f3104b304336820b5de6eb9057a2dadf13f5f2aa31854d89dd692143c34e97aa68b829edadd8e97c6deaa62c9f
- TLSH T1BDF0365C48A7C5CF30334953C7C5D255EEF9132532347765066079C7F20228E301241F
- MD5 SHA1 SHA512 TLSH
x64/Release/rest/Spiritx Temp.tlog/link.write.1.tlog
- SHA256 b33adb07ff1b5e7da74c27d6a85ef659d92706eca2963c54bb237f1e3f60751b
- MD5 d6f4d606dfc3d82b2d514f894448ca86
- SHA1 daa31443dbe0f7aeef1acba668c7ed00a7897304
- SHA512 8b276e0c9ea4d44592ce25c67426bd40113b9ade8f14dbf00ee9ecfaec924e0addb97b4f00530fadcb87417cca873d16f4272202314a15c009f5a1dd5292163c
- TLSH T18831A07D34E864890B16BAF39FCAEAF5C375B6E2C7770A3B34E4523B42A0911C512671
- MD5 SHA1 SHA512 TLSH
x64/Release/rest/cleaning.obj
- SHA256 c29264d4f5d5e2f93117321c9229c3d7270ae1e483c8b745cc72504cec18c03f
- MD5 741efa059fb282fbf10e3099e9af80af
- SHA1 3d32c66f1d4421912f6713444bfff83d631f114f
- SHA512 12d9d334db06beead79517971a76340c5a16c346f67d4ce63826317f2ebdd1c0e70ba503314487257cad5e3386fc5cc4da88a53e46e9ec10915e2c8b0292ff82
- SSDEEP 384:k4+V+y6WPQKWgevb/O4VDOViTxMXzKfBk0wqWnYgWafOubhrkLFuAsE:YrQKN5X+MqWTO+BkLF7
- TLSH T1E6A2D80AE51A8E44EA26C97DF2E7850DE390FD26B69B5303239DE193F9C33117A5F091
- MD5 SHA1 SHA512 SSDEEP TLSH
x64/Release/rest/core.obj
- SHA256 e512f6bb42410a2a2f32d97f4ffe6b5af80adedad958f9030567968384e876d4
- MD5 7759c022d86af7b8afc979e5c5d5c83b
- SHA1 86951020a132cf6cfb04f62bd8db68c743be3970
- SHA512 0dcb50909e63abdf11a7088d7a02b440e9da7252e02f37a9a67422e44310dd16ce56945d93aa19f2568456ee7c6dacc94c5afed62c6b2a469b40f21dd49c2199
- SSDEEP 3072:euZmaufzNmyqrchpfRepCdRIuwPE/YaSObrMDOJAAkw4+yfvUJ86wZjPDON/3okt:BsWyqgpfQM88QFObWOy486UjPDj/MKlk
- TLSH T1AE84F61AFAD88E47DE354235A5C70C2DB37AFA92534FC307275C922ABDD3784AD86640
- MD5 SHA1 SHA512 SSDEEP TLSH
x64/Release/rest/hde64.obj
- SHA256 c568ae21ac587674f91bf385f042be0f9b86db6350c634232232ae7569850ec9
- MD5 45c439a2f758f330aca2b6ee58c1b2f2
- SHA1 e06b5eb92d2f0c95bfef43f6447e5e913e693913
- SHA512 389b96a16099c0d9ea24b365f7b9eb66de5e516a7e73a1a5eb0130c6b540f3a34e039627e4f1f203acb0895d26755c05897226b12bcb753289b74eacb2cf0d5a
- SSDEEP 192:MWtx2UMp4A4u2ZBSV/G8M8GrsnKoFumx+c99gvMYPmoSgZn+aF:MWP2UMp5txG6GsK/mH0MuvS4fF
- TLSH T1C032940BEC988601D9198138D2D74C3D63A0ED4D5ECDD7136B9DE13EF8C62859A8E27D
- MD5 SHA1 SHA512 SSDEEP TLSH
x64/Release/rest/temp-driver1.log
- SHA256 249ad20ba083b6a86328a6fee07a2c051862fba3949b6410a5d03abf2a8324d2
- MD5 dc2b30cc89468a596c24ded8e8af528d
- SHA1 dc915fe8bfe19ad27352ceb0d8a693f3c83021fa
- SHA512 15e02173589c774338e27fb634ff33f4281402f550a4e4947e790c887244b1d3e835f2602cec3c066ce794f6a3f22f586f9a5329e0361dd2de5472e5ccae7d42
- SSDEEP 192:/Tx1sqUAXzyszQlGA9g1ZIE94fQ0wMckuJXWErvMWHVGkXMGyzGBfxVLAoVjgjnO:/Txi0uWSn+lyk+u
- TLSH T18693071FF83C90550161A61DE1E7D80ECB9CBC416698AE15BDBCC107B0D766EC1EAEE2
- MD5 SHA1 SHA512 SSDEEP TLSH
x64/Release/rest/temp_spoofer.sys.recipe
- SHA256 08b80d40b8c13ee386be1d77e3d5d47c3f366d2ee764c17a67ddf7ce82613a40
- MD5 0e989e872aedea2f5c389a893f7c76d8
- SHA1 5b0609210d693b310220ccf6634b3d881a7bdc8a
- SHA512 85ad305e36c8d2371ba8091fec86987c6338f0c21bc24801946b23f514ef47c74652c6c13c590f41af51e983c8a9cdb30f911d5d1f60bd573e6285e01c9a3a25
- TLSH T1EEE09B6F79D0E50167B0521DE1EBCA1EEB4AFD8305654C603894CD6B1AC3544C043D96
- MD5 SHA1 SHA512 TLSH
x64/Release/rest/vc143.pdb
- SHA256 438e7565cbbd5be509d43dee08ed5abdacd5def489769fc29ccd85c5d31fd070
- MD5 0e74469ca1c895fe7d5108dc3f2f0991
- SHA1 5bbb31b5e695b9e2b400f8c87e801621d40ea12c
- SHA512 41b6cfe703f3cadf2231ab80454b809ded7e54532dd247c00a8e2b9362c1eaaa67fa38a363c13c79fbabc87867adc45a23a5b196827a9133898ae0e42bb5664b
- SSDEEP 6144:p6oNg0ZxkE4djPBiEKiUszJP/Z4p+QzDAzJKv6kvfIxXwyIxbIx:p6oNg07knV9Ph4p+QzD5f6Xwy6b6
- TLSH T15C84B636BD107DA3E8AF5A3DA9851114261E0FC1D7CC83E55B40BB7684F7A709A3CB62
- MD5 SHA1 SHA512 SSDEEP TLSH
x64/Release/rtcore.exe
- IMPHASH 7156fe31464be3accd1d42564a61316b
- SHA256 41d79a8b6a99fc6b84020bd6780d734ecb790be5cb79623382e1a8e7afcb89e2
- MD5 d11113e78cddd920f5c494707183a739
- SHA1 7273079a142e5dccff6dcbe18a3261fa2b74c2cf
- SHA512 8109f97a5d3dd8151b84c881fa23f4ad37616775bdd859860ca1ce686142e909ced72b30a4a3ae91877b3536a3ee176d1ff5d927c233cab12b7fb5829085038c
- SSDEEP 1536:szRuyAaUcQej+TGnrhcqA6ZjVX7U1+4GAjFU0k4FKSLIuiYhsuiD0isn:sHN+TGqKZVX7BAjFU0k4MIsu
- TLSH T17FE33C16A7A51069E2B6DAB8CEA24502FB727C414B75D7CF074049B90F32BD07F3AB12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
fucktxzy
Minor OS version
0
Major OS version
6
Entry point
74668
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Yizuz\Desktop\Yizuz\Documents\RTCore64_Vulnerability-main\RTCore64_Vulnerability-main\x64\Release\RTCore64_Vulnerability.pdb
kernel32
GetCurrentThreadId
GetModuleHandleA
OpenProcess
GetLastError
CreateFileA
GetSystemDirectoryA
LoadLibraryA
DeleteFileA
CloseHandle
GetProcAddress
GetCurrentProcessId
CreateFileW
DeviceIoControl
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
SetUnhandledExceptionFilter
GetTempPathW
GetModuleHandleW
FormatMessageA
GetLocaleInfoEx
VirtualAlloc
VirtualFree
SetLastError
GetFileAttributesExA
CreateDirectoryA
GetModuleFileNameA
InitializeSListHead
GetSystemTimeAsFileTime
FindClose
FindFirstFileW
GetFileAttributesExW
AreFileApisANSI
GetFileInformationByHandleEx
WideCharToMultiByte
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
LocalFree
user32
GetShellWindow
GetWindowThreadProcessId
advapi32
RegCloseKey
RegDeleteTreeW
RegCreateKeyW
RegOpenKeyW
RegSetKeyValueW
ole32
StringFromGUID2
msvcp140
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?good@ios_base@std@@QEBA_NXZ
??7ios_base@std@@QEBA_NXZ
??Bios_base@std@@QEBA_NXZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Xbad_alloc@std@@YAXXZ
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1_Lockit@std@@QEAA@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?id@?$ctype@_W@std@@2V0locale@2@A
?_Id_cnt@id@locale@std@@0HA
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPEBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
ntdll
RtlAdjustPrivilege
NtQuerySystemInformation
NtUnloadDriver
NtLoadDriver
RtlInitUnicodeString
dbghelp
SymCleanup
SymLoadModuleEx
SymUnloadModule64
SymSetOptions
SymInitialize
SymFromName
urlmon
URLDownloadToFileA
shlwapi
PathFileExistsA
PathRemoveFileSpecA
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__C_specific_handler
__std_terminate
memcmp
__std_exception_copy
__std_exception_destroy
memcpy
memset
_CxxThrowException
memmove
__current_exception_context
__current_exception
wcsstr
api-ms-win-crt-convert-l1-1-0
_itoa_s
wcstombs_s
api-ms-win-crt-stdio-l1-1-0
_fseeki64
fread
fsetpos
__acrt_iob_func
ungetc
__stdio_common_vfprintf
_set_fmode
fputc
setvbuf
fgetpos
__stdio_common_vsprintf
fwrite
_get_stream_buffer_pointers
__p__commode
fgetc
fflush
fclose
api-ms-win-crt-utility-l1-1-0
rand
srand
api-ms-win-crt-runtime-l1-1-0
_get_initial_wide_environment
_initterm
_initterm_e
exit
_exit
_initialize_wide_environment
__p___argc
__p___wargv
_configure_wide_argv
_register_thread_local_exe_atexit_callback
_set_app_type
_invoke_watson
terminate
_crt_atexit
abort
_initialize_onexit_table
_seh_filter_exe
_c_exit
_cexit
_register_onexit_function
api-ms-win-crt-filesystem-l1-1-0
_wremove
_unlock_file
_lock_file
api-ms-win-crt-string-l1-1-0
_stricmp
_wcsicmp
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
free
_set_new_mode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
___lc_codepage_func
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
74KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
284B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35207,
count=10, id=260, version=35207,
count=35, id=261, version=35207,
count=6, id=257, version=35207,
count=17, id=257, version=33145,
count=268, id=1, productName=Unmarked objects,
count=7, id=265, version=35222,
count=1, id=255, version=35222,
count=1, id=258, version=35222,
x64/Release/rtcore.rar
- SHA256 02f9c73f8db883bc74b423e4be967032b1a26b3c456f98419a77b29dd4760381
- MD5 4d24483b85fe5c877e8140a2af1b9562
- SHA1 45dd52958c067bf117de4f6c0e3f4424f9831bfd
- SHA512 e23c37d6b7325ffc2a2aef9e152922701251f31e1e22843f0340c04dc277f5419b8d4b936a1203d3741666db311a0b58a5694623d0ad9b65d02fd6306f44d4c3
- SSDEEP 1536:q2MIymWN2ARCO5hSMLvb6kR2icdHwS/HlJ1Yja+T:7MIFcCO5MMLv9sd3/+T
- TLSH T1D143029E3209D5CA519C71C13D320C6B4F9610D466EF8CA99896BA35E6EB93F43CED20
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
fucktxzy
x64/Release/symbols/cd920ed1be89bd2217fbf6b19c6e3314.pdb
- SHA256 ba10ee3c3c8d07c1cd2c081be62c28025cdab36a94134bf9d1cac2c8c048396b
- MD5 254f4b89f45f80122bba1d38d7a449b8
- SHA1 e739bcb390cd65e43b1bf114b5abcfe53ea63102
- SHA512 c9ea8e9459b426f1dd536213a2fb9de617d60e29155c5cb08d79c2d960da813d1bc4082cf5f0a767aa1eb82d55fd9ff862e1131d67165824e2cc96c5c077b76b
- SSDEEP 6144:ELqu1E4mlKjuQoGzDPQILi8FQmEkPKumbT80JkOeIlUtiF7ZJ2dvZ:s1SlvK3DOlf3bYQkzdv
- TLSH T1F715FB3AFB227EE1C41B09BF1852170DB1F9F584939A52C36980BFA5CDE63729C54782
- MD5 SHA1 SHA512 SSDEEP TLSH
x64/Release/symbols/cd920ed1be89bd2217fbf6b19c6e3314.pdb.md5
- SHA256 c4ec890d4a6cd33a17d6b5587c06ddc73d7a09a268d2a43923efb8fa1f8e9bc9
- MD5 d0de034516896e0caeebf708fd697761
- SHA1 152659465ebdd1761cb7a9d6d770fcececa5329d
- SHA512 9badce9c5ca756ad2cf27eb7c3fb519826b6b42693b1233c47b5eb40187d58f05547761528e2606d18a9ed88e98d24e3335fcb07ab7dde7ad773d6604629c9f4
- MD5 SHA1 SHA512
x64/Release/temp_spoofer.pdb
- SHA256 fe22c8a46ed3b3be356d6ae7967d49f839b69589578978d59d0920a6081b0bb1
- MD5 510cb63c3a5c73c3d4ba4ca5c908a8ce
- SHA1 9660d9fc17d58dfcdff1ea6f1c57725e37792785
- SHA512 855441c6d3ca3770003f29a2d98ea0b974a1313df40e0784f84814651272d9f401f005e80825bdb477f10b04fdbad4dd975309a9d07461f9951d38fbe445f76d
- SSDEEP 6144:9LPNfpX96LVEq+qy6l7uASi3lSwlSFwJ8apezbnP8Gx43SJKv+6uPaOVGLA/5HPB:cfz+P3x433u//5H
- TLSH T1E0C41932BB19AE62D867463D61C34F1C615CCF81978A4387AB54B35F8CF7360DAAA740
- MD5 SHA1 SHA512 SSDEEP TLSH
x64/Release/temp_spoofer.sys
- IMPHASH e37e8d157b2c97704cd0b54acbb575ad
- SHA256 dfa481e9bc17ac303c20f9d839cf28b54c8722d373a83120c625bfc4f433c02f
- MD5 70ca134973e54d841c84078b1614998a
- SHA1 e692867091bd013f6c380cee48b873665e71568a
- SHA512 eac2b2d8ef1d74d7a6ecc5e8e73c53d9dbe073f557c0ba8a4ec87f7feb67351ca43a35db98a69a5f86ad273976e64d2172cbefdb4ed2b6441a4f48ca3560a6a1
- SSDEEP 768:eHFFq/52QwnLsnz1Nta4+ZhCPt9kg5KxZVPpOklup5jX+pr/z3sTGan8Wgm:osn7ta4yitqVWjiBan8Wgm
- TLSH T1F1136D7AB2A518E4E3918278D9211526D7F2F0542321D7EF53A1C628AF33BE02D37BC5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
27532
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Clix\Desktop\Pablo Emilio Escobar\Desktop\Dev\Desktop\Kernal\Desktop\Yizuz\Desktop\Yizuz\Documents\Hyperv\spoofer\Spritx\Spritx Spoofer\x64\Release\temp_spoofer.pdb
ntoskrnl.exe
ExFreePoolWithTag
ZwQuerySystemInformation
strlen
islower
isdigit
toupper
tolower
RtlInitAnsiString
RtlInitUnicodeString
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
DbgPrintEx
RtlCompareMemory
KeInitializeSpinLock
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
KeQueryTimeIncrement
ExAllocatePoolWithTag
ExGetFirmwareEnvironmentVariable
ExSetFirmwareEnvironmentVariable
MmProbeAndLockPages
MmUnlockPages
MmMapLockedPagesSpecifyCache
MmUnmapLockedPages
MmMapIoSpace
MmUnmapIoSpace
ExAllocatePool
IofCompleteRequest
IoFreeMdl
IoGetDeviceObjectPointer
IoGetDeviceInterfaces
ObfDereferenceObject
ExUuidCreate
MmGetPhysicalAddress
MmCopyMemory
MmIsAddressValid
RtlRandomEx
IoEnumerateDeviceObjectList
_vsnprintf
_vsnwprintf
ObReferenceObjectByName
__C_specific_handler
strcmp
wcslen
IoDriverObjectType
IoAllocateMdl
strstr
hal
KeQueryPerformanceCounter
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=259, version=33145,
count=1, id=260, version=33145,
count=5, id=257, version=33145,
count=64, id=1, productName=Unmarked objects,
count=3, id=261, version=35222,
count=1, id=258, version=35222,