RwPortableX64V1[.]7[.]zip

resource
unpack001/Win64/Portable/Rw.exe

RwPortableX64V1.7.zip

SHA256 34e5ae66f1417c12ea09219e6582964bd836da0535355a31aa268be9a563051b
MD5 4e811b668d0302c8264de237d67eafc1
SHA1 1bc3a25558ff90e586fced40ebbc273c55339f8d
SHA512 a44f5ec2df11337412f74f4bfcdf2f51b87606928a2f999a0503a55f8088a903cf032a4beb3e9c7e36375c9a6aac987afba28e572e8f2dfd80624220ffe99bdf
SSDEEP 98304:pHyT0pZkF3UxZmDMVnWqOG6rif4dUxD0H5E:ZyTIK3UiDGnEG16UZ0H5E
TLSH
T1CAF5338890C7903CB9E7E36EC95E8100103CA36AE6679F5F91DE537F5BBE4ADD41900A
MD5 SHA1 SHA512 SSDEEP TLSH

Win64/Portable/25308086.IRW

SHA256 6d959fbe7e2ccac42c1a009da4a765c1bce16c2d10c19f781df8f03b6a350475
MD5 25c88d23becf0f969ac589f6e2d3ce83
SHA1 28e7f5a781280ff9e3169ff5c2613c03dffdc5ba
SHA512 151ad13a2fcaeaa13a7f859655a96cd0f6ed8c7679c1814836f918e09963a999de6a997c680af4202905ffb94daed51b633c3799a627ad210430ce45873b615a
TLSH
T1F0214790C158A2B70DD6220EBFD3D0D0FC3A9E023ADE8476485A9CDB6197DAC8277078
MD5 SHA1 SHA512 TLSH

Win64/Portable/ATA.IRW

SHA256 51b3a89c458e6061fe331c7be59c3eec3a1a25a899390b4b88a2a5132c4e7c71
MD5 37890378927552faddf560a8f9f55b3b
SHA1 c9701ec2cd0bc0cfbf499a2c1c9a33972624f55f
SHA512 5db1bb65f1aaf5d81df1b7579dc513d1a620aa7c8552ace3dbff35e0752d98cc6d462a6a431a5251c50aca72191f7e758f1e0ec78d65a438db2a076c32284468
SSDEEP 192:RNtgKzn9mPUiCRc3kycUM84vw7eBq1WTqt0dkPb9qmruPr:3ttzCFCRc0yPMJvCeBoWTqtIkTfrwr
TLSH
T10782963657D63A3BE28733D3A936884F5E5D21B2655472FE0FA4272C3146B38D763824
MD5 SHA1 SHA512 SSDEEP TLSH

Win64/Portable/ATAPI.IRW

SHA256 09a41416ca90bd244b439b7370183ab4602de7f3dc7b0988c344fa8630ecb4af
MD5 429103370648c9aef84e43e11fade466
SHA1 e29822d1dca9d82d514ccb8a3b8fc4a42af68565
SHA512 3953cac808ad5cc82f69fc41cb8527fddcb556ca6e8f26102b7663ac01aaf21a95c7e5f4448386458eaadac92026d86b9150835df81cc7b6fef26c0f932bd012
SSDEEP 192:glQNjxX4C5wUU+xWhzAOxxus+kZWUaLSBqRymV6fPr:ZjdBC0yTF+ANaWBgV6Hr
TLSH
T16472F33667FB7C7BF2873293AE3154425E1D21725894A2FF0F542768212AF798773821
MD5 SHA1 SHA512 SSDEEP TLSH

Win64/Portable/DDR2SPD.IRW

SHA256 0814c9e571fbbd6cd8457670a05f42af802ffecdba88dfaf3d6caa984c50f0cb
MD5 8f386afe7679db40dc20169d5c25e61f
SHA1 5370b4023f63b5199383604813f7cdc1e2e79b40
SHA512 06783913f702dc8321c013250f4e8963d58cce92c963252b4119fdfad96f300d32891898210dfbf696de1b83d305feb9b6ef63363286d72a36164983749c0849
SSDEEP 192:a2LfeXe+nmI+7+DSBjOb99yv8JgdydYmo8xeCVV:aqPyi8O0VV
TLSH
T11F524256BB84B3B506031196740FF2C1F79CE4A9467AC28518D8405D254AEFCABFBBF8
MD5 SHA1 SHA512 SSDEEP TLSH

Win64/Portable/DDR3SPD.IRW

SHA256 e6d1b1876793a0392dd20477bc689638fd86fce3f76b3b73fb7d7815217509cc
MD5 ad3a6c1a0981a0f6a76ff1f1d115168f
SHA1 28903bf6fb95a199bd6a6e8f0bea0bcd94cf4676
SHA512 2ee0ae973b77ab41a4e08c282fcdafb178febb682ec5338e678ab3d71d6bb1d513644dca6b4a0587266d6c31ca3e93fda1611e5f3a9ffc16182747eee4c647ee
SSDEEP 192:w8a6c7MScZ6piL56VdFUXG+GBFgGNGOm1Gjc3wR+TwVSHUJhOjAli3C7WuGgb:wz6iFLzFw3+Ggb
TLSH
T13152AB01D8D8F11D095B2490D9A9AB76FAF4FA927467828F386E47731893FDC6F0344A
MD5 SHA1 SHA512 SSDEEP TLSH

Win64/Portable/DDRSPD.IRW

SHA256 0422ed6bf2b0c1bf4790994c0c9987cc9ee0550e2daad3b88493ce0b430c6a02
MD5 990e5ed3653d87fac1282cbcc5dc45bb
SHA1 71eaca94fab6c721a36282c603900b8476cb5469
SHA512 bb0d37ffc7f637c6aa9734cade066570bf41abf057df3bd15213776e733960f6d14b0e143469a0e17fe28315620d11b2db3fbd2259352b123e4a04202a739cc7
SSDEEP 192:MALfeXe+nmI+7+DSBjOb9pyJCJgdydYmo8xeCVY:MgPyYCO0VY
TLSH
T12F5242567B84B3B506031196640FF2C1F79CE4A9467AC28518D8805D254AEFCABFBBF8
MD5 SHA1 SHA512 SSDEEP TLSH

Win64/Portable/Log.txt

SHA256 09cb643be588203e961ee4502253633a385ed00d9333ac6c74e50d3cc9367acf
MD5 353694ffab0ad6eb4da5a0995c839d74
SHA1 bf9f4b574c071a3193f8c2e3bebe630ab0046e11
SHA512 ead84d960a9dfc699f041e67cd1340903540c119e33c38d7ba9f598a8990a9123bba169ae9155109cd9cedc17bbeb3f23a954f119464284debec71586064dcb5
TLSH
T1DDC08C0E122CB8B416E80A54210B2E039A246860209014D941C8C928AA6A01E8027AAF
MD5 SHA1 SHA512 TLSH

Win64/Portable/PCIBRI.IRW

SHA256 a2c34083bab9141872f3ae7f9d01961ba4989cf9eae3f8f44272ba7eabed5690
MD5 78886922f09ad7abf79bd524ec83a7d9
SHA1 3187b6e7c216cb36b7ddfb3fa8a2ddc9d497c674
SHA512 2b3580cd56de30202859b778e351214d18ae2f270e79a7d04efb9ba051368d6a7735c84af53b6633823a49e6e9bc3d18e02d0f3e4106a05eee6d59a40ee77c79
SSDEEP 192:EKAKJYs+uapqfN1F//XjMBMtGlLULZLALG3+5r8f8n8Y8482o8e8z8AeCHmZVeCo:9hx1FH/JlbNlQykIk9
TLSH
T11E721405260C30BB0BD2A395260BA152DA68B0DAD5E558B7D94EC2D42B41EFCC4F7BF7
MD5 SHA1 SHA512 SSDEEP TLSH

Win64/Portable/PCISTD.IRW

SHA256 e26d64aa8ebfab62665d24e3a737cd6d23f39347184917548954aeade05526ef
MD5 4a88ed92925c0eb2ac0a32f658e7d82a
SHA1 23555f6393328c82660d3c54cdcf0bb97f929089
SHA512 e1a8e76c10b76e68cdd9d59eac762191ba66efbda720a0b05fbb289423a09fb0238e203c8a5f0de2a0470745e28cfec97d02d27d7d5ee7d6bce75ce997dc9a25
SSDEEP 192:EKAKJYs+uapqxN1FhAI9m3RO3h3W36HuI/S6Ifj3NlQXy3ky3i:9hf1F6alAhlbNlQEPi
TLSH
T15A722515016C307F47EB935326175A918B98A4CBC19C78BB9E0DC2D52B50EB8D8B37F6
MD5 SHA1 SHA512 SSDEEP TLSH

Win64/Portable/Rw.exe

IMPHASH dd6ffe4e95f1662fb3dd967fd840ccad
SHA256 5e009cdfc283d7f0d3dd777d40bcd23ecd78d8d7e93fc9cedcfb6d9dbe0b7701
MD5 199f61f5fc23c39dc2b263479d1232af
SHA1 01211988a0d4f1a2f4e70f60bf828ce52b87da83
SHA512 eee5cb1c43861ca10531b6051f7e09de5ae8258016ce7f5455251e97e8a0232b640c94872633abede25fbf564006f404fed59c203ca6db787fe175d228470a0b
SSDEEP 98304:SDaPSrhZQERPoWo+Ry+TZeeqOSyhUNvbymDQlsYJN1K:SDsSrfQEhoWoeJ6
TLSH
T13AC65A17B6A5C06AC48AFA38C9CF9B70E637B885A231D37B1260CDA95F617C54D7F210
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

14848

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

setupapi

CM_Connect_MachineW CM_Disconnect_Machine CM_Free_Log_Conf_Handle CM_Free_Res_Des_Handle CM_Get_Child CM_Get_DevNode_Registry_PropertyW CM_Get_DevNode_Status_Ex CM_Get_Device_ID_ExW CM_Get_First_Log_Conf_Ex CM_Get_Next_Res_Des_Ex CM_Get_Res_Des_Data_Ex CM_Get_Res_Des_Data_Size_Ex CM_Locate_DevNode_ExW CM_Reenumerate_DevNode_Ex SetupCloseInfFile SetupCopyOEMInfW SetupDiBuildClassInfoListExW SetupDiBuildDriverInfoList SetupDiCallClassInstaller SetupDiClassGuidsFromNameExW SetupDiClassNameFromGuidExW SetupDiCreateDeviceInfoList SetupDiCreateDeviceInfoListExW SetupDiCreateDeviceInfoW SetupDiDestroyDeviceInfoList SetupDiDestroyDriverInfoList SetupDiEnumDeviceInfo SetupDiEnumDeviceInterfaces SetupDiEnumDriverInfoW SetupDiGetClassDescriptionExW SetupDiGetClassDevsExW SetupDiGetClassDevsW SetupDiGetDeviceInfoListDetailW SetupDiGetDeviceInstallParamsW SetupDiGetDeviceInstanceIdW SetupDiGetDeviceInterfaceDetailW SetupDiGetDeviceRegistryPropertyW SetupDiGetDriverInfoDetailW SetupDiGetDriverInstallParamsW SetupDiGetINFClassW SetupDiOpenClassRegKeyExW SetupDiOpenDevRegKey SetupDiOpenDeviceInfoW SetupDiSetClassInstallParamsW SetupDiSetDeviceInstallParamsW SetupDiSetDeviceRegistryPropertyW SetupFindFirstLineW SetupGetStringFieldW SetupOpenInfFileW

advapi32

AdjustTokenPrivileges CloseServiceHandle ControlService CreateServiceW DeleteService InitiateSystemShutdownExW LookupPrivilegeValueW OpenProcessToken OpenSCManagerW OpenServiceW RegCloseKey RegConnectRegistryW RegCreateKeyExW RegDeleteKeyExW RegDeleteKeyW RegDeleteValueW RegEnumKeyExW RegEnumValueW RegFlushKey RegLoadKeyW RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExW RegReplaceKeyW RegRestoreKeyW RegSaveKeyW RegSetValueExW RegUnLoadKeyW StartServiceW

kernel32

AddVectoredExceptionHandler AllocConsole AttachConsole CloseHandle CompareStringA CompareStringW ConnectNamedPipe CreateDirectoryA CreateEventW CreateFileA CreateFileW CreateMutexW CreateNamedPipeW CreateSemaphoreW CreateThread DeleteCriticalSection DeleteFileA DeleteFileW DeviceIoControl DisconnectNamedPipe EnterCriticalSection EnumCalendarInfoW EnumResourceNamesW EnumSystemLocalesW ExitProcess ExitThread FileTimeToDosDateTime FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileW FindNextFileW FindResourceA FindResourceW FormatMessageW FreeConsole FreeLibrary FreeResource GetACP GetCPInfo GetCPInfoExW GetCommState GetCommTimeouts GetCommandLineW GetConsoleScreenBufferInfo GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatA GetDateFormatW GetDiskFreeSpaceW GetEnvironmentStrings GetEnvironmentStringsW GetExitCodeThread GetFileAttributesA GetFileAttributesW GetFileSize GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoA GetLocaleInfoW GetLogicalDrives GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOEMCP GetPrivateProfileStringW GetProcAddress GetProcessHeap GetStartupInfoA GetStartupInfoW GetStdHandle GetStringTypeA GetStringTypeW GetSystemDefaultLangID GetSystemDefaultUILanguage GetSystemDirectoryW GetSystemInfo GetTempPathW GetThreadLocale GetThreadPriority GetTickCount GetTimeZoneInformation GetUserDefaultLCID GetUserDefaultUILanguage GetVersion GetVersionExA GetVersionExW GetWindowsDirectoryW GlobalAddAtomW GlobalAlloc GlobalDeleteAtom GlobalFindAtomW GlobalFree GlobalLock GlobalSize GlobalUnlock HeapAlloc HeapCreate HeapDestroy HeapFree HeapSize InitializeCriticalSection IsDBCSLeadByteEx IsDebuggerPresent IsValidLocale LCMapStringA LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LoadResource LocalAlloc LocalFileTimeToFileTime LocalFree LockResource MoveFileW MulDiv MultiByteToWideChar OpenMutexW OpenProcess PurgeComm QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReleaseSemaphore RemoveDirectoryA RemoveDirectoryW RemoveVectoredExceptionHandler ResetEvent ResumeThread RtlCaptureContext RtlUnwind SetCommState SetCommTimeouts SetConsoleCtrlHandler SetConsoleTextAttribute SetEndOfFile SetErrorMode SetEvent SetFilePointer SetFileTime SetHandleCount SetLastError SetProcessAffinityMask SetThreadLocale SetThreadPriority SizeofResource Sleep SuspendThread SwitchToThread SystemTimeToFileTime TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection UnhandledExceptionFilter VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualFree VirtualProtect VirtualQuery VirtualQueryEx WaitForMultipleObjectsEx WaitForSingleObject WideCharToMultiByte WriteConsoleA WriteConsoleW WriteFile WritePrivateProfileStringW lstrcmpW lstrlenW RtlRestoreContext RtlUnwindEx

netapi32

NetWkstaGetInfo

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

winspool.drv

ClosePrinter DocumentPropertiesW EnumPrintersW GetDefaultPrinterW OpenPrinterW

comctl32

FlatSB_GetScrollInfo FlatSB_GetScrollPos FlatSB_SetScrollInfo FlatSB_SetScrollPos FlatSB_SetScrollProp ImageList_Add ImageList_BeginDrag ImageList_Copy ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_Draw ImageList_DrawEx ImageList_EndDrag ImageList_GetBkColor ImageList_GetDragImage ImageList_GetIcon ImageList_GetIconSize ImageList_GetImageCount ImageList_GetImageInfo ImageList_LoadImageW ImageList_Read ImageList_Remove ImageList_Replace ImageList_ReplaceIcon ImageList_SetBkColor ImageList_SetIconSize ImageList_SetImageCount ImageList_SetOverlayImage ImageList_Write InitCommonControls InitializeFlatSB _TrackMouseEvent

comdlg32

FindTextW GetOpenFileNameW GetSaveFileNameW

gdi32

AbortDoc AngleArc Arc ArcTo BeginPath BitBlt Chord CombineRgn CopyEnhMetaFileW CreateBitmap CreateBrushIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDCW CreateDIBSection CreateDIBitmap CreateFontIndirectW CreateHalftonePalette CreateICW CreatePalette CreatePenIndirect CreateRectRgn CreateSolidBrush DeleteDC DeleteEnhMetaFile DeleteObject Ellipse EndDoc EndPage EndPath EnumFontFamiliesExW EnumFontsW ExcludeClipRect ExtCreatePen ExtFloodFill ExtTextOutW FrameRgn GdiFlush GetBitmapBits GetBrushOrgEx GetClipBox GetCurrentPositionEx GetDIBColorTable GetDIBits GetDeviceCaps GetEnhMetaFileBits GetEnhMetaFileDescriptionW GetEnhMetaFileHeader GetEnhMetaFilePaletteEntries GetObjectW GetPaletteEntries GetPixel GetRgnBox GetStockObject GetStretchBltMode GetSystemPaletteEntries GetTextExtentPoint32W GetTextExtentPointW GetTextMetricsW GetWinMetaFileBits GetWindowOrgEx IntersectClipRect LineTo MaskBlt MoveToEx PatBlt Pie PlayEnhMetaFile PolyBezier PolyBezierTo PolyPolyline Polygon Polyline RealizePalette RectVisible Rectangle RestoreDC RoundRect SaveDC SelectClipPath SelectClipRgn SelectObject SelectPalette SetAbortProc SetBkColor SetBkMode SetBrushOrgEx SetDIBColorTable SetDIBits SetEnhMetaFileBits SetMapMode SetPixel SetROP2 SetRectRgn SetStretchBltMode SetTextColor SetViewportExtEx SetViewportOrgEx SetWinMetaFileBits SetWindowExtEx SetWindowOrgEx StartDocW StartPage StretchBlt StretchDIBits UnrealizeObject

shell32

CommandLineToArgvW ShellExecuteExW ShellExecuteW Shell_NotifyIconW

user32

ActivateKeyboardLayout AdjustWindowRectEx BeginDeferWindowPos BeginPaint BringWindowToTop CallNextHookEx CallWindowProcW CharLowerBuffA CharLowerBuffW CharLowerW CharNextW CharUpperBuffA CharUpperBuffW CharUpperW CheckMenuItem ChildWindowFromPoint ClientToScreen CloseClipboard CopyIcon CopyImage CountClipboardFormats CreateAcceleratorTableW CreateCaret CreateIcon CreateMenu CreatePopupMenu CreateWindowExW DefFrameProcW DefMDIChildProcW DefWindowProcW DeferWindowPos DeleteMenu DestroyCaret DestroyCursor DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DispatchMessageW DrawEdge DrawFocusRect DrawFrameControl DrawIcon DrawIconEx DrawMenuBar DrawTextExW DrawTextW EmptyClipboard EnableMenuItem EnableScrollBar EnableWindow EndDeferWindowPos EndMenu EndPaint EnumChildWindows EnumClipboardFormats EnumDisplayMonitors EnumThreadWindows EnumWindows FillRect FindWindowExW FindWindowW FrameRect GetActiveWindow GetCapture GetCaretPos GetClassInfoExW GetClassInfoW GetClassNameW GetClientRect GetClipboardData GetCursor GetCursorPos GetDC GetDCEx GetDesktopWindow GetDlgCtrlID GetDlgItem GetDoubleClickTime GetFocus GetForegroundWindow GetIconInfo GetKeyNameTextW GetKeyState GetKeyboardLayout GetKeyboardLayoutList GetKeyboardLayoutNameW GetKeyboardState GetLastActivePopup GetMenu GetMenuItemCount GetMenuItemID GetMenuItemInfoW GetMenuState GetMenuStringW GetMessageExtraInfo GetMessagePos GetMessageTime GetMonitorInfoW GetParent GetPropW GetScrollBarInfo GetScrollInfo GetScrollPos GetScrollRange GetSubMenu GetSysColor GetSysColorBrush GetSystemMenu GetSystemMetrics GetTopWindow GetUpdateRect GetWindow GetWindowDC GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextW GetWindowThreadProcessId HideCaret InsertMenuItemW InsertMenuW InvalidateRect IsCharAlphaNumericW IsCharAlphaW IsChild IsClipboardFormatAvailable IsDialogMessageA IsDialogMessageW IsIconic IsWindow IsWindowEnabled IsWindowUnicode IsWindowVisible IsZoomed KillTimer LoadBitmapW LoadCursorW LoadIconW LoadKeyboardLayoutW LoadStringW LockWindowUpdate MapVirtualKeyW MapWindowPoints MessageBeep MessageBoxW MonitorFromPoint MonitorFromRect MonitorFromWindow MoveWindow MsgWaitForMultipleObjects MsgWaitForMultipleObjectsEx OpenClipboard PeekMessageA PeekMessageW PostMessageW PostQuitMessage RedrawWindow RegisterClassW RegisterClipboardFormatW RegisterDeviceNotificationW RegisterWindowMessageW ReleaseCapture ReleaseDC RemoveMenu RemovePropW ScreenToClient ScrollWindow ScrollWindowEx SendMessageA SendMessageW SetActiveWindow SetCapture SetCaretPos SetClipboardData SetCursor SetCursorPos SetFocus SetForegroundWindow SetKeyboardState SetMenu SetMenuItemInfoW SetParent SetPropW SetRect SetScrollInfo SetScrollPos SetScrollRange SetTimer SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn SetWindowTextW SetWindowsHookExW ShowCaret ShowOwnedPopups ShowScrollBar ShowWindow SystemParametersInfoW TrackPopupMenu TranslateMDISysAccel TranslateMessage UnhookWindowsHookEx UnregisterClassW UnregisterDeviceNotification UpdateWindow ValidateRect WaitMessage WindowFromPoint GetClassLongPtrW GetWindowLongPtrW SetClassLongPtrW SetWindowLongPtrW wsprintfA

ole32

CLSIDFromString CoCreateInstance CoInitialize CoInitializeEx CoTaskMemAlloc CoTaskMemFree CoUninitialize IsEqualGUID OleInitialize OleUninitialize

oleaut32

GetErrorInfo SafeArrayCreate SafeArrayGetLBound SafeArrayGetUBound SafeArrayPtrOfIndex SysAllocStringLen SysFreeString SysReAllocStringLen VariantChangeType VariantClear VariantCopy VariantInit

_ZTR10TComThread _ZTR10TEcRamForm _ZTR11TCpuMsrForm _ZTR11TMemoryForm _ZTR11TRwEditForm _ZTR11TSmbDevForm _ZTR11TSmbiosForm _ZTR12TCommandForm _ZTR12TDimmSpdForm _ZTR12TDiskDlgForm _ZTR12TIoSpaceForm _ZTR12TMmioDlgForm _ZTR12TPciTreeForm _ZTR12TRwGridStyle _ZTR12TStartUpForm _ZTR12TSuperIoForm _ZTR12TUsbInfoForm _ZTR13LogPipeThread _ZTR13TAcpiDumpForm _ZTR13TAtaAtapiForm _ZTR13TBitGridStyle _ZTR13TClockGenForm _ZTR14TAm2PciAddForm _ZTR14TByteGridStyle _ZTR14TCpuMsrDlgForm _ZTR14TMemoryDlgForm _ZTR14TOptionRomForm _ZTR15TIoSpaceDlgForm _ZTR15TMsrSummaryForm _ZTR16TIoIndexDataForm _ZTR16TMmioInplaceEdit _ZTR16TRwDwordEditForm _ZTR16TUserDefinedForm _ZTR17TPciIndexDataForm _ZTR17TTimerSettingForm _ZTR18TPciResSummaryForm _ZTR18TRemoteMonitorForm _ZTR18TRwGridInplaceEdit _ZTR19TEnterConfigDlgForm _ZTR19TIoIndexDataDlgForm _ZTR20TByteGridInplaceEdit _ZTR20TMemoryIndexDataForm _ZTR20TPciIndexDataDlgForm _ZTR20TRemoteOptionDlgForm _ZTR23TMemoryIndexDataDlgForm _ZTR6TiFile _ZTR6TrFile _ZTR7TRwForm _ZTR7TRwMain _ZTR7TmiFile _ZTR8TBckForm _ZTR8TMpsForm _ZTR8TPciForm _ZTR9TAboutBox _ZTR9TDiskForm _ZTR9TE820Form _ZTR9TEdidForm _ZTR9TFindForm _ZTR9TInitFile _ZTR9TListForm _ZTR9TMmioForm _ZTRN6System3SetINS_7Classes17System_Classes__1ELS2_0ELS2_10EEE _ZTRPc _ZTRRt _ZTRU9__closurePFvPN6System7TObjectEE _ZTRU9__closurePFvPN6System7TObjectERtNS_3SetINS_7Classes17System_Classes__1ELS5_0ELS5_10EEEE _ZTRU9__closurePFvPN6System7TObjectEiE _ZTRU9__closurePFvPN6System7TObjectEihE _ZTRU9__closurePFvPN6System7TObjectEiiE _ZTRU9__closurePFvPN6System7TObjectEiiNS_13UnicodeStringEE _ZTRU9__closurePFvPN6System7TObjectEiiPN3Vcl8Graphics7TCanvasEE _ZTRU9__closurePFvPN6System7TObjectEimE _ZTRU9__closurePFvPN6System7TObjectEitE _ZTRU9__closurePFvPcE _ZTRU9__closurePFvlE __CPPdebugHook

Name

.text

Size

4.4MB

Virtual Size

4.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rodata

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

1.2MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1024B

Virtual Size

912B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

487KB

Virtual Size

486KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

803KB

Virtual Size

803KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

229KB

Virtual Size

228KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Win64/Portable/Rw.ini

SHA256 192d6e119c68fb57fd64fe784d53351da4ea1fb5df787cc4d3d23748f2dcb65e
MD5 5aef9916b2550066ff7260206d0c0443
SHA1 9e42a37a2dd629088e2640ca07eb36c166c6a90f
SHA512 20c379ab1d33c2df0dc37aa9bf7494f0e01f79bbaae142a7feccf5d84bc8e403d120265690a014e950fc1a5c220923c11f66f095367428bc8c7bfd9799090ed3
SSDEEP 3072:aEnlDaMR4+To/GZxQOVGtyQW1AKbAPX48SJTuqFi8xEJx86fMsWEfL9RDYftjIFg:/VuFuJqYZfnLSu4rGVIo/phS0
TLSH
T13844A39F3A3F24510F7CA23466C73B91A52DBA9C1EC91B05E518D9053CEC42E0BBF689
MD5 SHA1 SHA512 SSDEEP TLSH

Win64/Portable/RwDebug.rw

SHA256 664e5fc7afef38dc26cb22ca0236880b1638e4362b2bfa625bb3da88e3a03055
MD5 3732dd3d8161000ff081259b1296c801
SHA1 07f055856c49295a95bc8fb2509dc2efa1a962e7
SHA512 bd7afcec12c516d14be5561ec67bc5497c31b79d9529a5d5d30a19b254541831f5088105467799ccc2d7eb4eb1a4c2c7f16e28feebc63bf76410a5a66813c2d5
TLSH
T11DE04F6E253F75FB61580401CC8A2E829E18941C91DB04FA03A44E19F749F0FD387D17
MD5 SHA1 SHA512 TLSH

Win64/Portable/RwWeb.url

SHA256 742b170b125576ba684c63780f09be48f9ddafc049e528392d8e0dd124407f5a
MD5 9b058dedc568bb200a6575ae3c37ea06
SHA1 81266012f500c816cc23a89c1b67e7270263d1cd
SHA512 5326020749f307ffb75af492e5b7167926cdc93c57c7e139b789a740b12373146778cc085f81b67ad10e3591e5b453d659e552d154cd97477cd755785eca515f
TLSH
T1CFC04CB5D92441C664418D19E0FE8056979871A480C796E9D14ADA99385E447B054614
MD5 SHA1 SHA512 TLSH

Win64/Portable/SDRSPD.IRW

SHA256 7dbcddceb54ce9a90292787fddcb18434bdbc9fceee5c4c113e7fd18ecee27d1
MD5 a0c65f65efb300c3a605f40b784a753a
SHA1 6d0e5c01e60925af1c65c4c9508f480282b0dc8a
SHA512 998e715f6178d08434cb3c3290e26ecb705866b15cbe0af45e725042307eb692b587db07564c8d75f8ba94f71b0649e975576c6d106267050c94e94cb763a575
SSDEEP 96:9Oui7AWa+EDobJ2Cfdp6GFa0Z7cVpdN1MXP8xeCVV:9AamDfdIm7cU8xeCVV
TLSH
T149C18F48FE942174AB0725D5141BB4C0F6ACF45886ABC20E1CB9544FB54BEECEF2B66C
MD5 SHA1 SHA512 SSDEEP TLSH

Win64/Portable/W697HF0.IRW

SHA256 c2918cc313b845e77dbffbd0844157500c788e76b3b18c25981d2a9c23ccec5d
MD5 2a8bae4fbea6efc28535a67c1a889003
SHA1 7708e15566f9e30e1c98abf56122c1b9e1006123
SHA512 a4d9b9e0848acbeba327db3633b979fde1e83c6ad7f1fb1eb2d658ee6d6d7d398d405d8cfb37485094d3d50ff1d3d06c1fd2aa6dc8eed5e5b9c7161a141f1e9f
SSDEEP 96:l0p4jsEpmJ1F3hNLLtIJXkwQeqhGTcd6tZReGB2Tuv4RxAgVaC:lm4jzm3oq2qQhtZKTuv4Rxfj
TLSH
T11C91850A145CF4D5182A6C0B31038615C38986DFF08A31F5EE8A45DC21A3BADC8FBBA7
MD5 SHA1 SHA512 SSDEEP TLSH

Win64/Portable/rw.chm

SHA256 53644f83d61c36d31e6e481b692cbce82e71a9aa2be291fa8ccd32cc80fb4841
MD5 880b00774e15fb9998715cb0677dac1e
SHA1 0ee218e9c7b988b48d8aba83e00ff101fafe6114
SHA512 4edd949e3f899d2ab239369b4a375efb51bb888a0713f7068fb3dbeedb06214b3944d9b6fb017cccf4a27199d94b6ae3e4e399b07b8d6a9cda84ec5a0a339b88
SSDEEP 3072:NhMUaYTr758Wk04ZQIzDvHCgqvLSMPy4xj/Dw1:NhMU/TW0aDvHCrmMPyMDw1
TLSH
T106E3126BBF22A415FD0EE935BDA4C0829D67A0C654B05A4DE13A47781B57B08DFE60C1
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer