RawAccel_v1.7.0_zh-CN.zip
- SHA256 4ac1ada41d36f470c6abab41199d6f26ffe58bfe61aa11658a420c8e8e867966
Overview
overview
8Static
static
3RawAccel/N...on.dll
windows10-2004-x64
1RawAccel/N...on.dll
windows11-ltsc_2024-x64
1RawAccel/d...el.sys
windows10-2004-x64
3RawAccel/i...er.exe
windows10-2004-x64
8RawAccel/i...er.exe
windows11-ltsc_2024-x64
8RawAccel/rawaccel.exe
windows10-2004-x64
1RawAccel/rawaccel.exe
windows11-ltsc_2024-x64
1RawAccel/u...er.exe
windows10-2004-x64
1RawAccel/u...er.exe
windows11-ltsc_2024-x64
1RawAccel/wrapper.dll
windows10-2004-x64
1RawAccel/wrapper.dll
windows11-ltsc_2024-x64
1RawAccel/writer.exe
windows10-2004-x64
1RawAccel/writer.exe
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RawAccel/Newtonsoft.Json.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
RawAccel/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
RawAccel/driver/rawaccel.sys
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
RawAccel/installer.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
RawAccel/installer.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
RawAccel/rawaccel.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
RawAccel/rawaccel.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
RawAccel/uninstaller.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
RawAccel/uninstaller.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
RawAccel/wrapper.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
RawAccel/wrapper.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
RawAccel/writer.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
RawAccel/writer.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target RawAccel_v1.7.0_zh-CN.zip
- Size 1.5MB
- Sample261030-b92dgsda48
- SHA256 4ac1ada41d36f470c6abab41199d6f26ffe58bfe61aa11658a420c8e8e867966
- MD5 189379796aa5585356a5f64176a6e487
- SHA1 7cd6df1568170a21f65a214d3a10415e802c8d0d
- SHA512 03d41991a14312350004cad6075868717b27a34176c6132e80a5b53aed2ee99f5b6979f7323aeab6e667f4090a5b06d2bc28ce42c3238cb4532936b01ad68752
- SSDEEP 24576:QdUPHUCbrb2ELbFVzLR3YARa2bx/ERTBHA2M6a5sCwtZwiMX//mpISDF+fvuGE5o:QTCbDLbFVHHRa1RTBHA2osCwtZaX//iy
- TLSH T1DD7533ACC9C84D7BDAB1406DC789C11DB1ABC9B4068F770F04808FA4DBC57AAF56A578
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack001/RawAccel/installer.exe unpack001/RawAccel/rawaccel.exe unpack001/RawAccel/uninstaller.exe unpack001/RawAccel/wrapper.dll unpack001/RawAccel/writer.exe
File Explorer
-
RawAccel_v1.7.0_zh-CN.zip.zip 1.5MB
-
RawAccel/LICENSE1KB
-
RawAccel/Newtonsoft.Json.dll.dll 685KB
-
RawAccel/README_CN.txt1KB
-
RawAccel/ReadMe.md1KB
-
RawAccel/doc/FAQ.md2KB
-
RawAccel/doc/Guide.md20KB
-
RawAccel/doc/images/LUT_example.png.png 64KB
-
RawAccel/doc/images/accel_readme_example.png.png 64KB
-
RawAccel/doc/images/anisotropy_example.png.png 54KB
-
RawAccel/doc/images/classic_example.png.png 63KB
-
RawAccel/doc/images/interaccel_to_rawaccel.png.png 217KB
-
RawAccel/doc/images/jump_example.png.png 57KB
-
RawAccel/doc/images/linear_example.png.png 64KB
-
RawAccel/doc/images/logarithm_example.png.png 49KB
-
RawAccel/doc/images/motivity_example.png.png 87KB
-
RawAccel/doc/images/natural_example.png.png 65KB
-
RawAccel/doc/images/natural_gain_example.png.png 60KB
-
RawAccel/doc/images/power_example.png.png 62KB
-
RawAccel/doc/images/synchronous_example.png.png 187KB
-
RawAccel/driver/rawaccel.sys.sys 55KB
-
RawAccel/installer.exe.exe 38KB
-
RawAccel/rawaccel.exe.exe 433KB
-
RawAccel/uninstaller.exe.exe 36KB
-
RawAccel/wrapper.dll.dll 475KB
-
RawAccel/writer.exe.exe 5KB
RawAccel/LICENSE
- SHA256 5781f726c7ce4d8871b6f79824273e69585ed820c919a2e3d395b91ec47e8e90
- MD5 3308c1f9871e18f7c5e7f0e8143c3125
- SHA1 2559d5b501259f2d7560d14bbd60a8bbc0f10a64
- SHA512 f0bcc9b6fa603091bc772777cc4d54267ffc03a3cffee428d260c3fe4872be382b38ca712becfb5b011c27376c4a3b4bc2351addea39fb66e1ef96c7de2a923c
- TLSH T1E511B91F73560373189257605579ECC5F12BB14A7F6F1684346DF2051326058C9FFC64
- MD5 SHA1 SHA512 TLSH
RawAccel/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b624949df8b0e3a6153fdfb730a7c6f4990b6592ee0d922e1788433d276610f3
- MD5 081d9558bbb7adce142da153b2d5577a
- SHA1 7d0ad03fbda1c24f883116b940717e596073ae96
- SHA512 2fdf035661f349206f58ea1feed8805b7f9517a21f9c113e7301c69de160f184c774350a12a710046e3ff6baa37345d319b6f47fd24fbba4e042d54014bee511
- SSDEEP 12288:U9BzaPm657wqehcZBLX+HK+kPJUQEKx07N0TCBGiBCjC0PDgM5j9FKjc3Q5:U8m657w6ZBLmkitKqBCjC0PDgM5A5
- TLSH T1B8E44A0633E88F66D1AF2735B8305A1997F6F407A2B6EBCF6904D5B81D677608E00367
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Mar 17, 2021
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
698886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
675KB
Virtual Size
675KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
RawAccel/README_CN.txt
- SHA256 f4e553ff6dda5e4db4bee2c1168b2000c93d24ddba8329f227a0b30c3624d04a
- MD5 d329169192496a338e0b6b5c8ed969ff
- SHA1 556edbcbb96b90cd0ee29e7abfcc4731431b1643
- SHA512 2003feaf8b7c21d41e5005953c4e5e5a3e890fbc0c128da0b0bf7e5186504b88d35c858b2f1fe1ff4a857692ebde3f02ede577cb3361a6a07c890f872caab912
- TLSH T1872183C9022ABCF60D101AB7138C73B8BF61FF584D72EAB8D6D64E65356C89D0082B40
- MD5 SHA1 SHA512 TLSH
RawAccel/ReadMe.md
- SHA256 ff23f66d0f5291027d9a48119c639659ae1009bc256ff78ed06e03d9ef000c1e
- MD5 469f0034bb36fad5fc33f7334eee1128
- SHA1 b807be9b0795723e19a7ae46832bcf895cabdef5
- SHA512 c327ab577b05080f59509d126ef0db17e82a40a19ec5f2fb55a8f1719fc0a155c137087d8655323fb99ecf8d2f81e09a22c423cdfa7665aba11c40c2e5c751ff
- TLSH T1702142BB3316519A0F9302B3C9855AF1BF224014B76ECD7A104CE094B11D8B6477B6CE
- MD5 SHA1 SHA512 TLSH
RawAccel/doc/FAQ.md
- SHA256 7c7ec02b004b36a3edaa06abc22cedf95085eddfc17c24af00c1d1c881fb8422
- MD5 3c3654f7c3b979aa9918f7e3866fa423
- SHA1 445fbd6d6caa3533cafba3280a42b40380556877
- SHA512 690e663cf5203c02aee8d0b1946ca9abda6b0f302f15baa3a2ee71d88f4658d583e33e5598e7d4317468ee92d7a322ef1948d324d57697374a83cc7a0c9a42b9
- TLSH T14B4187633B4F17B45A9310A2919F86D4FB0800D473BDAB31287860AC22DDD66427BAE8
- MD5 SHA1 SHA512 TLSH
RawAccel/doc/Guide.md
- SHA256 01a202d6f97fa24e85ab67105534da1698619375a8db1a89671c44702f7774f9
- MD5 45201b2f405f229f15fde59cf4f5a2c7
- SHA1 77035458b7b72b68d4878da6a311bf3ae237e543
- SHA512 0e4bd74c3a0aaa14f5919fd2eb6a515440a44f57719cb1e30fcebaa4df615cf03f395c99a899439b9f9a0dcaae6b3d010e157f0e46ac2af7fc710246eeed79b7
- SSDEEP 384:dJyiVaH7gUHD7xDTjh51wgo0ixlgFgZ+Avek+hAqL/FFuycqA7c/Cic4aWWBiP8X:dJ7BUj7xx5xlixe+Z+01+a+b+Ytc91E+
- TLSH T1A192C94733881372055311A26A4F61DAF72980F87337EAA878BDC41C2359D7547FBAEA
- MD5 SHA1 SHA512 SSDEEP TLSH
RawAccel/doc/images/LUT_example.png
- SHA256 a04f56921e3e6e53db1fcdf5f2cc90f4848fe5554baf436f93ab446c9b576faa
- MD5 9a7dd1bf2a4023d8b9482957d5ea6922
- SHA1 d9290bf6776a577fc8d5dd42fc62f7ca9b142442
- SHA512 8c788309b627c1a52a0220364240844bda12856b425737f8afa675f4e46adbd2c5ddcbac899edc59113b35a043568c77adad0586bc5f008e93166d63115e452c
- SSDEEP 1536:Nvc2+yMfNudJznFecnStWrzgEt1yOdp5d6xoX9ifsf3RyirsQFUR5:KGzn1zgiwIpzMyhfBQ
- TLSH T1A053E1D91E2087D8F33D80743B369F28EF398B18461B9185A2C561B8EE9621E7F3D15D
- MD5 SHA1 SHA512 SSDEEP TLSH
RawAccel/doc/images/accel_readme_example.png
- SHA256 bd15aa380f50bd33fba2c0ad5e34081b82a4729cc2b8dfaf3c3940735c041ff8
- MD5 de5c1c59dc6e9ac4acef86ddea1359b8
- SHA1 2eaf10071ba03eb99437e815f0ad0d28126cea66
- SHA512 28d053c640532c5372d47966e59525a117938927db01633fe8d1236d1adfd94f2bfd511817f679d827ba00c7ce0ac6de779254df4a60f97fe579fa3acc5a1c9a
- SSDEEP 1536:ogxzjIaEkWsVBRCakis44Lo+pzko7W8GBrnr5NC9CqY1:HcxoThsyo68cr3Yu1
- TLSH T1D753CF00426ACB63FC368AFD9DBF9ED9B5692F381CC14807CF69A56A16538E1F12345C
- MD5 SHA1 SHA512 SSDEEP TLSH
RawAccel/doc/images/anisotropy_example.png
- SHA256 5c50b183a40319fdefd29a29df5cfeb2084e33d13fc6d07cec1e3f2e9b8d8380
- MD5 78eb78a1ae7f43ac2da7cf221bdfcf31
- SHA1 95ae2a0bcad694f428e9caf5900b6cd9bd59a275
- SHA512 36e9dffdf5cdd028233688cadfc36f689ba8c515e5aa5bd29f11c594d310b3d058fb08b31abcb96e342c477f330baa71fa2dd30b58b8b913d5eedd1bf99d9ea4
- SSDEEP 1536:5bBtgt8H1D0x/rE9R/uD/mWVAhEtaXHNhebHBQJsK9HAAAo:9D05ummMAhEtaXWDKJsK9Z
- TLSH T1CA43D0866C83656FE2FED73E709920712E7874843165BED977AB8E8F01400726D4B71B
- MD5 SHA1 SHA512 SSDEEP TLSH
RawAccel/doc/images/classic_example.png
- SHA256 a8d36815aecbb0d799114455528d95bd6b35068dd0af874fbaa3423c4a57c32b
- MD5 9f8c2bbb9e405e128a1544ebcbd6d1c4
- SHA1 7e2d91d51f23a43ff320a784e620274b26fcc64b
- SHA512 c5e07d1f8d943d16954b5a8dc4c92535cda6556ae13c74492ba68f1e94ed64d87441aa990148143829762e67c0e4e6819ba081b385f375e98593d003f1c33b22
- SSDEEP 1536:u5OklvIgRK/7L+eL26+LLIxdMvMTtjpf+E+lszn:uA2Y5eLIxOUxAzs7
- TLSH T1F953E1D849B27F41C897997B3193113E06F73E8746E2288BCCCC01551EEBFB9A396885
- MD5 SHA1 SHA512 SSDEEP TLSH
RawAccel/doc/images/interaccel_to_rawaccel.png
- SHA256 ca19e98137218c6e27b804815cb1ea3fd782600af49c3b84a2739ecf3ecfb357
- MD5 0fc2c14bd1bd391ac7bb047a96242437
- SHA1 a8e13f88be667d0c05561521141b334efe6c0959
- SHA512 11968d09b3c04a10ab013ea77f846cd499474a03c38e68137365e3cdfa3e247f962a17a8d761ed6d46e6c5766c5e86dc8d1c8988f594c58d9f34f68ca9c0bea5
- SSDEEP 3072:T9CxYB0sx+TdcoAXS0BrGCh5jjXHqlX1DuZPpxs/YbCB+G4qr04mDaBO79UoKtNi:ciB0U+TvAXS6rGIhYzBX4rp7rKS
- TLSH T17024020E4699D25D2E8C29BB18EF247D1AF02D17404446A4D9E5BEFC6B5CDBF82B090F
- MD5 SHA1 SHA512 SSDEEP TLSH
RawAccel/doc/images/jump_example.png
- SHA256 f1a163b36cff9571d31a5bdfea8f919d7790ec264ba69c962d8f392c574605d1
- MD5 f6f5480a727b5c18f9e815ca5ba483d8
- SHA1 f2ea431fe9fd56f7217628fd206540974fe59e52
- SHA512 4006af8a1b0be11b7222a1ba149f419c9bb35688c26a70abcb9e7e2a33e0ad406aaaf8bc751432d2482bed05388b7bbb31106945b3506b558d17c66ef7e35d27
- SSDEEP 1536:PKKP99nPhSu0MvAHh4Cx+gj3KKtKiX9hCutRnFRHMFHnKKKKKKeKKKKKKoKdc7:PKKHAGv40WKKtKiX6utRvMFHKKKKKKeW
- TLSH T1DA43D0237409CD1BEC067DF6D23D2BBB1670C98704F6A211C5F3E676399DBB2A24851A
- MD5 SHA1 SHA512 SSDEEP TLSH
RawAccel/doc/images/linear_example.png
- SHA256 7ad1a9151ee6535eb1ef707564bc74d0146709bd92225232e01572c10ef5a57c
- MD5 d4d424c5ef2e0b527212d063a844187c
- SHA1 14f8e1773282042bac87084e48441207ae61aa64
- SHA512 a8e2390186f535bb428c8f46151ed700dbd1d2a363c092cdcfdbe196e09703c980d11a59ce68e82d8973f4c4f6d2d1201f65e7795dd7a7a2bc1ef3a578ee0d3d
- SSDEEP 1536:+maOWc1rg56szlGghgGd3nVArVI7mRWiFfjpedJ2IXFp:xWAE56szQgz4VI7mAwpO2Ar
- TLSH T19653D1602A81D704CCA2E93D63716E5DFAF99F4205B111236F624724F6F2DA3F4366E8
- MD5 SHA1 SHA512 SSDEEP TLSH
RawAccel/doc/images/logarithm_example.png
- SHA256 b6a6dfab6dbdbff589d9063303c403b6e26b9336d73bbd1dec3a7cb64a42d622
- MD5 c894aab847d59eda3ead81bfb8571047
- SHA1 13b38ef94f6dcb5be0b8acfe8e90c9311b8c0c57
- SHA512 7125bde6e9bc482ba3ab658490fb0bf660323234055c1be8cc466d68d14d73b86449222c39bee903ac5a82d4418316f6df0f9b3184ccbb65652277ce49c3654e
- SSDEEP 768:dFsKnsGPuSjMEB4HaqwIZyGqpijBkjkiexySzqQk2pFwkpoOenN111111111111m:dFsKnshEB4XwWpqpGkEMSet4
- TLSH T105339F02D63A34B3DB8EB673D7471FACE86FA548451B12347ED9553CAC0FA24983AB41
- MD5 SHA1 SHA512 SSDEEP TLSH
RawAccel/doc/images/motivity_example.png
- SHA256 e879d0919c6e04fbc6227717e541f3e80feafd8b80542138aefc744fdc9f528e
- MD5 a52feec4a5d880fb92f0c4ee25aecee8
- SHA1 4a4d05ca7e6a24d75cb09914abfbb735615f82b3
- SHA512 d9f31c832750a28484989eb5ae0190e22707d842eb1ae26ea161e63ae73bedb914c50a6cbc18b573c38f543acc80b98ba7a78d41e2af2dfa8d9d730146101588
- SSDEEP 1536:RfOxySndDh4LGhOqw7qfaG3rDmevDuQJfbD7I/Lz46q5dD4CpPOX6MR:p6xT4LGhBvBrDmebuczDEDz46q5t4h6E
- TLSH T1EF93F13B9D0D8D87FDA35537189C620F9930B40FD4C09EB26AD91F2FE897116E4A918B
- MD5 SHA1 SHA512 SSDEEP TLSH
RawAccel/doc/images/natural_example.png
- SHA256 2e4d4f45de1074362fcb7b53dcfc40e050de62efc2ddb444df3e3ec51e37156a
- MD5 4a1cc8745c69aad9b6967e64d71276a2
- SHA1 7966a94c5dad8eab1df8df3c418d92d7abe07626
- SHA512 9ce44a44ed92a542f7377133a850e25242dec150dc5812beeb56c5227cd01d59ac75116b75dd62269c43b915afb8ec11177e01f605b520533d07b53e1d44ef82
- SSDEEP 1536:sqb72RgyNe8BKPGy2IJQpoZMvvnpCBhhN:7b72/NdEAvnGhN
- TLSH T18A63AE7CDA5094A9F37710B38C0073FA76C9091C8C9A7DE9D7BA0BCDBE895683486949
- MD5 SHA1 SHA512 SSDEEP TLSH
RawAccel/doc/images/natural_gain_example.png
- SHA256 acc552747b90d35c2d0eef3883cd9b40c3ee6721dc56ee44ba4afadeaaa382f4
- MD5 1dacc0231d1ccc36ec71b5bac7e6ce8d
- SHA1 dca12ee82be752a866c531865ba7489c72440951
- SHA512 35a5b84fa5bd6e276b1bd40c2c3114a3e07eee7328d441fc53a5a6c67aa01fefa296d361d22409d4f189dd5560c1aa57154647c37415d8820d00a6cd68edae81
- SSDEEP 768:Bjm4PZGCu772sOis0HPDFhNnutKeoWuTYmLzi2AvmGA0MdTypkhr8GIgC:o4PgCu772sOdAPNnutqTzL1A8Read8lL
- TLSH T13C53C02289114DEAD5CB37F9292AF7ADFDF1FBA980101BE46A304936E8741191335FD8
- MD5 SHA1 SHA512 SSDEEP TLSH
RawAccel/doc/images/power_example.png
- SHA256 fa020f4f15399a53a87cb26892b0b9fb1eb6aae6e0aae1cf4cb1fecab1fe0a62
- MD5 ea42502ec978d4052d0a1039651df989
- SHA1 70ce01992c8cc0e8fa06e6f9394be658b598e8dd
- SHA512 e5057d4f37011cf501277b48cb7eaccad2857c51a93628d82fb459e6b5d4389f1db812411c89c0c7b8bc6b8d95862540e2e1c26535ff607b9038d18e0f6ad390
- SSDEEP 1536:XBY8mkiPP8DJkRMlxgTp63KiP2nQfN7IK6UbBcC:XBYBvUbNiQfN7ILUbaC
- TLSH T11153E07D8482E852CC2702BD1C7721FAE1F5E30B40D964CCEA1519792A3ED39536F6AD
- MD5 SHA1 SHA512 SSDEEP TLSH
RawAccel/doc/images/synchronous_example.png
- SHA256 963208dcb8f4b4f9114525f1b5df2ad58eda81c4b69e331db43cf03b9b85aa31
- MD5 80a63e0114d60deec146f9a31bf435ec
- SHA1 0745d080d89e16ffeca7af0eff79e068c095074c
- SHA512 f2ecc307d6d01dba562871efc3451d85283ca87a0c0c2d119dec73fc4af68c4538346feab9bcd76bf2e048bbce3f21ce4da00e975e904770da62c801e585675d
- SSDEEP 3072:XYr5j5NBNTz4l0GfEVHx1t0WmTKgFigNkbj94pWqhHaBgpZqZRh845Gn9jdI:orr94+GfEFx1NmTKgFig2fSpWqh4gpZW
- TLSH T12714E04DDD00BED1F912037FA6B02AEFD88723B529A642CB49255E730556BCFD87B580
- MD5 SHA1 SHA512 SSDEEP TLSH
RawAccel/driver/rawaccel.sys
- IMPHASH ea4eed82eb7244db9fe9a84f960780d0
- SHA256 8a62c4deef2774b43a7363b352eda79897533a1080c9c26ffeff0559e43358d7
- MD5 3b322b9a39f3938154e0391207b51de9
- SHA1 68e400e0a24d43260fc476af910af945a239d8cd
- SHA512 5b39818f84e25e3e0e31ff08eb5b02d8850bace83711fe0e51d49c073ea04635e1f186ece37dd5da02d3e12aef08914900ada3c0c0aa07c43a3a77d24eabd8f3
- SSDEEP 768:s9hrkpOcCNgCfikstkNlGHHcnCHp4e4ExHtq6Cbf2Q+IRNJ4zbln/23xds9zgrE:urkspWFHwCHPHoUqNJ4zbp/2Bdkz8E
- TLSH T118439E56619922D6C432583096FAF963BA723501137488FF07E0CE290E7BBC1AE73667
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a4:40:f8:01:8b:fb:94:2f:51:80:10:4a:ff:cc:88:c9:1b:22:81:88:31:77:7d:7a:d5:4c:a7:3f:c6:cf:2d:07
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 17, 2025
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:6e:12:29:85:6f:0a:de:6c:fc:00:00:00:00:00:6e
Issuer
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 10, 2024 - Oct 8, 2025
Subject
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Oct 15, 2014 - Oct 15, 2029
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:4C1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ff:12:38:7c:f7:c1:65:d6:a1:00:01:00:00:01:ff
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
10640
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
F:\home\proj\rawaccel\x64\Release\rawaccel.pdb
ntoskrnl.exe
IofCallDriver
sqrt
InitSafeBootMode
wcsncpy
IoBuildSynchronousFsdRequest
ExFreePoolWithTag
RtlCopyUnicodeString
DbgPrintEx
__C_specific_handler
RtlRaiseException
ExAllocatePoolWithTag
KeWaitForSingleObject
KeDelayExecutionThread
KeInitializeEvent
wcsncmp
hal
KeQueryPerformanceCounter
wdfldr.sys
WdfVersionUnbind
WdfLdrQueryInterface
WdfVersionBind
WdfVersionBindClass
WdfVersionUnbindClass
Name
.text
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
PAGE
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
640B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
72B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=262, version=30795,
count=3, id=263, version=30795,
count=7, id=257, version=30795,
count=21, id=1, productName=Unmarked objects,
count=7, id=259, version=30795,
count=20, id=260, version=30795,
count=1, id=261, version=34808,
count=1, id=255, version=34808,
count=1, id=258, version=34808,
RawAccel/installer.exe
- IMPHASH 76e2ec6041572f5a081287de4301ec51
- SHA256 b3b4948de9470a5727390ed016507b59d2c628463e42aaf1b75e906ee04f58a9
- MD5 0eac10f0cebfc7e76d99ba4a5ca33a7a
- SHA1 7a9e8f09492e79028973efcf1d8286b1aa508dc5
- SHA512 902e3b1f2b80a537530d732c700c7697b03221320e40b91959bde403890291a4cde170e69c2fab165c4030b5b38a5bf2c84065b9c9141a73a42341bc3278ea9e
- SSDEEP 768:EpUH7bdy8yWRA4jsbWiV05Gd0X8dp+fQfX0y3y71+O:ESH9ysRsbWix0X8dpzfX0z71+O
- TLSH T1A5033B5BE76900ECD5A2C17DCD9B5986D2B3B8080761A7CF439086252F763D4AD3BB83
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
20816
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Accel\Code\Official\x64\Release\installer.pdb
kernel32
VerifyVersionInfoW
VerSetConditionMask
MoveFileExW
GetLastError
ExpandEnvironmentStringsW
GetLocaleInfoEx
FormatMessageA
LocalFree
CreateFileW
FindClose
FindFirstFileW
GetFileAttributesExW
GetFileInformationByHandle
AreFileApisANSI
CloseHandle
GetModuleHandleW
CopyFileW
GetFileInformationByHandleEx
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
advapi32
CreateServiceW
CloseServiceHandle
OpenSCManagerW
ChangeServiceConfigW
OpenServiceW
msvcp140
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Winerror_map@std@@YAHH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?good@ios_base@std@@QEBA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
setupapi
SetupDiSetClassRegistryPropertyW
SetupDiGetClassRegistryPropertyW
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memmove
memcpy
__std_exception_destroy
__std_exception_copy
__std_terminate
memcmp
__C_specific_handler
_CxxThrowException
__current_exception
__current_exception_context
memset
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
_set_new_mode
api-ms-win-crt-runtime-l1-1-0
_register_thread_local_exe_atexit_callback
_crt_atexit
_cexit
__p___argv
__p___argc
_register_onexit_function
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_initialize_onexit_table
_set_app_type
_seh_filter_exe
terminate
exit
abort
_c_exit
_exit
_invoke_watson
api-ms-win-crt-string-l1-1-0
_wcsicmp
api-ms-win-crt-conio-l1-1-0
_getwch
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
_configthreadlocale
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
Name
.text
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=34918,
count=10, id=260, version=34918,
count=29, id=261, version=34918,
count=6, id=257, version=34918,
count=7, id=257, version=33140,
count=131, id=1, productName=Unmarked objects,
count=1, id=265, version=35207,
count=1, id=255, version=35207,
count=1, id=151,
count=1, id=258, version=35207,
RawAccel/rawaccel.exe
- SHA256 a699d38a86f43a111da2047cb56df171c89c37c8273879b3020894861bc06f87
- MD5 fa9f25328516372a01514683362be4d1
- SHA1 8a7f8c3d16a05cc7996204353f328c181dac602d
- SHA512 c3ced462bc872321e1a8b32b1ed309d5664f16e76b89a7ae8ebb1bd25b9ce2ecbd592fa651974b43466febfc5a71612200c4bfc877a801746861828cc45e78b6
- SSDEEP 6144:Gx2/Cci0P4zpCLSXLdY+sHrNf6rzQpZ9mXG9mR:GsnLSbg/mXemR
- TLSH T12A944A24322CD617D6EE52F6C464989007F17D393A93CBDCBD827ACF1AB6F419582923
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
320KB
Virtual Size
320KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
112KB
Virtual Size
111KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
RawAccel/uninstaller.exe
- IMPHASH 8237bd44509a0c78c20217a41ceeca1d
- SHA256 62090da1ecd73aa18c2119650a4384d80691fcbabb90716cf5f731ed084a51ca
- MD5 aaabd272a0038e5c4d472013198b1adb
- SHA1 2da6fd2af94e2e0572a37de65f254539bcd78027
- SHA512 0ce22cf97c7e47703cb2be983c98fd9c0f0eb88c489e3b3fe9aab48635f38fc3b68c8cacd413f32aa6eeb3be0c5c5434fa53eb3c44b14ed0667c73df28712944
- SSDEEP 768:qpVHUJxEJ1ZTiYqsEd9OlDo1FTcSjxp7egl7Nojv3ZAv3:+VHUTE1VEsD8v7IxAv3
- TLSH T106F23C1BA76A00ECE1F3C27DCAA75596DAB378054752FBCF035052261F372D0AD3AA52
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
19168
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Accel\Code\Official\x64\Release\uninstaller.pdb
kernel32
ExpandEnvironmentStringsW
GetLastError
MoveFileExW
GetLocaleInfoEx
FormatMessageA
LocalFree
CreateFileW
FindClose
FindFirstFileW
GetFileAttributesExW
SetFileInformationByHandle
AreFileApisANSI
CloseHandle
GetModuleHandleW
GetFileInformationByHandleEx
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
msvcp140
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Winerror_map@std@@YAHH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?good@ios_base@std@@QEBA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
setupapi
SetupDiSetClassRegistryPropertyW
SetupDiGetClassRegistryPropertyW
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memmove
memcpy
__std_exception_destroy
__std_exception_copy
__std_terminate
__C_specific_handler
_CxxThrowException
__current_exception
__current_exception_context
memset
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
_set_new_mode
api-ms-win-crt-runtime-l1-1-0
_c_exit
_crt_atexit
__p___argv
__p___argc
_register_thread_local_exe_atexit_callback
_register_onexit_function
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_initialize_onexit_table
_set_app_type
_seh_filter_exe
terminate
exit
abort
_cexit
_exit
_invoke_watson
api-ms-win-crt-string-l1-1-0
_wcsicmp
api-ms-win-crt-conio-l1-1-0
_getwch
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
_configthreadlocale
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
Name
.text
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=34918,
count=10, id=260, version=34918,
count=28, id=261, version=34918,
count=6, id=257, version=34918,
count=5, id=257, version=33140,
count=124, id=1, productName=Unmarked objects,
count=1, id=265, version=35207,
count=1, id=255, version=35207,
count=1, id=151,
count=1, id=258, version=35207,
RawAccel/wrapper.dll
- IMPHASH 2b774c1cd817863ea6fcce2e8fe0a72b
- SHA256 e17d540fb0bb5e47ba7c8e01aff39f1570bfb7ef673a1ddc0bccd2a26f9efb78
- MD5 ded4ebdb2d2790b549d2e07ac126f512
- SHA1 38cab2d1eddb39beef78670fb3eca4b59a46adbc
- SHA512 0099bdf535e34ff436679d9adc0010be823fadc42eafe1a4600a9100364fc1ff3f0bc98d56a7284e63d0f7b4614d8c1ae6ad90fb7f63f72608532979469d5390
- SSDEEP 12288:Q3ABHW6okHO7034S+E7ebHqnaFcnsnKLvc803+hYuZ:nHW6of7034S+E7ebHUaFcnsKbc8q+hYu
- TLSH T156A47D2962236BA7FB36C37944BB2752D630AC04FB429BD343A5D6790F42BCC5739602
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
198444
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Accel\Code\Official\x64\Release\wrapper.pdb
kernel32
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetSystemTimeAsFileTime
GetCurrentProcess
GetLocaleInfoEx
FormatMessageA
LocalFree
Sleep
GetLastError
DeviceIoControl
CloseHandle
CreateFileW
DisableThreadLibraryCalls
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentProcessId
TerminateProcess
vcruntime140
__CxxQueryExceptionSize
__CxxUnregisterExceptionObject
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxRegisterExceptionObject
__FrameUnwindFilter
__CxxExceptionFilter
__CxxDetectRethrow
memchr
memcmp
memcpy
__CxxFrameHandler3
memmove
__std_type_info_destroy_list
memset
__current_exception_context
__current_exception
__C_specific_handler
api-ms-win-crt-runtime-l1-1-0
terminate
_cexit
_configure_narrow_argv
_crt_atexit
_execute_onexit_table
_register_onexit_function
_invoke_watson
_initialize_onexit_table
_seh_filter_dll
_initterm_e
abort
_initterm
_crt_at_quick_exit
_initialize_narrow_environment
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
cfgmgr32
CM_Get_Device_Interface_PropertyW
hid
HidD_GetManufacturerString
HidD_GetProductString
user32
GetRawInputDeviceList
GetRawInputDeviceInfoW
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
api-ms-win-crt-string-l1-1-0
wcsncpy_s
api-ms-win-crt-math-l1-1-0
tanh
_copysign
mscoree
_CorDllMain
Name
.text
Size
190KB
Virtual Size
190KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.nep
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
256KB
Virtual Size
255KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
268B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=34918,
count=9, id=257, version=33140,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=75, id=1, productName=Unmarked objects,
count=3, id=259, version=34918,
count=8, id=260, version=34918,
count=28, id=261, version=34918,
count=4, id=261, version=35207,
count=1, id=255, version=35207,
count=1, id=151,
count=1, id=258, version=35207,
RawAccel/writer.exe
- SHA256 b53e29c7689b9d72838ffbfd1502b8d0407160d3f77b54eb15a7c632f689aa04
- MD5 8df8a6000f75cdb409864c3e800227c0
- SHA1 ddda6ed437c48cfbb5e5dc4ea9de1616fdfe024d
- SHA512 462b1022f8dc1e52b0d39d5f9e1548e21b4c73aa0b5c93046decc72596c9feea74d42158683768a1567bc04f48251442425c3e1d7f51c49e4e2ec7b564a82622
- SSDEEP 48:6KqNzSUD0PUZ8EJiNRHTYhYPsJrNM1p5OOlNuSeyFgYzlbEIHpsFtXsOhlQyRpfG:oX0s5JokhYPsJe80uV3Yzl43fzNt
- TLSH T14AC1831183F84632FEB70A72AC32571027B0F7159D27EA5F5895601F5E27B584C73BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Accel\Code\Official\writer\obj\x64\Release\writer.pdb
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ